Custom Query (138 matches)

Filters
 
Or
 
  
 
Columns

Show under each result:


Results (1 - 100 of 138)

1 2
Ticket Summary Keywords Owner Type Status Priority
#10681 New Identity may temporarily leak state tbb-linkability, tbb-torbutton tbb-team defect closed Very High
#12684 Make "Not Now" the default button for TorBrowser's canvas permission dialogue tbb-usability, tbb-linkability, MikePerry201408R, TorBrowserTeam201408 isis defect closed Very High
#12974 Disable NTLM and Negotiate HTTP Auth tbb-linkability, tbb-fingerprinting, MikePerry201408 tbb-team defect closed Very High
#13742 Isolating the cache to the URL bar domain is broken in Tor Browser 4.x tbb-linkability, tbb-4.5-alpha, TorBrowserTeam201411, tbb-testcase tbb-team defect closed Very High
#13784 HTTP authentication tokens are not removed anymore for third party requests tbb-linkability, tbb-testcase, TorBrowserTeam201412 tbb-team defect closed Very High
#14952 Audit HTTP/2 and SPDY if needed tbb-linkability, tbb-usability-website, tbb-performance, ff60-esr, TorBrowserTeam201808R tbb-team task closed Very High
#3246 Isolate HTTP cookies according to first and third party domain contexts backport-to-mozilla, tbb-linkability, tbb-usability-website, tbb-bounty, tbb-firefox-patch, ff52-esr-will-have michael enhancement closed High
#3455 Tor Browser should set SOCKS username for a request based on first party domain tbb-linkability, tbb-usability, TorBrowserTeam201410, tbb-firefox-patch, MikePerry201410R, tbb-4.5-alpha arthuredelstein enhancement closed High
#3600 Prevent redirects from transmitting+storing cookies+identifiers tbb-linkability, tbb-testcase, tbb-torbutton, TorBrowserTeam201901 pospeselr defect assigned High
#4100 Isolate SPDY and HTTP Keep-Alive to top-level domain tbb-linkability, tbb-firefox-patch, tbb-4.5-alpha, tbb-usability-website, TorBrowserTeam201504, MikePerry201504R gk enhancement closed High
#5742 Prototype image cache url isolation tbb-linkability, MikePerry201207 mikeperry defect closed High
#6458 Double-key HSTS for third party content tbb-linkability, tbb-bounty, tbb-firefox-patch tbb-team defect closed High
#6528 Combine cache isolation patches and bind to pref tbb-linkability, tbb-bounty, interview, tbb-firefox-patch tbb-team enhancement closed High
#6539 Image cache isolation causes assert crash in debug builds (and other cases?) MikePerry201211d tbb-linkability mikeperry defect closed High
#6564 Enable DOM Storage and isolate it to url bar domain tbb-linkability tbb-bounty mikeperry enhancement closed High
#6733 Patch Firefox to allow addons to set SOCKS username+password per request interview, tbb-linkability ben enhancement closed High
#7290 Make offline storage/app cache work safely tbb-linkability, tbb-firefox-patch tbb-team enhancement closed High
#7445 Verify that 301 redirects are not cached cross-domain tbb-linkability mikeperry project closed High
#8292 Alter behavior of getFirstPartyURI and consumers tbb-linkability, MikePerry201309 mikeperry enhancement closed High
#8317 favicons saved across sessions tbb-disk-leak, tbb-linkability mikeperry defect closed High
#8628 Inconsistent image cache key usage MikePerry201304, tbb-linkability mikeperry defect closed High
#9336 Odd wyswig schemes without isolation for browserspy.dk tbb-linkability, tbb-firefox-patch, ff68-esr-will-have tbb-team defect new High
#9387 Tor Launcher/Torbutton should provide a "Security Slider" tbb-security, tbb-usability, tbb-linkability, tbb-3.0, extdev-interview, tbb-isec-report, tbb-4.5-alpha, TorBrowserTeam201503 gk enhancement closed High
