Opened 12 months ago

Last modified 5 months ago

#25214 new defect

Canvas data extraction should be allowed when *local* pdf.js is invoked

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-8.0-issues, tbb-regression
Cc: mcs, brade Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

How to reproduce the issue:

(1) Go to the following URL: https://web.archive.org/web/20180211235741/https://research.torproject.org/techreports/tbb-forensic-analysis-2013-06-28.pdf

(2) Click on the "Toggle Sidebar" button, as in here:

https://web.archive.org/web/20180212001338if_/https://prod-cdn.sumo.mozilla.net/uploads/images/2017-10-06-11-30-23-a9c34c.png

(3) The thumbnails are empty, and in the browser console: Blocked https://web.archive.org/web/20180211235741if_/https://research.torproject.org/techreports/tbb-forensic-analysis-2013-06-28.pdf in page https://web.archive.org/web/20180211235741/https://research.torproject.org/techreports/tbb-forensic-analysis-2013-06-28.pdf from extracting canvas data. resource://pdf.js/web/viewer.js:3311.

Note that it's the local resource://pdf.js/web/viewer.js that is invoked and not some bundled pdf.js.

Child Tickets

Change History (6)

comment:1 Changed 12 months ago by tom

This maybe (hopefully) corresponds to https://bugzilla.mozilla.org/show_bug.cgi?id=1412961

In 60, my hope is that fixing this will fix that one also.

comment:2 Changed 12 months ago by cypherpunks

This can also be solved with #24521 but I don't see it being resolved in the near term.

comment:3 in reply to:  1 Changed 12 months ago by cypherpunks

Keywords: ff60-esr added

tom:

In 60, my hope is that fixing this will fix that one also.

comment:4 Changed 8 months ago by cypherpunks

Unfortunately the ticket linked by Tom was fixed on 61, backport maybe? (I'm encountering this bug with TB 8.0a9 FWIW)

comment:5 in reply to:  4 Changed 8 months ago by gk

Replying to cypherpunks:

Unfortunately the ticket linked by Tom was fixed on 61, backport maybe? (I'm encountering this bug with TB 8.0a9 FWIW)

Actually, we'd need the fix for https://bugzilla.mozilla.org/show_bug.cgi?id=1453916 as well. So, hrm.

comment:6 Changed 5 months ago by gk

Keywords: tbb-8.0-issues tbb-regression added; ff60-esr removed

We could test and backport the patches that landed in Firefox 61?

Note: See TracTickets for help on using tickets.