[tor-bugs] #5477 [EFF-HTTPS Everywhere]: Surprising DOM origins before HTTPS-E/NoScript redirects have completed

[Tor Bug Tracker & Wiki]

#5477: Surprising DOM origins before HTTPS-E/NoScript redirects have completed
------------------------------------------------------+---------------------
 Reporter:  Drugoy                                    |          Owner:  ma1           
     Type:  defect                                    |         Status:  needs_revision
 Priority:  major                                     |      Milestone:                
Component:  EFF-HTTPS Everywhere                      |        Version:                
 Keywords:  address spoofing, critical vulnerability  |         Parent:                
   Points:                                            |   Actualpoints:                
------------------------------------------------------+---------------------

Comment(by pde):

 Solved.  Thanks for your help Giorgio!  But we do have a suggested patch
 for you:

 !https://gitweb.torproject.org/https-
 everywhere.git/commitdiff/eb911ff0517cb497d9bca3ef72e2d66ac8be6738

 (but actually mike tells me that that component might not exist at all...)

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5477#comment:24>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online