Opened 7 years ago

Last modified 6 days ago

#2817 new defect

Isolate Access to History navigation to Tor state preference does not work

Reported by: gk Owned by:
Priority: Very High Milestone:
Component: Applications/Torbutton Version:
Severity: Normal Keywords: MikePerryIteration20110417
Cc: g.koppen@… Actual Points:
Parent ID: Points: 2
Reviewer: Sponsor:

Description

Reading the call to test the new Torbutton version (and Mike's thinking about a kind of a bug bounty ;) ) I looked a bit around and found that 5.12 of the Torbutton design documentation is
violated.

To test this

1) Create a new profile with the latest alpha version of Torbutton.
2) Start Firefox (the problem occurs on FF 3.6.16 and 4.0) and activate Torbutton (if it is not already active).
3) Load e.g. http://ip-check.info
4) Load afterwards e.g. http://www.heise.de
5) Toggle the Tor button.
6) Press the back button and you'll see probably your real IP.

Reproducible: Probably always (on my machine an Ubuntu 10.04 it worked pretty well)

Expected results: Get the fancy dialog shown that moving back to the previous domain in a different Tor state is disallowed due to some Firefox bugs.

I tested it shortly once with Torbutton 1.2.5 and the expected dialog popped up.

Child Tickets

Change History (8)

comment:1 Changed 7 years ago by mikeperry

Points: 2
Priority: majorcritical

comment:2 Changed 7 years ago by mikeperry

Keywords: MikePerryIteration20110417 added

comment:3 Changed 7 years ago by mikeperry

gk - is there something specific one of the ip-check.info tests is supposed to be doing to unmask this? I can't seem to reproduce it on my Firefox 4 or Firefox 3.6 using TB 1.3.2-alpha.

comment:4 in reply to:  3 Changed 7 years ago by gk

Replying to mikeperry:

gk - is there something specific one of the ip-check.info tests is supposed to be doing to unmask this? I can't seem to reproduce it on my Firefox 4 or Firefox 3.6 using TB 1.3.2-alpha.

Nope. I just used it to get the IP shown. I tested it some seconds ago again and the mentioned problem occurred. Does a full blown debug output help you in this case?

comment:5 Changed 7 years ago by gk

Cc: g.koppen@… added

comment:6 Changed 6 years ago by mikeperry

Owner: mikeperry deleted
Status: newassigned

comment:7 Changed 12 days ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

comment:8 Changed 6 days ago by teor

Status: assignednew

Mark all tickets that are assigned to nobody as "new".

Note: See TracTickets for help on using tickets.