[tor-bugs] #28719 [Applications/Tor Browser]: Clicking on embedded links seems to cause FPI mismatch

[Tor Bug Tracker & Wiki]

#28719: Clicking on embedded links seems to cause FPI mismatch
---------------------------------------------+--------------------------
 Reporter:  gk                               |          Owner:  tbb-team
     Type:  defect                           |         Status:  new
 Priority:  Medium                           |      Milestone:
Component:  Applications/Tor Browser         |        Version:
 Severity:  Normal                           |     Resolution:
 Keywords:  tbb-linkability, tbb-8.0-issues  |  Actual Points:
Parent ID:                                   |         Points:
 Reviewer:                                   |        Sponsor:
---------------------------------------------+--------------------------

Comment (by cypherpunks):

 Replying to [comment:2 gk]:
 > https://blog.torproject.org/comment/279616#comment-279616 might be the
 same issue with JS resources.
 HAR (cropped bcs trac):
 {{{
       {
         "pageref": "page_1",
         "startedDateTime": "2019-02-05T10:07:36.244+00:00",
         "request": {
           "bodySize": 0,
           "method": "GET",
           "url":
 "https://hg.mozilla.org/static/3b362b7a9144/mercurial.js",
           "httpVersion": "HTTP/2.0",
           "headers": [
             {
               "name": "Host",
               "value": "hg.mozilla.org"
             },
             {
               "name": "User-Agent",
               "value": "Mozilla/5.0 (Windows NT 6.1; rv:60.0)
 Gecko/20100101 Firefox/60.0"
             },
             {
               "name": "Accept",
               "value": "*/*"
             },
             {
               "name": "Accept-Language",
               "value": "en-US,en;q=0.5"
             },
             {
               "name": "Accept-Encoding",
               "value": "gzip, deflate, br"
             },
             {
               "name": "Referer",
               "value": "https://hg.mozilla.org/releases/mozilla-
 esr60/rev/fe547fe73bba"
             },
             {
               "name": "Connection",
               "value": "keep-alive"
             }
           ],
           "cookies": [],
           "queryString": [],
           "headersSize": 0
         },
         "response": {
           "status": 200,
           "statusText": "OK",
           "httpVersion": "HTTP/2.0",
           "headers": [
             {
               "name": "server",
               "value": "Apache"
             },
             {
               "name": "cache-control",
               "value": "max-age=31536000, immutable"
             },
             {
               "name": "content-type",
               "value": "application/javascript"
             },
             {
               "name": "strict-transport-security",
               "value": "max-age=31536000"
             },
             {
               "name": "date",
               "value": "Tue, 05 Feb 2019 10:04:36 GMT"
             },
             {
               "name": "accept-ranges",
               "value": "bytes"
             },
             {
               "name": "access-control-allow-origin",
               "value": "*"
             },
             {
               "name": "etag",
               "value": "\"3da3-572da3410ec78\""
             },
             {
               "name": "x-content-type-options",
               "value": "nosniff"
             },
             {
               "name": "last-modified",
               "value": "Tue, 07 Aug 2018 15:39:45 GMT"
             },
             {
               "name": "content-length",
               "value": "15779"
             },
             {
               "name": "X-Firefox-Spdy",
               "value": "h2"
             }
           ],
           "cookies": [],
           "content": {
             "mimeType": "application/javascript",
             "size": 0,
             "text": ""
           },
           "redirectURL": "",
           "headersSize": 0,
           "bodySize": null
         },
         "cache": {
           "afterRequest": null
         },
         "timings": {
           "blocked": 0,
           "dns": 0,
           "ssl": 0,
           "connect": 0,
           "send": 0,
           "wait": 0,
           "receive": 0
         },
         "time": 0,
         "_securityState": "secure"
       },
 }}}
 Reported zero size for cached js:
 {{{
             "mimeType": "application/javascript",
             "size": 0,
             "text": ""
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28719#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online