[tbb-bugs] #15794 [Tor Browser]: crash on some SVG pages when svg.in-content.enabled=false

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Apr 25 00:13:24 UTC 2015

#15794: crash on some SVG pages when svg.in-content.enabled=false
     Reporter:  mcs      |      Owner:  tbb-team
         Type:  defect   |     Status:  closed
     Priority:           |  Milestone:
  critical               |    Version:
    Component:  Tor      |   Keywords:  tbb-4.5-alpha,
  Browser                |  TorBrowserTeam201504R
   Resolution:  fixed    |  Parent ID:
Actual Points:           |
       Points:           |
Changes (by mikeperry):

 * status:  needs_review => closed
 * resolution:   => fixed


 Ok, this looks good as a fix. I merged it and Georg and I started a

 However, this issue makes me a bit more nervous about the namespace-based
 solution in general. Can we be reasonably sure that there are no other
 potential issues with this namespace change either allowing scripts to
 execute when they shouldn't, or allowing strange codepaths?

 If not, we may want to create a pile of test cases for this type of stuff
 when we do the ff38-esr rebase and patch submission to Mozilla.

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15794#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tbb-bugs mailing list