On 01/20/2014 20:06, TT Security wrote:

Maybe you'll be suprised but Firefox by default allow connections to loopback interfaces if there is no disabled rule in firewall settings. NoScript Add-On can solve the problem by ABE.

I have Tor Browser Bundle 3.5 and Firefox 24.2.0 from there. Just open some port on your computer(only for testing) for example local web-server and try with Firefox from Tor Browser Bundle this page: http://tortestprivacy.url.ph/ You will see :) (ABE must be turned off, as by default)

I just tried stock Firefox 26.0 version, and it doesn't allow loopback access (FreeBSD version). I don't have firewall. So it must be an issue with the earlier FF, or maybe with TBB modifications to it.
Chrome-31 is also free of this problem.

Yuri
--
tor-talk mailing list - [email protected]
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Reply via email to