nanog mailing list archives

Re: Mozilla performing pdf.js DNS queries?


From: Seth Mos <seth.mos () dds nl>
Date: Thu, 13 Nov 2014 15:27:50 +0100

David Hofstee schreef op 13-11-2014 14:39:
Pdf is quite a standard. One might wonder what it cannot do. One could call it evil. 

http://superuser.com/questions/368486/link-to-image-within-pdf-and-have-the-image-displayed 

Ah yes, a image within a PDF could definitely do this I suppose. I just
thought it odd that the browser would leak this out.

dnsmasq[3151]: query[A] pdf.js from 10.6.24.11
dnsmasq[3151]: query[AAAA] pdf.js from 10.6.24.11
dnsmasq[3151]: query[A] pdf.js from 10.6.24.11
dnsmasq[3151]: query[AAAA] pdf.js from 10.6.24.11

This could become a whole can of worms if a .js TLD ever makes it to the
internet and registers this domain name.

We see this from Ubuntu terminals running Mozilla Firefox 33.0

Best regards,

Seth




David Hofstee

Deliverability Management
MailPlus B.V. Netherlands (ESP)


-----Oorspronkelijk bericht-----
Van: NANOG [mailto:nanog-bounces () nanog org] Namens Seth Mos
Verzonden: Thursday, November 13, 2014 2:26 PM
Aan: NANOG list
Onderwerp: Mozilla performing pdf.js DNS queries?

Hi,

Whilst rummaging through some DNS (dnsmasq) logs I've noticed quite a decent amount of queries for pdf.js from what 
appear to be mozilla browsers.

Seems rather odd that it is performing DNS queries for a internal PDF viewer.

Has anyone else come across these lookups?

Kind regards,

Seth




Current thread: