[tor-bugs] #13670 [Tor Browser]: ensure OCSP & favicons respect URL bar domain isolation

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jan 19 23:33:03 UTC 2015


#13670: ensure OCSP & favicons respect URL bar domain isolation
---------------------------------+----------------------------------
     Reporter:  arthuredelstein  |      Owner:  arthuredelstein
         Type:  defect           |     Status:  assigned
     Priority:  normal           |  Milestone:
    Component:  Tor Browser      |    Version:
   Resolution:                   |   Keywords:  TorBrowserTeam201501
Actual Points:                   |  Parent ID:
       Points:                   |
---------------------------------+----------------------------------

Comment (by arthuredelstein):

 Here's another possibly dangerous connection:
 getFirstPartyURI failed for
 https://addons.mozilla.org/blocklist/3/%7Bec8030f7-c20a-464f-9b0e-
 13a3a9e97384%7D/31.4.0/Firefox/20000101000000/Darwin_x86_64-gcc3/en-
 US/alpha/Darwin%2013.4.0/default/default/1/34/15/: 0x80070057

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13670#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list