| #2340 |
protect users against freeze, replay and version-rollback attacks
|
tbb-security
|
assigned
|
tbb-team
|
defect
|
Very High
|
| #2482 |
TLS issues with Torbutton
|
tbb-torbutton
|
assigned
|
tbb-team
|
defect
|
Very High
|
| #2739 |
Clear Memory-Only Intermeditate Cert Store
|
interview, tbb-torbutton, tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #2877 |
Prevent TLS state from accumulating in Tor Browser
|
tbb-newnym, tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #3509 |
Torbutton won't display as a text box in the add-on bar.
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #3546 |
Disabling Third party cookies breaks some REcaptcha-using sites
|
tbb-usability-website
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #3600 |
Prevent redirects from transmitting+storing cookies+identifiers
|
tbb-linkability, tbb-testcase, tbb-torbutton, TorBrowserTeam201901
|
assigned
|
pospeselr
|
defect
|
High
|
| #3667 |
Toolbar icons non-deterministic?
|
tbb-usability, ux-team
|
needs_information
|
tbb-team
|
defect
|
High
|
| #4280 |
build changes for TBB
|
tbb-security, apparmor
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #4793 |
BleachBit - Says Can't Clean Firefox Open
|
tbb-disk-leak
|
assigned
|
|
defect
|
Low
|
| #5182 |
Spanish TBB-Firefox includes ‘Wikipedia (en)’ search engine, but not ‘Wikipedia (es)’
|
translation, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Low
|
| #5184 |
Spanish TBB contains all Torbutton and Tor Launcher locale files
|
tbb-rbm
|
reopened
|
erinn
|
defect
|
Low
|
| #5203 |
Setting Tor Browser as default browser does not work in Wndows 7
|
tbb-usability, tbb-helpdesk-frequent, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #5288 |
Clickjacking + popups subvert TBB url-bar isolation
|
tbb-linkability, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #5666 |
Hook MediaElement for Full Screen Mode
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
High
|
| #5738 |
Firefox slow at closing tabs
|
tbb-performance
|
new
|
tbb-team
|
defect
|
Medium
|
| #5782 |
Long links mess up some confirmation dialogs
|
tbb-usability, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Low
|
| #5798 |
Improve persistence and WebFont compatibility of font patch
|
tbb-fingerprinting-fonts, interview, tbb-testcase, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #6053 |
TorButton breaks functionality to have multiple homepages (startpages)
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Low
|
| #6065 |
TBB does strange things to fonts on Windows 7
|
tbb-fingerprinting-fonts
|
assigned
|
|
defect
|
Medium
|
| #6217 |
Mozilla updates queries happen at regular intervals
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #6427 |
Blogger comments broken for Tor users
|
tbb-usability-website, tbb-firefox-patch
|
assigned
|
|
defect
|
Medium
|
| #6474 |
Don't prompt for Offline Storage unless disk activity is enabled
|
tbb-disk-leak, tbb-usability, tbb-pref, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #7449 |
TorBrowser creates temp files in Linux /tmp & Windows %temp% and OSX(various places) during the file downloads dialog & when using internal browser video player
|
tbb-disk-leak, tbb-firefox-patch
|
assigned
|
tbb-team
|
defect
|
High
|
| #7638 |
ip-check.info: the 'window.name' attribute is traceable across sites
|
tbb-firefox-patch
|
assigned
|
|
defect
|
High
|
| #7956 |
Tor uses Roaming (remote) %APPDATA% instead of %LOCALAPPDATA%
|
tor-client, win32, needs-design, AppData, Roaming, Local, Windows, tbb-disk-leak
|
assigned
|
tbb-team
|
defect
|
High
|
| #8213 |
spoof history.length - browser.sessionhistory.max_entries
|
tbb-linkability, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Low
|
| #8336 |
TOR_SOCKS_HOST, TOR_SOCKS_PORT regression
|
tbb-rebase-regression, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #8337 |
Trusteer crashes Tor Browser
|
tbb-crash, tbb-7.0-frequent
|
needs_information
|
|
defect
|
Medium
|
| #8511 |
Firefox caches proxy settings per hosts
|
tbb-rebase-regression, interview, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #8557 |
Audit and possibly enable safebrowsing
|
tbb-pref, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #8560 |
100% CPU usage in Tor Browser?
