[tbb-bugs] #26456 [Applications/Tor Browser]: HTTP .onion sites inherit previous page's certificate information

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Aug 14 05:30:01 UTC 2018


#26456: HTTP .onion sites inherit previous page's certificate information
---------------------------------------------+-----------------------------
 Reporter:  pospeselr                        |          Owner:  pospeselr
     Type:  defect                           |         Status:
                                             |  needs_review
 Priority:  Very High                        |      Milestone:
Component:  Applications/Tor Browser         |        Version:
 Severity:  Normal                           |     Resolution:
 Keywords:  ff60-esr, TorBrowserTeam201808R  |  Actual Points:
Parent ID:                                   |         Points:
 Reviewer:                                   |        Sponsor:
---------------------------------------------+-----------------------------

Comment (by arthuredelstein):

 I am unsure what the comment
 {{{
  // Ignore GetSSLStatus result
 }}}
 means. It seems like you are saving the result of GetSSLStatus, not
 ignoring it.

 This line:
 {{{
 mSSLStatus = nullptr;
 }}}
 could be moved inside the if block above it.

 Otherwise the code looks good to me.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26456#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list