[tor-bugs] #8725 [Tor bundles/installation]: resource:// URIs leak information

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Apr 19 02:51:27 UTC 2013


#8725: resource:// URIs leak information
--------------------------------------+-------------------------------------
 Reporter:  holizz                    |          Owner:  erinn
     Type:  defect                    |         Status:  new  
 Priority:  normal                    |      Milestone:       
Component:  Tor bundles/installation  |        Version:       
 Keywords:                            |         Parent:       
   Points:                            |   Actualpoints:       
--------------------------------------+-------------------------------------
Changes (by saint):

 * cc: griffinboyce@… (added)


Comment:

 I was able to duplicate this this bug using [1]. Somehow preventing
 outside resource_uri access or pretending to be a non-firefox browser
 would obviate this quirk.

 [1] http://marcorondini.eu/research/resource_uri/

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8725#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list