[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #5477 [EFF-HTTPS Everywhere]: HTTPS Everywhere sometimes causes iframes to behave strangely (take over their window?)

#5477: HTTPS Everywhere sometimes causes iframes to behave strangely (take over
their window?)
------------------------------------------------------+---------------------
 Reporter:  Drugoy                                    |          Owner:  pde
     Type:  defect                                    |         Status:  new
 Priority:  major                                     |      Milestone:     
Component:  EFF-HTTPS Everywhere                      |        Version:     
 Keywords:  address spoofing, critical vulnerability  |         Parent:     
   Points:                                            |   Actualpoints:     
------------------------------------------------------+---------------------

Comment(by pde):

 Re: exploitability, on one hand, the fact that I can briefly see Drugoy's
 page with the Apple HTTPS decoration, does make me quite nervous. On the
 other hand, I still can't get an alert with the apple.com cookies to fire.
 So it's possible that none of the code is ''actually ''executing in the
 real !https://apple.com origin.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5477#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs