[tbb-bugs] #30683 [Applications/Tor Browser]: Properties in dom/locales/$lang/chrome/ allow detecting user locale

[Tor Bug Tracker & Wiki]

#30683: Properties in dom/locales/$lang/chrome/ allow detecting user locale
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-fingerprinting-locale            |  Actual Points:
  TorBrowserTeam201906R                          |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by gk):

 Replying to [comment:2 acat]:
 > Here is a small patch for review: https://www.github.com/acatarineu/tor-
 browser/commit/30683. I checked htmlparser.properties just in case, but it
 seems only being used in `view-source:*` pages, which should not be
 accessible from web content.
 >
 > Do we want all these `tbb-fingerprinting-locale` fixed just for next
 esr68 or also for current esr60? I did the patch based on current alpha,
 but it should not be difficult to adapt for esr68.

 We need a patch for esr68 as well be it now or when we rebase, so having
 one version for esr68 (even though we start testing with an esr60 alpha)
 seems good. Ideally, while you are at it you'd file a ticket at bugzilla
 and get the patch upstreamed (and with some luck we can include it that
 way in the esr68 without needing to ship the patch ourselves).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30683#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online