[tor-bugs] #15502 [Applications/Tor Browser]: URL.createObjectURL() considered harmful

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jan 19 14:07:57 UTC 2017


#15502: URL.createObjectURL() considered harmful
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:
                                                 |  arthuredelstein
     Type:  defect                               |         Status:  closed
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:  tbb-linkability, tbb-newnym,         |  Actual Points:
  tbb-4.5-alpha, TorBrowserTeam201504R,          |
  MikePerry201504R                               |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by cypherpunks):

 * severity:   => Normal


Comment:

 Replying to [comment:16 mikeperry]:
 > While testing the Torbutton piece, I noticed that about:memory was still
 reporting many page objects still present after New Identity. I couldn't
 manage to catch any blob: urls still alive in there, but it was enough to
 worry me.
 blob: URIs still survive New Identity. Is this OK?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15502#comment:25>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list