[tor-bugs] #5477 [EFF-HTTPS Everywhere]: Surprising DOM origins before HTTPS-E/NoScript redirects have completed

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue May 8 19:31:02 UTC 2012


#5477: Surprising DOM origins before HTTPS-E/NoScript redirects have completed
-------------------------------------+--------------------------------------
    Reporter:  Drugoy                |       Owner:  ma1            
        Type:  defect                |      Status:  reopened       
    Priority:  blocker               |   Milestone:                 
   Component:  EFF-HTTPS Everywhere  |     Version:                 
  Resolution:                        |    Keywords:  MikePerry201204
      Parent:                        |      Points:  7              
Actualpoints:  7                     |  
-------------------------------------+--------------------------------------

Comment(by pde):

 You seem to be right Drugoy.  I needed to clear my cache to make the
 intermediate display state actually render on my screen, but it seems to
 still be there :(.

 I wonder what our options here are.  Is there some way we can forcibly
 snip the old DOM out of the window once we know we're starting the HTTPS
 redirect?  If we make window.document point to a new blank DOM, will we
 break the redirect that's in progress?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5477#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list