[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #7561 [Firefox Patch Issues]: FTP requests are cached and not isolated to the URL bar origin
#7561: FTP requests are cached and not isolated to the URL bar origin
----------------------------------+-----------------------------------------
Reporter: gk | Owner: mikeperry
Type: defect | Status: new
Priority: normal | Milestone:
Component: Firefox Patch Issues | Version:
Keywords: tbb-linkability | Parent:
Points: | Actualpoints:
----------------------------------+-----------------------------------------
Contents of FTP requests can get cached but are currently not isolated to
the URL bar origin which contradicts the goal of section 3.5.2 of the Tor
Browser design documentation. The relevant code is here:
https://mxr.mozilla.org/mozilla-
central/source/netwerk/protocol/ftp/nsFtpConnectionThread.cpp
There are two things to note:
1) This caching is working a bit differently than the familiar HTTP
caching. E.g. are there no E-Tags, no headers involved which makes a
scalable exploitation much harder (that's the only reason why I think the
prio is normal) IMO.
2) Furthermore, only directory listings can get cached, not "normal" files
like CSS or JS files loaded via FTP.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7561>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs