[tor-bugs] #3739 [TorBrowserButton]: SafeCache policy likely fails for https->http CORS (and reverse)

[Tor Bug Tracker & Wiki]

#3739: SafeCache policy likely fails for https->http CORS (and reverse)
---------------------------------+------------------------------------------
    Reporter:  mikeperry         |       Owner:  mikeperry                    
        Type:  defect            |      Status:  closed                       
    Priority:  major             |   Milestone:  TorBrowserBundle 2.2.x-stable
   Component:  TorBrowserButton  |     Version:                               
  Resolution:  fixed             |    Keywords:  MikePerryIteration20110828   
      Parent:                    |      Points:  2                            
Actualpoints:  2                 |  
---------------------------------+------------------------------------------
Changes (by mikeperry):

  * status:  new => closed
  * resolution:  => fixed
  * actualpoints:  => 2


Comment:

 Ok, it appears to find the parent URL if I just drop in the html from
 http://arunranga.com/examples/access-control/simpleXSInvocation.html onto
 another domain that supports https. The request itself fails due to
 arunner.net not liking my origin header, but I believe that is irrelevant.

 I think this one is fixed. Thanks Georg!

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3739#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online