| #2340 |
protect users against freeze, replay and version-rollback attacks
|
tbb-security
|
new
|
tbb-team
|
defect
|
Very High
|
| #2739 |
Clear Memory-Only Intermeditate Cert Store
|
tbb-torbutton, tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #3600 |
Prevent redirects from transmitting+storing cookies+identifiers
|
tbb-linkability, tbb-testcase, tbb-torbutton, TorBrowserTeam201901
|
new
|
tbb-team
|
defect
|
High
|
| #5182 |
Spanish TBB-Firefox includes ‘Wikipedia (en)’ search engine, but not ‘Wikipedia (es)’
|
translation, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Low
|
| #5184 |
Spanish TBB contains all Torbutton and Tor Launcher locale files
|
tbb-rbm
|
new
|
tbb-team
|
defect
|
Low
|
| #5203 |
Setting Tor Browser as default browser does not work in Wndows 7
|
tbb-usability, tbb-helpdesk-frequent, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #5288 |
Clickjacking + popups subvert TBB url-bar isolation
|
tbb-linkability, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #5798 |
Improve persistence and WebFont compatibility of font patch
|
tbb-fingerprinting-fonts, tbb-testcase
|
new
|
tbb-team
|
defect
|
High
|
| #6217 |
Mozilla updates queries happen at regular intervals
|
tbb-fingerprinting, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #7449 |
TorBrowser creates temp files in Linux /tmp & Windows %temp% and OSX(various places) during the file downloads dialog & when using internal browser video player
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
High
|
| #7956 |
Tor uses Roaming (remote) %APPDATA% instead of %LOCALAPPDATA%
|
tor-client, win32, needs-design, AppData, Roaming, Local, Windows, tbb-disk-leak
|
assigned
|
tbb-team
|
defect
|
High
|
| #8213 |
spoof history.length - browser.sessionhistory.max_entries
|
tbb-linkability, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Low
|
| #8336 |
TOR_SOCKS_HOST, TOR_SOCKS_PORT regression
|
tbb-rebase-regression, tbb-torbutton
|
needs_information
|
tbb-team
|
defect
|
High
|
| #8337 |
Trusteer crashes Tor Browser
|
tbb-crash, tbb-7.0-frequent
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #8557 |
Audit and possibly enable safebrowsing
|
tbb-pref, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #8560 |
100% CPU usage in Tor Browser?
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #8695 |
GVFS metadata file contains TBB filename/downloaded URLs (Debian Linux)
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
High
|
| #8696 |
.xsession-errors file contains Tor Browser related warning (Debian Linux)
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
High
|
| #8697 |
.bash_history contains traces of TBB use (Debian Linux)
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8706 |
.recently-used.xbel contains filenames if browser stored them to disk
|
backport-to-mozilla, tbb-disk-leak, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #8916 |
Windows Prefetch records the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8918 |
Windows paging file contains Tor Browser Bundle filename
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8919 |
Windows Registry contains path to Tor Browser Bundle executable
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8920 |
Windows Search indexes the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8921 |
Windows Thumbnail Cache contains Onion Logo icon
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8982 |
Apple System Log (ASL) files contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8983 |
OS X Crash Reporter and Diagnostic Messages contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8984 |
OSX FSEvents API files contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8985 |
OS X HFS+ files may contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8986 |
OS X preference files contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8988 |
Spotlight and mds may have indexed the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8989 |
OS X swap file may contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8990 |
OS X per-user temp files contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #9521 |
"new identity" leaks memory in eventSuppressor.suppressEventHandling()
|
tbb-newnym, interview, tbb-torbutton, ff78-esr, tbb-performance-leaking
|
new
|
tbb-team
|
defect
|
Medium
|
| #9575 |
Rename "New Identity"
|
tbb-newnym, tbb-torbutton, ux-team, user-feedback
|
new
|
tbb-team
|
defect
|
Medium
|
| #9675 |
Provide feedback mechanism for clock-skew and other bad problems
|
tbb-3.0, extdev-interview, tbb-helpdesk-frequent, tbb-usability, AffectsTails
|
assigned
|
brade
|
defect
|
High
|
| #9693 |
There should be a way to prevent HTTPS Everywhere to connect to check.t.o on startup
|
tbb-torbutton, AffectsTails
|
new
|
zyan
|
defect
|
Medium
|
| #9783 |
New Identity does not always clear all OCSP/favicon related network activity
|
tbb-linkability, tbb-newnym, interview, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #9924 |
Firefox bug - TBB queries the A record of the hostname of the machine it is running on.
