[tor-bugs] #25851 [Applications/Tor Browser]: TBA - Make sure third-party code is proxy safe

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Aug 1 17:42:40 UTC 2018


#25851: TBA - Make sure third-party code is proxy safe
------------------------------------------+--------------------------
 Reporter:  sysrqb                        |          Owner:  tbb-team
     Type:  defect                        |         Status:  new
 Priority:  Medium                        |      Milestone:
Component:  Applications/Tor Browser      |        Version:
 Severity:  Normal                        |     Resolution:
 Keywords:  tbb-mobile, tbb-proxy-bypass  |  Actual Points:
Parent ID:  #21863                        |         Points:
 Reviewer:                                |        Sponsor:  Sponsor4
------------------------------------------+--------------------------

Comment (by sysrqb):

 Replying to [comment:1 sysrqb]:
 > Code we should audit:
 > {{{
 > $ ls mobile/android/thirdparty/com/
 > adjust  booking  googlecode  jakewharton  leanplum  squareup
 > }}}

 Adjust is excluded at build-time, so we can ignore that. It is excluded if
 `MOZ_INSTALL_TRACKING` is not set. This is similar to LeanPlum - it
 requires MOZ_ANDROID_GCM, too. We could change the `MOZ_INSTALL_TRACKING`
 default value, too (being extra safe) - but currently it will not be
 included.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25851#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list