Regression: new window leaks outer window

TB12 series top, TB13 series bottom - test is opening a new window (target about:blank) (which = new tab thanks to our prefs) and measures as many times as possible, as fast as possible, until we get an error - it then analyses those measurements and records any changes

cc @ma1

added Fingerprinting FF115-esr labels

the [1] is the measurement iteration, so the protection failed in about 1 or 2 ms. I'm a little lost on the principle about:blank is supposed to have

@thorin:

I'm a little lost on the principle about:blank is supposed to have

If you mean the principal, is the same as the initiator / opener until the URL is changed to something else.

yeah, sorry typo - principal

also, IDK if this needs to be hidden, given it doesn't affect stable - up to you

IDK if this is relevant - https://bugzilla.mozilla.org/show_bug.cgi?id=1845940

edit: probably not, since the leak doesn't happen in Firefox (tested on nightly)

assigned to @ma1

added Next label

added 13.0 stable Bug labels

added Desktop label

I've tried to reproduce this pretty hard last week, but I still consistently get 1400x900 [outer]

1. Any non-default preference(s) I should set?
2. Did you try any more recent build?
3. Might it be a Windows-only issue?

Thank you!

13.0a3 seems to be fixed. I will retest some older alphas

13.0a1 leaks (as per pic) . note 13.0a2 jumped newwin size to 1400x900, so tested version in OP is definitely 13.0a1. note to self: state version tested in posts, you have gained -5 intelligence

13.0a2 seems fine as well. tested with and without bookmarks toolbar, and with a wrong newwin size (e.g. drag slightly taller/wider, so letterboxing was used) - but these have nothing to do with the issue (except to change the outer value if leaked)

any non-default preferences

nothing of note: I usually have bookmarks toolbar to always show in my test suite but that's about it

---

So seems it fixed itself as the result on something in 13.0a2 (would love to knwo the reason WHY it failed). We really need more robust detection of failures - I don't always click manual tests on TZP, just lucked on it TBH

closed

removed Next label

marked this issue as related to tor-browser-build#40965 (closed)

changed title from regression: new window leaks outer window to Regression: new window leaks outer window

@thorin @ma1 can we remove confidentiality since this has been closed?

oops

No worries, it happens to forget, and I'm just doing a general check on issues for the 13.0 changelogs .

made the issue visible to everyone