[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #29872 [Applications/Tor Browser]: Searching from about:tor cause a NoScript XSS warning popup

#29872: Searching from about:tor cause a NoScript XSS warning popup
--------------------------------------+-----------------------------------
 Reporter:  boklm                     |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  TorBrowserTeam201903      |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by ma1):

 OK, I can see it. It's when you use the search box inside the page, not
 the one(s) in the browser UI, which are exempt by the XSS filter fallback
 warning on every cross-site POST request I had to introduce for POST
 scanning being disabled due to
 https://bugzilla.mozilla.org/show_bug.cgi?id=1532530.
 I'm trying to add a further exception for about:tor, but the real solution
 would be the aforementioned Mozilla bug (which already has a patch
 attached) being fixed, of course.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29872#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs