[tor-bugs] #20685 [Applications/Tor Browser]: Make sure the first party isolation patches in ESR52 behave as they should

[Tor Bug Tracker & Wiki]

#20685: Make sure the first party isolation patches in ESR52 behave as they should
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  gk
     Type:  task                                 |         Status:  closed
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:  ff52-esr, TorBrowserTeam201705,      |  Actual Points:
  GeorgKoppen201705, tbb-7.0-must                |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by gk):

 Replying to [comment:17 cypherpunks]:
 > {{{
 > [05-23 14:38:23] Torbutton INFO: tor SOCKS:
 https://secure.informaction.com/download/betas/noscript-5.0.4rc3.xpi via
 >                        --unknown--:0e238a0217adfcd384c6d8f9ccf6bb95
 > }}}
 > is not so big problem, as it is behind a permission prompt and also ends
 with
 > {{{
 > 1495550309400 addons.xpi      WARN    Download of
 https://secure.informaction.com/download/betas/noscript-5.0.4rc3.xpi
 failed: [Exception... "Certificate issuer is not built-in."  nsresult:
 "0x80004004 (NS_ERROR_ABORT)"  location: "JS frame ::
 resource://gre/modules/CertUtils.jsm :: checkCert :: line 171"  data: no]
 Stack trace: checkCert()@resource://gre/modules/CertUtils.jsm:171 <
 onStopRequest()@resource://gre/modules/addons/XPIProvider.jsm:6547
 > }}}
 Extension updates go over the catch-all circuit, yes. This is okay for now
 I think.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20685#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online