#9486 Torbutton should clear NoScript's temporary permissions on New Identity tbb-3.0, tbb-linkability, MikePerry201312, tbb-newnym mikeperry defect closed High
#9763 Torbutton's startup component sometimes doesn't load (no cache isolation) tbb-linkability, tbb-torbutton tbb-team defect closed High
#9783 New Identity does not always clear all OCSP/favicon related network activity tbb-linkability, tbb-newnym, interview, tbb-torbutton tbb-team defect new High
#10319 Reimplement cache isolation as a direct C++ patch tbb-linkability, interview, tbb-firefox-patch enhancement closed High
#10374 Clear permissions on New Identity tbb-linkability, tbb-testcase, tbb-newnym, MikePerry201401R defect closed High
#10822 Make sure TLS session tickets are disabled in TorBrowser based on Fx 31 ESR TorBrowserTeam201409, tbb-linkability, ff31-esr, tbb-firefox-patch, MikePerry201409R arthuredelstein task closed High
#12609 HTML5 fullscreen API makes TB fingerprintable, disable it! tbb-fingerprinting-resolution, tbb-linkability mikeperry defect needs_revision High
#12683 Permissions in nsIPermissionManager aren't cleared with TorButton's "New Identity" tbb-linkability, tbb-newnym, tbb-torbutton tbb-team defect new High
#13035 Make sure our cache isolation works with cache2 ff38-esr, tbb-linkability, tbb-fingerprinting, TorBrowserTeam201507 mcs task closed High
#13670 ensure OCSP requests respect URL bar domain isolation tbb-linkability, ff38-esr, MikePerry201505R, tbb-5.0a-highrisk, TorBrowserTeam201507R arthuredelstein defect closed High
#15499 Onion sites circuits are not properly isolated to URL bar domain tbb-linkability tbb-team defect new High
#15502 URL.createObjectURL() considered harmful tbb-linkability, tbb-newnym, tbb-4.5-alpha, TorBrowserTeam201504R, MikePerry201504R arthuredelstein defect closed High
#15555 view-source requests hit the network tbb-usability, tbb-linkability, ff52-esr-will-have tbb-team defect closed High
#15563 ServiceWorkers violate first party isolation, probably tbb-linkability, ff68-esr tbb-team defect new High
#15599 Range requests used by pdfjs are not isolated to URL bar domain tbb-linkability, TorBrowserTeam201802R pospeselr defect closed High
#15703 Isolate mediasource: URI to first party domain ff38-esr, tbb-linkability arthuredelstein defect closed High
#16300 Make sure the BroadcastChannel API adheres to our URL bar domain isolation ff38-esr, tbb-linkability, tbb-5.0a-highrisk, TorBrowserTeam201506R, GeorgKoppen201506R mcs task closed High
#16316 Disable New Tiles feature in Tor Browser based on ESR 38 ff38-esr, tbb-linkability, tbb-5.0a3-essential, tbb-pref, TorBrowserTeam201507R, MikePerry201507 tbb-team task closed High
#16334 Make sure websockets in workers don't leak DNS requests ff38-esr, tbb-linkability, tbb-5.0a3-essential, TorBrowserTeam201506, MikePerry201506 mikeperry task closed High
#16335 Investigate whether the Symbol data type can store global identifiers accessible to content ff52-esr, tbb-linkability tbb-team task new High
#16920 Referer Header should be disabled for new tabs tbb-linkability tbb-team defect needs_review High
#16983 Favicon requests not isolated if one opens the tab list dropdown tbb-linkability, TorBrowserTeam201509R tbb-team defect closed High
#16998 Make sure <link rel="preconnect"> adheres to URL bar domain isolation ff45-esr, tbb-linkability, tbb-6.0a5, TorBrowserTeam201606R arthuredelstein task closed High
#17252 Confirm TLS session resumption/ID are isolated to the URL bar domain, and re-enable them tbb-linkability, ff60-esr, tbb-performance, TorBrowserTeam201808R tbb-team enhancement closed High
#19416 OCSP requests are not isolated to the URL bar domain tbb-regression, tbb-linkability tbb-team defect closed High
#20043 SharedWorker uses catchall circuit tbb-linkability, TorBrowserTeam201610R tbb-team defect closed High
#20195 HTTPS Everywhere's SSL Observatory code doesn't honor domain isolation. tbb-linkability legind defect closed High
#21559 Tor browser deanonymization/fingerprinting via cached intermediate CAs tbb-fingerprinting, tbb-linkability tbb-team defect new High
#21569 Investigate and neuter fingerprinting potential of Permissions API ff52-esr, tbb-7.0-must-alpha, TorBrowserTeam201705R, tbb-linkability arthuredelstein task closed High
#22100 Triggering the external helper dialog leads sometimes to requests going over the catch-all circuit tbb-linkability tbb-team defect new High
#22327 First party isolation of Page Info tbb-7.0-must tbb-linkability TorBrowserTeam201705 arthuredelstein defect closed High
#22501 Requests via javascript: violate FPI tbb-linkability, noscript, TorBrowserTeam201709R pospeselr defect closed High
#22649 Save Link As... in the context menu results in using the catch-all circuit tbb-7.0-issues, tbb-regression, tbb-linkability, tbb-usability tbb-team defect closed High
#23210 Favicons are getting reloaded over catch-all-circuit if content process crashes tbb-7.0-issues, tbb-e10s, tbb-linkability tbb-team defect new High
#26353 First request after copying and pasting an URL in URL bar seems to go over the catch-all circuit ff60-esr, tbb-linkability, TorBrowserTeam201807R tbb-team defect closed High
#26606 investigate fingerprinting and linkability risks of the Intersection Observer API tbb-fingerprinting, tbb-linkability, ff60-esr, TorBrowserTeam201903 tbb-team defect new High
#26608 investigate <link rel="preload"> tbb-linkability, ff60-esr, TorBrowserTeam201903 tbb-team defect new High
#26833 Include IP addresses in First Party Isolation (FPI) tbb-linkability, TorBrowserTeam201808R tbb-team defect closed High
#2877 Prevent TLS state from accumulating in Tor Browser tbb-newnym, tbb-linkability tbb-team defect new Medium
#3010 Torbutton should disable link prefetching tbb-linkability, tbb-torbutton tbb-team defect closed Medium
#4335 Per-urlbar domain plugin control tbb-bounty, tbb-linkability, tbb-torbutton tbb-team enhancement closed Medium
#5288 Clickjacking + popups subvert TBB url-bar isolation tbb-linkability, tbb-firefox-patch tbb-team defect new Medium
#7561 Contents of FTP requests are cached and not isolated to the URL bar origin tbb-linkability, tbb-bounty, tbb-easy, tbb-firefox-patch, ff38-esr, TorBrowserTeam201506R gk defect closed Medium
#8167 Replace deprecated getOriginatingURI() method in Torbutton tbb-linkability, ff24-esr, MikePerry201312R mikeperry defect closed Medium
#8168 Replace deprecated getOriginatingURI() method used in Firefox patches tbb-linkability, ff24-esr, tbb-firefox-patch tbb-team defect closed Medium
#8421 Audit App Cache for third party isolation tbb-linkability mikeperry task closed Medium
#10078 Make sure torbutton_do_new_identity() is still working properly in ESR24 ff24-esr, tbb-linkability, tbb-testcase, MikePerry201311R task closed Medium
#10593 Clipboard data might be leaking tbb-linkability, tbb-3.0 mikeperry defect closed Medium
#10824 Using Firefox UI to remember history disables third party tracking/cookie protection tbb-linkability, tbb-usability tbb-team defect reopened Medium
#12682 Tor Browser's HTML5 canvas fingerprinting dialogue could use a "Revoke" button tbb-usability, tbb-linkability, tbb-firefox-patch tbb-team enhancement new Medium
#12924 Spoof screen orientation? tbb-linkability, tbb-fingerprinting tbb-team defect closed Medium
#13236 investigate Firefox SSL for things that might allow user tracking tbb-linkability tbb-team defect new Medium
#13900 Write Firefox patch for removing third-party HTTP authentication tokens tbb-linkability, tbb-firefox-patch, tbb-testcase, TorBrowserTeam201502R mcs enhancement closed Medium
#15562 SharedWorker violates first party isolation tbb-linkability, TorBrowserTeam201504R, tbb-4.5-alpha tbb-team defect closed Medium
#15564 Isolate SharedWorker by first party domain tbb-linkability, tbb-usability-website, TorBrowserTeam201512R tbb-team defect closed Medium
#15569 Web Notification API icons get no first party tbb-linkability tbb-team defect needs_information Medium
#15733 ftp pages are not isolated in the cache tbb-linkability tbb-team defect closed Medium
#15734 ftp pages are not isolated by first party in the cache tbb-linkability tbb-team defect closed Medium
#15909 4.5 opening multiple circuits for a single page tbb-linkability defect closed Medium
#15954 Canvas permission and HTTP auth still use FQDN isolation tbb-usability-website, tbb-linkability tbb-team defect new Medium
#16285 Make sure EME is no tracking risk in Tor Browser tbb-linkability, GeorgKoppen201705, TorBrowserTeam201705, ff60-esr, tbb-no-uplift-60 tbb-team task assigned Medium
#16324 Focusing the search bar is already creating/using a catchall circuit tbb-linkability tbb-team defect closed Medium
#16333 Make sure IndexedDB is disabled from worker code ff52-esr, tbb-linkability gk task closed Medium
#16356 update cache isolation tests to use cache2 API ff38-esr, tbb-linkability, TorBrowserTeam201506 mcs defect closed Medium
#16429 Isolate mediasource and blob URLs in all contexts ff38-esr, tbb-linkability, TorBrowserTeam201507R, tbb-5.0a4 tbb-team enhancement closed Medium
#16625 Fully disable Firefox network predictor tbb-linkability, tbb-5.0a4, ff38-esr, TorBrowserTeam201507, MikePerry201507 mikeperry defect closed Medium
#16673 Isolate/Disable HTTP Alternative-Services ff45-esr, tbb-linkability, tbb-6.0a5, TorBrowserTeam201604R arthuredelstein defect closed Medium
#16693 Isolate TLS Channel-Bound Cookies tbb-linkability, ff68-esr tbb-team defect new Medium
#16747 Tor-browser downloads favicon twice (and over different circuits) on Windows tbb-linkability, ff45-esr-will-have tbb-team defect closed Medium
#17046 Event.timeStamp reveals startup time tbb-linkability, TorBrowserTeam201509R tbb-team defect closed Medium
#17119 Make sure the expanded malware protection is disabled in Tor Browser based on ESR 45 tbb-linkability, ff45-esr, TorBrowserTeam201604 tbb-team task closed Medium
#17123 Request for certificate is sent over the catch-all circuit tbb-linkability tbb-team defect new Medium
#17244 Low entropy PRNG usage in Tor Browser? tbb-linkability tbb-team defect needs_information Medium
#17416 Write unit tests for 3rd-party HTTP Auth stripping tbb-linkability tbb-team task closed Medium
#17423 Look into Yan's browser fingerprinting tricks tbb-fingerprinting, tbb-linkability tbb-team defect closed Medium
#17933 Tor Browser does not isolate the pdf 'download' (via the download button) to URL bar domain tbb-linkability, tbb-usability, TorBrowserTeam201712, ff52-esr-will-have pospeselr defect closed Medium
#17965 Isolate HPKP and HSTS to url bar domain tbb-linkability, TorBrowserTeam201804, ff60-esr-will-have tbb-team defect closed Medium
1 2
Note: See TracQuery for help on using queries.