[tor-bugs] #13014 [Tor Browser]: copy and paste trick could be used to deanonymise users

[Tor Bug Tracker & Wiki]

#13014: copy and paste trick could be used to deanonymise users
-----------------------------+----------------------
     Reporter:  cypherpunks  |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------

Comment (by cypherpunks):

 Since the trick relies on CSS attributes to hide the malicious text from
 the user, maybe one could mitigate this by ensuring that certain
 attributes (display/position) are ignored on selected text (the CSS
 -[moz-]selection selector).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13014#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online