<isindex> leaks user locale

RESOLVED FIXED

Status

()

Core
HTML: Parser
P1
normal
RESOLVED FIXED
a year ago
9 months ago

People

(Reporter: arthuredelstein, Unassigned)

Tracking

(Blocks: 2 bugs)

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [fingerprinting][tor][fp:m3])

<isindex> generates a form with a label that is in the user's locale, thus leaking the locale to content.

In Tor Browser we have a patch that forces the label to be in English. Here is the patch:
https://torpat.ch/18194

We'd like to somehow to have this ability in mainline. Perhaps it could use English-only labels when privacy.resistFingerprinting is enabled.

This bug will be obsolete if bug 1266495 is fixed (isindex removed).

Comment 1

a year ago
bug 1266495 has lots of signals suggesting high likelihood of <isindex> removal.
Setting dependency field optimistically.
Depends on: 1266495

Updated

a year ago
Priority: -- → P2
Summary: <isindex> leaks user locale → <isindex> leaks user locale [tor 18914]
Whiteboard: [tor 18914][fingerprinting] → [fingerprinting]
Whiteboard: [fingerprinting] → [fingerprinting][tor]

Updated

a year ago
Summary: <isindex> leaks user locale [tor 18914] → <isindex> leaks user locale

Updated

a year ago
Priority: P2 → P1
Whiteboard: [fingerprinting][tor] → [fingerprinting][tor][fp:m1]

Updated

a year ago
Whiteboard: [fingerprinting][tor][fp:m1] → [fingerprinting][tor][fp:m3]

Comment 2

11 months ago
Note: bug 1266495 is now resolved fixed

Comment 3

10 months ago
According to comment 1 and comment 2. Resolve this bug.
Status: NEW → RESOLVED
Last Resolved: 10 months ago
Resolution: --- → INVALID
Status: RESOLVED → REOPENED
Resolution: INVALID → ---
FIXED, not INVALID.
Status: REOPENED → RESOLVED
Last Resolved: 10 months ago9 months ago
Resolution: --- → FIXED

Comment 5

9 months ago
(In reply to Henri Sivonen (:hsivonen) from comment #4)
> FIXED, not INVALID.

That makes sense. Thanks, Henri!
You need to log in before you can comment on or make changes to this bug.