[tor-bugs] #15599 [Applications/Tor Browser]: Range requests used by pdfjs are not isolated to URL bar domain

[Tor Bug Tracker & Wiki]

#15599: Range requests used by pdfjs are not isolated to URL bar domain
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:
                                                 |  pospeselr
     Type:  defect                               |         Status:
                                                 |  needs_revision
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-linkability,                     |  Actual Points:
  TorBrowserTeam201802                           |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by gk):

 * status:  needs_review => needs_revision
 * keywords:  tbb-linkability, TorBrowserTeam201801R => tbb-linkability,
     TorBrowserTeam201802


Comment:

 Okay, let's try that in the alpha series a bit. I admit, though, I am a
 bit skeptical whether the possible usability issues are worth it. We'll
 see.

 But before that, two things:

 1) s/cannot/can/ (it seems to me one negation is already enough :) )
 2) `extension-overrides.js` is the wrong place for the patch. We don't
 treat `pdf.js` as en extension but rather as part of the browse core
 (after all it does not show up in the `about:addons` menu etc.). So, our
 usual prefs file, `000-tor-browser.js`, would be the better place.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15599#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online