[tor-bugs] #21741 [Applications/Tor Browser]: Check for proxy bypasses with new HTML Drag and Drop API

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Apr 11 12:11:09 UTC 2017


#21741: Check for proxy bypasses with new HTML Drag and Drop API
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:  closed
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:  ff52-esr, TorBrowserTeam201704,      |  Actual Points:
  tbb-7.0-must-alpha, GeorgKoppen201704          |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  Sponsor4
-------------------------------------------------+-------------------------
Changes (by gk):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 I checked the nightly build for drag-and-drop proxy bypasses with
 Wireshark and looked at Torbutton log output. I found no DNS leaks and
 there were no error messages in the drag-and-drop related Torbutton code
 either. Furthermore, I looked at the patches in the description and
 compared `nsITransferable.idl` between esr45 and esr52 and no new MIME
 types that are "url"-related got added. Thus, I think we are good here.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21741#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list