[tor-bugs] #10467 [Firefox Patch Issues]: URLs are leaked to third party if they contain typos

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Dec 22 20:39:11 UTC 2013


#10467: URLs are leaked to third party if they contain typos
----------------------------------+---------------------------
 Reporter:  torar                 |          Owner:  mikeperry
     Type:  defect                |         Status:  new
 Priority:  major                 |      Milestone:
Component:  Firefox Patch Issues  |        Version:
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
----------------------------------+---------------------------
 Open a new tab in the Tor Browser and type "https;//www.wikipedia.org"
 into the URL field (note the typo - a semicolon instead of a colon)

 The Tor Browser jumps to startpage.com and searches it for
 "https;//www.wikipedia.org"

 Users may make typos - and I think there is no need to leak URLs with
 typos to a third party (startpage). You should patch Firefox so that
 anything typed into the URL field is never sent to a third party.

 There is already a special field for startpage search in the navigation
 toolbar - so there is no need to use the URL field for searches.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10467>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list