[tor-bugs] #31206 [Applications/Tor Browser]: http://ip-check.info detects browser window size with JS disabled

[Tor Bug Tracker & Wiki]

#31206: http://ip-check.info detects browser window size with JS disabled
--------------------------------------+---------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Critical                  |     Resolution:  not a bug
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+---------------------------

Comment (by cypherpunks):

 Replying to [comment:2 cypherpunks]:
 > > Yes, CSS can do this, too.
 >
 > But how can CSS send back an HTTP request to the website, containing the
 info? It has no XHR capabilities.
 Based on the requests sent to the server for each different background,
 https://arthuredelstein.github.io/tordemos/media-query-fingerprint.html

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31206#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online