[tor-bugs] #16925 [Tor Browser]: HTML5 video and audio are live on the page with Security Slider set to highest

[Tor Bug Tracker & Wiki]

#16925: HTML5 video and audio are live on the page with Security Slider set to
highest
-----------------------------------+----------------------------------
 Reporter:  DrMikeTwiddle          |          Owner:  tbb-team
     Type:  defect                 |         Status:  new
 Priority:  normal                 |      Milestone:
Component:  Tor Browser            |        Version:  Tor: unspecified
 Keywords:  HTML5 video, NoScript  |  Actual Points:
Parent ID:                         |         Points:
-----------------------------------+----------------------------------
 With the slider right up at highest it says "HTML5 video and audio media
 become click-to-play via NoScript."

 But HTML5 videos are completely live on pages I'm visiting where they  are
 embedded without any further user interaction.

 I don't know the status of potential security issues and leaks with HTML5
 video but nothing I have read on that topic provides any clear consensus
 currently and I think video and audio should be blocked when security is
 set to highest to let the user decide.

 I.e the slider should do exactly what it says.

 Tor Browser 5.02 OS X

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16925>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online