#18741: OCSP and favicon isolation is only partly working in ESR 45 -------------------------+-------------------------- Reporter: gk | Owner: tbb-team Type: defect | Status: new Priority: High | Milestone: Component: Tor Browser | Version: Severity: Major | Resolution: Keywords: ff45-esr | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: -------------------------+-------------------------- Description changed by gk:
Old description: > We might need a fixup patch for our OCSP and Favicon isolation in ESR45. > If one takes `https://dist.torproject.org` as an example URL I can see > things like > {{{ > [01-01 00:00] Torbutton INFO: tor SOCKS: > https://dist.torproject.org/favicon.ico via torproject.org:0 > [01-01 00:00:00] Torbutton INFO: tor SOCKS: > https://dist.torproject.org/favicon.ico via --NoFirstPartyHost-chrome- > browser.xul--:0 > }}} > and > {{{ > [01-01 00:00:00] Torbutton INFO: tor SOCKS: http://ocsp.digicert.com/ via > torproject.org:0 > [01-01 00:00:0] Torbutton INFO: tor SOCKS: http://ocsp.digicert.com/ via > --nofirstpartyhost-chrome-browser.xul--:0 > }}} > in the log output. Note the differing `nofirstpartyhost-chrome- > browser.xul` and `Nofirstpartyhost-chrome-browser.xul`. New description: We might need a fixup patch for our OCSP and favicon isolation in ESR45. If one takes `https://dist.torproject.org` as an example URL I can see things like {{{ [01-01 00:00:00] Torbutton INFO: tor SOCKS: https://dist.torproject.org/favicon.ico via torproject.org:0 [01-01 00:00:00] Torbutton INFO: tor SOCKS: https://dist.torproject.org/favicon.ico via --NoFirstPartyHost-chrome- browser.xul--:0 }}} and {{{ [01-01 00:00:00] Torbutton INFO: tor SOCKS: http://ocsp.digicert.com/ via torproject.org:0 [01-01 00:00:0=] Torbutton INFO: tor SOCKS: http://ocsp.digicert.com/ via --nofirstpartyhost-chrome-browser.xul--:0 }}} in the log output. Note the differing `nofirstpartyhost-chrome- browser.xul` and `Nofirstpartyhost-chrome-browser.xul`. -- -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18741#comment:1> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs