| #15474 |
Quantize innerWidth/Height when pages are zoomed
|
tbb-fingerprinting-resolution, tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #15499 |
Onion sites circuits are not properly isolated to URL bar domain
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
High
|
| #15514 |
Trim the NoScript whitelist
|
tbb-security, noscript
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #15532 |
Tor Browser 4.5 displays signature validation error during update
|
tbb-firefox-patch, ff38-esr, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #15563 |
ServiceWorkers violate first party isolation, probably
|
tbb-linkability, ff78-esr, BugSmashFund
|
new
|
tbb-team
|
defect
|
High
|
| #15569 |
Web Notification API icons get no first party on Windows systems
|
tbb-linkability, tbb-parity
|
new
|
tbb-team
|
defect
|
Medium
|
| #15687 |
Make Tor Browser work with AppLocker
|
tbb-security, tbb-usability-stoppoint-app
|
new
|
tbb-team
|
defect
|
Medium
|
| #15713 |
toggling DisableNetwork during bootstrap causes delay
|
tor-client, bootstrap, delay, sponsor8-maybe, tbb-needs
|
accepted
|
arma
|
defect
|
Medium
|
| #15715 |
spurious "Network is unreachable" error after setting DisableNetwork=1
|
tor-client, bootstrap, sponsor8-maybe, disablenetwork, tbb-needs
|
accepted
|
arma
|
defect
|
Medium
|
| #15797 |
Add some explanation of certificate storage being disabled
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #15802 |
add automated tests for svg.in-content.enabled
|
tbb-testcase, ff78-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #15825 |
webgl.disable-extensions true about:config setting may allow DoS and breaks websites
|
tbb-security, tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #15882 |
Tor Browser shows up as Firefox in Ubuntu dash/launcher
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
| #15908 |
Compose key doesn't work when GTK_IM_MODULE=xim
|
tbb-usability, tbb-4.5-regression
|
new
|
tbb-team
|
defect
|
Medium
|
| #15954 |
Canvas permission and HTTP auth still use FQDN isolation
|
tbb-usability-website, tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #16028 |
Many users seem to be failing incremental updates to 4.5.1
|
tbb-update
|
new
|
tbb-team
|
defect
|
High
|
| #16029 |
Many update downloads for 4.0.8
|
tbb-update
|
new
|
tbb-team
|
defect
|
High
|
| #16110 |
Improve Time Resolution Defense
|
tbb-fingerprinting-time-highres
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #16250 |
Configuring the Torbutton in Tor Browser 4.5.1 on Mac with VoiceOver does not work!
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #16312 |
Limit font queries per URL bar domain
|
tbb-fingerprinting-fonts
|
new
|
arthuredelstein
|
defect
|
Medium
|
| #16327 |
NavigatorLanguage API needs a testcase for intl pref
|
tbb-testcase
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #16364 |
Add an option to resize the browser window to the "safe default"
|
tbb-usability, tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #16453 |
View Source doesn't work on Tor Browser with HTTP AUTH
|
tbb-firefox-patch, tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #16456 |
screen size fingerprint with findbar panel/bookmarks toolbar
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #16516 |
TBB doesn't use page title when bookmarking by dragging globe/lock icon
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Low
|
| #16607 |
Allow SVG for extensions, even on "high" security level
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #16621 |
Can we merge torbutton_do_new_identity with Clear Private Data?
