Changes between Initial Version and Version 1 of Ticket #18101, comment 92


Ignore:
Timestamp:
Jul 31, 2019, 9:09:04 PM (2 months ago)
Author:
pospeselr
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #18101, comment 92

    initial v1  
    11Tested the patch on Windows 10 by attempting to upload the remote URI http://example.com/index.html to https://share.riseup.net.
    22
    3 On both current vanilla Tor Browser and one built with the patch, a DNS request is leaked after the user attempts to open the remote URI by clicking the 'open' button in the File Dialog. Then, there's a back and forth negotiation via HTTP requests (OPTIONS, PROPFIND). On the vanilla Tor Browser, after a successful negotiation, the remote URI is downloaded with via a HTTP GET request. The patched Tor Browser does not ultimately download the file (but it does do the DNS request and attempts the HTTP negotiation).
     3On both current vanilla Tor Browser and one built with the patch, a DNS request is leaked after the user attempts to open the remote URI by clicking the 'open' button in the File Dialog. Then, there's a back and forth negotiation via HTTP requests (OPTIONS, PROPFIND). On the vanilla Tor Browser, after a successful negotiation, the remote URI is downloaded via a HTTP GET request. The patched Tor Browser does not ultimately download the file (but it does do the DNS request and attempts the HTTP negotiation).
    44
    55The patch does not fix this issue on windows.