[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #16620 [Tor Browser]: Transform window.name handling into Firefox patch
#16620: Transform window.name handling into Firefox patch
-------------------------------------------------+-------------------------
Reporter: mikeperry | Owner: mcs
Type: defect | Status:
Priority: Medium | assigned
Component: Tor Browser | Milestone:
Severity: Normal | Version:
Keywords: tbb-torbutton-conversion, | Resolution:
TorBrowserTeam201510 | Actual Points:
Parent ID: | Points:
Sponsor: SponsorU |
-------------------------------------------------+-------------------------
Changes (by gk):
* status: needs_information => assigned
Comment:
Replying to [comment:7 brade]:
> Replying to [comment:6 gk]:
> > Not sure what "navigated" in this context means. Are you saying the
patch behaves differently than specified in 4.5.12 of our design document?
>
> Not to answer for Arthur, but I think the new behavior is slightly
different. The TB design doc says "we reset the window.name property of
tabs in Torbutton every time we encounter a blank Referer." Our patch
clears it every time the security context changes, which means whenever
the origin changes. This means that our new patch is even more aggressive
about clearing window.name. According to the following comment, this is
OK:
> https://bugzilla.mozilla.org/show_bug.cgi?id=444222#c71
> But there is a chance that we will introduce compatibility issues with
some web sites who use (abuse?) window.name to pass info across domains.
Opinions?
How hard would it be to have the current behavior implemented? Especially
given all the other things that still need to be done until Oct 31? If
that sounds like too much work I think cleaning up the current approach
and shipping it in the alpha series for a while at least would be fine.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16620#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs