[tor-bugs] #31206 [Applications/Tor Browser]: http://ip-check.info detects browser window size with JS disabled

[Tor Bug Tracker & Wiki]

#31206: http://ip-check.info detects browser window size with JS disabled
--------------------------------------+--------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  reopened
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Critical                  |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cypherpunks):

 Replying to [comment:11 cypherpunks]:
 > There is no slider any more (UI-wise), just 3 options.
 >
 > > no such procedure may exist for the @media CSS component
 >
 > Why? If it is possible to block browser window size detection, it should
 be possible to make it an option. Or are you saying that what was made
 possible (someone wrote code about it) cannot be unmade or put into
 conditional logic?
 No, I meant that there are no CVEs related with some exploit that affects
 `@media` contrary to the dozen ones that affect the JS interpreter.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31206#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online