[tor-bugs] #32414 [Applications/Tor Browser]: window.external.AddSearchProvider request goes through catch-all-circuit

[Tor Bug Tracker & Wiki]

#32414: window.external.AddSearchProvider request goes through catch-all-circuit
-------------------------------------------------+-------------------------
 Reporter:  acat                                 |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-linkability                      |  Actual Points:
  TorBrowserTeam201912                           |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by acat):

 * keywords:  tbb-linkability => tbb-linkability TorBrowserTeam201912


Comment:

 This allows a website to find out the catch-all circuit IP, so I assume
 it's serious enough to set it for next month (not aware this is currently
 possible in any other way).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32414#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online