Opened 3 years ago

Last modified 3 years ago

#19726 needs_information defect

Tor permits web sites to maximize window

Reported by: oiafwej Owned by:
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

I can't pinpoint exactly which web site is doing it, but when I start the Tor browser with "restore tabs from last session" enabled, it will often maximize the window and then give a warning saying not to maximize the window. I'm not, and Tor browser should not allow web sites to do so either.

Reproduction steps:

  1. Enable "restore tabs from last session".
  2. Find a web site which maximizes the window using e.g. JavaScript and enable javascript permanently for that site.
  3. Close and reopen Tor Browser.

Expected results: Tor should prevent window maximize operations as it is a potential security risk.

Actual results: Tor allows window maximize operations.

Child Tickets

Change History (2)

comment:1 Changed 3 years ago by gk

Component: - Select a componentApplications/Tor Browser
Status: newneeds_information

Do you have an example site that is doing that? I did not found one so far.

comment:2 Changed 3 years ago by oiafwej

It's a bit weird, because it doesn't happen every time but one of anilinkz.tv or manga-zone.org does it I believe.

Note: See TracTickets for help on using tickets.