Have a closer eye on FlyWeb regarding proxy bypass

As mentioned in #19048 (moved) FlyWeb (https://wiki.mozilla.org/FlyWeb and https://hacks.mozilla.org/2016/09/flyweb-pure-web-cross-device-interaction landed but it is behind a pref (dom.flyweb.enabled is set to false). Nevetherless, it is scary enough that we should make sure that it is really disabled.

added GeorgKoppen201705 TorBrowserTeam201705 component::applications/tor browser ff52-esr owner::gk priority::high resolution::fixed severity::normal sponsor::4 status::closed tbb-7.0-must type::task labels

Trac:
Keywords: N/A deleted, tbb-7.0-must-alpha, TorBrowserTeam201704 added

Moving the investigation tickets to higher priority.

Trac:
Priority: Medium to High

Moving our tickets to May 2017.

Trac:
Keywords: TorBrowserTeam201704 deleted, TorBrowserTeam201705 added

We are beyond the alpha testing. Moving tickets for tbb-7.0-must.

Trac:
Keywords: tbb-7.0-must-alpha deleted, tbb-7.0-must added

Trac:
Owner: tbb-team to gk
Status: new to assigned
Keywords: N/A deleted, GeorgKoppen201705 added

Trac:
Description: As mentioned in #19048 (moved) FlyWeb (https://wiki.mozilla.org/FlyWeb and https://hacks.mozilla.org/2016/09/flyweb-pure-web-cross-device- interaction landed but it is behind a pref (dom.flyweb.enabled is set to false). Nevetherless, it is scary enough that we should make sure that it is really disabled.

to

As mentioned in #19048 (moved) FlyWeb (https://wiki.mozilla.org/FlyWeb and https://hacks.mozilla.org/2016/09/flyweb-pure-web-cross-device-interaction landed but it is behind a pref (dom.flyweb.enabled is set to false). Nevetherless, it is scary enough that we should make sure that it is really disabled.

I think we are good here. As said in the description we have a preference dom.flyweb.enabled which is set to false and looking through the source code all relevant parts adhere to it. Moreover, we already patched parts of FlyWeb related code it in #22165 (moved) and #21431 (moved). The new mDNS bits will get handled in #21861 (moved).

Trac:
Resolution: N/A to fixed
Status: assigned to closed

closed

moved to tpo/applications/tor-browser#21746 (closed)