[tor-bugs] #25090 [Applications/Tor Browser]: Make sure IPFS & co in addons are shoved up through Tor and don't leak in ESR60

Wed Jan 31 21:46:08 UTC 2018

#25090: Make sure IPFS & co in addons are shoved up through Tor and don't leak in
ESR60
--------------------------------------+--------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  ff60-esr                  |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cypherpunks):

 Replying to [comment:1 cypherpunks]:
 > I think these protocols would just increase the surface of attack. We
 can't trust file:// in firefox, why would we trust these?
 I think there are some interesting use cases for these things, and it's
 only for addons anyway. It's completely different from file://

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25090#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online