[tor-talk] Self-deleting scripts in http connections

Rythyrix durindals917 at gmail.com
Sat Dec 3 04:47:11 UTC 2016


Greetings, all.

Recently, as I was browsing over to coppersurfer dot tk , I on a whim 
opened up Firefox's Element Inspector (right click -> Inspect Element 
(Q)) . Imagine my surprise when I find a script before the title tag. 
(see pastebin HNqsDsq2 for sourcedump).

Given that I have NoScript, I needed to test it. Restarting with addons 
disabled made the script not appear by the time I managed to open the 
Element Inspector again. Given that Tor is based on Firefox, the ability 
for a site to remotely delete a script from a client browser is 
worrying. Is anyone willing to double check that this happens to more 
than just myself?

A concerned netizen.

(I don't want to post hyperlinks, lack of accidental clicks that way.)



More information about the tor-talk mailing list