[tor-bugs] #18782 [Tor Browser]: media tab in Page Info can bypass NoScript

[Tor Bug Tracker & Wiki]

#18782: media tab in Page Info can bypass NoScript
-----------------------------+----------------------
     Reporter:  cypherpunks  |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  High         |  Milestone:
    Component:  Tor Browser  |    Version:
     Severity:  Major        |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |   Reviewer:
      Sponsor:               |
-----------------------------+----------------------
 to reproduce:

  - visit machetona.neocities.org
  - [collateral/bonus: rack up a 16 year old girl's page counts]
  - Tools->Page Info->Media (tab)
  - scroll down the media list to the URL that looks like an IP address
  - press play and listen to the sweet jams and OH CRAP THAT ISN'T SUPPOSED
 TO HAPPEN
  - trouble

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18782>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online