[tbb-bugs] #18205 [Applications/Tor Browser]: Restrict font whitelist patch to apply only to non-chrome contexts?

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Dec 4 09:23:40 UTC 2017


#18205: Restrict font whitelist patch to apply only to non-chrome contexts?
--------------------------------------+--------------------------
 Reporter:  arthuredelstein           |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-fingerprinting-fonts  |  Actual Points:
Parent ID:  #18097                    |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cypherpunks):

 >What if a page opens an iframe with some chrome: elements (for example a
 pdf) and measures its content someway without code injection?

 These cannot be opened by a web page, even in an iframe.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18205#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list