[tor-bugs] #18168 [Tor Browser]: Iframe based AJAX call blocked by popup-blocker or opening in new tab

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jan 28 16:11:20 UTC 2016


#18168: Iframe based AJAX call blocked by popup-blocker or opening in new tab
-----------------------------------+--------------------------
 Reporter:  sky_kohai              |          Owner:  mcs
     Type:  defect                 |         Status:  assigned
 Priority:  High                   |      Milestone:
Component:  Tor Browser            |        Version:
 Severity:  Major                  |     Resolution:
 Keywords:  tbb-usability-website  |  Actual Points:
Parent ID:                         |         Points:
  Sponsor:                         |
-----------------------------------+--------------------------

Comment (by mcs):

 Kathy and I did not try a post to ​http://dmirrgetyojz735v.onion/d/#set-
 lang:en because we are not sure where to post without annoying real users
 of that site. But we created our own test case based on the JS code and
 were able to reproduce the problem.

 The root cause is that the hidden iframe initially loads about:blank, and
 since there is no referrer at that point the #16620 code clears the
 iframe's window.name. We are working on a fix, which most likely will
 involve never clearing window.name when about:blank is being loaded (the
 old Torbutton JS implementation included an exception for about:blank, but
 we thought it was only needed to handle new windows; apparently we were
 wrong).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18168#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list