[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #10854 [Firefox Patch Issues]: Limit IPv4 addresses to dotted-decimal form (as per RFC3986)



#10854: Limit IPv4 addresses to dotted-decimal form (as per RFC3986)
--------------------------------------+-----------------------
     Reporter:  oc                    |      Owner:  mikeperry
         Type:  defect                |     Status:  new
     Priority:  normal                |  Milestone:
    Component:  Firefox Patch Issues  |    Version:
   Resolution:                        |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |
--------------------------------------+-----------------------

Comment (by oc):

 As a bonus, this would fix the ABE predicate "leak" mentioned in #10419.
 In other words, TBB could use NoScript to allow (non-Tor) access to
 localhost without opening the door to intrusive fingerprinting or
 accidental information leakage.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10854#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs