[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #16300 [Tor Browser]: Make sure the BroadcastChannel API adheres to our URL bar domain isolation
#16300: Make sure the BroadcastChannel API adheres to our URL bar domain isolation
-------------------------+-------------------------------------------------
Reporter: gk | Owner: mcs
Type: task | Status: needs_review
Priority: major | Milestone:
Component: Tor | Version:
Browser | Keywords: ff38-esr, tbb-linkability, tbb-5
Resolution: | .0a-highrisk, TorBrowserTeam201506R,
Actual Points: | GeorgKoppen201506R
Points: | Parent ID:
-------------------------+-------------------------------------------------
Comment (by gk):
Replying to [comment:5 mcs]:
> We did disallow use of Broadcast Channels from SharedWorkers when
isolation is enabled because, as with blob URLs (#15502), there is no good
way to get at the document or channel.
This is okay and won't hurt especially as we disable SharedWorkers (we
have #15564 for the URL bar domain isolation). I am wondering though how
they determine the origin and whether we have to update our
ThirdPartyUtils for this then...
Might need another pair of eyes due to being a C++ patch but I am happy
with it, thanks!
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16300#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs