#10941: Secure messaging window
---------------------------+--------------------------
Reporter: sukhbir | Owner: sukhbir
Type: task | Status: assigned
Priority: Medium | Milestone:
Component: Tor Messenger | Version:
Severity: Normal | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Sponsor: |
---------------------------+--------------------------
Comment (by mikeperry):
Oh, my comments there simply were that it would be strictly better if we
knew the message content window had scripts disabled fully, rather than
(or actually, in addition to) being XSS filtered.
I know there was some contention with the instantbird team over this, as
they felt this would negatively impact UI, so my thought was that we could
have a security slider here, too. So for example, look at all of the stuff
that Coy.im disables: https://coy.im/about/. Rather than killing all of
that up-front (which will negatively impact UX), it could be progressively
disabled as security level is increased.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10941#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
