[tor-bugs] #24945 [Applications/Tor Browser]: Tor Browser design doc says it whitelists flash and gnash as plugins

[Tor Bug Tracker & Wiki]

#24945: Tor Browser design doc says it whitelists flash and gnash as plugins
------------------------------------------+----------------------
     Reporter:  arma                      |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 The Tor Browser design doc says "we also patch the Firefox source code to
 prevent the load of any plugins except for Flash and Gnash. Even for Flash
 and Gnash, we also patch Firefox to prevent loading them into the address
 space until they are explicitly enabled."

 If this is so, we should probably change Tor Browser to just prevent all
 plugins, including Flash and Gnash.

 And if it is no longer so, we should fix the wrong statement in the design
 doc.

 Noticed in #10885.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24945>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online