[tor-bugs] #4517 [Tor Browser]: drag-n-drop bypasses tor

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue Dec 6 23:14:17 UTC 2011


#4517: drag-n-drop bypasses tor
----------------------------------------+-----------------------------------
 Reporter:  cypherpunks                 |          Owner:  mikeperry
     Type:  defect                      |         Status:  accepted 
 Priority:  critical                    |      Milestone:           
Component:  Tor Browser                 |        Version:           
 Keywords:  MikePerryIteration20111211  |         Parent:           
   Points:  8                           |   Actualpoints:           
----------------------------------------+-----------------------------------
Changes (by mikeperry):

 * cc: rransom (added)


Comment:

 Ok.. some good news and some bad news..

 Good news is I can intercept this in XPCOM and pop up a dialog before the
 drag begins.

 The bad news is that if you click OK on the dialog, you lose the object
 you were dragging.. Unless you use the keyboard to accept the dialog...

 Does this mean we just disable drag and drop entirely and call it a day?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4517#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list