[tor-bugs] #33955 [Applications/Tor Browser]: Selecting "Copy image" from menu leaks the source URL to the clipboard. This data is often dereferenced by other applications.

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Apr 21 23:16:22 UTC 2020


#33955: Selecting "Copy image" from menu leaks the source URL to the clipboard.
This data is often dereferenced by other applications.
-------------------------------------------------+-------------------------
 Reporter:  peskydan                             |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  information leak, unexpected,        |  Actual Points:
  Firefox                                        |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by peskydan):

 On reflection, including the alt text in the tag generated by "Copy image
 as HTML" is probably a bad idea, since it might not be expected or noticed
 by the user, and could potentially expose harmful information.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33955#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list