[tor-bugs] #20195 [Applications/Tor Browser]: torbutton-torCheckService doesn't honor domain isolation.

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Sep 22 08:34:39 UTC 2016


#20195: torbutton-torCheckService doesn't honor domain isolation.
--------------------------------------------+--------------------------
 Reporter:  yawning                         |          Owner:  tbb-team
     Type:  defect                          |         Status:  assigned
 Priority:  Medium                          |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  tbb-torbutton, tbb-linkability  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+--------------------------

Comment (by yawning):

 Ah there.  Looks like the domain isolation code is getting called, but
 wireshark doesn't lie.
 FWIW, I took the pcaps without my sandboxing stuff in play, and the
 behavior is consistent.

 {{{
 [09-22 08:31:02] Torbutton INFO: Component returned failure code:
 0x80070057 (NS_ERROR_ILLEGAL_VALUE)
 [mozIThirdPartyUtil.getFirstPartyURIFromChannel]
 [09-22 08:31:02] Torbutton INFO: tor SOCKS isolation catchall:
 https://check.torproject.org/?TorButton=true#0.99726695529027310.5190771246311907
 via --unknown--:0
 [09-22 08:31:02] Torbutton WARN: no SOCKS credentials found for current
 document.
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20195#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list