[tor-bugs] #23397 [Applications/Tor Browser]: Something is totally brain damaged with the way Tor Browser handles PDFs at Medium Security Setting

Mon Sep 4 11:35:55 UTC 2017

#23397: Something is totally brain damaged with the way Tor Browser handles PDFs at
Medium Security Setting
------------------------------------------+----------------------
     Reporter:  cypherpunks               |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Major                     |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 Steps to reproduce the issue:

 1. Open Stock Tor Browser 7.5a4.
 2. Set the security setting to {{{Low}}}.
 3. Visit
 {{{https://web.archive.org/save/https://svn.torproject.org/svn/projects
 /design-paper/tor-design.pdf}}}, after some time PDF should show up.
 4. Set the security setting to {{{Medium}}}.
 5. Refresh the page.
 6. PDF wont show up no matter how much you wait :(

 There's nothing in the stuff that is disabled at {{{Medium}}} security
 setting that would cause the PDF to not show up, so this is most
 definitely a bug.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23397>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online