[tbb-bugs] #15794 [Tor Browser]: crash on some SVG pages when svg.in-content.enabled=false

[Tor Bug Tracker & Wiki]

#15794: crash on some SVG pages when svg.in-content.enabled=false
-------------------------+-------------------------------------------------
     Reporter:  mcs      |      Owner:  tbb-team
         Type:  defect   |     Status:  closed
     Priority:           |  Milestone:
  critical               |    Version:
    Component:  Tor      |   Keywords:  tbb-4.5-alpha,
  Browser                |  TorBrowserTeam201504R
   Resolution:  fixed    |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------
Changes (by mikeperry):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 Ok, this looks good as a fix. I merged it and Georg and I started a
 rebuild.

 However, this issue makes me a bit more nervous about the namespace-based
 solution in general. Can we be reasonably sure that there are no other
 potential issues with this namespace change either allowing scripts to
 execute when they shouldn't, or allowing strange codepaths?

 If not, we may want to create a pile of test cases for this type of stuff
 when we do the ff38-esr rebase and patch submission to Mozilla.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15794#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online