[tor-bugs] #25089 [- Select a component]: Tor bundle: Special characters not escaped in proxy password

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Jan 30 13:42:31 UTC 2018

#25089: Tor bundle: Special characters not escaped in proxy password
     Reporter:  ro0ter                |      Owner:  (none)
         Type:  defect                |     Status:  new
     Priority:  Medium                |  Milestone:
    Component:  - Select a component  |    Version:
     Severity:  Major                 |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |   Reviewer:
      Sponsor:                        |
 First of all, the proxy password (if any) is stored plain-text in the torc
 file (\Browser\TorBrowser\Data\Tor\torrc)......

 Using the pound character "#" inside the proxy password (line
 HTTPSProxyAuthenticator) will not save anything which is after the pound
 character (including the character). Some companies have a strict policy
 regarding passwords therefore it is required to use such characters
 (unfortunately I managed to get to this character as well, forced by the
 password expiry policy + old password policy).

 This is also reproducible with version 7.5 (2018-01-23 build) of Tor

 Currently I am unable to use Tor on my PC with my user+password.

 Is there an easy fix? Are there some escape characters?

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25089>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tor-bugs mailing list