Hey folks. Just wondering what you guys are planning to do about this in
Orweb.

We're planning a release of Psiphon to disable JavaScript entirely (with no
option for it to be enabled) in our built-in browser on Android 3.0 through
4.3 (
https://bitbucket.org/psiphon/psiphon-circumvention-system/branch/CVE-2014-6041-mitigation
).

We haven't seen an authoritative list of affected Android versions, but in
our own testing we found that 2.2 and 2.3 aren't vulnerable.

It seems pretty harsh but we don't have any better ideas to prevent our
users from having an unsafe Internet experience.
_______________________________________________
Guardian-dev mailing list

Post: [email protected]
List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev

To Unsubscribe
        Send email to:  [email protected]
        Or visit: 
https://lists.mayfirst.org/mailman/options/guardian-dev/archive%40mail-archive.com

You are subscribed as: [email protected]

Reply via email to