[tor-bugs] #9454 [TorBrowserButton]: Torbrowser shouldn't load any plugins if user didn't changed security settings

[Tor Bug Tracker & Wiki]

#9454: Torbrowser shouldn't load any plugins if user didn't changed security
settings
----------------------------------+----------------------------------------
     Reporter:  cypherpunks       |      Owner:  mikeperry
         Type:  defect            |     Status:  new
     Priority:  blocker           |  Milestone:
    Component:  TorBrowserButton  |    Version:
   Resolution:                    |   Keywords:  ff24-esr, MikePerry201311R
Actual Points:                    |  Parent ID:
       Points:                    |
----------------------------------+----------------------------------------

Comment (by mcs):

 Replying to [comment:16 cypherpunks]:
 > https://mxr.mozilla.org/mozilla-
 central/source/dom/plugins/base/nsPluginsDirUnix.cpp#319
 > It loads!

 If we want to protect against "rogue" plugins that may be installed on the
 user's computer, it probably makes sense to set plugin.disable = true.  We
 will still want to set enabledState=STATE_CLICKTOPLAY on each plugin when
 the user enables plugins.

 Mike, is this something we want to do?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9454#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online