[tor-talk] Hidden server path

Outlaw outlaw at omail.pro
Fri Jan 11 13:33:29 UTC 2013


> BUT. If your .onion server links to an outside page, includes an image,
> script-file, whatever, externally - the HTTP Referer will give away the URL
> to the other server if not properly sanitized by the client...
> 
> There is always room for misconfiguration ;-)
> 
>  - Lasse

Hi! Did I understand right: if a page has a link (or image), then with
clicking on that link I give the _whole_
http://somelonghashstring.onion/path/to/somewhere.html as referer? Or
just part of it - domain? Thanks!

-- 
Outlaw



More information about the tor-talk mailing list