[tor-bugs] #18996 [Applications/Tor Browser]: Investigate server logging in ESR45

[Tor Bug Tracker & Wiki]

#18996: Investigate server logging in ESR45
--------------------------------------+--------------------------
 Reporter:  gk                        |          Owner:  tbb-team
     Type:  task                      |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  ff45-esr                  |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by arthuredelstein):

 This feature allows the server to send JSON data for display in the web or
 browser console. I don't see any particular danger from this, particularly
 because it does not result in any data being sent from the client to the
 server, as far as I can tell. (Am I missing something?) Additionally, the
 feature is preffed off by default:

 {{{
 pref("devtools.webconsole.filter.servererror", false);
 pref("devtools.webconsole.filter.serverwarn", false);
 pref("devtools.webconsole.filter.serverinfo", false);
 pref("devtools.webconsole.filter.serverlog", false);
 }}}

 and

 {{{
 pref("devtools.browserconsole.filter.servererror", false);
 pref("devtools.browserconsole.filter.serverwarn", false);
 pref("devtools.browserconsole.filter.serverinfo", false);
 pref("devtools.browserconsole.filter.serverlog", false);
 }}}

 although it is easy for the user to turn on, by pressing the "Server"
 button above the console.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18996#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online