[tor-bugs] #3739 [TorBrowserButton]: SafeCache policy likely fails for https->http CORS (and reverse)

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Sun Aug 21 00:04:31 UTC 2011


#3739: SafeCache policy likely fails for https->http CORS (and reverse)
----------------------------------------+-----------------------------------
 Reporter:  mikeperry                   |          Owner:  mikeperry                    
     Type:  defect                      |         Status:  new                          
 Priority:  major                       |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  TorBrowserButton            |        Version:                               
 Keywords:  MikePerryIteration20110828  |         Parent:                               
   Points:  2                           |   Actualpoints:                               
----------------------------------------+-----------------------------------

Comment(by mikeperry):

 Ok, I just tested getOriginatingURI and it does seem to work in the http
 CORS case.

 However, it still misses some edge cases (such as favicons, safebrowsing,
 and other browser-sourced requests), for which it throws an exception of
 NS_ERROR_ILLEGAL_VALUE.

 I will see if I can set up an https test case for CORS.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3739#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list