[tor-bugs] #3600 [TorBrowserButton]: Prevent redirects from transmitting+storing cookies+identifiers
    Tor Bug Tracker & Wiki 
    torproject-admin at torproject.org
       
    Tue Jun 19 20:03:21 UTC 2012
    
    
  
#3600: Prevent redirects from transmitting+storing cookies+identifiers
------------------------------+---------------------------------------------
 Reporter:  mikeperry         |          Owner:  mikeperry                    
     Type:  defect            |         Status:  new                          
 Priority:  major             |      Milestone:  TorBrowserBundle 2.3.x-stable
Component:  TorBrowserButton  |        Version:                               
 Keywords:  tbb-linkability   |         Parent:                               
   Points:                    |   Actualpoints:                               
------------------------------+---------------------------------------------
Comment(by mikeperry):
 window.name is another vector for linking across automatic top-level
 redirects. If we try to find a non-prompt-based solution, it will need to
 be cleared for them, too. If we have a prompt, it might be OK to leave it,
 to allow things like ancient federated login systems that abuse
 window.name.
-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3600#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
    
    
More information about the tor-bugs
mailing list