|
tbb-firefox-patch
|
reopened
|
tbb-team
|
defect
|
High
|
| #8695 |
GVFS metadata file contains TBB filename (Debian Linux)
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
High
|
| #8696 |
.xsession-errors file contains Tor Browser related warning (Debian Linux)
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
High
|
| #8697 |
.bash_history contains traces of TBB use (Debian Linux)
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #8706 |
.recently-used.xbel contains filenames if browser stored them to disk
|
backport-to-mozilla, tbb-disk-leak, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #8916 |
Windows Prefetch records the Tor Browser Bundle
|
tbb-disk-leak
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #8918 |
Windows paging file contains Tor Browser Bundle filename
|
tbb-disk-leak
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #8919 |
Windows Registry contains path to Tor Browser Bundle executable
|
tbb-disk-leak
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #8920 |
Windows Search indexes the Tor Browser Bundle
|
tbb-disk-leak
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #8921 |
Windows Thumbnail Cache contains Onion Logo icon
|
tbb-disk-leak
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #8951 |
Get information about HS from within browser
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #8982 |
Apple System Log (ASL) files contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #8983 |
OS X Crash Reporter and Diagnostic Messages contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #8984 |
OSX FSEvents API files contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #8985 |
OS X HFS+ files may contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #8986 |
OS X preference files contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #8988 |
Spotlight and mds may have indexed the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #8989 |
OS X swap file may contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #8990 |
OS X per-user temp files contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #9018 |
Concerning debug assertions in the font patch
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #9189 |
Tor Browser forgets zoom level
|
tbb-torbutton, tbb-fingerprinting-resolution, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #9211 |
FTP download too difficult
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #9216 |
Can't log in to www.autosport.com from TorBrowser
|
tbb-usability-website
|
assigned
|
|
defect
|
Medium
|
| #9276 |
Remove JS-Ctypes dependency from HTTPS-Everywhere
|
tbb-3.0
|
new
|
pde
|
defect
|
Medium
|
| #9336 |
Odd wyswig schemes without isolation for browserspy.dk
|
tbb-linkability, tbb-firefox-patch, ff68-esr-will-have
|
new
|
tbb-team
|
defect
|
High
|
| #9451 |
de-anonymisation by readable @font-face CSS attribute - TBB settings update
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #9521 |
"new identity" leaks memory in eventSuppressor.suppressEventHandling()
|
tbb-newnym, interview, tbb-torbutton, ff52-esr, tbb-performance-leaking
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #9575 |
Rename "New Identity"
|
tbb-newnym, tbb-torbutton
|
assigned
|
|
defect
|
Medium
|
| #9675 |
Provide feedback mechanism for clock-skew and other bad problems
|
tbb-3.0, extdev-interview, tbb-helpdesk-frequent, tbb-usability, AffectsTails
|
assigned
|
brade
|
defect
|
High
|
| #9693 |
There should be a way to prevent HTTPS Everywhere to connect to check.t.o on startup
|
tbb-torbutton, AffectsTails
|
new
|
zyan
|
defect
|
Medium
|
| #9783 |
New Identity does not always clear all OCSP/favicon related network activity
|
tbb-linkability, tbb-newnym, interview, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #9790 |
The Torbutton startup observer component is sometimes not initialized
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Very High
|
| #9800 |
tor browser still an option of default browser even after removal
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #9899 |
Revisit decision to disable rendering acceleration for everyone
|
tbb-3.0, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #9907 |
Viewing websites without Tor with Tor Browser: intranet, local, Tor-blocking sites
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #9924 |
Firefox bug - TBB queries the A record of the hostname of the machine it is running on.
|
tbb-firefox-patch,tbb-proxy-bypass
|
new
|
tbb-team
|
defect
|
Medium
|
| #9936 |
TBB TorButton 'New Identity' with remote 'tor' says "It does not have access to the Tor Control Port."
