Re: [tor-bugs] #24945 [Applications/Tor Browser]: Tor Browser design doc says it whitelists flash and gnash as plugins

[Tor Bug Tracker & Wiki]

#24945: Tor Browser design doc says it whitelists flash and gnash as plugins
--+--
 Reporter:  arma  |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ff60-esr  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by gk):

 * keywords:   => ff60-esr


Comment:

 This is so. Patches are welcome. We could consider that for our switch to
 ESR 60 I guess.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #24945 [Applications/Tor Browser]: Tor Browser design doc says it whitelists flash and gnash as plugins

[Tor Bug Tracker & Wiki]

#24945: Tor Browser design doc says it whitelists flash and gnash as plugins
--+--
 Reporter:  arma  |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+--
 The Tor Browser design doc says "we also patch the Firefox source code to
 prevent the load of any plugins except for Flash and Gnash. Even for Flash
 and Gnash, we also patch Firefox to prevent loading them into the address
 space until they are explicitly enabled."

 If this is so, we should probably change Tor Browser to just prevent all
 plugins, including Flash and Gnash.

 And if it is no longer so, we should fix the wrong statement in the design
 doc.

 Noticed in #10885.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs