[tor-bugs] #25790 [Applications/Tor Browser]: Orfox lists external apps when the user clicks and holds an Android URI in a WebPage

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Apr 13 01:23:42 UTC 2018


#25790: Orfox lists external apps when the user clicks and holds an Android URI in
a WebPage
------------------------------------------+------------------------
     Reporter:  igt0                      |      Owner:  tbb-team
         Type:  defect                    |     Status:  assigned
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  tbb-mobile
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+------------------------
 Even if the network.protocol-handler.external-default is false an user can
 open an external application.

 When an user clicks and holds an Android URI[1] the browser context menu
 opens and if the android has an app with the same package id in the URI,
 the app is listed in the context menu allowing the user to click on it and
 open an external app.

 [1] http://mcomella.xyz/test/uri.html

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25790>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list