[tor-bugs] #18168 [Tor Browser]: Iframe based AJAX call blocked by popup-blocker or opening in new tab

[Tor Bug Tracker & Wiki]

#18168: Iframe based AJAX call blocked by popup-blocker or opening in new tab
-------------------------------------------------+-------------------------
 Reporter:  sky_kohai                            |          Owner:  mcs
     Type:  defect                               |         Status:
 Priority:  High                                 |  needs_revision
Component:  Tor Browser                          |      Milestone:
 Severity:  Major                                |        Version:
 Keywords:  tbb-usability-website,               |     Resolution:
  TorBrowserTeam201601R                          |  Actual Points:
Parent ID:                                       |         Points:
  Sponsor:                                       |
-------------------------------------------------+-------------------------
Changes (by mcs):

 * status:  needs_review => needs_revision


Comment:

 I just saw https://blog.torproject.org/blog/tor-
 browser-55-released#comment-153806 and tested this page:
  http://www.tagindex.net/html/frame/example_t04.html
 with:
  network.http.sendRefererHeader = 1
  network.http.sendSecureXSiteReferrer = false
 Unfortunately, the patch I posted a few minutes ago does not fix that
 regression. Kathy and I will work on a revised patch (I assume the root
 cause is related but I have not debugged this new scenario yet).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18168#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online