[tor-bugs] #18913 [Applications/Tor Browser]: about:tor should not have chrome privileges

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jun 19 21:02:36 UTC 2017


#18913: about:tor should not have chrome privileges
---------------------------------------------+-----------------------------
 Reporter:  mcs                              |          Owner:  mcs
     Type:  defect                           |         Status:
                                             |  needs_review
 Priority:  Medium                           |      Milestone:
Component:  Applications/Tor Browser         |        Version:
 Severity:  Normal                           |     Resolution:
 Keywords:  ff52-esr, TorBrowserTeam201706R  |  Actual Points:
Parent ID:                                   |         Points:
 Reviewer:                                   |        Sponsor:
---------------------------------------------+-----------------------------
Changes (by mcs):

 * keywords:  ff52-esr, TorBrowserTeam201706 => ff52-esr,
     TorBrowserTeam201706R
 * status:  new => needs_review


Comment:

 Here is a patch for review:
 https://gitweb.torproject.org/user/brade/torbutton.git/commit/?h=bug18913-01&id=984af558af58bb8715af72c4811acc7fc4253bc1
 This change fixes #21948 and #22525 as well, so it would be great to
 include it in a Tor Browser release soon. While the patch is somewhat
 large, that is mainly because we had to move a lot of code out of
 torbutton.js into the new aboutTor-content.js content script (so it can
 run in the content process where the about:tor DOM is accessible).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18913#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list