| #465 |
More fine-grained read/write control of formfills
|
tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
enhancement
|
Low
|
| #664 |
Torbutton should not present custom certs if tor is enabled
|
tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
enhancement
|
High
|
| #940 |
Multiple Identity Support
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #975 |
Torbutton prevents PKCS#12 import/export
|
tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #2340 |
protect users against freeze, replay and version-rollback attacks
|
tbb-security, tbb-sign, tbb-rbm, gitlab-tb-tor-browser-build
|
new
|
tbb-team
|
defect
|
Very High
|
| #2739 |
Clear Memory-Only Intermeditate Cert Store
|
tbb-torbutton, tbb-newnym, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #2940 |
Adapt browser time based on tor's notion of clock skew...
|
tbb-fingerprinting-time-skew, tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
enhancement
|
High
|
| #3544 |
Provide Linux users with help for getting Tor Browser icon added to menu
|
ux-team, tbb-parity
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #3600 |
Prevent redirects from transmitting+storing cookies+identifiers
|
tbb-linkability, tbb-testcase, tbb-torbutton, TorBrowserTeam201901, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #3652 |
Export clock skew opinion as getinfo command
|
small-feature, needs-proposal, tor-client, clock-skew, 032-unreached, tbb-needs
|
needs_revision
|
|
enhancement
|
High
|
| #5182 |
Spanish TBB-Firefox includes ‘Wikipedia (en)’ search engine, but not ‘Wikipedia (es)’
|
translation, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Low
|
| #5184 |
Spanish TBB contains all Torbutton and Tor Launcher locale files
|
tbb-rbm, gitlab-tb-tor-browser-build
|
new
|
tbb-team
|
defect
|
Low
|
| #5203 |
Setting Tor Browser as default browser does not work in Wndows 7
|
tbb-usability, tbb-helpdesk-frequent, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #5288 |
Clickjacking + popups subvert TBB url-bar isolation
|
tbb-linkability, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #5556 |
magnet uri support
|
tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #5791 |
Gather apparmor/selinux/seatbelt profiles for each component of TBB
|
tbb-security, apparmor
|
new
|
tbb-team
|
project
|
Medium
|
| #5798 |
Improve persistence and WebFont compatibility of font patch
|
tbb-fingerprinting-fonts, tbb-testcase
|
new
|
tbb-team
|
defect
|
High
|
| #5915 |
Write patch to make socks handshakes succeed instantly
|
needs-proposal, tor-client, intro, performance, application, experiment, tbb-wants?, performance?, ux, 042-deferred-20190918, 043-deferred
|
needs_revision
|
|
enhancement
|
Medium
|
| #6217 |
Mozilla updates queries happen at regular intervals
|
tbb-fingerprinting, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #6948 |
Shared memory for zygote mind meld
|
tbb-security, tbb-sandboxing
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #7046 |
TBB Comfort loader when connecting to Tor Hidden Services
|
tbb-usability, tbb-torbutton, ux-team, gitlab-tb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #7178 |
NoScript (2.5.7) "reset" button does not use TBB defaults
|
tbb-usability, tbb-torbutton, noscript, gitlab-tb-torbutton
|
new
|
tbb-team
|
enhancement
|
Low
|
| #7258 |
remove 'family friendly' search filtering from startpage search
|
tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #7449 |
TorBrowser creates temp files in Linux /tmp & Windows %temp% and OSX(various places) during the file downloads dialog & when using internal browser video player
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
High
|
| #7501 |
Audit PDF.js
|
tbb-security
|
new
|
tbb-team
|
task
|
Medium
|
| #7588 |
Determine what features are affected by "Hardware Acceleration" and how
|
tbb-fingerprinting
|
new
|
tbb-team
|
task
|
Medium
|
| #7637 |
Alter "New Identity" to make use of onCacheEntryDoomed if that's still needed
|
tbb-newnym, tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #7921 |
Remove/hide fingerprintable UI options
|
tbb-fingerprinting, tbb-usability, ux-team
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #7956 |
Tor uses Roaming (remote) %APPDATA% instead of %LOCALAPPDATA%
|
tor-client, win32, needs-design, AppData, Roaming, Local, Windows, tbb-disk-leak
|
assigned
|
tbb-team
|
defect
|
High
|
| #8213 |
spoof history.length - browser.sessionhistory.max_entries
|
tbb-linkability, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Low
|
| #8337 |
Trusteer crashes Tor Browser
|
tbb-crash, tbb-7.0-frequent
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #8528 |
Investigate failure of test_async_notification_404.js and fix it
|
tbb-test
|
new
|
tbb-team
|
defect
|
Medium
|
| #8557 |
Audit and possibly enable safebrowsing
|
tbb-pref, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #8558 |
Re-verify app-launching defenses on Windows
|
tbb-rebase-regression
|
assigned
|
tbb-team
|
task
|
High
|
| #8560 |
100% CPU usage in Tor Browser?
