[tor-bugs] #10507 [Firefox Patch Issues]: firefox 24.0 in tbb 3.5 is leaking referring page data

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Dec 28 17:12:48 UTC 2013


#10507: firefox 24.0 in tbb 3.5 is leaking referring page data
----------------------------------+---------------------------
 Reporter:  unclejed613           |          Owner:  mikeperry
     Type:  defect                |         Status:  new
 Priority:  major                 |      Milestone:
Component:  Firefox Patch Issues  |        Version:
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
----------------------------------+---------------------------
 i run a hidden service website, and occasionally check the apache log to
 see what content is popular. yesterday i saw something that never appeared
 before, referring page data. here is an example (onion address munged to
 protect referring page):

 127.0.0.1 - - [28/Dec/2013:02:11:48 -0700] "GET /weblog/index.html
 HTTP/1.1" 200 5302
 "http://mungetheoriginad.onion/index.php?cat&cid=5&sid=mungethis2userkeyblah0"
 "Mozilla 5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox 24.0"

 at first i thought it was just somebody using a poorly configured browser,
 and not TBB... until i tried it myself, and my TBB 3.5 left referring page
 data as well

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10507>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list