[tor-bugs] #5857 [TorBrowserButton]: Redesign JS Hook injection

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Mon May 14 16:14:29 UTC 2012


#5857: Redesign JS Hook injection
------------------------------+---------------------------------------------
 Reporter:  mikeperry         |          Owner:  mikeperry
     Type:  enhancement       |         Status:  new      
 Priority:  major             |      Milestone:           
Component:  TorBrowserButton  |        Version:           
 Keywords:                    |         Parent:           
   Points:                    |   Actualpoints:           
------------------------------+---------------------------------------------
 Georg Koppen found a race condition in our Javascript hook application
 that allows the hooks to be bypassed. Right now, they only exist to
 project window.screen and associated resolution information, so we can
 probably just replace them with a patch (#5856).

 However, the technique is useful, and we might want to use it in the
 future as opposed to Firefox patches to tweak other APIs (#5293, #5666)...
 This ticket is to see if we can create a more reliable way of injecting js
 hooks that is more directly supported by the browser.

 Or, maybe we just want to patch Firefox for everything. The patch approach
 will help ensure stuff stays on Mozilla's radar.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5857>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list