[tbb-bugs] #33878 [Applications/Tor Browser]: Make URL DuckDuckGo search use POST method

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Apr 15 12:28:42 UTC 2020


#33878: Make URL DuckDuckGo search use POST method
--------------------------------------+-----------------------------------
 Reporter:  kromek                    |          Owner:  tbb-team
     Type:  enhancement               |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by sysrqb):

 Replying to [comment:4 boklm]:
 > > Currently if you search DDG using the URL bar, it stores the query in
 the URL. In the resulting results page however, if you search directly
 with their search bar, it now uses the more secure POST method.
 >
 > I have exactly the opposite in my tor browser: search from URL bar is
 using POST requests, while search from the search box on duckduckgo.com is
 using GET requests.

 Tor Browser only has control over the initial query, but the behavior
 boklm describes is consistent with how Tor Browser should send DDG search
 queries: Tor Browser should send the query in a POST request, already.

 https://gitweb.torproject.org/tor-
 browser.git/tree/browser/components/search/extensions/ddg/manifest.json?h
 =tor-browser-68.7.0esr-9.5-1-build2

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33878#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list