[tor-bugs] #3600 [TorBrowserButton]: We should get user confirmation for redirects

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Fri Sep 2 07:53:58 UTC 2011


#3600: We should get user confirmation for redirects
----------------------------------------+-----------------------------------
 Reporter:  mikeperry                   |          Owner:  mikeperry                    
     Type:  defect                      |         Status:  new                          
 Priority:  major                       |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  TorBrowserButton            |        Version:                               
 Keywords:  MikePerryIteration20110911  |         Parent:                               
   Points:  3                           |   Actualpoints:                               
----------------------------------------+-----------------------------------

Comment(by mikeperry):

 Bleh. Turns out that RequestPolicy only even knows about redirects that
 set Location or Refresh headers. It doesn't seem to know anything about
 meta-refresh or window.location redirects.

 NoScript knows about both of the latter, but it finds out by groveling
 through the DOM looking for regular expressions...

 This doesn't really appear to be easily doable..

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3600#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list