[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #2148 [Torbutton]: 1.3.x: RefSpoofer fails on 5 test cases out of 12.
#2148: 1.3.x: RefSpoofer fails on 5 test cases out of 12.
-------------------------------------------------------------------+--------
Reporter: T(A)ILS developers | Owner: mikeperry
Type: defect | Status: needs_review
Priority: blocker | Milestone: Torbutton: 1.3
Component: Torbutton | Version: Torbutton: 1.3
Keywords: TorbuttonIteration20110305 MikePerryIteration20110305 | Parent:
Points: 6 | Actualpoints:
-------------------------------------------------------------------+--------
Changes (by mikeperry):
* status: assigned => needs_review
Comment:
TAILS guys: ok, now the referer behavior should be more uniform. The
attached .xpi is from origin/master
2589477ba1034c394d9ef74c33bd1123316da214. We may still want to change that
behavior, but at least it is now easier to describe.
The referer is left as the default behavior if either the source or the
destination hostname are full substrings of one another. Otherwise, the
referer is spoofed to be the prefix of the destination url (scheme+host).
We may want to loosen this to remove the TLD, and/or the prefix domain, if
the hostnames are short enough, before performing the suffix test.
Thoughts?
Also, does this git revision behave as described for you?
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2148#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs