[tor-bugs] #16620 [Tor Browser]: Transform window.name handling into Firefox patch

[Tor Bug Tracker & Wiki]

#16620: Transform window.name handling into Firefox patch
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:  mcs
     Type:  defect                               |         Status:
 Priority:  Medium                               |  assigned
Component:  Tor Browser                          |      Milestone:
 Severity:  Normal                               |        Version:
 Keywords:  tbb-torbutton-conversion,            |     Resolution:
  TorBrowserTeam201510                           |  Actual Points:
Parent ID:                                       |         Points:
  Sponsor:  SponsorU                             |
-------------------------------------------------+-------------------------
Changes (by gk):

 * status:  needs_information => assigned


Comment:

 Replying to [comment:7 brade]:
 > Replying to [comment:6 gk]:
 > > Not sure what "navigated" in this context means.  Are you saying the
 patch behaves differently than specified in 4.5.12 of our design document?
 >
 > Not to answer for Arthur, but I think the new behavior is slightly
 different.  The TB design doc says "we reset the window.name property of
 tabs in Torbutton every time we encounter a blank Referer."  Our patch
 clears it every time the security context changes, which means whenever
 the origin changes.  This means that our new patch is even more aggressive
 about clearing window.name.  According to the following comment, this is
 OK:
 > https://bugzilla.mozilla.org/show_bug.cgi?id=444222#c71
 > But there is a chance that we will introduce compatibility issues with
 some web sites who use (abuse?) window.name to pass info across domains.
 Opinions?

 How hard would it be to have the current behavior implemented? Especially
 given all the other things that still need to be done until Oct 31? If
 that sounds like too much work I think cleaning up the current approach
 and shipping it in the alpha series for a while at least would be fine.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16620#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online