| #11506 |
Users are confused by the 2000-01-01 00:00 UTC timestamp
|
tbb-helpdesk-frequent, TorBrowserTeam201601, GeorgKoppen201601, tbb-rbm, AffectsTails
|
new
|
tbb-team
|
defect
|
Medium
|
| #11698 |
Decide how to incorporate Tor Browser Manual pages into Tor Browser
|
tbb-manual, SponsorO
|
new
|
|
defect
|
Medium
|
| #11935 |
Strange fallback font behavior on Mac and Windows
|
tbb-fingerprinting-fonts, tbb-firefox-patch
|
assigned
|
|
defect
|
Medium
|
| #12094 |
Disappearing bookmarks
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #12113 |
Building libevent/openssl on Windows without exception handling would reduce dependencies
|
tbb-rbm
|
new
|
erinn
|
defect
|
Low
|
| #12387 |
(Some) Pluggable Transport binaries are not stripped
|
tbb-testcase, tbb-rbm
|
assigned
|
|
defect
|
Medium
|
| #12418 |
TBBs with UBSan create lots of errors when running
|
tbb-security, TorBrowserTeam201711
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #12449 |
Firefox is insecure, it can't used with Tor
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #12472 |
HTTPS-Everywhere should not dump URLs to stdout by default
|
tbb-disk-leak
|
new
|
zyan
|
defect
|
High
|
| #12481 |
Tor Browser crashes on shutdown on Linux and Mac OS X debug builds
|
tbb-crash, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #12511 |
Skip German exits when using Youtube
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #12514 |
Tor Button does not work unless Navigation toolbar is enabled
|
tbb-usability, tbb-torbutton, tbb-easy
|
new
|
tbb-team
|
defect
|
Medium
|
| #12594 |
Languages for displaying web pages are not saved in Options
|
tbb-usability, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
| #12683 |
Permissions in nsIPermissionManager aren't cleared with TorButton's "New Identity"
|
tbb-linkability, tbb-newnym, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #12736 |
DLL hijacking vulnerability in TBB
|
tbb-security, TorBrowserTeam201608
|
new
|
tbb-team
|
defect
|
High
|
| #12814 |
No space left in /var prevents Tor Browser from starting properly
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #12977 |
Fix Firefox's Full Screen Permissions Prompt
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
High
|
| #12995 |
default font seems seems to leak system locale information
|
tbb-fingerprinting-locale
|
new
|
tbb-team
|
defect
|
Medium
|
| #13012 |
Reviewing Bug #3229: Make content pref service memory-only + clearable
|
tbb-disk-leak
|
assigned
|
boklm
|
defect
|
Medium
|
| #13018 |
Math routines are OS fingerprintable
|
tbb-fingerprinting-os-version, ff31-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #13056 |
Some stack canaries are still missing on Tor Browser binaries
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
| #13065 |
counter downgrade / stale mirror attacks on RecommendedTBBVersions - sign / verify tbb versions file
|
tbb-security, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #13236 |
investigate Firefox SSL for things that might allow user tracking
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #13309 |
Make it clearer that the Tor Browser update download is happening over Tor
|
tbb-usability, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #13367 |
Rate limit gyroscope sampling frequency on FF mobile
|
tbb-security, tbb-fingerprinting, tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
| #13378 |
Addon icons get added/reordered in the toolbar
|
tbb-usability, ff31-esr
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #13400 |
Canvas Fingerprinting: fonts
|
tbb-testcase, tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
High
|
| #13510 |
Master password can't be changed from default
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #13543 |
HTML5 media support may lead to fingerprinting
|
tbb-fingerprinting, TorBrowserTeam201910
|
new
|
tbb-team
|
defect
|
High
|
| #13727 |
BridgeDB should not distribute Tor Browser's default bridges
|
bridgedb-dist, tbb-bridges, anti-censorship-roadmap-september, s30-o23a1
|
assigned
|
|
defect
|
Medium
|
| #13775 |
Tor Browser won't open with OpenVPN
|
tbb-helpdesk-frequent
|
new
|
tbb-team
|
defect
|
Medium
|
| #13854 |
"view page source" isn't cleared/cleaned when click "create new identity"
|
tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #13893 |
Torbrowser crashes on start when using MS EMET 5.x
|
tbb-security, tbb-crash, tbb-usability-stoppoint-app, fuck-mingw-gcc, GeorgKoppen201609, TorBrowserTeam201610, ff52-esr
|
assigned
|
tbb-team
|
defect
|
High
|
| #13926 |
No certificate hierarchy
|
tbb-usability
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #14089 |
Google Drive/Docs do not work in Tor Browser
|
tbb-usability-website, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #14098 |
TBB still doesn't round windows in some cases
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #14246 |
Can't book room in Hotel Valencia Center with Tor Browser
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #14269 |
Imported certificate doesn't works at all
|
TBB, certificate
|
new
|
tbb-team
|
defect
|
High
|
| #14389 |
little-t-tor: Provide support for better TBB UI of hidden service client authorization
|