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #8646 |
Implement Courgette or Zucchini support for efficient TBB updates
|
tbb-update
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #8695 |
GVFS metadata file contains TBB filename/downloaded URLs (Debian Linux)
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
High
|
| #8696 |
.xsession-errors file contains Tor Browser related warning (Debian Linux)
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
High
|
| #8697 |
.bash_history contains traces of TBB use (Debian Linux)
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8706 |
.recently-used.xbel contains filenames if browser stored them to disk
|
backport-to-mozilla, tbb-disk-leak, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #8770 |
Verify that @font-face fallback fonts can't be probed
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
task
|
High
|
| #8916 |
Windows Prefetch records the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8918 |
Windows paging file contains Tor Browser Bundle filename
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8919 |
Windows Registry contains path to Tor Browser Bundle executable
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8920 |
Windows Search indexes the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8921 |
Windows Thumbnail Cache contains Onion Logo icon
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8982 |
Apple System Log (ASL) files contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8983 |
OS X Crash Reporter and Diagnostic Messages contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8984 |
OSX FSEvents API files contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8985 |
OS X HFS+ files may contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8986 |
OS X preference files contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8988 |
Spotlight and mds may have indexed the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8989 |
OS X swap file may contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #8990 |
OS X per-user temp files contain traces of the Tor Browser Bundle
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #9070 |
Verify NSIS script does not create additional traces
|
tbb-disk-leak
|
new
|
tbb-team
|
task
|
Medium
|
| #9456 |
Reset file attribute information after usage
|
tbb-disk-leak
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #9516 |
Show Tor log in TorBrowser
|
tbb-usability
|
new
|
brade
|
enhancement
|
Medium
|
| #9521 |
"new identity" leaks memory in eventSuppressor.suppressEventHandling()
|
tbb-newnym, interview, tbb-torbutton, ff78-esr, tbb-performance-leaking, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #9541 |
"Work Offline" button should stop/start tor (as well)
|
tbb-usability, ux-team
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #9575 |
Rename "New Identity"
|
tbb-newnym, tbb-torbutton, ux-team, user-feedback, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #9675 |
Provide feedback mechanism for clock-skew and other bad problems
|
tbb-3.0, extdev-interview, tbb-helpdesk-frequent, tbb-usability, AffectsTails
|
assigned
|
brade
|
defect
|
High
|
| #9693 |
There should be a way to prevent HTTPS Everywhere to connect to check.t.o on startup
|
tbb-torbutton, AffectsTails
|
new
|
zyan
|
defect
|
Medium
|
| #9783 |
New Identity does not always clear all OCSP/favicon related network activity
|
tbb-linkability, tbb-newnym, interview, tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #9888 |
Add link to Tor Q&A site on about:tor page
|
tbb-3.0, tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #9997 |
remote_tor_check fails open
|
tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
enhancement
|
Low
|
| #10025 |
