Debugger in developer tools is fetching website over catch-all circuit
Go to https://sorry.google.com/sorry/misc and you'll see the exit IP address of the circuit bound to the google.com domain. Now, open the delevoper tools (Ctrl + Shift + K) and select the debugger pane and you see that
- The page is fetched again (which is a Firefox bug)
- The catch-all-circuit is used as the debugger does not seem to understand the concept of first party isolation.
See: #15555 (moved) for a similar problem.
Found by Rbcafe and reported to HackerOne.