[tor-bugs] #1968 [Torbutton]: window.name is persistent across torbutton toggle (was: window.name is persistent across websites)

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue Mar 1 07:09:34 UTC 2011


#1968: window.name is persistent across torbutton toggle
-------------------------------------------------------------------+--------
 Reporter:  katmagic                                               |          Owner:  mikeperry       
     Type:  defect                                                 |         Status:  needs_review    
 Priority:  blocker                                                |      Milestone:                  
Component:  Torbutton                                              |        Version:  Torbutton: 1.2.5
 Keywords:  TorbuttonIteration20110305 MikePerryIteration20110305  |         Parent:                  
   Points:  8                                                      |   Actualpoints:                  
-------------------------------------------------------------------+--------

Comment(by mikeperry):

 If we want to create an option to apply the same-origin policy to
 window.name, that should be another ticket. I would like to use this
 ticket to only apply to window.name being persistent across tor toggle,
 which is a more serious problem, and a violation of Torbutton's security
 requirements:
 https://www.torproject.org/torbutton/en/design/#requirements

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1968#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list