[tor-bugs] #21746 [Applications/Tor Browser]: Have a closer eye on FlyWeb regarding proxy bypass

[Tor Bug Tracker & Wiki]

#21746: Have a closer eye on FlyWeb regarding proxy bypass
--+--
 Reporter:  gk|  Owner:  tbb-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:  ff52-esr
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:  Sponsor4  |
--+--
 As mentioned in #19048 FlyWeb (https://wiki.mozilla.org/FlyWeb and
 https://hacks.mozilla.org/2016/09/flyweb-pure-web-cross-device-
  interaction landed but it is behind a pref (`dom.flyweb.enabled` is set
 to `false`). Nevetherless, it is scary enough that we should make sure
 that it is really disabled.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #21746 [Applications/Tor Browser]: Have a closer eye on FlyWeb regarding proxy bypass

[Tor Bug Tracker & Wiki]

#21746: Have a closer eye on FlyWeb regarding proxy bypass
-+-
 Reporter:  gk   |  Owner:  tbb-
 |  team
 Type:  task | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ff52-esr, TorBrowserTeam201704,  |  Actual Points:
  tbb-7.0-must-alpha |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
 |  Sponsor4
-+-
Changes (by gk):

 * keywords:  ff52-esr => ff52-esr, TorBrowserTeam201704, tbb-7.0-must-alpha


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #21746 [Applications/Tor Browser]: Have a closer eye on FlyWeb regarding proxy bypass

[Tor Bug Tracker & Wiki]

#21746: Have a closer eye on FlyWeb regarding proxy bypass
-+-
 Reporter:  gk   |  Owner:  gk
 Type:  task | Status:
 |  assigned
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ff52-esr, TorBrowserTeam201705,  |  Actual Points:
  tbb-7.0-must, GeorgKoppen201705|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
 |  Sponsor4
-+-
Changes (by gk):

 * keywords:  ff52-esr, TorBrowserTeam201705, tbb-7.0-must => ff52-esr,
 TorBrowserTeam201705, tbb-7.0-must, GeorgKoppen201705
 * owner:  tbb-team => gk
 * status:  new => assigned


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #21746 [Applications/Tor Browser]: Have a closer eye on FlyWeb regarding proxy bypass

[Tor Bug Tracker & Wiki]

#21746: Have a closer eye on FlyWeb regarding proxy bypass
-+-
 Reporter:  gk   |  Owner:  gk
 Type:  task | Status:
 |  assigned
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ff52-esr, TorBrowserTeam201705,  |  Actual Points:
  tbb-7.0-must, GeorgKoppen201705|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
 |  Sponsor4
-+-
Description changed by gk:

Old description:

> As mentioned in #19048 FlyWeb (https://wiki.mozilla.org/FlyWeb and
> https://hacks.mozilla.org/2016/09/flyweb-pure-web-cross-device-
>  interaction landed but it is behind a pref (`dom.flyweb.enabled` is set
> to `false`). Nevetherless, it is scary enough that we should make sure
> that it is really disabled.

New description:

 As mentioned in #19048 FlyWeb (https://wiki.mozilla.org/FlyWeb and
 https://hacks.mozilla.org/2016/09/flyweb-pure-web-cross-device-interaction
 landed but it is behind a pref (`dom.flyweb.enabled` is set to `false`).
 Nevetherless, it is scary enough that we should make sure that it is
 really disabled.

--

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #21746 [Applications/Tor Browser]: Have a closer eye on FlyWeb regarding proxy bypass

[Tor Bug Tracker & Wiki]

#21746: Have a closer eye on FlyWeb regarding proxy bypass
-+-
 Reporter:  gk   |  Owner:  gk
 Type:  task | Status:  closed
 Priority:  High |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  ff52-esr, TorBrowserTeam201705,  |  Actual Points:
  tbb-7.0-must, GeorgKoppen201705|
Parent ID:   | Points:
 Reviewer:   |Sponsor:
 |  Sponsor4
-+-
Changes (by gk):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 I think we are good here. As said in the description we have a preference
 `dom.flyweb.enabled` which is set to `false` and looking through the
 source code all relevant parts adhere to it. Moreover, we already patched
 parts of FlyWeb related code it in #22165 and #21431. The new mDNS bits
 will get handled in #21861.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs