[tor-bugs] #16998 [Applications/Tor Browser]: Make sure <link rel="preconnect"> adheres to URL bar domain isolation

Tue Jun 7 00:09:04 UTC 2016

#16998: Make sure <link rel="preconnect"> adheres to URL bar domain isolation
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:
     Type:  task                                 |  arthuredelstein
 Priority:  High                                 |         Status:
Component:  Applications/Tor Browser             |  needs_review
 Severity:  Normal                               |      Milestone:
 Keywords:  ff45-esr, tbb-linkability,           |        Version:
  tbb-6.0a5, TorBrowserTeam201606                |     Resolution:
Parent ID:                                       |  Actual Points:
 Reviewer:                                       |         Points:
                                                 |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by arthuredelstein):

 * status:  accepted => needs_review

Comment:

 Here's a new branch with three patches:

 ac5256ecabbaf0defb421c7598f23a4a1901302c reverts the temporary patch
 posted in comment:4
 a77e88a6309bec6be8eb93ad864b40c90497d962 isolates link rel=preconnect to
 first party
 f42889501e5321d3c3a5bb558a3b2932264b60f5 is a fixup for our first-party
 regression test that ensures that the preconnect connection has the
 correct first party

 I confirmed that reverting the second patch causes the test in the third
 patch to fail.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16998#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online