[tor-bugs] #13027 [Tor Browser]: Make WebWorkers use spoofed navigator.* useragent values

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Sep 17 01:51:04 UTC 2014


#13027: Make WebWorkers use spoofed navigator.* useragent values
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  tbb-team
  mikeperry              |     Status:  new
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  ff31-esr, tbb-easy, tbb-
  Browser                |  fingerprinting, TorBrowserTeam201409Easy
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by gacar):

 Probably this bug is not scary as we thought, since `IsCallerChrome()`
 returns true when WorkerNavigator strings are initialized and cached -
 before the worker starts running.

 So this may be limited to initialization step
 (`RuntimeService::RegisterWorker`), which is hopefully easier to fix and
 less scary than workers running with chrome privileges. I updated the
 relevant Mozilla bug.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13027#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list