[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #8951 [TorBrowserButton]: Get information about HS from within browser

#8951: Get information about HS from within browser
------------------------------+---------------------------------------------
 Reporter:  asn               |          Owner:  mikeperry
     Type:  defect            |         Status:  new      
 Priority:  normal            |      Milestone:           
Component:  TorBrowserButton  |        Version:           
 Keywords:                    |         Parent:           
   Points:                    |   Actualpoints:           
------------------------------+---------------------------------------------

Comment(by asn):

 noting this down so that it doesn't die into oblivion:
 {{{
 < mikeperry> hellais: no. we don't display anything from network sources
 in XUl currently.. my suggestion is to make a simple whitelist that only
 allows alphanumeric chars
 < mikeperry> hellais,asn: you probably should also look over
 https://www.defcon.org/images/defcon-17/dc-17-presentations/defcon-17
 -roberto_liverani-nick_freeman-abusing_firefox.pdf
 }}}

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8951#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs