[tor-bugs] #27979 [Applications/Tor Browser]: extensions now update without restart the browser, isn't this dangerous?

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Oct 8 17:51:13 UTC 2018


#27979: extensions now update without restart the browser, isn't this dangerous?
--------------------------------------+--------------------------
 Reporter:  h1n1                      |          Owner:  tbb-team
     Type:  defect                    |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:  invalid
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------
Changes (by gk):

 * owner:  (none) => tbb-team
 * resolution:   => invalid
 * status:  new => closed
 * component:  - Select a component => Applications/Tor Browser


Comment:

 Installing third-party extensions in general is dangerous and it should be
 minimized/avoided as much as possible. The update without browser restart
 does not change anything assuming there is no code audit between updates.
 From a usability side however it is a big improvement as one gets the
 latest extension version that may fix security bugs in extensions without
 losing all tabs etc.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27979#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list