[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #16300 [Tor Browser]: Make sure the BroadcastChannel API adheres to our URL bar domain isolation
#16300: Make sure the BroadcastChannel API adheres to our URL bar domain isolation
---------------------------------------+--------------------------
Reporter: gk | Owner: tbb-team
Type: task | Status: new
Priority: major | Milestone:
Component: Tor Browser | Version:
Keywords: ff38-esr, tbb-linkability | Actual Points:
Parent ID: | Points:
---------------------------------------+--------------------------
The BroadcastChannel API allows cross-site communication within the same
origin. We have a stronger notion of "same origin": the same URL bar
domain. Thus, we must restrain this API to make it adhere to our URL bar
isolation scheme.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16300>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs