[tor-bugs] #9881 [Firefox Patch Issues]: Javascript can create/resize windows to consume the entire desktop

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Mar 28 13:11:37 UTC 2014


#9881: Javascript can create/resize windows to consume the entire desktop
-------------------------------------+-------------------------------------
     Reporter:  mikeperry            |      Owner:  mikeperry
         Type:  defect               |     Status:  new
     Priority:  major                |  Milestone:
    Component:  Firefox Patch        |    Version:
  Issues                             |   Keywords:  tbb-fingerprinting,
   Resolution:                       |  tbb-testcase
Actual Points:                       |  Parent ID:
       Points:                       |
-------------------------------------+-------------------------------------

Comment (by cypherpunks):

 What platforms limiting maximum window size? I know Windows since XP
 limiting window size, but allowing to bypass restrictions with some
 tricks.
 If window size limits then no fingerprinting can be done, attacker will
 request over9000 window and will get it.

 Mozilla broken limits for windows even, it happened by fix for
 https://bugzilla.mozilla.org/show_bug.cgi?id=783333
 It's already in current releases and will be in next ESR. Not sure if they
 wanted that, but it is.

 What do you think?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9881#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list