[tor-bugs] #27427 [Applications/Tor Browser]: [PATCH] Fix NoScript IPC for about:blank by whitelisting messages

[Tor Bug Tracker & Wiki]

#27427: [PATCH] Fix NoScript IPC for about:blank by whitelisting messages
--------------------------------------+--------------------------
 Reporter:  rustybird                 |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Immediate                 |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  TorBrowserTeam201809      |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by rustybird):

 Replying to [comment:1 gk]:
 > Thanks for the patch rustybird. I assume Tor Browser as we ship it is
 not affected by this bug and neither is Tails? If that's true what use
 case does this break? We are way too late with our release candidates and
 I am a little hesitant to rebundle/rebuild yet another time. In other
 words: why does it have prio "Immediate"?

 I guess it's only a problem for people who configure "Show a blank page"
 in "When Firefox starts" preferences. Unless there's some other situation
 in which NoScript sends very early messages?

 Feel free to downgrade the priority. I just chose Immediate on the chance
 that you'd want to include it in the final. (To me it looks like a low
 risk patch that makes the approach more robust, but obv the constant
 rebuilding must be a giant PITA.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27427#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online