Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Copying image from context menu should copy ONLY data URI and not URL or meta data #3

Open
GirkovArpa opened this issue Apr 20, 2020 · 0 comments

Comments

@GirkovArpa
Copy link

I got rejected as spam twice from reporting this on the official tracker website.

If you right-click and copy an image inside Tor, the URL of the image, along with its metadata, is copied to the clipboard instead of just its data uri.

You can prove this by right-clicking an image inside Tor, clicking Copy Image, opening a file with a div like this in Brave, and pasting the image into it:

<div contenteditable=true></div>

The image will be pasted inside the div, and if you inspect the element you will see something like this:

<img src="https://www.myfavefurrysite.com/--qZ5f9m4x10/Ul7qbQ6lC0I/AAAAAAAACrg/cnUmVOi0wNg/s1600/IMG_TAILS_6721.CR2.jpg" alt="https://www.myfavefurrysite.com/--qZ5f9m4x10/Ul7qbQ6lC0I/AAAAAAAACrg/cnUmVOi0wNg/s1600/IMG_TAILS_6721.CR2.jpg" class="shrinkToFit" width="1337" height="666">

This implies that by pasting the image into a non-Tor browser, the browser you pasted it into downloaded the image from the same URL you visited "privately" while in Tor.

This is very unexpected since there is a separate Copy Image Location option, and most people clicking Copy Image expect to copy the image, NOT its metadata, and certainly not its URL.

Copying the URL largely defeats the purpose of using Tor in the first place, plus any program with access to the clipboard can now see the URL as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant