[tor-bugs] #16727 [Tor Browser]: Tor Browser about:healthreport shows Data Sharing ON

[Tor Bug Tracker & Wiki]

#16727: Tor Browser about:healthreport shows Data Sharing ON
-------------------------+-------------------------------------------------
     Reporter:  teor     |      Owner:  gk
         Type:  defect   |     Status:  assigned
     Priority:  major    |  Milestone:
    Component:  Tor      |    Version:
  Browser                |   Keywords:  tbb-5.0-regression, tbb-
   Resolution:           |  fingerprinting
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------
Changes (by gk):

 * owner:  tbb-team => gk
 * keywords:   => tbb-5.0-regression, tbb-fingerprinting
 * status:  new => assigned


Comment:

 As far as I see it there is no data sharing going on. "Data Sharing ON" is
 visible as the content script which is updating the button according to
 our settings is forbidden to run due to your security slider settings. If
 you chose medium-low or use the default setting you'll see that Data
 Sharing is shown as "off".

 It seems the browser is requesting a localized version of the page given
 that the default report URL, `datareporting.healthreport.about.reportUrl`,
 points `https://fhr.cdn.mozilla.net/%LOCALE%/`. That alone is already
 concerning. I think we should use our `data:text/plain,` "workaround"
 which leaves a blank page as teor requested. I'll add links to patches
 shortly.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16727#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online