[tor-bugs] #9881 [Firefox Patch Issues]: Javascript can create/resize windows to consume the entire desktop
Tor Bug Tracker & Wiki
blackhole at torproject.org
Fri Mar 28 13:11:37 UTC 2014
#9881: Javascript can create/resize windows to consume the entire desktop
-------------------------------------+-------------------------------------
Reporter: mikeperry | Owner: mikeperry
Type: defect | Status: new
Priority: major | Milestone:
Component: Firefox Patch | Version:
Issues | Keywords: tbb-fingerprinting,
Resolution: | tbb-testcase
Actual Points: | Parent ID:
Points: |
-------------------------------------+-------------------------------------
Comment (by cypherpunks):
What platforms limiting maximum window size? I know Windows since XP
limiting window size, but allowing to bypass restrictions with some
tricks.
If window size limits then no fingerprinting can be done, attacker will
request over9000 window and will get it.
Mozilla broken limits for windows even, it happened by fix for
https://bugzilla.mozilla.org/show_bug.cgi?id=783333
It's already in current releases and will be in next ESR. Not sure if they
wanted that, but it is.
What do you think?
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9881#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list