Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • T Tor Browser
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 1,317
    • Issues 1,317
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 7
    • Merge requests 7
  • Deployments
    • Deployments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Wiki
    • Wiki
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • Applications
  • Tor Browser
  • Issues
  • #23686
Closed
Open
Created Sep 28, 2017 by Trac@tracbot

When "http://" is in front of a V3 link, Tor browser will search the text after "http://" on duckduckgo or any default search engine you use.

When "http://" is in front of a V3 link, Tor browser will search the entire link on duckduckgo, ​copy and paste the link below straight into the Tor browser URL field and click GO. If the user is trying to keep their hidden service secret, this bug will cause duckduckgo to see the unencrypted link, allowing attackers to easily find their hidden service if DuckDuckGo is compromised. http://ozmh2zkwx5cjuzopui64csb5ertcooi5vya6c2gm4e3vcvf2c2qvjiyd.onion

Tor Browser 7.5a5

Trac:
Username: Dbryrtfbcbhgf

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking