[tor-bugs] #10941 [Tor Messenger]: Secure messaging window

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Feb 10 02:00:53 UTC 2016


#10941: Secure messaging window
---------------------------+--------------------------
 Reporter:  sukhbir        |          Owner:  sukhbir
     Type:  task           |         Status:  assigned
 Priority:  Medium         |      Milestone:
Component:  Tor Messenger  |        Version:
 Severity:  Normal         |     Resolution:
 Keywords:                 |  Actual Points:
Parent ID:                 |         Points:
  Sponsor:                 |
---------------------------+--------------------------

Comment (by mikeperry):

 Oh, my comments there simply were that it would be strictly better if we
 knew the message content window had scripts disabled fully, rather than
 (or actually, in addition to) being XSS filtered.

 I know there was some contention with the instantbird team over this, as
 they felt this would negatively impact UI, so my thought was that we could
 have a security slider here, too. So for example, look at all of the stuff
 that Coy.im disables: https://coy.im/about/. Rather than killing all of
 that up-front (which will negatively impact UX), it could be progressively
 disabled as security level is increased.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10941#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list