#30657: Tor Browser locale is leaked via title of link tag on non-html page
---------------------------------------+--------------------------
Reporter: gk | Owner: tbb-team
Type: defect | Status: new
Priority: High | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-fingerprinting-locale | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
---------------------------------------+--------------------------
Description changed by gk:
Old description:
> ryotak reported via our HackerOne bug bounty program that the Tor Browser
> locale is leaked via the title of link tag on 404 error page.
>
> For a test ryotak came up with see:
> https://people.torproject.org/~gk/tests/tor_plaintext_locale_leak.html.
New description:
ryotak reported via our HackerOne bug bounty program that the Tor Browser
locale is leaked via the title of the link tag on any non-html page.
For a test ryotak came up with see:
https://people.torproject.org/~gk/tests/tor_plaintext_locale_leak.html.
--
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30657#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
