[tor-bugs] #3414 [TorBrowserButton]: Apply referer policy to window.name

Thu Jun 16 20:57:06 UTC 2011

#3414: Apply referer policy to window.name
------------------------------+---------------------------------------------
 Reporter:  mikeperry         |          Owner:  mikeperry
     Type:  defect            |         Status:  new      
 Priority:  major             |      Milestone:           
Component:  TorBrowserButton  |        Version:           
 Keywords:                    |         Parent:           
   Points:                    |   Actualpoints:           
------------------------------+---------------------------------------------
 We should apply the user's chosen referer policy to window.name. In other
 words, if a url has a blank referer, we should clear out window.name for
 that window. With even the default referer policy, this will have the
 effect of wiping window.name between user-entered URLs.

 This mechanism is also handy because it is currently impossible in XPCOM
 to distinguish user-entered URLs from javascript redirects of
 document.location.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3414>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online