Open Bug 1900648 Opened 8 months ago Updated 8 months ago

XSLT error messages can leak browser UI language

Categories

(Core :: XSLT, defect)

defect

Tracking

()

ASSIGNED

People

(Reporter: ma1, Assigned: manuel)

References

(Blocks 1 open bug)

Details

(Whiteboard: [tor 42288][fingerprinting])

Attachments

(1 file)

This is https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42288 in Tor Browser.

Actual browser UI locale can be inferred by examining the error message for a failed XSLT.

POC: https://people.torproject.org/~ma1/pbugs/42288/poc/

Severity: -- → S3
Component: DOM: Core & HTML → XSLT
Assignee: nobody → manuel
Status: NEW → ASSIGNED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: