[tor-bugs] #9881 [Tor Browser]: Javascript can create/resize windows to consume the entire desktop

[Tor Bug Tracker & Wiki]

#9881: Javascript can create/resize windows to consume the entire desktop
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  mikeperry
  mikeperry              |     Status:  needs_review
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  tbb-fingerprinting, tbb-testcase,
  Browser                |  tbb-firefox-patch
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by faether):

 > So what is your proposed patch for this bug then just doing a
 `browser.link.open_newwindow.restriction = 0`?


 Yes.

 Plus `full-screen-api.enabled = false` to fix #12609 in the same release,
 ideally - and then ever onwards towards the next rounds of
 fingerprintability whac-a-mole... :)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9881#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online