|
tbb-firefox-patch,tbb-proxy-bypass
|
new
|
tbb-team
|
defect
|
Medium
|
| #9936 |
TBB TorButton 'New Identity' with remote 'tor' says "It does not have access to the Tor Control Port."
|
tbb-newnym, extdev-interview, tbb-torbutton
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #10025 |
TBB 3.x's ChangeLog pretends the world started at TBB 3.0a1
|
tbb-3.0
|
new
|
tbb-team
|
defect
|
Medium
|
| #10388 |
TBB should disable "New Private Window" menu option if disk history is disabled
|
tbb-usability, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #10408 |
Obvious version information for extracted Tor Browser
|
tbb-3.0, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #10416 |
Tor won't start on Windows when path contains non-ascii characters
|
tor-client, windows, unicode, win32, tbb-needs, 042-should, 043-deferred
|
assigned
|
ahf
|
defect
|
High
|
| #10426 |
"new identity" button causes in-progress downloads to be aborted
|
tbb-3.0, tbb-usability, tbb-newnym, tbb-easy, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #10493 |
History not being deleted in TBB after disabling and enabling Private Browsing Mode
|
tbb-torbutton, tbb-newnym
|
new
|
tbb-team
|
defect
|
High
|
| #10498 |
Get only the NoScript we want to our users
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
Medium
|
| #10607 |
Tor Browser Bundle 3.5 holds open files (gvfsd-metadata)
|
tbb-3.5
|
new
|
tbb-team
|
defect
|
Medium
|
| #10839 |
Block 127.0.0.0/8, RFC1918, and others ranges (for Non-Tor SOCKS proxies)
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #10888 |
Mozilla trademarks still remain in some about: urls
|
tbb-branding, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
| #10952 |
Tor Browser leaves developer windows open after New Identity
|
tbb-newnym, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #11190 |
obfsproxy shebang should point to "python2", not "python"
|
python version, obfsproxy, tbb, flashproxy
|
new
|
|
defect
|
Medium
|
| #11206 |
Tor Browser will not save Exceptions in the Firefox cookie manager
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #11214 |
Gmail talkgadget/hangouts/chat infinite loop
|
tbb-usability-website
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #11222 |
Inform user if reachable bridges drop below a configurable fraction/number
|
tbb-usability
|
needs_information
|
brade
|
defect
|
High
|
| #11506 |
Users are confused by the 2000-01-01 00:00 UTC timestamp
|
tbb-helpdesk-frequent, TorBrowserTeam201601, GeorgKoppen201601, tbb-rbm, AffectsTails
|
new
|
tbb-team
|
defect
|
Medium
|
| #11698 |
Decide how to incorporate Tor Browser Manual pages into Tor Browser
|
tbb-manual, ux-team, TorBrowserTeam202010
|
new
|
|
defect
|
Medium
|
| #12113 |
Building libevent/openssl on Windows without exception handling would reduce dependencies
|
tbb-rbm
|
new
|
tbb-team
|
defect
|
Low
|
| #12418 |
TBBs with UBSan create lots of errors when running
|
tbb-security, TorBrowserTeam201711
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #12449 |
Firefox is insecure, it can't used with Tor
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #12472 |
HTTPS-Everywhere should not dump URLs to stdout by default
|
tbb-disk-leak
|
new
|
zyan
|
defect
|
High
|
| #12481 |
Tor Browser crashes on shutdown on Linux and Mac OS X debug builds
|
tbb-crash, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #12511 |
Skip German exits when using Youtube
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #12514 |
Tor Button does not work unless Navigation toolbar is enabled
|
tbb-usability, tbb-torbutton, tbb-easy
|
new
|
tbb-team
|
defect
|
Medium
|
| #12594 |
Languages for displaying web pages are not saved in Options
|
tbb-usability, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #12683 |
Permissions in nsIPermissionManager aren't cleared with TorButton's "New Identity"
|
tbb-linkability, tbb-newnym, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #12736 |
DLL hijacking vulnerability in TBB
|
tbb-security, TorBrowserTeam201608
|
new
|
tbb-team
|
defect
|
High
|
| #12814 |
No space left in /var prevents Tor Browser from starting properly
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #12977 |
