[tor-bugs] #10593 [Firefox Patch Issues]: Clipboard data might be leaking

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jan 13 23:45:50 UTC 2014


#10593: Clipboard data might be leaking
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  mikeperry
         Type:  defect               |     Status:  new
     Priority:  normal               |  Milestone:
    Component:  Firefox Patch        |    Version:
  Issues                             |   Keywords:  tbb-linkability,
   Resolution:                       |  tbb-3.0
Actual Points:                       |  Parent ID:
       Points:                       |
-------------------------------------+-------------------------------------

Comment (by mikeperry):

 What is the scope of this? In #10285, you said cross-origin. Does that
 just mean 3rd parties on the current tab? Or all tabs?

 In either case, this seems like something Mozilla should be aware of. If I
 am writing some kind of webapp that sources third party content in iframes
 (like ads), it seems bad to have those third party frames observing *any*
 events outside their origin. In fact, that is usually forbidden.

 What about pasting things into the url bar or other chrome areas? Is that
 still visible to content? That would be even worse.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10593#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list