[tor-bugs] #8056 [EFF-HTTPS Everywhere]: Infinite loop redirection after sign in eventbrite.com

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jan 28 23:13:13 UTC 2013


#8056: Infinite loop redirection after sign in eventbrite.com
-------------------------------------+--------------------------------------
    Reporter:  cypherpunks           |       Owner:  pde               
        Type:  defect                |      Status:  closed            
    Priority:  normal                |   Milestone:                    
   Component:  EFF-HTTPS Everywhere  |     Version:                    
  Resolution:  fixed                 |    Keywords:  httpse-ruleset-bug
      Parent:                        |      Points:                    
Actualpoints:                        |  
-------------------------------------+--------------------------------------
Changes (by pde):

 * cc: MB, webmaster@… (added)
  * status:  new => closed
  * resolution:  => fixed


Comment:

 It looks like this is caused by the securecookie element of this ruleset.
 We will remove the securecookie rule, but that's a bad sign for
 eventbrite's security, I believe.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8056#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list