[tor-bugs] #4517 [Tor Browser]: drag-n-drop bypasses tor on Unity

[Tor Bug Tracker & Wiki]

#4517: drag-n-drop bypasses tor on Unity
----------------------------------------+-----------------------------------
 Reporter:  cypherpunks                 |          Owner:  mikeperry
     Type:  defect                      |         Status:  accepted 
 Priority:  critical                    |      Milestone:           
Component:  Tor Browser                 |        Version:           
 Keywords:  MikePerryIteration20111211  |         Parent:           
   Points:  8                           |   Actualpoints:           
----------------------------------------+-----------------------------------
Changes (by mikeperry):

 * cc: aagbsn (added)


Comment:

 Ok, after banging on this for a while, it seems that most methods of
 disabling image drag and drop also break the ability to move tabs around,
 and to drag links between TBB tabs and windows.

 However, it looks that if we override the aActionType parameter to always
 be 0, we can still allow in-Firefox drags while blocking drags to other
 apps. Hurray!

 The question is, does Unity give us the reach-around and manage to find
 the url still?

 Can anyone who has a Unity setup please test the attached XPI with
 wireshark and image+url dragging?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4517#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online