[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #21793 [Applications/Tor Browser]: Keep an eye on the CustomElementRegistry API

#21793: Keep an eye on the CustomElementRegistry API
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  tbb-team
         Type:  task                 |     Status:  new
     Priority:  Medium               |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  ff52-esr, tbb-
     Severity:  Normal               |  linkability
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 Custom Elements (https://developer.mozilla.org/en-
 US/docs/Web/Web_Components/Custom_Elements) can get registered,
 manipulated and queried by web content. We should make sure there are no
 linkability risks are associated with that.

 For ESR 52 this seems to be still disabled by
 `dom.webcomponents.customelements.enabled = false`. We should check that,
 though.

 The tracking bug is https://bugzilla.mozilla.org/show_bug.cgi?id=889230.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21793>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs