Debugger in developer tools is fetching website over catch-all circuit
View options
- Truncate descriptions
Go to https://sorry.google.com/sorry/misc and you'll see the exit IP address of the circuit bound to the google.com domain. Now, open the delevoper tools (Ctrl + Shift + K) and select the debugger pane and you see that
- The page is fetched again (which is a Firefox bug)
- The catch-all-circuit is used as the debugger does not seem to understand the concept of first party isolation.
See: legacy/trac#15555 (moved) for a similar problem.
Found by Rbcafe and reported to HackerOne.
- Show labels
- Show closed items