[tor-bugs] #13027 [Tor Browser]: Make WebWorkers use spoofed navigator.* useragent values
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Sep 17 01:51:04 UTC 2014
#13027: Make WebWorkers use spoofed navigator.* useragent values
-------------------------+-------------------------------------------------
Reporter: | Owner: tbb-team
mikeperry | Status: new
Type: defect | Milestone:
Priority: major | Version:
Component: Tor | Keywords: ff31-esr, tbb-easy, tbb-
Browser | fingerprinting, TorBrowserTeam201409Easy
Resolution: | Parent ID:
Actual Points: |
Points: |
-------------------------+-------------------------------------------------
Comment (by gacar):
Probably this bug is not scary as we thought, since `IsCallerChrome()`
returns true when WorkerNavigator strings are initialized and cached -
before the worker starts running.
So this may be limited to initialization step
(`RuntimeService::RegisterWorker`), which is hopefully easier to fix and
less scary than workers running with chrome privileges. I updated the
relevant Mozilla bug.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13027#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list