[tbb-bugs] #16757 [Tor Browser]: Verify that new DOM properties are really disabled
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Aug 10 20:36:44 UTC 2015
#16757: Verify that new DOM properties are really disabled
-------------------------------------------------+-------------------------
Reporter: mikeperry | Owner: tbb-
Type: defect | team
Priority: normal | Status: new
Component: Tor Browser | Milestone:
Keywords: tbb-fingerprinting, | Version:
tbb-5.0-regression | Actual Points:
Parent ID: | Points:
-------------------------------------------------+-------------------------
In https://lists.torproject.org/pipermail/tor-qa/2015-August/000667.html,
boklm notes:
{{{
We have the following DOM objects that were not present in esr31:
onlanguagechange, mozRequestOverfill, back, forward, home, openDialog,
controllers, realFrameElement, MozSelfSupport, _content, Symbol,
WeakSet, HTMLPictureElement, AnimationEffect, PerformanceMeasure,
PluginCrashedEvent, MenuBoxObject, ScrollViewChangeEvent,
SelectionStateChangedEvent, DOMMatrixReadOnly, DOMMatrix,
PopupBoxObject, AnimationTimeline, PerformanceMark, DOMApplication,
IDBMutableFile, StereoPannerNode, CameraDetectedFace,
CameraStateChangeEvent, CSSCounterStyleRule, CameraRecorderVideoProfile,
CameraRecorderProfile, CameraRecorderProfiles, AnonymousContent,
NamedNodeMap, DOMApplicationsManager, ContentProcessMessageManager,
CameraConfigurationEvent, HTMLAllCollection, PromiseDebugging,
SubtleCrypto, Animation, CameraRecorderAudioProfile, RadioNodeList,
WindowRoot, CameraClosedEvent, CryptoKey, CameraFacesDetectedEvent,
MozSettingsTransactionEvent, IDBFileRequest, BroadcastChannel,
MessageChannel, AnimationPlayer
}}}
Some of those should have been disabled by various prefs we have set (in
particular PerformanceMeasure, PerformanceMark, and the IDB objects). We
should look into that. Hopefully they are just empty placeholders. Also,
the camera stuff should have been compiled out and also disabled via the
peerconnection prefs, I thought.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16757>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list