[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #4286 [EFF-HTTPS Everywhere]: We cannot detect JavaScript redirection loops

#4286: We cannot detect JavaScript redirection loops
----------------------------------+-----------------------------------------
 Reporter:  pde                   |          Owner:  pde
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:     
Component:  EFF-HTTPS Everywhere  |        Version:     
 Keywords:                        |         Parent:     
   Points:                        |   Actualpoints:     
----------------------------------+-----------------------------------------

Comment(by mikeperry):

 Hrmmm. When I tried to find a way to recognize JS redirects way back in
 the Firefox 2.x days, I failed. In fact, iirc, it wasn't even possible to
 differentiate JS redirects from the user typing in to the URL bar, aside
 from having a referer present as a side channel hint.. :/

 I am interested in this though. Having a solution to detect JS redirects
 could help me improve url origin isolation in TBB as well. Unfortunately,
 I'm rather short of spare dev cycles at the moment..

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4286#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs