A data leak allowed the hidden sites visited by users to be recorded. A patch was urgently deployed.
By opening a private Tor page, Brave users can have all their HTTP requests routed through the Tor node network, thus protecting their anonymity and browsing data. This feature also allows for a safe visit sites hidden in .ONION. At least that's what we thought.
Due to a bug in the browser, each request to a hidden site unfortunately caused a DNS request to the server configured for classic browsing, in other words, the DNS provider knows which hidden sites the user is viewing.