[tor-bugs] #22616 [Applications/Tor Browser]: On higher security levels videos can't be downloaded anymore with "Save Video As..."

[Tor Bug Tracker & Wiki]

#22616: On higher security levels videos can't be downloaded anymore with "Save
Video As..."
--------------------------------------------+--------------------------
 Reporter:  gk                              |          Owner:  tbb-team
     Type:  defect                          |         Status:  assigned
 Priority:  Medium                          |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  tbb-7.0-issues, tbb-regression  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+--------------------------

Comment (by davidw):

 I can confirm this problem on Tor 7.0.6 (64bit) on Mac OS 10.11.6 however
 save as dialog box is working in my case but the file does not download,
 or show up at all in about:download even if I cancel the active download.
 It simply does not download and I can't download any other files from the
 same server until the first one completes.

 Multiprocess windows is enabled. NoScript is set to LOW security with one
 change. I have "allow scripts globally" set to off.  I have not changed
 this at all since Tor version 5.5  I don't get any warnings about blocked
 files.

 When the save as window pops up, and I hit "save" I get the following
 error in the browser console:

 {{{
 unsafe CPOW usage forbidden
 contentAreaUtils.js:466
         continueSave
 chrome://global/content/contentAreaUtils.js:466:1
         internalSave/<
 chrome://global/content/contentAreaUtils.js:446:7
         Handler.prototype.process resource://gre/modules/Promise-
 backend.js:932:23
         this.PromiseWalker.walkerLoop           resource://gre/modules
 /Promise-backend.js:813:7
         bound                                                   self-
 hosted:913:17
         bound bound                                             self-
 hosted:913:17
         this.PromiseWalker.scheduleWalkerLoop/< resource://gre/modules
 /Promise-backend.js:747:11
 }}}
 The same exact settings were working in Tor 6.x

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22616#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online