[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #1685 [EFF-HTTPS Everywhere]: HTTPS Everywhere: Aborting possible favicon [IMAGE], should be HTTPS!



#1685: HTTPS Everywhere: Aborting possible favicon [IMAGE], should be HTTPS!
----------------------------------+-----------------------------------------
 Reporter:  pde                   |       Owner:  pde
     Type:  defect                |      Status:  new
 Priority:  normal                |   Milestone:     
Component:  EFF-HTTPS Everywhere  |     Version:     
 Keywords:                        |      Parent:     
----------------------------------+-----------------------------------------
 Certain correctly-written rulesets cause this error message to appear
 frequently in the Error Console.  We believe the bug may simultaneously
 randomly prevent the image from rendering.

 The bug is caused by a race condition between the favicon abort code we
 borrowed from NoScript, and the nsIContentPolicy codepath.  The favicon
 abort code unfortunately appears to be necessary in order to prevent
 frequent crashes from an underlying Firefox bug.

 There may be some workaround we can implement by tightening the favicon
 heuristics in replaceChannel().  But until that has been demonstrated and
 tested, we will have to avoid shipping rules that trigger the error
 frequently.  You can keep using them privately, but they will occasionally
 prevent some image from rendering.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1685>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online