[tor-bugs] #19031 [Applications/TorBirdy]: Audit Thunderbird's RSS support

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu May 12 01:45:00 UTC 2016


#19031: Audit Thunderbird's RSS support
-----------------------------------+-------------------------
 Reporter:  sukhbir                |          Owner:  sukhbir
     Type:  task                   |         Status:  new
 Priority:  Medium                 |      Milestone:
Component:  Applications/TorBirdy  |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:                         |  Actual Points:
Parent ID:                         |         Points:
 Reviewer:                         |        Sponsor:
-----------------------------------+-------------------------

Comment (by sukhbir):

 Updates:

 - Automatic fetching was not disabled and the value was hard coded. So we
 needed an overlay which I pushed in 0968621f.
 - HTML has also been disabled. The options are similar to the mailnews
 settings. See 174cd10.
 - JavaScript disabled: already doing it.
 - Proxy settings respected: yes.

 I think the only concern I have now is that clicking the "Website" (in the
 message pane) to get the complete article shows the Launch Application
 window using which a user may choose a browser that is not Tor Browser.
 Now we can do either of the following:

 - Disable the link so that a user has to manually copy it and doesn't
 inadvertently click on it
 - Warn the user but then show the Launch Application and let them decide.
 - Be smart and open in Tor Browser. (I am not sure if this one is easy).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19031#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list