Bug#595375: xul-ext-torbutton: Leaks fingerprintable User-Agent when extensions.torbutton.spoof_english = false

[Jérémy Bobbio]

Hello mighty maintainers of Iceweasel,

Bellow lies a little question for you about the following bug:

On Sat, Sep 04, 2010 at 09:16:53PM +0200, Jérémy Bobbio wrote:
> On Fri, Sep 03, 2010 at 12:51:38AM +0200, intrigeri+debian at boum.org wrote:
> > When extensions.torbutton.spoof_english is set to true the reported
> > User-Agent is:
> > 
> >     "Mozilla/5.0 (Windows; U; Windows NT 6.1; chrome://global/locale/intl.properties; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3"
> > 
> > One can see the LANG placeholder is wrongly replaced with
> > "chrome://global/locale/intl.properties" instead of what is expected
> > i.e. the value of the "general.useragent.locale" preference setting.
> 
> I have been able to reproduce this behaviour by installing Torbutton
> on a dedicated profile by using the upstream XPI.
> 
> I will spend some time to investigate a little bit more before opening a
> ticket on upstream bugtracker.

I have read the following in #495381:

  Note: "chrome://global/locale/intl.properties" is a special value, the
  value will be pulled from the language pack.

Is this something Debian specific or does it apply to all Firefox
flavours?

Thanks,
-- 
Jérémy Bobbio                        .''`. 
lunar at debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20100904/7f863db3/attachment.pgp>