Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
Trac
Trac
  • Project overview
    • Project overview
    • Details
    • Activity
  • Issues 246
    • Issues 246
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Operations
    • Operations
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value Stream
  • Wiki
    • Wiki
  • Members
    • Members
  • Activity
  • Create a new issue
  • Issue Boards
Collapse sidebar

GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.

  • Legacy
  • TracTrac
  • Issues
  • #22320

Closed (moved)
Open
Opened May 21, 2017 by Trac@tracbot

Referrer not hidden when comming from a .onion address

In TorBroswer 7.0a4, when leaving a .onion page for a clearnet page, the .onion address is sent as referrer.

This should not be the case and has originally been disabled with this commit and appears to have been uplifted to Firefox since. The network.http.referer.hideOnionSource preference is set to true but seems to have no effect.

Steps to reproduce:

  1. Go to duckduckgo's onion page
  2. enter any search term
  3. click on one of the result
  4. open the inspector observe the .onion referrer being send to the target page

Trac:
Username: pege

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: legacy/trac#22320