[tbb-bugs] #34366 [Applications/Tor Browser]: The onion-location mechanism does not redirect to full URL
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Jun 9 19:16:57 UTC 2020
#34366: The onion-location mechanism does not redirect to full URL
--------------------------------------+--------------------------
Reporter: gk | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-9.5-issues | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+--------------------------
Comment (by mcs):
For what it's worth, it would be more consistent with HTTP's `Location`
header to preserve fragment identifiers. From
https://tools.ietf.org/html/rfc7231#section-7.1.2:
If the Location value provided in a 3xx (Redirection) response does
not have a fragment component, a user agent MUST process the
redirection as if the value inherits the fragment component of the
URI reference used to generate the request target (i.e., the
redirection inherits the original reference's fragment, if any).
The RFC also include some examples. I don't think reusing the fragment
component would be harmful in too many cases and we could leave it to the
website maintainer to watch out for such problems.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/34366#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list