[tor-bugs] #22434 [Applications/Tor Browser]: drag and drop filter is ineffective in e10s mode

[Tor Bug Tracker & Wiki]

#22434: drag and drop filter is ineffective in e10s mode
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks                          |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  closed
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  ff52-esr, tbb-e10s, tbb-7.0-issues,  |  worksforme
  tbb-regression                                 |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by gk):

 Replying to [comment:6 mcs]:
 > It seems that this is not really a problem, even though the behavior is
 confusing when electrolysis is enabled.
 >
 > Testing by dragging from Tor Browser to another application shows that
 our filtering '''is''' effective in Tor Browser 7.x (Kathy and I tested by
 dragging from Tor Browser to Firefox). So there is not a potential proxy
 leak.
 >
 > The confusing part is that when electrolysis is enabled, the drag filter
 does not affect the data that stays within the browser (e.g., if you drag
 between two Tor Browser windows). The content process must have its own
 copy of the transfer data which is not subject to filtering via the `on-
 datatransfer-available` mechanism. I think this is okay (although arguably
 it is an upsteam bug), so I am going to close this ticket again. Please
 reopen if you disagree.

 Thanks, re upstream bug: do you think it is worth filing one (and if so
 would you mind doing so :) )?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22434#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online