Skip to content

GitLab

GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.

Open
Opened by Trac@tracbot

Tor permits web sites to maximize window

I can't pinpoint exactly which web site is doing it, but when I start the Tor browser with "restore tabs from last session" enabled, it will often maximize the window and then give a warning saying not to maximize the window. I'm not, and Tor browser should not allow web sites to do so either.

Reproduction steps:

  1. Enable "restore tabs from last session".
  2. Find a web site which maximizes the window using e.g. JavaScript and enable javascript permanently for that site.
  3. Close and reopen Tor Browser.

Expected results: Tor should prevent window maximize operations as it is a potential security risk.

Actual results: Tor allows window maximize operations.

Trac:
Username: oiafwej

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information