[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #7851 [EFF-HTTPS Everywhere]: XHR requests don't load when rewritten by HTTPS Everywhere (was: Rulesets affecting only XHR requests may not appear in the context menu.) (was: Rulesets affecting only XHR requests may not appear in the context menu.)

#7851: XHR requests don't load when rewritten by HTTPS Everywhere (was: Rulesets
affecting only XHR requests may not appear in the context menu.)
----------------------------------+-----------------------------------------
 Reporter:  pde                   |          Owner:  pde
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:     
Component:  EFF-HTTPS Everywhere  |        Version:     
 Keywords:                        |         Parent:     
   Points:                        |   Actualpoints:     
----------------------------------+-----------------------------------------
Changes (by zyan):

  * priority:  minor => normal


Comment:

 It seems that HTTPS Everywhere, when it rewrites an XML HTTP request to
 HTTPS, prevents the xhr callback from executing (ex: AJAX-loaded comments
 don't show up on pages until the user disables the https everywhere rule
 for the URL that they're loading from). This is consistent with
 https://trac.torproject.org/projects/tor/ticket/9474 but is not specific
 to urls with redirect loops (since
 https://trac.torproject.org/projects/tor/ticket/7503 suffers from this bug
 as well).

 This doesn't seem to apply to XHR URLs that were HTTPS in the first place,
 even if there is an applicable HTTPS Everywhere rule.

 Ex:

 ===

 Got onChannelRedirect to !https://9gag.com/?id=aLK9jLM&c=10
 No window associated with request: !http://9gag.com/?id=aLK9jLM&c=10
 No window associated with request: !https://9gag.com/?id=aLK9jLM&c=10
 No applicable list rewriting !https://9gag.com/?id=aLK9jLM&c=10
 Processing !https://9gag.com/?id=aLK9jLM&c=10
 Potentially applicable rules for 9gag.com:
 Â 9gag


 (Doesn't load)

 ===

 No window associated with request:
 !https://fbstatic-a.akamaihd.net/rsrc.php/v2/yy/r/C4Xx6CJRVz2.js
 No applicable list rewriting
 !https://fbstatic-a.akamaihd.net/rsrc.php/v2/yy/r/C4Xx6CJRVz2.js
 Processing
 !https://fbstatic-a.akamaihd.net/rsrc.php/v2/yy/r/C4Xx6CJRVz2.js
 Potentially applicable rules for fbstatic-a.akamaihd.net:
 Â Akamai

 (Loads)

 ===

 I am not sure whether this behavior is directly due to the fact that XHR
 requests are not associated with a specific window.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7851#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs