[tor-bugs] #25672 [Applications/Tor Browser]: Debugger in delevoper tools is fetching website over catch-all circuit

[Tor Bug Tracker & Wiki]

#25672: Debugger in delevoper tools is fetching website over catch-all circuit
--------------------------------------+--------------------------
 Reporter:  gk                        |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-linkability           |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by sysrqb):

 Hmm, here's another one.

 {{{
 [04-11 00:10:07] Torbutton INFO: tor SOCKS:
 https://www.torproject.org/dist/torbrowser/7.5.3/torbrowser-install-7.5
 .3_en-US.exe via
                        --unknown--:71e69d27f4adff41fb754a6dc960dfeb
 [04-11 00:10:07] Torbutton INFO: controlPort >> 650 STREAM 60 NEW 0
 www.torproject.org:443 SOURCE_ADDR=127.0.0.1:46916 PURPOSE=USER
 [04-11 00:10:07] Torbutton INFO: controlPort >> 650 STREAM 60 SENTCONNECT
 36 www.torproject.org:443
 [04-11 00:10:08] Torbutton INFO: controlPort >> 650 STREAM 60 REMAP 36
 138.201.14.197:443 SOURCE=EXIT
 [04-11 00:10:08] Torbutton INFO: controlPort >> 650 STREAM 60 SUCCEEDED 36
 138.201.14.197:443
 [04-11 00:10:08] Torbutton INFO: tor SOCKS:
 https://dist.torproject.org/torbrowser/7.5.3/torbrowser-install-7.5.3_en-
 US.exe via
                        --unknown--:71e69d27f4adff41fb754a6dc960dfeb
 [04-11 00:10:08] Torbutton INFO: controlPort >> 650 STREAM 61 NEW 0
 dist.torproject.org:443 SOURCE_ADDR=127.0.0.1:46918 PURPOSE=USER
 [04-11 00:10:08] Torbutton INFO: controlPort >> 650 STREAM 61 SENTCONNECT
 36 dist.torproject.org:443
 [04-11 00:10:08] Torbutton INFO: controlPort >> 650 STREAM 61 REMAP 36
 38.229.72.17:443 SOURCE=EXIT
 [04-11 00:10:08] Torbutton INFO: controlPort >> 650 STREAM 61 SUCCEEDED 36
 38.229.72.17:443
 }}}
 ,
 If you go to any webpage and right-click on any link (<a href=) and select
 "Save Link As...", then a connection is established over the catch-all
 circuit. I'd expect this use the first-party-circuit.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25672#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online