[tor-bugs] #26670 [Applications/Tor Browser]: Cannot allow Canvas Image Extract in tbb 8.0a9

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Aug 29 13:44:44 UTC 2018


#26670: Cannot allow Canvas Image Extract in tbb 8.0a9
--------------------------------------------+------------------------------
 Reporter:  Ephraim                         |          Owner:  tbb-team
     Type:  defect                          |         Status:
                                            |  needs_revision
 Priority:  High                            |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  ff60-esr, TorBrowserTeam201808  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+------------------------------
Changes (by mcs):

 * keywords:  ff60-esr, TorBrowserTeam201808R => ff60-esr,
     TorBrowserTeam201808
 * status:  needs_review => needs_revision


Comment:

 Kathy and I reviewed the patch and did some testing. The only problem we
 see is that by changing the "Must belong to some other window" check in
 browser.js to be based on host, canvas prompts are opened in tabs that
 happen to match the host even if no canvas activity takes place there. We
 tested this by opening these pages in two browser windows:
  https://people.torproject.org/~brade/tests/canvasTest.html
  https://people.torproject.org/~brade/tests/
 It would be good to fix this.

 We also noticed that in Tor Browser the canvas permission status is not
 displayed within the control center (page identity popup) like it is in
 Firefox ESR60. That may be a separate issue though.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26670#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list