[tor-bugs] #13747 [Applications/Tor Browser]: Block non .onion content on .onion addresses (mixed content blocking)

Sat Oct 27 12:31:41 UTC 2018

#13747: Block non .onion content on .onion addresses (mixed content blocking)
------------------------------------------------+--------------------------
 Reporter:  legind                              |          Owner:  tbb-team
     Type:  enhancement                         |         Status:  new
 Priority:  High                                |      Milestone:
Component:  Applications/Tor Browser            |        Version:
 Severity:  Normal                              |     Resolution:
 Keywords:  tbb-security, TorBrowserTeam201810  |  Actual Points:
Parent ID:  #21952                              |         Points:
 Reviewer:                                      |        Sponsor:
------------------------------------------------+--------------------------

Comment (by gk):

 .onions are treated as secure context now (see:
 https://bugzilla.mozilla.org/show_bug.cgi?id=1382359), so we might already
 get the mixed content blocking for http:// content (we should double-check
 that). But even if that's the case I think we should do active mixed
 content blocking for all non .onion content.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13747#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online