[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #1816 [Torbutton]: Create a prototype Content Script for Google Chrome

#1816: Create a prototype Content Script for Google Chrome
-----------------------+----------------------------------------------------
 Reporter:  mikeperry  |       Owner:  mikeperry
     Type:  task       |      Status:  new      
 Priority:  normal     |   Milestone:           
Component:  Torbutton  |     Version:           
 Keywords:             |      Parent:  #1770    
-----------------------+----------------------------------------------------

Comment(by mikeperry):

 Damn. Just a few minutes into this and it quickly becomes apparent that we
 cannot use Content Scripts to do what we want. My plan was to use content
 scripts in Google chrome to implement Torbutton's fingerprinting
 protection mechanisms, and to also work on a prototype general anti-
 fingerprinting addon to counter many of these issues and to light a fire
 under Mozilla to give us the APIs we need:
 https://wiki.mozilla.org/Fingerprinting

 The problem is that it appears pretty clear that at least currently, there
 is no way for content scripts to do anything other than DOM manipulation,
 which does *not* include objects that can be found off of window, such as
 window.Date, window.plugins, window.navigator, and window.screen - all of
 which are crucial to wrap to provide fingerprint resistance.

 The core problem is that these objects are sandboxed and shadowed by the
 Chrome "isolated worlds" concept:
 https://code.google.com/chrome/extensions/content_scripts.html#execution-
 environment

 This may mean that it is not possible to use content scripts to provide
 either Torbutton for Chrome protections, or to provide an anti-
 fingerprinting addon for Chrome, at least for the short term, or until new
 APIs are provided.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1816#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs