[tor-bugs] #12146 [meek]: Firefox meek-http-helper leaks Host header in CONNECT requests

[Tor Bug Tracker & Wiki]

#12146: Firefox meek-http-helper leaks Host header in CONNECT requests
------------------------+--------------------------
     Reporter:  dcf     |      Owner:  dcf
         Type:  defect  |     Status:  needs_review
     Priority:  major   |  Milestone:
    Component:  meek    |    Version:
   Resolution:          |   Keywords:
Actual Points:          |  Parent ID:  #10935
       Points:          |
------------------------+--------------------------
Changes (by dcf):

 * status:  new => needs_review


Comment:

 Replying to [comment:3 dcf]:
 > I opened https://bugzilla.mozilla.org/show_bug.cgi?id=1017769 in the
 Mozilla tracker. It has a
 [https://bug1017769.bugzilla.mozilla.org/attachment.cgi?id=8431005
 proposed patch].

 The patch [https://hg.mozilla.org/mozilla-central/rev/a1f6458800d4 got
 merged] into Firefox upstream.

 attachment:0001-Make-the-CONNECT-Host-header-the-same-as-the-Request.patch
 is the patch backported to tor-browser.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12146#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online