Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  reopened
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by gk):

 Replying to [comment:10 pospeselr]:
 > Replying to [comment:9 gk]:
 > > That's due to #22692. I get the following in my terminal:
 > > {{{
 > > Message: Unix error 13 during operation stat on file image_name
 > > }}}
 > > Setting `security.sandbox.content.level` to anything less than `2` it
 "works". I wonder if #23970 would fix this issue as well.
 >
 > It does not (which isn't terribly surprising).  The patches in #23970
 are specifically about serializing over the relevant font information from
 the sandboxed Web Content process to foreground firefox process so that
 the print.print_via_parent option works correctly.  Prior to the changes
 there, the print_via_parent option 'worked' but no fonts would be in the
 final rendered pdf/ps file.
 >
 > The issue here is almost certainly a file permissions issue since if you
 explicitly set a path the sandbox process has access to with the
 screenshot command (ie {{{ screenshot /tmp/screenshot.png }}} the
 operation succeeds.  The generated screenshot file and path will need to
 be broker'd over to the foreground which has access to the user's file
 system.
 >
 > The reason why some pages (empty tab, about:support, etc) can be
 screenshot (or successfully print-to-file'd prior to the #23970 fix) is
 (presumably) because they are hosted in the firefox process, rather than
 the sandboxed Web Content process, which seems kind of off.  For instance,
 if the strings in the about:support page are not properly sanitized, I
 could imagine sandbox-escape where a malevolent extension exercising some
 exploit through a malicious string in the Name, Version or ID strings.

 Makes sense, thanks. So, the question boils down to why just specifying a
 filename without an absolute path is working in vanilla Firefox but not
 Tor Browser then I guess.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  reopened
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by pospeselr):

 Replying to [comment:9 gk]:
 > That's due to #22692. I get the following in my terminal:
 > {{{
 > Message: Unix error 13 during operation stat on file image_name
 > }}}
 > Setting `security.sandbox.content.level` to anything less than `2` it
 "works". I wonder if #23970 would fix this issue as well.

 It does not (which isn't terribly surprising).  The patches in #23970 are
 specifically about serializing over the relevant font information from the
 sandboxed Web Content process to foreground firefox process so that the
 print.print_via_parent option works correctly.  Prior to the changes
 there, the print_via_parent option 'worked' but no fonts would be in the
 final rendered pdf/ps file.

 The issue here is almost certainly a file permissions issue since if you
 explicitly set a path the sandbox process has access to with the
 screenshot command (ie {{{ screenshot /tmp/screenshot.png }}} the
 operation succeeds.  The generated screenshot file and path will need to
 be broker'd over to the foreground which has access to the user's file
 system.

 The reason why some pages (empty tab, about:support, etc) can be
 screenshot (or successfully print-to-file'd prior to the #23970 fix) is
 (presumably) because they are hosted in the firefox process, rather than
 the sandboxed Web Content process, which seems kind of off.  For instance,
 if the strings in the about:support page are not properly sanitized, I
 could imagine sandbox-escape where a malevolent extension exercising some
 exploit through a malicious string in the Name, Version or ID strings.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  reopened
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by gk):

 * cc: cypherpunks (removed)
 * cc: pospeselr (added)


Comment:

 That's due to #22692. I get the following in my terminal:
 {{{
 Message: Unix error 13 during operation stat on file image_name
 }}}
 Setting `security.sandbox.content.level` to anything less than `2` it
 "works". I wonder if #23970 would fix this issue as well.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  reopened
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by gk):

 * status:  closed => reopened
 * resolution:  worksforme =>


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:  worksforme
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+

Comment (by cypherpunks):

 Hi original poster here.
 What does "closed defect (worksforme)" mean: this is a one off anomaly and
 only impacts my copy of TorBrowser?
 Thanks.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  closed
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:  worksforme
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+
Changes (by cypherpunks):

 * cc: cypherpunks (added)
 * status:  new => closed
 * resolution:   => worksforme


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by cypherpunks):

 * status:  needs_information => new


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by cypherpunks):

 And there's more...
 if I open an empty tab it takes a screen shot!
 A plain white screen shot.
 Going back to the other tabs with content and the error returns.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by cypherpunks):

 As I was writing the previous comment I checked it and the issue occured.
 After I was finished I decided to try on Wikipedia ... just to be sure.
 This time I got a different error:
 "TypeError: this.target.tab is null"

 Haven't seen that before.

 As I am writing this I switched back to the Wikipedia tab for one more
 test and I got the usual error this time:
 ""unknownError"

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by cypherpunks):

 Just open Tor Browser and go to any site ,say, Wikipedia.
 In the Developer Toolbar (Shift+F2) at the bottom type in
 screenshot image_name
 hit enter

 Normally a screen shot is taken but now its simply says
 "unknownError"

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #24177 [Applications/Tor Browser]: screenshot command in Web Developer toolbar is broken in Tor Browser

[Tor Bug Tracker & Wiki]

#24177: screenshot command in Web Developer toolbar is broken in Tor Browser
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-usability |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by gk):

 * keywords:   => tbb-usability
 * owner:  (none) => tbb-team
 * status:  new => needs_information
 * component:  - Select a component => Applications/Tor Browser


Comment:

 Do you have steps to reproduce that?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs