[tor-bugs] #3748 [TorBrowserButton]: Isolate HTTP Auth to top-level domain

[Tor Bug Tracker & Wiki]

#3748: Isolate HTTP Auth to top-level domain
------------------------------+---------------------------------------------
 Reporter:  mikeperry         |          Owner:  mikeperry                    
     Type:  defect            |         Status:  new                          
 Priority:  major             |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  TorBrowserButton  |        Version:                               
 Keywords:                    |         Parent:                               
   Points:                    |   Actualpoints:                               
------------------------------+---------------------------------------------
 Georg Koppen believes there is a way to isolate HTTP auth to the urlbar
 domain by registering http observers and hashing+filtering the auth
 headers.

 I need to keep an eye on his work, and fold it in if possible.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3748>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online