[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #9881 [Tor Browser]: Javascript can create/resize windows to consume the entire desktop

#9881: Javascript can create/resize windows to consume the entire desktop
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  mikeperry
  mikeperry              |     Status:  needs_review
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  tbb-fingerprinting, tbb-testcase,
  Browser                |  tbb-firefox-patch
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by gk):

 Replying to [comment:28 cypherpunks]:
 > Replying to [comment:26 gk]:
 > > Replying to [comment:22 cypherpunks]:
 > > > Set `browser.link.open_newwindow.restriction = 0` to open ''all''
 popups as tabs, ignoring any sizes. Together with
 `dom.disable_window_move_resize = true`, and (see #12609:) `full-screen-
 api.enabled = false`, that should squash 'em all.
 > >
 > > Giving the preference modifications belonging to this bug a quick shot
 I have found one machine where the test in comment:21 got not properly
 rounded window dimensions extracted.
 >
 > After setting the three prefs, did the test not open in a new ''tab''?
 But its size was still unexpected?

 It opened in a new tab but running the test in comment:21 trying to get
 some information out of the user showed at least on one testing machine
 that it worked. This means, that the current code responsible for rounding
 the window dimensions does not cope with the use-case you have in mind.

 > Replying to [comment:27 gk]:
 > > And I still think we should not prohibit moving popup windows.
 >
 > With `browser.link.open_newwindow.restriction = 0` diverting all popups
 to tabs,  `dom.disable_window_move_resize = true` would just stop remote
 moving and remote resizing of the user-opened windows.

 And this still works even though
 https://bugzilla.mozilla.org/show_bug.cgi?id=565541 got fixed long ago? Do
 you have a) example code showing this and b) how is this related to the
 bug at hand?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9881#comment:29>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs