[tor-bugs] #20471 [Applications/Tor Browser]: Allow javascript: links from HTTPS first party pages

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Oct 26 19:06:15 UTC 2016


#20471: Allow javascript: links from HTTPS first party pages
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-usability-website, tbb-          |  Actual Points:
  security-slider                                |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by gk):

 * keywords:  tbb-usability => tbb-usability-website, tbb-security-slider


Comment:

 This got reported as #20097 and on our blog:

 https://blog.torproject.org/blog/tor-browser-604-released#comment-203337

 https://bug1259785.bmoattachments.org/attachment.cgi?id=8734814 is the
 testcase mentioned there. Closing #20097 in favor of this one which takes
 our new security slider (just 3 states instead of 4) into account.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20471#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list