[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #15555 [Tor Browser]: view-source requests hit the network and are not isolated by URL bar domain

#15555: view-source requests hit the network and are not isolated by URL bar domain
-----------------------------+-----------------------------
     Reporter:  gk           |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  major        |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-linkability
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------------------

Comment (by gk):

 Replying to [comment:2 mcs]:
 > Replying to [ticket:15555 gk]:
 > > If I visit foo.com and look at its source (e.g. via Ctrl + U) another
 request is sent over the Tor network using "--NoFirstPartyHost-about-
 blank--" as SOCKS username. There are two things wrong with that behavior:
 1) view-source requests should not hit the network at all as this is not
 necessary.
 >
 > It seems like a lot of people agree with you, e.g., see this bug report:
 >
 > https://bugzilla.mozilla.org/show_bug.cgi?id=307089

 Looking at that bug again I wonder whether our cache isolation is actually
 the culprit here. There are a lot of people claiming we need all caches
 being disabled (which we don't have) in order to hit this problem.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15555#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs