[tor-bugs] #10467 [Firefox Patch Issues]: URLs are leaked to third party if they contain typos
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sun Dec 22 20:39:11 UTC 2013
#10467: URLs are leaked to third party if they contain typos
----------------------------------+---------------------------
Reporter: torar | Owner: mikeperry
Type: defect | Status: new
Priority: major | Milestone:
Component: Firefox Patch Issues | Version:
Keywords: | Actual Points:
Parent ID: | Points:
----------------------------------+---------------------------
Open a new tab in the Tor Browser and type "https;//www.wikipedia.org"
into the URL field (note the typo - a semicolon instead of a colon)
The Tor Browser jumps to startpage.com and searches it for
"https;//www.wikipedia.org"
Users may make typos - and I think there is no need to leak URLs with
typos to a third party (startpage). You should patch Firefox so that
anything typed into the URL field is never sent to a third party.
There is already a special field for startpage search in the navigation
toolbar - so there is no need to use the URL field for searches.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10467>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list