[tbb-bugs] #30392 [Applications/Tor Browser]: CSS features allow real-time tracking

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun May 5 13:09:16 UTC 2019


#30392: CSS features allow real-time tracking
--------------------------------------+----------------------------------
 Reporter:  davywtf                   |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:  Tor: unspecified
 Severity:  Normal                    |     Resolution:
 Keywords:  css                       |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+----------------------------------

Comment (by Crissy2):

 By default if "display:none" on a descendant element and:

 affectedElement>div
 {
    display:none;
    background:...;
 }

 affectedElement:hover>div, affectedElement:focus>div
 {
    display:block;
 }

 and you hover it, the background will be loaded at hovering... but. It is
 used in all popup menus.

 So it is not trivial to prevent it.

 To prevent it, there should be a button to clear all cookies / data
 associated with current website, that closes website and then clear
 cookies. Still not working in TBB :/

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30392#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list