[tor-bugs] #25089 [Applications/Tor Launcher]: Tor bundle: Special characters not escaped in proxy password

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Feb 7 15:36:08 UTC 2018


#25089: Tor bundle: Special characters not escaped in proxy password
---------------------------------------+------------------------
 Reporter:  ro0ter                     |          Owner:  brade
     Type:  defect                     |         Status:  closed
 Priority:  Medium                     |      Milestone:
Component:  Applications/Tor Launcher  |        Version:
 Severity:  Major                      |     Resolution:  fixed
 Keywords:  TorBrowserTeam201802R      |  Actual Points:
Parent ID:                             |         Points:
 Reviewer:                             |        Sponsor:
---------------------------------------+------------------------

Comment (by mcs):

 Replying to [comment:13 ro0ter]:
 > mcs, I can`t make it work since the tor launcher detects my change and
 does not agree... I`d rather not attach a screenshot, not useful, but
 here`s the text:
 > ...

 I forgot that you will be prompted (since you have not previously
 connected). To avoid the prompt, set
 `extensions.torlauncher.prompt_at_startup` to `false` by ensuring that the
 following line in present in your `prefs.js` file:
  user_pref("extensions.torlauncher.prompt_at_startup", false);
 The `prefs.js` file is located in your browser profile. The path is
 `Browser\TorBrowser\Data\Browser\profile.default\prefs.js.

 Replying to [comment:14 ro0ter]:
 > One more question: what about password containing both double quotes and
 pound?
 Our code already knew how to escape double quotes. You can use `\"` to
 include them in your torrc, e.g.,
  HTTPSProxyAuthenticator "mcs:secret\"quote\"#1"

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25089#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list