[tbb-bugs] #21396 [Applications/Tor Browser]: Torbutton breaks Session Manager addon

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Feb 7 11:37:31 UTC 2017


#21396: Torbutton breaks Session Manager addon
-------------------------------------------------+-------------------------
 Reporter:  HolD                                 |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_information
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-6.5-regression,                  |  Actual Points:
  TorBrowserTeam201702, GeorgKoppen201702        |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by yawning):

 Replying to [comment:6 gk]:
 > Session Manager does not like it that
 `chrome://sessionmanager/locale/sessionmanager.dtd` and
 `chrome://sessionmanager/locale/options.dtd` are blocked by our fix for
 #8725. Things like `&toolbar.tooltip` need to be available for content
 after the first installation. HolD: does adding the toolbar buttons
 manually to the toolbar work for you?

 What's the origin URI when the requests make it to the content policy?  If
 this is one of the cases where `aRequestOrigin` can basically be anything,
 the only way to solve this would be to whitelist the relevant URIs.  Note
 that, doing so will make it trivial for sites to fingerprint if the addon
 is present or not (then again, people installing extra addons/plugins void
 the non-existent warranty in the first place).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21396#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list