[tor-bugs] #7130 [Firefox Patch Issues]: Canvas image data is blocked from chrome (such as NoScript's ClearClick) (was: Canvas image data is blocked from chrome callers)

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Wed Oct 31 04:36:00 UTC 2012


#7130: Canvas image data is blocked from chrome (such as NoScript's ClearClick)
----------------------------------+-----------------------------------------
 Reporter:  mikeperry             |          Owner:  mikeperry
     Type:  defect                |         Status:  new      
 Priority:  normal                |      Milestone:           
Component:  Firefox Patch Issues  |        Version:           
 Keywords:                        |         Parent:           
   Points:                        |   Actualpoints:           
----------------------------------+-----------------------------------------

Comment(by mikeperry):

 Technically, this actually breaks NoScript's ClearClick protections, but I
 have not noticed NoScript ever successfully blockeding a real clickjack
 with ClearClick.. And I have been clickjacked..

 If I'm wrong, and ClearClick actually does block real clickjack vectors in
 a normal Firefox, perhaps this ticket should be bumped to major or higher.
 It could be that other TBB changes also break ClearClick..

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7130#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list