[tor-bugs] #21793 [Applications/Tor Browser]: Keep an eye on the CustomElementRegistry API

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Mar 21 10:14:22 UTC 2017


#21793: Keep an eye on the CustomElementRegistry API
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  tbb-team
         Type:  task                 |     Status:  new
     Priority:  Medium               |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  ff52-esr, tbb-
     Severity:  Normal               |  linkability
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 Custom Elements (https://developer.mozilla.org/en-
 US/docs/Web/Web_Components/Custom_Elements) can get registered,
 manipulated and queried by web content. We should make sure there are no
 linkability risks are associated with that.

 For ESR 52 this seems to be still disabled by
 `dom.webcomponents.customelements.enabled = false`. We should check that,
 though.

 The tracking bug is https://bugzilla.mozilla.org/show_bug.cgi?id=889230.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21793>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list