[tor-bugs] #13742 [Tor Browser]: Isolating the cache to the URL bar domain is broken in Tor Browser 4.x

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Nov 13 00:15:17 UTC 2014


#13742: Isolating the cache to the URL bar domain is broken in Tor Browser 4.x
-------------------------+-------------------------------------------------
     Reporter:  gk       |      Owner:  tbb-team
         Type:  defect   |     Status:  new
     Priority:           |  Milestone:
  critical               |    Version:
    Component:  Tor      |   Keywords:  tbb-linkability, tbb-4.5-alpha,
  Browser                |  TorBrowserTeam201411, tbb-testcase
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by mikeperry):

 There is also another codepath here involving "fallback keys" and fallback
 channels. I think the fallback is only used with the application cache
 (aka the offline cache), which should be disabled. It would be nice if we
 could handle this, too though.

 It also looks like that GenerateCacheKey routine is not the same type of
 cache key used by the new nsICacheService, and is its own internal buffer.
 I think we can leave it in place safely.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13742#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list