[tbb-bugs] #28147 [Applications/Tor Browser]: [meta] Improve Tor Browser Content Process Sandbox

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Oct 22 20:15:33 UTC 2018


#28147: [meta] Improve Tor Browser Content Process Sandbox
------------------------------------------+----------------------
     Reporter:  tom                       |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:  #28146
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 This ticket is specifically for tightening the content process sandbox.

 An attacker who achieves code execution inside the content process sandbox
 should not be able to achieve the most valuable goals (proxy
 bypass/persistent user identifier) inside the content process and should
 instead need a sandbox escape.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28147>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list