[tor-bugs] #31206 [Applications/Tor Browser]: http://ip-check.info detects browser window size with JS disabled

[Tor Bug Tracker & Wiki]

#31206: http://ip-check.info detects browser window size with JS disabled
--------------------------------------+--------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  reopened
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Critical                  |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cypherpunks):

 Replying to [comment:9 cypherpunks]:
 > > Breaks a lot of sites
 >
 > So does disabling JS but when anonymity is top priority usability backs
 off. Having it as an option in "Safest" security level would fit.
 JS is enabled by default and the security slider is, well, a "security"
 slider, the stuff that is disabled depends (among other things) on the
 number of CVEs that impact a certain thing, no such procedure may exist
 for the `@media` CSS component, but yes it does exist for the JS
 interpreter.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31206#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online