Fix Firefox's Full Screen Permissions Prompt
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
High
|
| #12995 |
default font seems seems to leak system locale information
|
tbb-fingerprinting-locale
|
new
|
tbb-team
|
defect
|
Medium
|
| #13012 |
Reviewing Bug #3229: Make content pref service memory-only + clearable
|
tbb-disk-leak
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #13018 |
Math routines are OS fingerprintable
|
tbb-fingerprinting-os-version, ff31-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #13056 |
Some stack canaries are still missing on Tor Browser binaries
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
| #13065 |
counter downgrade / stale mirror attacks on RecommendedTBBVersions - sign / verify tbb versions file
|
tbb-security, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #13236 |
investigate Firefox SSL for things that might allow user tracking
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #13309 |
Make it clearer that the Tor Browser update download is happening over Tor
|
tbb-usability, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #13367 |
Rate limit gyroscope sampling frequency on FF mobile
|
tbb-security, tbb-fingerprinting, tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
| #13378 |
Addon icons get added/reordered in the toolbar
|
tbb-usability, ff31-esr
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #13400 |
Canvas Fingerprinting: fonts
|
tbb-testcase, tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
High
|
| #13510 |
Master password can't be changed from default
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #13543 |
HTML5 media support may lead to fingerprinting
|
tbb-fingerprinting, TorBrowserTeam201910
|
new
|
tbb-team
|
defect
|
High
|
| #13775 |
Tor Browser won't open with OpenVPN
|
tbb-helpdesk-frequent
|
new
|
tbb-team
|
defect
|
Medium
|
| #13893 |
Torbrowser crashes on start when using MS EMET 5.x
|
tbb-security, tbb-crash, tbb-usability-stoppoint-app, fuck-mingw-gcc, GeorgKoppen201609, TorBrowserTeam201610, ff52-esr
|
assigned
|
tbb-team
|
defect
|
High
|
| #13926 |
No certificate hierarchy
|
tbb-usability
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #14089 |
Google Drive/Docs do not work in Tor Browser
|
tbb-usability-website, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #14098 |
TBB still doesn't round windows in some cases
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #14246 |
Can't book room in Hotel Valencia Center with Tor Browser
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #14269 |
Imported certificate doesn't works at all
|
TBB, certificate
|
new
|
tbb-team
|
defect
|
High
|
| #14390 |
Browser configuration fingerprinting
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
High
|
| #14393 |
Users may be confused by relocated directories
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #14633 |
Default NoScript settings says "Allow Scripts Globally" is "dangerous"
|
tbb-usability uxsprint2015
|
new
|
tbb-team
|
defect
|
Medium
|
| #14923 |
Tor Launcher should have accessibility support.
|
ux-team, tbb-usabiity
|
needs_information
|
brade
|
defect
|
Medium
|
| #14924 |
Warn users before they install any addons
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #14936 |
about:license should show be adapted for Tor Browser
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
| #14939 |
Support ipv6 addresses in Tor Circuit DIsplay
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #14941 |
Localize the Tor Browser about dialog properly
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
| #14947 |
Torbrowser 4.0.3 lacks required "user_pref" preferences of TorButton on fresh extension's installation.
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Low
|
| #14985 |
NoScript Clickjacking warning when clicking on embedded content
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
High
|
| #15030 |
Tor Browser 4.5a4 does not cope with certain self signed certificate setups.
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #15164 |
"Print to file" saves filename and most recent printer in prefs
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
