[tor-bugs] #33298 [Applications/Tor Browser]: HTTP onion sites do not give a popup warning when submiting form data to non-onion HTTP sites

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Feb 12 23:58:54 UTC 2020


#33298: HTTP onion sites do not give a popup warning when submiting form data to
non-onion HTTP sites
------------------------------------------+--------------------------------
     Reporter:  pospeselr                 |      Owner:  pospeselr
         Type:  defect                    |     Status:  assigned
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
                                          |  TorBrowserTeam202002
Actual Points:                            |  Parent ID:  #30025
       Points:                            |   Reviewer:
      Sponsor:  Sponsor27-must            |
------------------------------------------+--------------------------------
 In vanilla firefox, HTTPS site with a form that submits to an HTTP site
 will put up a pop-up box warning the user they are about to send their
 data unencrypted across the network. Tor Browser follows this behaviour,
 but it also needs to do so when submitting data from an HTTP onionsite to
 a vanilla HTTP site.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33298>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list