[tor-bugs] #7638 [Firefox Patch Issues]: defect: the 'window.name' attribute is traceable across sites

[Tor Bug Tracker & Wiki]

#7638: defect: the 'window.name' attribute is traceable across sites
----------------------------------+-----------------------------------------
 Reporter:  WDXfjqDN4QKGYrlY      |          Owner:  mikeperry                    
     Type:  defect                |         Status:  new                          
 Priority:  major                 |      Milestone:  TorBrowserBundle 2.3.x-stable
Component:  Firefox Patch Issues  |        Version:  Tor: 0.2.2.39                
 Keywords:  window.name tab       |         Parent:                               
   Points:                        |   Actualpoints:                               
----------------------------------+-----------------------------------------

Comment(by gk):

 This is a feature according to the currently available design
 documentation:

 "n order to eliminate linkability but still allow for sites that utilize
 this property to function, we reset the window.name property of tabs in
 Torbutton every time we encounter a blank referer. This behavior allows
 window.name to persist for the duration of a link-driven navigation
 session, but as soon as the user enters a new URL or navigates between
 https/http schemes, the property is cleared."
 (https://www.torproject.org/projects/torbrowser/design/ section 3.5.8)

 There might be plans to change that, though:
 https://trac.torproject.org/projects/tor/ticket/5273#comment:10 and there:

 "2. We should only preserve window.name if the url bar domain remains the
 same. I could be convinced of this, but it's going to be trickier to
 implement and I think it's not really possible to remove linkability for
 user clicks in general."

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7638#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online