[tor-bugs] #14205 [Applications/Tor Browser]: Closely review all uses of IsCallerChrome() for e10s

Fri May 26 14:27:49 UTC 2017

#14205: Closely review all uses of IsCallerChrome() for e10s
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:  mcs
     Type:  task                                 |         Status:
                                                 |  assigned
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-fingerprinting, tbb-e10s, tbb-   |  Actual Points:
  rebase, ff52-esr, tbb-7.0-must                 |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by mcs):

 Looking at all of the tor-browser patches on our tor-
 browser-52.1.1esr-7.0-1 branch, the following patches call
 `IsCallerChrome()` , `ThreadsafeIsCallerChrome()`, or
 `LegacyIsCallerChromeOrNativeCode()`:

 commit 2c9aa3b1c278653c27a0339db89675ad89933ec9
 Author: Kathy Brade <brade at pearlcrescent.com>
 Date:   Thu Sep 26 17:11:19 2013 -0400

     Bug 6253: Add canvas image extraction prompt.

 commit 331f089d6b6ba62463d8362d7ca01641a4cc92dc
 Author: Arthur Edelstein <arthuredelstein at gmail.com>
 Date:   Mon Apr 24 08:18:25 2017 -0700

     Bug 10286: Touch API fingerprinting resistance

 commit 6b2e06d4dd12679056b0cefb5f57c8dd0e7ea7f1
 Author: Arthur Edelstein <arthuredelstein at gmail.com>
 Date:   Sat Jun 13 19:27:43 2015 -0700

     Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent

 commit 58d186df19450f9aef0423c71e78f6eaa17679f8
 Author: Arthur Edelstein <arthuredelstein at gmail.com>
 Date:   Thu Apr 27 15:00:14 2017 -0700

     Bug 21792: Suppress MediaError.message when
 privacy.resistFingerprinting = true

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14205#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online