Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
Trac
Trac
  • Project overview
    • Project overview
    • Details
    • Activity
  • Issues 246
    • Issues 246
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Operations
    • Operations
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value Stream
  • Wiki
    • Wiki
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Create a new issue
  • Issue Boards

GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.

  • Legacy
  • TracTrac
  • Issues
  • #23686

Closed (moved)
Open
Opened Sep 28, 2017 by Trac@tracbot

When "http://" is in front of a V3 link, Tor browser will search the text after "http://" on duckduckgo or any default search engine you use.

When "http://" is in front of a V3 link, Tor browser will search the entire link on duckduckgo, ​copy and paste the link below straight into the Tor browser URL field and click GO. If the user is trying to keep their hidden service secret, this bug will cause duckduckgo to see the unencrypted link, allowing attackers to easily find their hidden service if DuckDuckGo is compromised. http://ozmh2zkwx5cjuzopui64csb5ertcooi5vya6c2gm4e3vcvf2c2qvjiyd.onion

Tor Browser 7.5a5

Trac:
Username: Dbryrtfbcbhgf

To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: legacy/trac#23686