Opened 10 years ago

Last modified 9 years ago

#1040 closed defect (Fixed)

Torbutton logs URLs to console.log

Reported by: downie Owned by:
Priority: High Milestone:
Component: Applications/Torbutton Version: Torbutton: 1.2.1
Severity: Keywords:
Cc: downie Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Torbutton 1.2.1 OSX10.3.9
Torbutton logs URLs to console.log in the event of a cross-state load attempt,

i.e. when you try to use a non-Tor tab with Tor enabled, or vice-versa.

This can happen quite easily, and is a privacy risk.

[Automatically added by flyspray2trac: Operating System: All]

Child Tickets

Attachments (1)

torbutton-bug1040.xpi (345.8 KB) - added by mikeperry 10 years ago.
Fix to scrub url logs if loglevel is 4 or above.

Download all attachments as: .zip

Change History (7)

comment:1 Changed 10 years ago by downie

e.g.
[07-22 14:55:17] Torbutton NOTE: Blocking cross state load of: https://bugs.torproject.org/flyspray/favicon.ico

comment:2 Changed 10 years ago by downie

Also log entries of this form:
[07-22 13:33:32] Torbutton NOTE: No browser found: http://bl120w.blu120.mail.live.com/mail/InboxLight.aspx

Changed 10 years ago by mikeperry

Attachment: torbutton-bug1040.xpi added

Fix to scrub url logs if loglevel is 4 or above.

comment:3 Changed 10 years ago by mikeperry

Can you try the attached XPI (based on r20190)? It should scrub the logs in these cases.

comment:4 Changed 10 years ago by downie

That seems to do the trick. No more 'cross state load' or 'browser not found' entries.

comment:5 Changed 10 years ago by mikeperry

flyspray2trac: bug closed.
Fixed in 1.2.2

comment:6 Changed 9 years ago by erinn

Version: 1.2.1Torbutton: 1.2.1

Updating the version from 1.2.1 to Torbutton: 1.2.1 so I can close #1743.

Note: See TracTickets for help on using tickets.