Opened 2 years ago

Last modified 14 months ago

#21793 assigned task

Keep an eye on the CustomElementRegistry API

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-linkability, ff60-esr
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Custom Elements (https://developer.mozilla.org/en-US/docs/Web/Web_Components/Custom_Elements) can get registered, manipulated and queried by web content. We should make sure there are no linkability risks are associated with that.

For ESR 52 this seems to be still disabled by dom.webcomponents.customelements.enabled = false. We should check that, though.

The tracking bug is https://bugzilla.mozilla.org/show_bug.cgi?id=889230.

Child Tickets

Change History (6)

comment:1 Changed 23 months ago by gk

Keywords: tbb-7.0-must added

More tickets for 7.0.

comment:2 Changed 23 months ago by gk

Keywords: tbb-7.0-must-alpha added; tbb-7.0-must removed

Getting more tickets on our alpha radar.

comment:3 Changed 23 months ago by gk

Priority: MediumHigh

Moving the investigation tickets to higher priority.

comment:4 Changed 23 months ago by arthuredelstein

Keywords: ff59-esr TorBrowserTeam201705R added; ff52-esr removed
Status: newneeds_review

I confirmed in TBB 7.0a3 that:

  • The pref "dom.webcomponents.customelements.enabled" is false.
  • Mozilla's live example indicates that Custom Elements are not supported.
  • In the JS console, window.customElements is undefined by default.

So I think we can postpone until ff59-esr.

comment:5 Changed 23 months ago by gk

Keywords: tbb-7.0-must-alpha TorBrowserTeam201705R removed
Priority: HighMedium
Status: needs_reviewassigned

comment:6 Changed 14 months ago by gk

Keywords: ff60-esr added; ff59-esr removed

Firefox 60 is the new ESR.

Note: See TracTickets for help on using tickets.