[Webkit-unassigned] [Bug 145542] New: [SOUP] Fails to use system proxy for DNS prefetch (information leak)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=145542

            Bug ID: 145542
           Summary: [SOUP] Fails to use system proxy for DNS prefetch
                    (information leak)
    Classification: Unclassified
           Product: WebKit
           Version: 528+ (Nightly build)
          Hardware: PC
                OS: All
            Status: NEW
          Severity: Major
          Priority: P2
         Component: WebCore Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: mcatanzaro at igalia.com

Complaint: "Apparently it seems that even when configured to use Tor as proxy, epiphany is so "smart" to send DNS queries directly to the wire, thus making any effort of Tor useless."

I found in DNSSoup.cpp:

// There is no current reliable way to know if we're behind a proxy at
// this level. We'll have to implement it in
// SoupSession/SoupProxyURIResolver/GProxyResolver
bool DNSResolveQueue::platformProxyIsEnabledInSystemPreferences()
{
    return false;
}

Note: This is not really exploitable per se and it's public in three downstream bugtrackers, so no point in trying to hide this -> public intentionally.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20150602/af59f942/attachment.html>