tor-hs, tbb-usability, ux-team, hs-auth, network-team-roadmap-september, 042-deferred-20190918
|
needs_revision
|
tbb-team
|
defect
|
Medium
|
| #14390 |
Browser configuration fingerprinting
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
High
|
| #14393 |
Users may be confused by relocated directories
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #14429 |
Automated rounding of content window dimensions
|
tbb-fingerprinting-resolution, tbb-torbutton
|
needs_revision
|
arthuredelstein
|
defect
|
Medium
|
| #14633 |
Default NoScript settings says "Allow Scripts Globally" is "dangerous"
|
tbb-usability uxsprint2015
|
new
|
tbb-team
|
defect
|
Medium
|
| #14686 |
Consolidate or de-emphasize our many download pages
|
tbb-usability-stoppoint-website, uxsprint2015, bridgedb-ui, defer-new-website, ux-team
|
needs_review
|
traumschule
|
defect
|
High
|
| #14923 |
Tor Launcher should have accessibility support.
|
ux-team, tbb-usabiity
|
needs_information
|
brade
|
defect
|
Medium
|
| #14924 |
Warn users before they install any addons
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #14936 |
about:license should show be adapted for Tor Browser
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
| #14939 |
Support ipv6 addresses in Tor Circuit DIsplay
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #14941 |
Localize the Tor Browser about dialog properly
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
| #14947 |
Torbrowser 4.0.3 lacks required "user_pref" preferences of TorButton on fresh extension's installation.
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Low
|
| #14985 |
NoScript Clickjacking warning when clicking on embedded content
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
High
|
| #15030 |
Tor Browser 4.5a4 does not cope with certain self signed certificate setups.
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #15164 |
"Print to file" saves filename and most recent printer in prefs
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #15239 |
Add hyperlinks in tor circuit display to show "more info" about relays
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #15456 |
Prevent incremental updates from failing for Linux hackers
|
tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #15470 |
cannot edit the certificates in Tor browser,
|
tbb-security, CNNIC
|
reopened
|
tbb-team
|
defect
|
Very High
|
| #15474 |
Quantize innerWidth/Height when pages are zoomed
|
tbb-fingerprinting-resolution, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #15499 |
Onion sites circuits are not properly isolated to URL bar domain
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
High
|
| #15514 |
Trim the NoScript whitelist
|
tbb-security, noscript
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #15532 |
Tor Browser 4.5 displays signature validation error during update
|
tbb-firefox-patch, ff38-esr, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #15537 |
Tor Browser 4.5a5 fails to maximize
|
tbb-usability, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #15563 |
ServiceWorkers violate first party isolation, probably
|
tbb-linkability, ff78-esr, BugSmashFund
|
new
|
tbb-team
|
defect
|
High
|
| #15569 |
Web Notification API icons get no first party
|
tbb-linkability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #15687 |
Make Tor Browser work with AppLocker
|
tbb-security, tbb-usability-stoppoint-app
|
new
|
tbb-team
|
defect
|
Medium
|
| #15713 |
toggling DisableNetwork during bootstrap causes delay
|
tor-client, bootstrap, delay, sponsor8-maybe, tbb-needs
|
accepted
|
arma
|
defect
|
Medium
|
| #15715 |
spurious "Network is unreachable" error after setting DisableNetwork=1
|
tor-client, bootstrap, sponsor8-maybe, disablenetwork, tbb-needs
|
accepted
|
arma
|
defect
|
Medium
|
| #15797 |
Add some explanation of certificate storage being disabled
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #15802 |
add automated tests for svg.in-content.enabled
|
tbb-testcase, ff60-esr
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #15825 |
webgl.disable-extensions true about:config setting may allow DoS and breaks websites
|
tbb-security, tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #15882 |
Tor Browser shows up as Firefox in Ubuntu dash/launcher
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
| #15908 |
Compose key doesn't work when GTK_IM_MODULE=xim
|
tbb-usability, tbb-4.5-regression
|
new
|
tbb-team
|
defect
|
Medium
|
| #15954 |
Canvas permission and HTTP auth still use FQDN isolation
|
tbb-usability-website, tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #16028 |
Many users seem to be failing incremental updates to 4.5.1
|
tbb-update
|
new
|
tbb-team
|
defect
|
High
|
| #16029 |
Many update downloads for 4.0.8
|
tbb-update
|
new
|
tbb-team
|
defect
|
High
|
| #16110 |
Improve Time Resolution Defense
|
tbb-fingerprinting-time-highres
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #16149 |
The newChannel() API is deprecated and broken in Tor Browser based on ESR 60
|
tbb-torbutton, ff60-esr
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #16250 |
Configuring the Torbutton in Tor Browser 4.5.1 on Mac with VoiceOver does not work!
