Skip to content

Tor Browser leaks locale in HTTP_ACCEPT Headers

Using Panopticlick, we get this HTTP_ACCEPT Headers using the default US English locale:

text/html, */*; q=0.01 gzip, deflate, br en-US,en;q=0.5 

but this with French:

text/html, */*; q=0.01  gzip, deflate, br fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3

In the non-English Tor Browsers when used outside of Tails you are asked about whether you want to leak this (for a localized web experience). But I guess we still want to spoof as US English for all?

Feature Branch: bugfix/16029-fix-spoof-english+force-all-tests

Related issues

Original created by @anonym on 16029 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information