Opened 4 years ago

Last modified 11 months ago

#10507 new defect

firefox 24.0 in tbb 3.5 is leaking referring page data

Reported by: unclejed613 Owned by: tbb-team
Priority: Very High Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-3.0, tbb-firefox-patch
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

i run a hidden service website, and occasionally check the apache log to see what content is popular. yesterday i saw something that never appeared before, referring page data. here is an example (onion address munged to protect referring page):

127.0.0.1 - - [28/Dec/2013:02:11:48 -0700] "GET /weblog/index.html HTTP/1.1" 200 5302 "http://mungetheoriginad.onion/index.php?cat&cid=5&sid=mungethis2userkeyblah0" "Mozilla 5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox 24.0"

at first i thought it was just somebody using a poorly configured browser, and not TBB... until i tried it myself, and my TBB 3.5 left referring page data as well

Child Tickets

Change History (6)

comment:1 Changed 4 years ago by arma

Keywords: tbb-3.0 added

comment:2 Changed 4 years ago by unclejed613

is there a way to fix this in firefox's about:config ?

comment:3 Changed 4 years ago by browserprivacy

Priority: majorcritical

For some users, this could be considered a very serious defect.

comment:4 Changed 3 years ago by erinn

Keywords: tbb-firefox-patch added

comment:5 Changed 3 years ago by erinn

Component: Firefox Patch IssuesTor Browser
Owner: changed from mikeperry to tbb-team

comment:6 Changed 11 months ago by elisebenine

Severity: Normal

Is this fixed already? I think I have noticed this when browsing http://buywebtrafficexperts.com/ recently.

Note: See TracTickets for help on using tickets.