|
tbb-newnym, extdev-interview, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #10025 |
TBB 3.x's ChangeLog pretends the world started at TBB 3.0a1
|
tbb-3.0
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #10137 |
ESR24 won't work without ctypes being enabled
|
tbb-3.0, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #10334 |
Multiple problems with TBB3.0rc1
|
tbb-3.0, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #10353 |
Cookie Protection dialog is empty in FF24
|
ff24-esr, tbb-usability, tbb-helpdesk-frequent, tbb-torbutton, AffectsTails
|
new
|
|
defect
|
High
|
| #10360 |
Offline cache prompt shown; Allow button does not dismiss.
|
tbb-usability, tbb-testcase, tbb-firefox-patch
|
new
|
|
defect
|
Medium
|
| #10388 |
TBB should disable "New Private Window" menu option if disk history is disabled
|
tbb-usability, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #10408 |
version information
|
tbb-3.0, tbb-usability, needs-triage
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #10426 |
"new identity" button causes in-progress downloads to be aborted
|
tbb-3.0, tbb-usability, tbb-newnym, tbb-easy, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #10434 |
Segmentation fault when Tor Browser 3.5 has a ton of state.
|
tbb-crash
|
assigned
|
|
defect
|
Medium
|
| #10466 |
Slow menu response of Torbrowser
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #10467 |
URLs are leaked to third party if they contain typos
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #10487 |
TBB OS X: Last directory recorded in /Users/User/Library/Preferences/
|
macosx, tbb-3.5, tbb-3.0, tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #10493 |
History not being deleted in TBB after disabling and enabling Private Browsing Mode
|
tbb-torbutton, tbb-newnym
|
new
|
tbb-team
|
defect
|
High
|
| #10498 |
Noscript. Path of trust.
|
tbb-security, noscript
|
reopened
|
erinn
|
defect
|
Medium
|
| #10507 |
firefox 24.0 in tbb 3.5 is leaking referring page data
|
tbb-3.0, tbb-firefox-patch
|
needs_information
|
tbb-team
|
defect
|
Very High
|
| #10575 |
Unused code confuses validator
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #10586 |
Login problems in a forum site
|
tbb-usability-website, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #10607 |
Tor Browser Bundle 3.5 holds open files (gvfsd-metadata)
|
tbb-3.5, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #10630 |
MacOS TBB 3.5 hang (due to popups?)
|
tbb-crash, tbb-torbutton
|
assigned
|
|
defect
|
Medium
|
| #10756 |
TowBrowser should zero-out cleared partial downloads or not delete them at all
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #10760 |
Integrate TorButton to TorBrowser core to prevent users from disabling it
|
AffectsTails, tbb-parity, ux-team, GeorgKoppen201907, TorBrowserTeam201907
|
needs_revision
|
tbb-team
|
defect
|
High
|
| #10763 |
Torbrowser does not work on FreeBSD
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #10773 |
TorBrowser Noscript plugin does not block HTML5 audio/video tags
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #10824 |
Using Firefox UI to remember history disables third party tracking/cookie protection
|
tbb-linkability, tbb-usability
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #10839 |
Block 127.0.0.0/8, RFC1918, and others ranges (for Non-Tor SOCKS proxies)
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #10854 |
Limit IPv4 addresses to dotted-decimal form (as per RFC3986)
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #10888 |
Mozilla trademarks still remain in some about: urls
|
tbb-branding, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
| #10952 |
Tor Browser leaves developer windows open after New Identity
|
tbb-newnym, tbb-torbutton
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #11095 |
allow storing passwords in TorBrowser
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #11180 |
Improve "Use Bridges" UI based on feedback and testing
|
tbb-usability-stoppoint-wizard
|
new
|
brade
|
defect
|
Medium
|
| #11190 |
obfsproxy shebang should point to "python2", not "python"
|
python version, obfsproxy, tbb, flashproxy
|
new
|
|
defect
|
Medium
|
| #11206 |
Regression: Torbutton 1.6.6.0 will not save Exceptions in the Firefox cookie manager
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
