[tor-bugs] #3547 [Tor Browser]: Disable all plugins but flash

[Tor Bug Tracker & Wiki]

#3547: Disable all plugins but flash
-------------------------+--------------------------------------------------
 Reporter:  mikeperry    |          Owner:  mikeperry                    
     Type:  defect       |         Status:  new                          
 Priority:  major        |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  Tor Browser  |        Version:                               
 Keywords:               |         Parent:  #2871                        
   Points:               |   Actualpoints:                               
-------------------------+--------------------------------------------------

Comment(by mikeperry):

 There are a few other ways to do this. We can try to change the
 plugin.scan pref in all.js during build, and/or alter the scanning
 process. This may be better, because it would stop plugins from being able
 to run executable code as the Firefox browser. It is quite possible that
 AV plugins will do something crazy that can't be disabled/undone, like
 actually patching the Firefox imports..

 Some relevant urls:
 http://kb.mozillazine.org/Plugin_scanning
 http://forums.mozillazine.org/viewtopic.php?p=915796#915796
 http://mxr.mozilla.org/mozilla-
 central/source/toolkit/mozapps/extensions/AddonManager.jsm#1013

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3547#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online