[tbb-bugs] #18782 [Tor Browser]: media tab in Page Info can bypass NoScript

Tue Apr 12 08:54:22 UTC 2016

#18782: media tab in Page Info can bypass NoScript
-------------------------+-----------------------------------
 Reporter:  cypherpunks  |          Owner:  tbb-team
     Type:  defect       |         Status:  needs_information
 Priority:  Very High    |      Milestone:
Component:  Tor Browser  |        Version:
 Severity:  Critical     |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+-----------------------------------

Comment (by gk):

 I still get the same results as in comment:3. Here is what I did:

 1) I downloaded the 5.5.4 64bit en-US bundle + signature from
 dist.torproject.org
 2) I checked the signature (it was okay)
 3) I started Tor Browser and set the Security Slider to "high"
 4) I visited visit machetona.neocities.org
 5) I opened Tools->Page Info->Media (tab)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18782#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online