[tbb-bugs] #22362 [Applications/Tor Browser]: Tor Browser freezes when loading https://www.facebook.com/tr/ on a website

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue May 30 10:58:26 UTC 2017


#22362: Tor Browser freezes when loading https://www.facebook.com/tr/ on a website
--------------------------------------+--------------------------
 Reporter:  gk                        |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:
 Keywords:  noscript                  |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by ma1):

 It was https://www.facebook.com/tr/, after all.

 It gets loaded several times with GET requests, but at a certain point a
 POST request containing two big JSON parameter is sent, and this
 apparently hangs the XSS filter (which is triggered BEFORE ABE, hence the
 futility of my previous proposed work around).

 While I try to understand what actually happens in the guts of the filter,
 a new work around which WFM is '''adding the following line to NoScript
 Options>Advanced>XSS exceptions''' box (about:config ->
 '''noscript.filterXExceptions'''):

 {{{
 ^https://www\.facebook\.com/tr/
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22362#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list