| #18027 |
Tor Browser canvas fingerprint pop up should have "not ever" option and timeout
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18044 |
Prompt if Tor Browser is zoomed
|
tbb-fingerprinting-resolution, tbb-usability, tbb-bounty, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #18047 |
Performance: Memory leaking in Tor Browser
|
tbb-performance-leaking
|
new
|
tbb-team
|
defect
|
Medium
|
| #18080 |
CORS header 'Access-Control-Allow-Origin' missing
|
tbb-usability-website, ff60-esr-will-have
|
new
|
tbb-team
|
defect
|
Medium
|
| #18090 |
Torcrazybutton eats all memory and crashes Tor Browser
|
tbb-crash, tbb-performance-leaking, tbb-oom, tbb-torbutton
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #18097 |
Font fingerprinting defenses roadmap (parent ticket)
|
tbb-fingerprinting-fonts, tbb-fingerprinting-os
|
new
|
tbb-team
|
defect
|
Medium
|
| #18112 |
TorButton logs + Tor logs = timezone leak
|
tor tbb-torlauncher timezone-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #18120 |
UI for ExitNode country selection for this site in Torbutton
|
tbb-usability, tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18135 |
Make TorButton more accessible for users depending on screen readers
|
accessibility tor-usability, tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18166 |
TBB continuously updates its Custom Destinations file on Win7
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #18172 |
Emoji support is broken in Tor Browser 5.5
|
tbb-fingerprinting-fonts, tbb-usability-website, tbb-5.5-regression, TorBrowserTeam201603
|
needs_revision
|
tbb-team
|
defect
|
Medium
|
| #18186 |
tor browser updater handles full disk poorly
|
tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #18205 |
Restrict font whitelist patch to apply only to non-chrome contexts?
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #18218 |
The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer)
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #18231 |
Torbutton keeps forgetting which cookies I would like to protect
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #18273 |
CSS animations provide high resolution timer
|
tbb-fingerprinting-time-highres
|
new
|
tbb-team
|
defect
|
Medium
|
| #18283 |
Usage of native GUI controls for web content rendering allows fingerprinting
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #18325 |
We should not depend on rebuilding Firefox to get a new Tor Browser version out
|
tbb-rbm
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18326 |
Creating incremental MAR files should not include Tor Browser version in meta data
|
tbb-rbm, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #18334 |
Test cases for OCSP isolation
|
tbb-testcase
|
new
|
tbb-team
|
defect
|
Medium
|
| #18340 |
Make sure the controller password used in Torbutton is conforming to the spec
|
tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18364 |
Tor Browser in Gnu+Linux doesn't support Dingbats properly
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
High
|
| #18375 |
HTTPSEverywhere/NoScript becomes disabled and not shown in about:addons after some launches.
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
Medium
|
| #18376 |
Accessibility APIs in Firefox
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #18382 |
Tor Browser should offer an option to clear history in PBM
|
tbb-torbutton
|
reopened
|
tbb-team
|
enhancement
|
Medium
|
| #18532 |
Now search.disconnect.me through catchall too
|
tbb-linkability
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #18542 |
Firefox extensions are not downloable via right-click in Tor Browser
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #18552 |
timing oracle for rendezvouz circuits
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Very Low
|
| #18559 |
Number of logical processors is detectable from web content
|
tbb-fingerprinting, ff52-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #18583 |
Tor Browser doesn't show the circuit for downloads
|
tbb-usability, tbb-circuit-display
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18587 |
"Download an external file type" doesn't work as expected
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #18589 |
Tor browser writes SiteSecurityServiceState.txt with usage history
|
tbb-disk-leak
|
assigned
|
tbb-team
|
defect
|
High
|
| #18598 |
Make sure speech recognition is disabled by default (WebSpeech API)
|
tbb-fingerprinting, ff68-esr, TorBrowserTeam201809
|
assigned
|
tbb-team
|
task
|
Medium
|
| #18599 |
Make sure OffScreenCanvas API does not render moot our canvas fingerprinting protection
|
tbb-fingerprinting, GeorgKoppen201705, TorBrowserTeam201711, ff68-esr
|
assigned
|
tbb-team
|
task
|
High
|
| #18609 |
Partial downloads fail silently.
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #18778 |
TBB hangs with 100% CPU when cancelling ftp download or http channel Listener OnDataAvailable contract violation
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #18860 |
Reply button text and text editing Dingbats in Trac are not visible on Gnu+Linux TBB
|
ff45-esr, tbb-usability, tbb-fingerprinting-fonts, tbb-regression, tbb-6.0-issues, TorBrowserTeam201609
|
needs_information
|
tbb-team
|
defect
|
High
|
| #18867 |
Ship auto-updates for Tor Browser nightly channel
|
tbb-rbm, boklm201811, tbb-update, TorBrowserTeam201904
|
new
|
tbb-team
|
task
|
High
|
| #18946 |
Investigate fingerprinting potential of lack of H.264 support
|
tbb-fingerprinting, TorBrowserTeam201605
|
new
|
tbb-team
|
defect
|
Medium
|
| #18948 |
"Check for Tor Browser Update" label should by dynamic
|
tbb-usability, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #19037 |
Suppress content access to page visibility API
|
tbb-linkability, TorBrowserTeam201607
|
new
|
tbb-team
|
defect
|
Medium
|
| #19181 |
Firefox >= 48 ships with an ICU pre-compiled blob
|
ff52-esr, tbb-rbm
|
new
|
tbb-team
|
defect
|
Medium
|
| #19182 |
Find a better place for the Mac OS X SDK we need for our Tor Browser builds
|
tbb-rbm
|
new
|
tbb-team
|
task
|
Medium
|
| #19211 |
Ctrl+Shift+U shortcut on GTK systems does not work with focus on textboxes
|
tbb-usability, tbb-torbutton, tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #19214 |
After updating to TB 6.0.0, displayed search plugins reset
|
tbb-6.0-issues, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #19263 |
Tor browser is not rounding the width correctly in tiling WMs
|
tbb-fingerprinting-resolution
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #19276 |
Scrolling is slow and CPU intensive
|
tbb-6.0-issues, tbb-usability, tbb-performance, GeorgKoppen201606, TorBrowserTeam201606
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #19280 |
Replace or fork NoScript in the Tor Browser
|
tbb-security, noscript
|
reopened
|
tbb-team
|
project
|
Medium
|
| #19335 |
Tor circuit display shows example circuit instead of real
|
tbb-circuit-display, tbb-6.0-issues
|
new
|
tbb-team
|
defect
|
Medium
|
| #19356 |
TBB installer creates a folder with files in %temp% on Windows
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #19358 |
TBB can stop working on exit on Windows 7
|
tbb-crash
|
new
|
tbb-team
|
defect
|
Medium
|
| #19365 |
Don't appear "New Tab" Button
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #19369 |
On the privacy pane "Never Remember History" can't get selected
|
tbb-6.0-issues, tbb-regression, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #19417 |
asm.js files should be no linkability risk
|
tbb-linkability, GeorgKoppen201609, ff52-esr, TorBrowserTeam201805
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #19508 |
Proposal to drop Tor Browser's plugin patches
|
TorBrowserTeam201607, tbb-obsolete
|
new
|
tbb-team
|
defect
|
Medium
|
| #19510 |
Drop #5741 patch?
|
TorBrowserTeam201606, tbb-obsolete
|
new
|
tbb-team
|
defect
|
Medium
|
| #19511 |
Drop #16488 patch
|
tbb-obsolete, TorBrowserTeam201607
|
new
|
tbb-team
|
defect
|
Medium
|
| #19520 |
Investigate "No last modified time" entries visible in about:cache
|
tbb-linkability
|
new
|
tbb-team
|
task
|
Medium
|
| #19673 |
Tor won't connect with Kaspersky Internet Security
|
tbb-hang
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #19741 |
favicon in searchbar popup uses catchall circuit
|
tbb-linkability, ff52-esr, TorBrowserTeam201702
|
new
|
tbb-team
|
defect
|
Medium
|
| #19750 |
Sandboxing in Tor Browser
|
tbb-sandboxing, TorBrowserTeam201701
|
new
|
tbb-team
|
defect
|
Medium
|
| #19757 |
Make a menu to add onion and auth-cookie to TB
|
ux-team, tbb-usability, tor-hs
|
new
|
tbb-team
|
defect
|
Medium
|
| #19850 |
Disable Plaintext HTTP Clearnet Connections
|
tbb-security, https-everywhere
|
new
|
tbb-team
|
enhancement
|
High
|
| #19855 |
Downloading a Tor Browser update via Torbutton menu does not show the "update ready" icon on the hamburger menu
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #19876 |
Memory leak: a lot of private strings (New Identity doesn't help)
|
tbb-performance-leaking
|
new
|
tbb-team
|
defect
|
Medium
|
| #19915 |
TBB 6.5a2 unknown crash
|
tbb-crash
|
new
|
tbb-team
|
defect
|
Medium
|
| #19929 |
add a "Restore Tor Defaults" button to the Firefox proxy prefs dialog
|
tbb-torbutton
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #20025 |
document.characterSet enables fingerprinting of localization (only with HSTS?)
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #20031 |
web.whatsapp.com
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #20057 |
inconsistent Torbutton behavior when control port config is missing
|
tbb-torbutton,tbb-usability,TorBrowserTeam201609
|
new
|
tbb-team
|
defect
|
Medium
|
| #20100 |
persistent libxul.so bug crashing TBB Linux/64 (but probably a bug in locally linked shared object)
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
High
|
| #20102 |
use a data object for control port info
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #20146 |
Firefox bug - (CVE-2016-5284) ESR-45/Tor Browser certificate pinning bypass for addons.mozilla.org and other built-in sites
|
tbb-security, tls
|
needs_review
|
tbb-team
|
defect
|
Medium
|
| #20214 |
Ultrasound Cross Device Tracking techniques could be used to launch deanonymization attacks against some users
|
tbb-proxy-bypass
|
needs_information
|
tbb-team
|
defect
|
High
|
| #20254 |
Update marsigning-check.sh to cope with signed OS X MAR files
|
tbb-rbm, GeorgKoppen201806, TorBrowserTeam201806
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #20256 |
Cloudfront resources are isolated to the FQDN
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #20260 |
Add mitigating action to window size warning
|
tbb-usability, tbb-torbutton, tbb-fingerprinting-resolution
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #20308 |
TOR Browser crashes and dumps its core into my logs
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
High
|
| #20314 |
Make SVG click-to-play and support fallback
|
tbb-usability, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
| #20322 |
SafeSEH support for mingw-w64 for Tor Browser on Windows
|
tbb-security, TorBrowserTeam201711, GeorgKoppen201711
|
new
|
tbb-team
|
defect
|
Medium
|
| #20326 |
Tor Browser forgets HTTPS sometimes
|
tbb-security, https-everywhere
|
new
|
tbb-team
|
defect
|
Medium
|
| #20328 |
No cookies are visible, except...
|
tbb-linkability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #20329 |
Prevent add-ons updates from being written to the OS temporary directory
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #20339 |
tor-browser mozilla_user0 directory often appear in /tmp
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
High
|
| #20361 |
Investigate CFI means for usage in Tor Browser
|
tbb-security
|
new
|
tbb-team
|
task
|
Medium
|
| #20392 |
Checking version before authentication
|
tbb-torbutton, tbb-update
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #20393 |
Something uses catchall circuit
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #20497 |
Add --enable-tor-browser-data-in-home-dir configure option and code
|
TBB
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #20639 |
Bundle HTML pages inside Tor Browser
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #20743 |
Suggestion for additional checks on Tor browser bundle startup script
|
libxul.so bundle TBB
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #20744 |
add 'media.source.enabled' only where JS is enabled in security settings
|
tbb-security-slider, tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #20795 |
Torbrowser crashes if it can't DNS resolve the Socks5Proxy host in torrc
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #20800 |
In-browser shortcuts involving Shift don't work.
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #20807 |
Youtube video controls are not visible on highest security level in Tor Browser
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #20820 |
Add font support for Shift-JIS
|
tbb-fingerprinting-fonts, tbb-usability-website
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #20842 |
Proposal: Improve Tor Browser font whitelist / bundled fonts
|
tbb-usability, ux-team
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #20902 |
Torbutton's New Identity fails under high load
|
tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #20955 |
Tor Browser memory hardening
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
| #20957 |
Get DieHarder working with Tor Browser
|
tbb-security
|
needs_revision
|
tbb-team
|
defect
|
Medium
|
| #20971 |
Try building Tor Browser with SafeStack
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
