[tor-bugs] #5477 [EFF-HTTPS Everywhere]: HTTPS Everywhere sometimes causes iframes to behave strangely (take over their window?) (was: Critical security vulnerability is caused by HTTPS-Everywhere enabled)

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue Apr 17 06:16:39 UTC 2012


#5477: HTTPS Everywhere sometimes causes iframes to behave strangely (take over
their window?)
------------------------------------------------------+---------------------
 Reporter:  Drugoy                                    |          Owner:  pde
     Type:  defect                                    |         Status:  new
 Priority:  major                                     |      Milestone:     
Component:  EFF-HTTPS Everywhere                      |        Version:     
 Keywords:  address spoofing, critical vulnerability  |         Parent:     
   Points:                                            |   Actualpoints:     
------------------------------------------------------+---------------------
Changes (by pde):

  * priority:  critical => major


Comment:

 So I am ''tentatively ''downgrading and retitling this bug.  However I
 want to stress that if Drugoy or others can show a clearer proof-of-
 concept, or suggest patches for the underlying bug, we remain very
 interested in those.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5477#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list