[tor-bugs] #3600 [TorBrowserButton]: Prevent redirects from transmitting+storing cookies+identifiers
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Tue Jun 19 20:03:21 UTC 2012
#3600: Prevent redirects from transmitting+storing cookies+identifiers
------------------------------+---------------------------------------------
Reporter: mikeperry | Owner: mikeperry
Type: defect | Status: new
Priority: major | Milestone: TorBrowserBundle 2.3.x-stable
Component: TorBrowserButton | Version:
Keywords: tbb-linkability | Parent:
Points: | Actualpoints:
------------------------------+---------------------------------------------
Comment(by mikeperry):
window.name is another vector for linking across automatic top-level
redirects. If we try to find a non-prompt-based solution, it will need to
be cleared for them, too. If we have a prompt, it might be OK to leave it,
to allow things like ancient federated login systems that abuse
window.name.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3600#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list