[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #15954 [Tor Browser]: Canvas permission and HTTP auth still use FQDN isolation

#15954: Canvas permission and HTTP auth still use FQDN isolation
-----------------------------------+--------------------------
 Reporter:  mikeperry              |          Owner:  tbb-team
     Type:  defect                 |         Status:  new
 Priority:  normal                 |      Milestone:
Component:  Tor Browser            |        Version:
 Keywords:  tbb-usability-website  |  Actual Points:
Parent ID:                         |         Points:
-----------------------------------+--------------------------
 In #15933, we relaxed our domain isolation to use TLD instead of FQDN,
 because FQDN isolation was breaking several sites. However, the HTTP auth
 and the canvas permissions were not using the same
 ThirdPartyUtil::GetFirstPartyHostForIsolation() API as everything else
 was.

 We should fix their behavior to use TLD isolation for consistency. I bet
 some sites will still break due to FQDN isolated HTTP auth in particular..

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15954>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs