[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #27261 [Applications/Tor Browser]: Tor Browser 8.0a9/10 gets stuck in an endless reload cycle



#27261: Tor Browser 8.0a9/10 gets stuck in an endless reload cycle
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  TorBrowserTeam201808, ff60-esr,      |  Actual Points:
  noscript                                       |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by ma1):

 Replying to [comment:13 gk]:
 > So, my current theory is that there is an underlying bug that is causing
 to break NoScript (and the HTTPS-E and potentially other (Web)Extensions)
 in a way that the reload cycle happens.

 This is a pretty good working theory: in facts, one of the thing NoScript
 does to ensure other extensions don't interfere accidentally with the CSP
 it injects in webRequest.onHeadersReceived in the parent process, is
 checking whether scripts are actually blocked at a later stage (in the
 child process), and if they aren't, it triggers a page reload after trying
 its best to ensure NoScript has the final word on HTTP headers next time.

 Therefore if something consistently messes with NoScript's ability to
 block scripts, and especially strips off the CSP headers of a page in a
 way that causes pages' JavaScript to bypass NoScript's restriction, that
 would likely cause a reload loop.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27261#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs