#26670: Cannot allow Canvas Image Extract in tbb 8.0a9
--------------------------------------------+------------------------------
Reporter: Ephraim | Owner: tbb-team
Type: defect | Status:
| needs_revision
Priority: High | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: ff60-esr, TorBrowserTeam201808 | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------------+------------------------------
Changes (by mcs):
* keywords: ff60-esr, TorBrowserTeam201808R => ff60-esr,
TorBrowserTeam201808
* status: needs_review => needs_revision
Comment:
Kathy and I reviewed the patch and did some testing. The only problem we
see is that by changing the "Must belong to some other window" check in
browser.js to be based on host, canvas prompts are opened in tabs that
happen to match the host even if no canvas activity takes place there. We
tested this by opening these pages in two browser windows:
https://people.torproject.org/~brade/tests/canvasTest.html
https://people.torproject.org/~brade/tests/
It would be good to fix this.
We also noticed that in Tor Browser the canvas permission status is not
displayed within the control center (page identity popup) like it is in
Firefox ESR60. That may be a separate issue though.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26670#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
