[tbb-bugs] #30802 [Applications/Tor Browser]: DOMParser errors leak locale

[Tor Bug Tracker & Wiki]

#30802: DOMParser errors leak locale
-------------------------------------+-------------------------------------
     Reporter:  acat                 |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  High                 |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-fingerprinting-
     Severity:  Normal               |  locale
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 While writing a test for #30304 I found (yet) another way to get browser
 locale:

 {{{
 const doc = (new DOMParser).parseFromString('getyourlocale',
 'application/xhtml+xml');
 alert(doc.getElementsByTagName('parsererror')[0].firstChild.textContent);
 }}}

 test: https://acatarineu.github.io/fp/locale_domparser_error.html

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30802>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online