[tor-bugs] #4149 [EFF-HTTPS Everywhere]: Mysterious new tabs opened by content affected by rewrites since nsIContentPolicy disablement (was: Google Services rule causes YouTube popups in Google Reader)

[Tor Bug Tracker & Wiki]

#4149: Mysterious new tabs opened by content affected by rewrites since
nsIContentPolicy disablement
----------------------------------+-----------------------------------------
 Reporter:  willdude              |          Owner:  pde     
     Type:  defect                |         Status:  accepted
 Priority:  major                 |      Milestone:          
Component:  EFF-HTTPS Everywhere  |        Version:          
 Keywords:                        |         Parent:          
   Points:                        |   Actualpoints:          
----------------------------------+-----------------------------------------
Changes (by pde):

  * priority:  normal => major


Comment:

 We have another similar sounding report of new tabs being opened by the
 Facebook Like button.  This is consistent with the general hypothesis that
 the channelReplacement rewrites are somehow inadequate/different to the
 ones we were getting with nsIContentPolicy::shouldLoad(), and that's
 triggering a frame escaper somewhere.

 > I have installed the https-everywhere plugin on FF 7, and have
 encountered a strange issue.
 >
 > The issue is that if I go to a http page that has a Facebook like
 button, or a Facebook fan page box, it will open it in a new tab
 automatically.
 >
 > Example:
 www.ynet.co.il<http://www.ynet.co.il<http://www.ynet.co.il<http://www.ynet.co.il>>

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4149#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online