[tor-bugs] #9881 [Tor Browser]: Javascript can create/resize windows to consume the entire desktop

[Tor Bug Tracker & Wiki]

#9881: Javascript can create/resize windows to consume the entire desktop
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  mikeperry
  mikeperry              |     Status:  needs_review
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  tbb-fingerprinting, tbb-testcase,
  Browser                |  tbb-firefox-patch
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by gk):

 Replying to [comment:22 cypherpunks]:
 > Set `browser.link.open_newwindow.restriction = 0` to open ''all'' popups
 as tabs, ignoring any sizes. Together with `dom.disable_window_move_resize
 = true`, and (see #12609:) `full-screen-api.enabled = false`, that should
 squash 'em all.

 Giving the preference modifications belonging to this bug a quick shot I
 have found one machine where the test in comment:21 got not properly
 rounded window dimensions extracted. Hrm, it seems we can't solve this
 properly with just setting some preferences...

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9881#comment:26>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online