[tor-bugs] #13818 [Tor Browser]: [PATCH] Active tab looks ugly (inherits system color scheme only partially)

[Tor Bug Tracker & Wiki]

#13818: [PATCH] Active tab looks ugly (inherits system color scheme only partially)
-----------------------------+-----------------------------------
     Reporter:  gentoo_root  |      Owner:  tbb-team
         Type:  defect       |     Status:  needs_review
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  TorBrowserTeam201501R
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------------------------

Comment (by mcs):

 Replying to [comment:10 gk]:
 > Thinking a bit about our discussion yesterday. What about blocking
 access to chrome:// by website content generally? That could be a defense
 in depth in this case and, personally, I think websites should have no
 business at all with the browser chrome. The question would then of course
 be what breaks. But I fear even if we find a solution that works now,
 subtle and hard to detect changes might force us to regret not taking a
 more direct and clear-cut approach.

 Defense in depth seems worth investigating.  Kathy and I are going to
 perform an experiment where we disable all access to chrome:// images from
 content (there may be other things to block, but we will start with
 images).  There are some hints in this lengthy Mozilla bug report about
 what might break:

   https://bugzilla.mozilla.org/show_bug.cgi?id=292789

 e.g.,
 * Remote XUL (not in Firefox since 4.0)
 * Icons in ftp:// listings
 * View source (perhaps CSS-related and not image related?)
 * Feed reader (possibly referring to Thunderbird)
 * Emoticons in (Thunderbird?) editor.

 In any case, we will try it and see what happens.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13818#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online