Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#29893 - [firefox] Old Gecko version in useragent
Attached to Project:
Arch Linux
Opened by Old User New ID (u2012) - Monday, 14 May 2012, 22:05 GMT
Last edited by Evangelos Foutras (foutrelis) - Monday, 14 May 2012, 22:40 GMT
Opened by Old User New ID (u2012) - Monday, 14 May 2012, 22:05 GMT
Last edited by Evangelos Foutras (foutrelis) - Monday, 14 May 2012, 22:40 GMT
|
DetailsDescription:
Firefox(12) has "Gecko/20100101" in its useragent. This is just wrong. xul(the package)-dependent browsers (e.g. conkeror) have proper "Gecko/20120426". I doubt that firefox 12 is actually built against this old Gecko version! This bug has big security implications as It makes it trivial to detect Arch users and makes it way easier to profile them. That's why I almost flagged this bug as critical. Additional info: * package version(s) firefox 12.0-2 Steps to reproduce: % grep -ra 2010 /usr/lib/firefox/ /usr/lib/firefox/libxul.so:network.http.general.useragent.rv:12.020100101http-startuphttp-startup-category ()<>@,;:\"/[]?={}nsHttpHandler::NewChannel You can also visit about:config , or check webserver logs , or visit useragentstring.com to confirm. |
This task depends upon
Closed by Evangelos Foutras (foutrelis)
Monday, 14 May 2012, 22:40 GMT
Reason for closing: Not a bug
Additional comments about closing: Normal and documented behavior.
Monday, 14 May 2012, 22:40 GMT
Reason for closing: Not a bug
Additional comments about closing: Normal and documented behavior.
"Gecko/geckotrail indicates that the browser is based on Gecko. geckotrail is
"20100101" in desktop release builds and does not represent the actual build
date of the browser."