[tor-bugs] #15502 [Tor Browser]: Blob URIs considered harmful

[Tor Bug Tracker & Wiki]

#15502: Blob URIs considered harmful
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  tbb-team
  mikeperry              |     Status:  new
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  tbb-linkability, tbb-newnym,
  Browser                |  TorBrowserTeam201503, tbb-4.5-alpha
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by mikeperry):

 Issue #2 (surviving New Identity) is not as bad as I originally thought.
 According to https://developer.mozilla.org/en-
 US/docs/Web/API/URL/createObjectURL, this blob URI is only supposed to
 persist while the document that created it is still valid. However, there
 appears to be a race condition or delay here where the URI persists for
 longer than that. I was able to continue using it after New Identity for
 some time (about 30 seconds or so) before it stopped working.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15502#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online