[tor-bugs] #10490 [TorBrowserButton]: Disable middlemouse.contentLoadURL by default

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Dec 25 10:36:02 UTC 2013


#10490: Disable middlemouse.contentLoadURL by default
------------------------------+---------------------------
 Reporter:  beadcafe          |          Owner:  mikeperry
     Type:  enhancement       |         Status:  new
 Priority:  normal            |      Milestone:
Component:  TorBrowserButton  |        Version:
 Keywords:                    |  Actual Points:
Parent ID:                    |         Points:
------------------------------+---------------------------
 Consider setting the Tor Browser configuration item
 middlemouse.contentLoadURL to false by default. When its value is "true",
 pressing mouse's middle button when there is a URL in the clipboard, makes
 the browser open that URL.

 In my experience this is a significant risk, and has bitten me at least
 once by making me load by mistake a user identifying page in my tor
 session. My intention was to open a link on the page in a new tab, but I
 failed to click the link area, so the middle button click instead opened a
 URL that happened to be in the clipboard. That URL pointed to a page that
 revealed my real identity. The inconvenience caused to the user by this
 configuration change seems minimal to me.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10490>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list