[tor-commits] [Git][tpo/applications/tor-browser][tor-browser-102.11.0esr-12.5-1] fixup! Bug 23247: Communicating security expectations for .onion

["ma1 \(@ma1\) via tor-commits" <tor-commits@xxxxxxxxxxxxxxxxxxxx>]

Title: GitLab

ma1 pushed to branch tor-browser-102.11.0esr-12.5-1 at The Tor Project / Applications / Tor Browser

Commits:

• dbec6cf6
  by cypherpunks1 at 2023-05-24T09:21:07-08:00

  fixup! Bug 23247: Communicating security expectations for .onion
  
  Bug 41785: Show http onion resources as secure in network monitor
  

1 changed file:

• devtools/shared/webconsole/network-helper.js

Changes:

devtools/shared/webconsole/network-helper.js

---

...	...	@@ -600,6 +600,9 @@ var NetworkHelper = {
600	600
601	601	// The request did not contain any security info.
602	602	if (!securityInfo) {
	603	+ if (httpActivity.hostname && httpActivity.hostname.endsWith(".onion")) {
	604	+ info.state = "secure";
	605	+ }
603	606	return info;
604	607	}
605	608
...	...	@@ -651,7 +654,11 @@ var NetworkHelper = {
651	654	// schemes other than https and wss are subject to
652	655	// downgrade/etc at the scheme level and should always be
653	656	// considered insecure
654		- info.state = "insecure";
	657	+ if (httpActivity.hostname && httpActivity.hostname.endsWith(".onion")) {
	658	+ info.state = "secure";
	659	+ } else {
	660	+ info.state = "insecure";
	661	+ }
655	662	} else if (state & wpl.STATE_IS_SECURE) {
656	663	// The connection is secure if the scheme is sufficient
657	664	info.state = "secure";

—
View it on GitLab.
You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help

_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits