[tor-bugs] #15502 [Applications/Tor Browser]: URL.createObjectURL() considered harmful

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jan 19 14:20:12 UTC 2017


#15502: URL.createObjectURL() considered harmful
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:
                                                 |  arthuredelstein
     Type:  defect                               |         Status:  closed
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:  tbb-linkability, tbb-newnym,         |  Actual Points:
  tbb-4.5-alpha, TorBrowserTeam201504R,          |
  MikePerry201504R                               |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by gk):

 Replying to [comment:25 cypherpunks]:
 > Replying to [comment:16 mikeperry]:
 > > While testing the Torbutton piece, I noticed that about:memory was
 still reporting many page objects still present after New Identity. I
 couldn't manage to catch any blob: urls still alive in there, but it was
 enough to worry me.
 > blob: URIs still survive New Identity. Is this OK?

 I don't think so. Do you mind opening a ticket and add steps to reproduce
 your findings? Commenting on an old and closed ticket risks that folks are
 missing your issue.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15502#comment:26>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list