|
tbb-torbutton-conversion, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #16672 |
Text rendering allows font fingerprinting
|
tbb-fingerprinting-fonts, tbb-5.5, TorBrowserTeam201603
|
assigned
|
arthuredelstein
|
defect
|
Medium
|
| #16686 |
Migrate all font fingerprinting patches to tor-browser.git
|
tbb-fingerprinting-fonts, TorBrowserTeam201603
|
new
|
arthuredelstein
|
defect
|
Medium
|
| #16693 |
Isolate TLS Channel-Bound Cookies
|
tbb-linkability, ff78-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #16740 |
Font defense in 5.0a4 crashes OS X 10.6.8
|
tbb-crash, tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #16743 |
Reconsider "Add Start Menu & Desktop shortcuts" option (Windows)
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #16757 |
Verify that new DOM properties are really disabled
|
tbb-fingerprinting, tbb-5.0-regression, TorBrowserTeam201609
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #16778 |
"Sign In To Sync..." still appears in TBB Tools menu and about:preferences#sync
|
tbb-usability
|
needs_information
|
mcs
|
defect
|
Medium
|
| #16812 |
Tor Browser leaks updater temp files on OS X
|
tbb-update
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #16886 |
"Add-on compatibility check dialog" contains Firefox logo
|
tbb-branding
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #16888 |
Regression tests for Bug #2950 (Make Permissions Manager memory-only) never fails
|
tbb-testcase
|
new
|
tbb-team
|
defect
|
Medium
|
| #16920 |
Referer Header should be disabled for new tabs
|
tbb-linkability
|
needs_review
|
tbb-team
|
defect
|
High
|
| #16926 |
Multiple OS: Tor Browser leaks domains to system DNS management.
|
tbb-security
|
new
|
tbb-team
|
defect
|
Very High
|
| #16936 |
Circuit display should show original circuit for each tab
|
tbb-torbutton, tbb-circuit-display, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #16981 |
NoScript Option
|
noscript, tbb-usability
|
assigned
|
ma1
|
defect
|
Medium
|
| #16982 |
Resizing Tor Browser only issues warning if maximized fully
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #17022 |
Tor Browser segfault during JavaScript Garbage Collection on OS X
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #17023 |
Investigate fingerprinting of mouse/pointing events
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #17061 |
Enforcement of browser window size breaks in xmonad
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #17091 |
Support our own hotfix mechanism
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
| #17123 |
Request for certificate is sent over the catch-all circuit
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #17140 |
When Tor Browser updater runs, prefs don't get updated
|
tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #17162 |
Latest TorBrowser youtube LIVE bug
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #17208 |
New reported disk leaks in Tor Browser
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #17244 |
Low entropy PRNG usage in Tor Browser?
|
tbb-linkability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #17313 |
Crash in Canvas patch seen on OS X Tor Browser
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #17336 |
consider re-dzip'ing language packs
|
tbb-rbm, gitlab-tb-tor-browser-build
|
new
|
tbb-team
|
defect
|
Medium
|
| #17355 |
Investigate whether we should re-implement methods of JS Date to avoid fingerprinting
|
tbb-fingerprinting-locale
|
new
|
tbb-team
|
defect
|
Medium
|
| #17356 |
Tor Browser crash on OS X while receiving Facebook notification in background
|
tbb-crash
|
new
|
tbb-team
|
defect
|
Medium
|
| #17367 |
Swap files can contain evidence of browsing history
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #17412 |
High-precision timestamps in JS
|
tbb-fingerprinting-time-highres
|
new
|
tbb-team
|
defect
|
Medium
|
| #17418 |
Values in about:config that aren't disabled
|
tbb-pref
|
new
|
tbb-team
|
defect
|
Medium
|
| #17431 |
Investigate attacks in fingerprinting paper
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #17505 |
UBSan is freezing Tor Browser
|
tbb-security, tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #17545 |
Cannot sign-in to Wunderlist on Tor Browser
|
tbb-usability-website
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #17569 |
Add uBlock Origin to the Tor Browser
|
new-addon, tbb-usability tbb-security, tbb-performance
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #17584 |
Disable bookmark backups (easy fix) (!)