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #16312 |
Limit font queries per URL bar domain
|
tbb-fingerprinting-fonts
|
needs_information
|
arthuredelstein
|
defect
|
Medium
|
| #16327 |
NavigatorLanguage API needs a testcase for intl pref
|
tbb-testcase
|
assigned
|
boklm
|
defect
|
Medium
|
| #16364 |
Add an option to resize the browser window to the "safe default"
|
tbb-usability, tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #16453 |
View Source doesn't work on Tor Browser with HTTP AUTH
|
tbb-firefox-patch, tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #16456 |
screen size fingerprint with findbar panel/bookmarks toolbar
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #16465 |
windows get resized when not desired
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #16516 |
TBB doesn't use page title when bookmarking by dragging globe/lock icon
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Low
|
| #16607 |
Allow SVG for extensions, even on "high" security level
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #16621 |
Can we merge torbutton_do_new_identity with Clear Private Data?
|
tbb-torbutton-conversion
|
new
|
tbb-team
|
defect
|
Medium
|
| #16672 |
Text rendering allows font fingerprinting
|
tbb-fingerprinting-fonts, tbb-5.5, TorBrowserTeam201603
|
assigned
|
arthuredelstein
|
defect
|
Medium
|
| #16686 |
Migrate all font fingerprinting patches to tor-browser.git
|
tbb-fingerprinting-fonts, TorBrowserTeam201603
|
new
|
arthuredelstein
|
defect
|
Medium
|
| #16693 |
Isolate TLS Channel-Bound Cookies
|
tbb-linkability, ff78-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #16740 |
Font defense in 5.0a4 crashes OS X 10.6.8
|
tbb-crash, tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #16743 |
Reconsider "Add Start Menu & Desktop shortcuts" option (Windows)
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #16757 |
Verify that new DOM properties are really disabled
|
tbb-fingerprinting, tbb-5.0-regression, TorBrowserTeam201609
|
assigned
|
boklm
|
defect
|
Medium
|
| #16778 |
"Sign In To Sync..." still appears in TBB Tools menu and about:preferences#sync
|
tbb-usability
|
needs_information
|
mcs
|
defect
|
Medium
|
| #16812 |
Tor Browser leaks updater temp files on OS X
|
tbb-update
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #16886 |
"Add-on compatibility check dialog" contains Firefox logo
|
tbb-branding
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #16888 |
Regression tests for Bug #2950 (Make Permissions Manager memory-only) never fails
|
tbb-testcase
|
new
|
tbb-team
|
defect
|
Medium
|
| #16920 |
Referer Header should be disabled for new tabs
|
tbb-linkability
|
needs_review
|
tbb-team
|
defect
|
High
|
| #16926 |
Multiple OS: Tor Browser leaks domains to system DNS management.
|
tbb-security
|
new
|
tbb-team
|
defect
|
Very High
|
| #16936 |
Circuit display should show original circuit for each tab
|
tbb-torbutton, tbb-circuit-display
|
new
|
tbb-team
|
defect
|
Medium
|
| #16981 |
NoScript Option
|
noscript, tbb-usability
|
assigned
|
ma1
|
defect
|
Medium
|
