[tbb-bugs] #23424 [Applications/Tor Browser]: Stop exposing the moz-icon URL scheme to the web

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Dec 1 11:20:20 UTC 2017


#23424: Stop exposing the moz-icon URL scheme to the web
------------------------------------------+--------------------------
 Reporter:  arthuredelstein               |          Owner:  tbb-team
     Type:  defect                        |         Status:  new
 Priority:  High                          |      Milestone:
Component:  Applications/Tor Browser      |        Version:
 Severity:  Major                         |     Resolution:
 Keywords:  tbb-fingerprinting, ff59-esr  |  Actual Points:
Parent ID:                                |         Points:
 Reviewer:                                |        Sponsor:
------------------------------------------+--------------------------
Changes (by gk):

 * keywords:  tbb-fingerprinting => tbb-fingerprinting, ff59-esr


Comment:

 It seems we will get this with ESR59. However, we want to check that,
 while it is not allowed any longer to link to moz-icon URLs, the presence
 of a moz-icon handler is not leaking, see:
 https://bugzilla.mozilla.org/show_bug.cgi?id=1222924#c14.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23424#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list