|
tbb-easy, tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #17718 |
About:config values need changing
|
tbb-pref
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #17809 |
tbb-tests/browser_tor_TB4.js is out-of-date
|
tbb-test-failures ReleaseTrainMigration
|
new
|
tbb-team
|
defect
|
Medium
|
| #17871 |
Loading PDF files from file:/// does not show images in them
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #17879 |
Activating the Flash Player is not working anymore since Tor Browser 5.0.5
|
tbb-usability-website, TorBrowserTeam201512
|
reopened
|
tbb-team
|
defect
|
High
|
| #17999 |
Changed default GUI font might help fingerprinting JA Windows users
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #18040 |
Torbutton showed Tor as disabled randomly
|
tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #18044 |
Prompt if Tor Browser is zoomed
|
tbb-fingerprinting-resolution, tbb-usability, tbb-bounty, tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #18047 |
Performance: Memory leaking in Tor Browser
|
tbb-performance-leaking
|
new
|
tbb-team
|
defect
|
Medium
|
| #18080 |
CORS header 'Access-Control-Allow-Origin' missing
|
tbb-usability-website, TorBrowserTeam202006
|
new
|
tbb-team
|
defect
|
Medium
|
| #18090 |
Torcrazybutton eats all memory and crashes Tor Browser
|
tbb-crash, tbb-performance-leaking, tbb-oom, tbb-torbutton, gitlab-tb-torbutton
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #18097 |
Font fingerprinting defenses roadmap (parent ticket)
|
tbb-fingerprinting-fonts, tbb-fingerprinting-os
|
new
|
tbb-team
|
defect
|
Medium
|
| #18101 |
IP leak from Windows/macOS UI dialog with URI
|
tbb-disk-leak, tbb-proxy-bypass, TorBrowserTeam201907
|
needs_revision
|
arthuredelstein
|
defect
|
Medium
|
| #18112 |
TorButton logs + Tor logs = timezone leak
|
tor tbb-torlauncher timezone-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #18166 |
TBB continuously updates its Custom Destinations file on Win7
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #18172 |
Emoji support is broken in Tor Browser 5.5
|
tbb-fingerprinting-fonts, tbb-usability-website, tbb-5.5-regression, TorBrowserTeam201603
|
needs_revision
|
tbb-team
|
defect
|
Medium
|
| #18186 |
tor browser updater handles full disk poorly
|
tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #18199 |
Firefox icon for browser after update
|
tbb-branding
|
assigned
|
mcs
|
defect
|
Medium
|
| #18205 |
Restrict font whitelist patch to apply only to non-chrome contexts?
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #18218 |
The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer)
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #18231 |
Torbutton keeps forgetting which cookies I would like to protect
|
tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #18273 |
CSS animations provide high resolution timer
|
tbb-fingerprinting-time-highres
|
new
|
tbb-team
|
defect
|
Medium
|
| #18283 |
Usage of native GUI controls for web content rendering allows fingerprinting
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #18292 |
staged updates fail on Windows
|
TorBrowserTeam201702, tbb-update
|
assigned
|
mcs
|
defect
|
Medium
|
| #18326 |
Creating incremental MAR files should not include Tor Browser version in meta data
|
tbb-rbm, tbb-update, gitlab-tb-tor-browser-build
|
new
|
tbb-team
|
defect
|
Medium
|
| #18334 |
Test cases for OCSP isolation
|
tbb-testcase
|
new
|
tbb-team
|
defect
|
Medium
|
| #18364 |
Tor Browser in Gnu+Linux doesn't support Dingbats properly
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
High
|
| #18375 |
HTTPSEverywhere/NoScript becomes disabled and not shown in about:addons after some launches.
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
Medium
|
| #18376 |
Accessibility APIs in Firefox
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #18532 |
Now search.disconnect.me through catchall too
|
tbb-linkability
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #18542 |
Firefox extensions are not downloable via right-click in Tor Browser
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #18552 |
timing oracle for rendezvouz circuits
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Very Low
|
| #18559 |
Number of logical processors is detectable from web content
|
tbb-fingerprinting, ff52-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #18587 |
"Download an external file type" doesn't work as expected
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #18589 |
Tor browser writes SiteSecurityServiceState.txt with usage history
|
tbb-disk-leak
|
assigned
|
tbb-team
|
defect
|
High
|
| #18609 |
Partial downloads fail silently.
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #18778 |
TBB hangs with 100% CPU when cancelling ftp download or http channel Listener OnDataAvailable contract violation
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #18860 |
Reply button text and text editing Dingbats in Trac are not visible on Gnu+Linux TBB
|
ff45-esr, tbb-usability, tbb-fingerprinting-fonts, tbb-regression, tbb-6.0-issues, TorBrowserTeam201609, tbb-rbm
|
needs_information
|
tbb-team
|
defect
|
High
|
