IP address leak - use with care – Onion Browser Review

Caution: IP address leak on iOS 12.2 with Javascript turned on even if WebRTC is disabled. This is mentioned on the Onion Browser “home” page as an issue on iOS 12.2 and 11.x. Take heed if this is important to you. Yes, it’s possible (probably preferable) to run with Javascript completely disabled by enabling Strict content policy to avoid this problem, but then no website images are displayed. What’s up with that? To demonstrate the IP address leakage, set WebRTC to No and Content Policy to No XHR/etc. Go to browserleaks.com and hit the “IP Address” (lower-case ‘i’ in a circle) link. Does your IP address show in the WebRTC Leak Test ”Public IP Address” field? Note that the actual WebRTC Leak Test page on the site (eighth icon down) does not show an exposed IP address with the same settings.
Review by TheRealElbadoo on Onion Browser.