[tor-bugs] #13784 [Tor Browser]: HTTP authentication tokens are not removed anymore for third party requests

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Dec 5 10:54:26 UTC 2014


#13784: HTTP authentication tokens are not removed anymore for third party requests
-------------------------+-------------------------------------------------
     Reporter:  gk       |      Owner:  tbb-team
         Type:  defect   |     Status:  closed
     Priority:           |  Milestone:
  critical               |    Version:
    Component:  Tor      |   Keywords:  tbb-linkability, tbb-testcase,
  Browser                |  TorBrowserTeam201412
   Resolution:  fixed    |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------
Changes (by gk):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 This is fixed in the alpha series but due to lack of time by reverting the
 respective Torbutton commits. (I did not feel comfortable at all to ship
 4.5-alpha-2 with such an issue unfixed) The ticket for the proper patch is
 #13900.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13784#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list