[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #27261 [Applications/Tor Browser]: Tor Browser 8.0a9/10 gets stuck in an endless reload cycle
#27261: Tor Browser 8.0a9/10 gets stuck in an endless reload cycle
-------------------------------------------------+-------------------------
Reporter: gk | Owner: tbb-
| team
Type: defect | Status: new
Priority: Very High | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: TorBrowserTeam201808, ff60-esr, | Actual Points:
noscript |
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------------------------------+-------------------------
Comment (by ma1):
Replying to [comment:13 gk]:
> So, my current theory is that there is an underlying bug that is causing
to break NoScript (and the HTTPS-E and potentially other (Web)Extensions)
in a way that the reload cycle happens.
This is a pretty good working theory: in facts, one of the thing NoScript
does to ensure other extensions don't interfere accidentally with the CSP
it injects in webRequest.onHeadersReceived in the parent process, is
checking whether scripts are actually blocked at a later stage (in the
child process), and if they aren't, it triggers a page reload after trying
its best to ensure NoScript has the final word on HTTP headers next time.
Therefore if something consistently messes with NoScript's ability to
block scripts, and especially strips off the CSP headers of a page in a
way that causes pages' JavaScript to bypass NoScript's restriction, that
would likely cause a reload loop.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27261#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs