| #17091 |
Support our own hotfix mechanism
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
| #17123 |
Request for certificate is sent over the catch-all circuit
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #17140 |
When Tor Browser updater runs, prefs don't get updated
|
tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #17162 |
Latest TorBrowser youtube LIVE bug
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #17208 |
New reported disk leaks in Tor Browser
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #17216 |
Make Tor Browser's updater work over Hidden Services
|
tor-hs, tbb-security, TorBrowserTeam201901, tbb-update
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #17244 |
Low entropy PRNG usage in Tor Browser?
|
tbb-linkability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #17313 |
Crash in Canvas patch seen on OS X Tor Browser
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #17336 |
consider re-dzip'ing language packs
|
tbb-rbm
|
new
|
tbb-team
|
defect
|
Medium
|
| #17355 |
Investigate whether we should re-implement methods of JS Date to avoid fingerprinting
|
tbb-fingerprinting-locale
|
new
|
tbb-team
|
defect
|
Medium
|
| #17356 |
Tor Browser crash on OS X while receiving Facebook notification in background
|
tbb-crash
|
new
|
tbb-team
|
defect
|
Medium
|
| #17367 |
Swap files can contain evidence of browsing history
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #17400 |
Decide how to use the multi-lingual Tor Browser in the alpha/release series
|
ux-team, tbb-usability-stoppoint-wizard, TorBrowserTeam201608, AffectsTails
|
new
|
tbb-team
|
task
|
Medium
|
| #17412 |
High-precision timestamps in JS
|
tbb-fingerprinting-time-highres
|
new
|
tbb-team
|
defect
|
Medium
|
| #17418 |
Values in about:config that aren't disabled
|
tbb-pref
|
new
|
tbb-team
|
defect
|
Medium
|
| #17431 |
Investigate attacks in fingerprinting paper
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #17505 |
UBSan is freezing Tor Browser
|
tbb-security, tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #17507 |
LSan is crashing Tor Browser on shutdown
|
tbb-crash
|
new
|
tbb-team
|
task
|
Medium
|
| #17545 |
Cannot sign-in to Wunderlist on Tor Browser
|
tbb-usability-website
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #17560 |
gvfs-metadata contains a list of downloaded URLs
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #17569 |
Add uBlock Origin to the Tor Browser
|
new-addon, tbb-usability tbb-security, tbb-performance
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #17584 |
Disable bookmark backups (easy fix) (!)
|
tbb-easy, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #17594 |
Please reopen existing tabs and windows after upgrade
|
tbb-usability, tbb-update
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #17718 |
About:config values need changing
|
tbb-pref
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #17769 |
Think of ways to make Tor Browser multi-user aware
|
tbb-usability
|
new
|
tbb-team
|
task
|
Medium
|
| #17871 |
Loading PDF files from file:/// does not show images in them
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #17879 |
Activating the Flash Player is not working anymore since Tor Browser 5.0.5
|
tbb-usability-website, TorBrowserTeam201512
|
reopened
|
tbb-team
|
defect
|
High
|
| #17999 |
Changed default GUI font might help fingerprinting JA Windows users
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #18027 |
Tor Browser canvas fingerprint pop up should have "not ever" option and timeout
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18044 |
Prompt if Tor Browser is zoomed
|
tbb-fingerprinting-resolution, tbb-usability, tbb-bounty, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #18047 |
Performance: Memory leaking in Tor Browser
|
tbb-performance-leaking
|
new
|
tbb-team
|
defect
|
Medium
|
| #18080 |
CORS header 'Access-Control-Allow-Origin' missing
|
tbb-usability-website, TorBrowserTeam201912
|
new
|
tbb-team
|
defect
|
Medium
|
| #18090 |
Torcrazybutton eats all memory and crashes Tor Browser
|
tbb-crash, tbb-performance-leaking, tbb-oom, tbb-torbutton
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #18097 |
Font fingerprinting defenses roadmap (parent ticket)
|
tbb-fingerprinting-fonts, tbb-fingerprinting-os
|
new
|
tbb-team
|
defect
|
Medium
|
| #18112 |
TorButton logs + Tor logs = timezone leak
|
tor tbb-torlauncher timezone-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #18120 |
UI for ExitNode country selection for this site in Torbutton
|
tbb-usability, tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18135 |
Make TorButton more accessible for users depending on screen readers
|
accessibility tor-usability, tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18166 |
TBB continuously updates its Custom Destinations file on Win7
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #18172 |
Emoji support is broken in Tor Browser 5.5
|
tbb-fingerprinting-fonts, tbb-usability-website, tbb-5.5-regression, TorBrowserTeam201603
|
needs_revision
|
tbb-team
|
defect
|
Medium
|
| #18186 |
tor browser updater handles full disk poorly
|
tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #18205 |
Restrict font whitelist patch to apply only to non-chrome contexts?
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #18218 |
The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer)
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #18231 |
Torbutton keeps forgetting which cookies I would like to protect
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #18273 |
CSS animations provide high resolution timer
|
tbb-fingerprinting-time-highres
|
new
|
tbb-team
|
defect
|
Medium
|
| #18283 |
Usage of native GUI controls for web content rendering allows fingerprinting
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #18325 |
We should not depend on rebuilding Firefox to get a new Tor Browser version out
|
tbb-rbm
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18326 |
Creating incremental MAR files should not include Tor Browser version in meta data
|
tbb-rbm, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #18334 |
Test cases for OCSP isolation
|
tbb-testcase
|
new
|
tbb-team
|
defect
|
Medium
|
| #18340 |
Make sure the controller password used in Torbutton is conforming to the spec
|
tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18364 |
Tor Browser in Gnu+Linux doesn't support Dingbats properly
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
High
|
| #18375 |
HTTPSEverywhere/NoScript becomes disabled and not shown in about:addons after some launches.
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
Medium
|
| #18376 |
Accessibility APIs in Firefox
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #18382 |
Tor Browser should offer an option to clear history in PBM
|
tbb-torbutton
|
reopened
|
tbb-team
|
enhancement
|
Medium
|
| #18532 |
Now search.disconnect.me through catchall too
|
tbb-linkability
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #18542 |
Firefox extensions are not downloable via right-click in Tor Browser
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #18552 |
timing oracle for rendezvouz circuits
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Very Low
|
| #18559 |
Number of logical processors is detectable from web content
|
tbb-fingerprinting, ff52-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #18583 |
Tor Browser doesn't show the circuit for downloads
|
tbb-usability, tbb-circuit-display
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18587 |
"Download an external file type" doesn't work as expected
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #18589 |
Tor browser writes SiteSecurityServiceState.txt with usage history
|
tbb-disk-leak
|
assigned
|
tbb-team
|
defect
|
High
|
| #18598 |
Make sure speech recognition is disabled by default (WebSpeech API)
|
tbb-fingerprinting, ff78-esr
|
assigned
|
tbb-team
|
task
|
Medium
|
| #18599 |
Make sure OffScreenCanvas API does not render moot our canvas fingerprinting protection
|
tbb-fingerprinting, GeorgKoppen201705, TorBrowserTeam201711, ff78-esr
|
new
|
tbb-team
|
task
|
High
|
| #18609 |
Partial downloads fail silently.
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #18778 |
TBB hangs with 100% CPU when cancelling ftp download or http channel Listener OnDataAvailable contract violation
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #18820 |
Integrate code signing into the release process
|
tbb-6.0a5, TorBrowserTeam201702, GeorgKoppen201702
|
assigned
|
tbb-team
|
task
|
Very High
|
| #18860 |
Reply button text and text editing Dingbats in Trac are not visible on Gnu+Linux TBB
|
ff45-esr, tbb-usability, tbb-fingerprinting-fonts, tbb-regression, tbb-6.0-issues, TorBrowserTeam201609
|
needs_information
|
tbb-team
|
defect
|
High
|
| #18946 |
Investigate fingerprinting potential of lack of H.264 support
|
tbb-fingerprinting, TorBrowserTeam201605
|
new
|
tbb-team
|
defect
|
Medium
|
| #18948 |
"Check for Tor Browser Update" label should by dynamic
|
tbb-usability, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #19037 |
Suppress content access to page visibility API
|
tbb-linkability, TorBrowserTeam201607
|
new
|
tbb-team
|
defect
|
Medium
|
| #19181 |
Firefox >= 48 ships with an ICU pre-compiled blob
|
ff52-esr, tbb-rbm
|
new
|
tbb-team
|
defect
|
Medium
|
| #19182 |
Find a better place for the Mac OS X SDK we need for our Tor Browser builds
|
tbb-rbm
|
new
|
tbb-team
|
task
|
Medium
|
| #19211 |
Ctrl+Shift+U shortcut on GTK systems does not work with focus on textboxes
|
tbb-usability, tbb-torbutton, tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #19214 |
After updating to TB 6.0.0, displayed search plugins reset
|
tbb-6.0-issues, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #19263 |
Tor browser is not rounding the width correctly in tiling WMs
|
tbb-fingerprinting-resolution
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #19276 |
Scrolling is slow and CPU intensive
|
tbb-6.0-issues, tbb-usability, tbb-performance, GeorgKoppen201606, TorBrowserTeam201606
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #19280 |
Replace or fork NoScript in the Tor Browser
|
tbb-security, noscript
|
reopened
|
tbb-team
|
project
|
Medium
|
| #19335 |
Tor circuit display shows example circuit instead of real
|
tbb-circuit-display, tbb-6.0-issues
|
new
|
tbb-team
|
defect
|
Medium
|
| #19356 |
TBB installer creates a folder with files in %temp% on Windows
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #19358 |
TBB can stop working on exit on Windows 7
|
tbb-crash
|
new
|
tbb-team
|
defect
|
Medium
|
| #19365 |
Don't appear "New Tab" Button
|
tbb-usability
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #19369 |
On the privacy pane "Never Remember History" can't get selected
|
tbb-6.0-issues, tbb-regression, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #19508 |
Proposal to drop Tor Browser's plugin patches
|
TorBrowserTeam201607, tbb-obsolete
|
new
|
tbb-team
|
defect
|
Medium
|
| #19510 |
Drop #5741 patch?
|
TorBrowserTeam201606, tbb-obsolete
|
new
|
tbb-team
|
defect
|
Medium
|
| #19511 |
Drop #16488 patch
|
tbb-obsolete, TorBrowserTeam201607
|
new
|
tbb-team
|
defect
|
Medium
|
| #19520 |
Investigate "No last modified time" entries visible in about:cache
|
tbb-linkability
|
new
|
tbb-team
|
task
|
Medium
|
| #19673 |
Tor won't connect with Kaspersky Internet Security
|
tbb-hang
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #19741 |
favicon in searchbar popup uses catchall circuit
|
tbb-linkability, ff52-esr, TorBrowserTeam201702
|
new
|
tbb-team
|
defect
|
Medium
|
| #19750 |
Sandboxing in Tor Browser
|
tbb-sandboxing, TorBrowserTeam201701
|
new
|
tbb-team
|
defect
|
Medium
|
| #19850 |
Disable Plaintext HTTP Clearnet Connections
|
tbb-security, https-everywhere
|
new
|
tbb-team
|
enhancement
|
High
|
| #19855 |
Downloading a Tor Browser update via Torbutton menu does not show the "update ready" icon on the hamburger menu
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #19876 |
Memory leak: a lot of private strings (New Identity doesn't help)
|
tbb-performance-leaking
|
new
|
tbb-team
|
defect
|
Medium
|
| #19915 |
TBB 6.5a2 unknown crash
|
tbb-crash
|
new
|
tbb-team
|
defect
|
Medium
|
| #19929 |
add a "Restore Tor Defaults" button to the Firefox proxy prefs dialog
|
tbb-torbutton
|
assigned
|
tbb-team
|
defect
|
Medium
|
| #20025 |
document.characterSet leaks locale when HTML page does not specify its own encoding
|
tbb-fingerprinting-locale
|
new
|
tbb-team
|
defect
|
Medium
|
| #20031 |
web.whatsapp.com
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #20057 |
inconsistent Torbutton behavior when control port config is missing
|
tbb-torbutton,tbb-usability,TorBrowserTeam201609
|
new
|
tbb-team
|
defect
|
Medium
|
| #20100 |
persistent libxul.so bug crashing TBB Linux/64 (but probably a bug in locally linked shared object)
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
High
|
| #20102 |
use a data object for control port info
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #20146 |
Firefox bug - (CVE-2016-5284) ESR-45/Tor Browser certificate pinning bypass for addons.mozilla.org and other built-in sites
|
tbb-security, tls
|
needs_review
|
tbb-team
|
defect
|
Medium
|
| #20214 |
Ultrasound Cross Device Tracking techniques could be used to launch deanonymization attacks against some users
|
tbb-proxy-bypass
|
needs_information
|
tbb-team
|
defect
|
High
|
