[tbb-bugs] #22616 [Applications/Tor Browser]: On higher security levels videos can't be downloaded anymore with "Save Video As..."

[Tor Bug Tracker & Wiki]

#22616: On higher security levels videos can't be downloaded anymore with "Save
Video As..."
--------------------------------------------+------------------------------
 Reporter:  gk                              |          Owner:  tbb-team
     Type:  defect                          |         Status:
                                            |  needs_information
 Priority:  Medium                          |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  tbb-7.0-issues, tbb-regression  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+------------------------------

Comment (by cypherpunks):

 I had few minutes to look at it again, I can get it to fail now. These are
 the steps I followed in a fresh tor-browser:

 1. Set the security level to high.
 2. Open https://ftp.acc.umu.se/pub/debian-meetings/2016/debconf/
 3. Find 'Long_Term_Support_LTS.webm' and open it in a new tab. Right click
 on the blocked object and select 'Save Link As...'. Accept the warning and
 choose where to save it. You can close the tab now.
 4. Open 'about:downloads' and verify that it's downloading.
 5. Find 'Surviving_the_Next_23_Years_of_Free_Software.webm' and open it as
 well. Right click and select 'Save Link As..', choose where to save it.
 6. If the first file was still downloading the second download shouldn't
 have commenced.
 7. Cancel the first download and try step 5 again, it should work now.

 I then deleted the tor-browser_en-US folder and unpacked the tarball again
 for a fresh profile. That time I left the security level at low. When I
 repeated the steps, step 5 didn't display the save as dialog, I clicked a
 couple of times. I then tried to download it by right clicking on the link
 at ftp.acc.umu.se instead of right clicking on the blocked object, again
 nothing showed up. However, when I went to cancel the first download all
 the dialogs appeared. I can't remember if it was the external-app-helper
 or the save as dialogs.

 Something to note is that I chose both of those files on purpose because
 they exist in the same server: https://saimei.acc.umu.se/pub/debian-
 meetings/2016/debconf/{Long_Term_Support_LTS.webm,Surviving_the_Next_23_Years_of_Free_Software.webm}.
 When I tried other files that existed in different servers I could
 download them.

 And finally, when a download failed I checked the browser console and I
 got 'unsave CPOW usage forbidden' failures. That's as far as I got, good
 luck!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22616#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online