[tor-bugs] #5477 [EFF-HTTPS Everywhere]: Surprising DOM origins before HTTPS-E/NoScript redirects have completed

[Tor Bug Tracker & Wiki]

#5477: Surprising DOM origins before HTTPS-E/NoScript redirects have completed
------------------------------------------------------+---------------------
 Reporter:  Drugoy                                    |          Owner:  ma1           
     Type:  defect                                    |         Status:  needs_revision
 Priority:  major                                     |      Milestone:                
Component:  EFF-HTTPS Everywhere                      |        Version:                
 Keywords:  address spoofing, critical vulnerability  |         Parent:                
   Points:                                            |   Actualpoints:                
------------------------------------------------------+---------------------

Comment(by mikeperry):

 I fixed the ABE issue by making a gimp ABE object in our main service with
 a log function. After some more cleanup, I'm still having issues that
 probably will require me to mess around in the JSD for a while... There
 are a couple exceptions being thrown due to missing notificationCallbacks
 and a possibly a couple other issues too.. :/. I think I need to put this
 down for today.

 On an unrelated note, I've been meaning to ask you if this is an OK hack
 for a while now:
 https://gitweb.torproject.org/mikeperry/https-
 everywhere.git/commitdiff/7b29ac0b95a466bb180012d11c2db28d9c5c09ad

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5477#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online