Tor Browser leaks locale in HTTP_ACCEPT Headers
Originally created by @anonym on #16029 (Redmine)
Using Panopticlick, we get this HTTP_ACCEPT Headers using the default US English locale:
text/html, */*; q=0.01 gzip, deflate, br en-US,en;q=0.5
but this with French:
text/html, */*; q=0.01 gzip, deflate, br fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3
In the non-English Tor Browsers when used outside of Tails you are asked about whether you want to leak this (for a localized web experience). But I guess we still want to spoof as US English for all?
Feature Branch: bugfix/16029-fix-spoof-english+force-all-tests
Related issues
- Blocks tails/accounting#15506
Edited by anonym