[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #23629 [- Select a component]: CSP error reports not sent - intended/safe ?



#23629: CSP error reports not sent - intended/safe ?
--------------------------------------+--------------------
     Reporter:  cypherpunks           |      Owner:  (none)
         Type:  enhancement           |     Status:  new
     Priority:  Medium                |  Milestone:
    Component:  - Select a component  |    Version:
     Severity:  Normal                |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |   Reviewer:
      Sponsor:                        |
--------------------------------------+--------------------
 when browsing sites that have a Content Security Policy (CSP) report URI,
 and a CSP violation is triggered, the reports aren't sent

 in a regular firefox they would be POSTED to the URI

 in TBB they don't - is that intended for security or what ever ?

 i cant remember any test sites but it might be possible to find one...

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23629>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs