[tor-bugs] #4517 [Tor Browser]: drag-n-drop bypasses tor

[Tor Bug Tracker & Wiki]

#4517: drag-n-drop bypasses tor
-------------------------+--------------------------------------------------
 Reporter:  cypherpunks  |          Owner:  mikeperry        
     Type:  defect       |         Status:  needs_information
 Priority:  blocker      |      Milestone:                   
Component:  Tor Browser  |        Version:                   
 Keywords:               |         Parent:                   
   Points:               |   Actualpoints:                   
-------------------------+--------------------------------------------------

Comment(by cypherpunks):

 Replying to [comment:1 rransom]:
 > I can't reproduce this with TBB for Linux.  I tried dragging the image
 over TBB-Firefox, Nautilus, and Emacs (GNU Emacs with the Lucid
 interface), and dropping the image on TBB-Firefox, and didn't see any DNS
 or HTTP traffic.
 >
 > Which OS are you using?  Did you drag the image over a program other
 than TBB-Firefox?

 OS: Ubuntu 11.10, with all updates installed.
 Tor Browser Bundle was installed by unpacking to a new clean folder. And I
 have verified the signature.
 32-bit version of everything.

 And no, merely beginning to drag the image makes it send the DNS and HTTP
 request, before I get to drag it anywhere or drop it.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4517#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online