[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #15703 [Tor Browser]: Isolate mediasource: URI to first party domain

#15703: Isolate mediasource: URI to first party domain
-----------------------------+---------------------------------------
     Reporter:  mikeperry    |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  ff38-esr, tbb-linkability
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+---------------------------------------

Comment (by gk):

 Replying to [comment:2 arthuredelstein]:
 > In #15502, to save time, we disabled `URL.createObjectURL(...)` in Web
 Workers. For FF38, we should try to rewrite this patch to  properly
 isolate blob URLs to first party domain in Web Workers rather than
 disabling them.

 I've created #16429 to remind us about this issue still being unresolved.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15703#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs