[tor-bugs] #30683 [Applications/Tor Browser]: Properties in dom/locales/$lang/chrome/ allow detecting user locale

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Sep 12 18:32:55 UTC 2019


#30683: Properties in dom/locales/$lang/chrome/ allow detecting user locale
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-fingerprinting-locale,           |  Actual Points:
  TorBrowserTeam201909                           |
Parent ID:                                       |         Points:  0.25
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by acat):

 Replying to [comment:15 gk]:
 > Looks good. I wonder whether the ServiceWorker `ReportToAllClients()`
 messages are detectable from web content actually. Have we ruled that out?
 (while not being enabled in ESR 68 it will be for mobile IIRC).

 I think we are good. [https://searchfox.org/mozilla-
 esr68/rev/92032fc58f059a475a3f3999741fbd9d3c389b61/dom/serviceworkers/ServiceWorkerManager.cpp#1363
 LocalizeAndReportToAllClients] ends up calling [https://searchfox.org
 /mozilla-
 esr68/rev/92032fc58f059a475a3f3999741fbd9d3c389b61/dom/console/ConsoleUtils.cpp#134
 ConsoleUtils.cpp] which seems it's only logging to console. I also tested
 a bit with the different error handlers in Service Workers and I could not
 get a localized message.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30683#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list