TBB 3.x's ChangeLog pretends the world started at TBB 3.0a1
|
tbb-3.0
|
new
|
tbb-team
|
defect
|
Medium
|
| #10059 |
capture tor log messages before control connection is opened
|
tbb-usability, extdev-interview, tbb-needs, 034-triage-20180328, 035-removed-20180711
|
new
|
|
enhancement
|
High
|
| #10299 |
Check whether font feature properties are problematic
|
tbb-fingerprinting-fonts, tbb-testcase
|
new
|
tbb-team
|
task
|
Medium
|
| #10368 |
Review and audit Mozilla Sync
|
tbb-usability
|
new
|
tbb-team
|
task
|
Medium
|
| #10388 |
TBB should disable "New Private Window" menu option if disk history is disabled
|
tbb-usability, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
| #10394 |
Torbrowser's updater updates HTTPS-everywhere
|
tbb-security, https-everywhere, TorBrowserTeam202006R
|
needs_review
|
tbb-team
|
task
|
Medium
|
| #10397 |
Torbrowser's updater integrates additional protections from Thandy's threat model
|
tbb-security, tbb-update
|
new
|
tbb-team
|
project
|
Medium
|
| #10399 |
Tor Browser should be visually distinguished from Firefox to prevent user error
|
tbb-usability, ux-team
|
new
|
tbb-team
|
enhancement
|
Very Low
|
| #10408 |
Obvious version information for extracted Tor Browser
|
tbb-3.0, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #10416 |
Tor won't start on Windows when path contains non-ascii characters
|
tor-client, windows, unicode, win32, tbb-needs, 042-should, 043-deferred, 044-deferred
|
assigned
|
ahf
|
defect
|
High
|
| #10426 |
"new identity" button causes in-progress downloads to be aborted
|
tbb-3.0, tbb-usability, tbb-newnym, tbb-easy, tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #10439 |
Allow TBB 3.x to run multiple times in parallel
|
tbb-3.0, tbb-usability
|
new
|
brade
|
enhancement
|
Medium
|
| #10493 |
History not being deleted in TBB after disabling and enabling Private Browsing Mode
|
tbb-torbutton, tbb-newnym, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #10498 |
Get only the NoScript we want to our users
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
Medium
|
| #10603 |
Make tor log available if tor exited unexpectedly
|
tbb-usability, extdev-interview
|
new
|
brade
|
enhancement
|
Medium
|
| #10607 |
Tor Browser Bundle 3.5 holds open files (gvfsd-metadata)
|
tbb-3.5
|
new
|
tbb-team
|
defect
|
Medium
|
| #10806 |
Tor Launcher should be able to detect proxies automatically
|
tbb-usability-stoppoint-wizard
|
new
|
brade
|
enhancement
|
Medium
|
| #10839 |
Block 127.0.0.0/8, RFC1918, and others ranges (for Non-Tor SOCKS proxies)
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
| #10888 |
Mozilla trademarks still remain in some about: urls
|
tbb-branding, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
| #10952 |
Tor Browser leaves developer windows open after New Identity
|
tbb-newnym, tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #10980 |
Build the Tor Browser User Manual when building Tor Browser
|
SponsorO, tbb-rbm, gitlab-tb-tor-browser-build
|
new
|
tbb-team
|
task
|
Medium
|
| #11031 |
TBB Test suite: check that the noscript extension is functional
|
tbb-testcase
|
assigned
|
tbb-team
|
task
|
Medium
|
| #11032 |
TBB Test suite: check that the new identity button works
|
tbb-testcase
|
assigned
|
tbb-team
|
task
|
Medium
|
| #11033 |
TBB Test suite: check that the tor browser supports WebSockets
|
tbb-testcase
|
assigned
|
tbb-team
|
task
|
Medium
|
| #11034 |
TBB Test suite: check that we can visit .onion web sites
|
tbb-testcase
|
assigned
|
tbb-team
|
task
|
Medium
|
| #11035 |
TBB Test suite: check browser localization
|
tbb-testcase
|
assigned
|
tbb-team
|
task
|
Medium
|
| #11037 |
TBB Test suite: remanence checks
|
tbb-testcase
|
assigned
|
tbb-team
|
task
|
Medium
|
| #11038 |
TBB Test suite: Fingerprint test
|
tbb-testcase
|
assigned
|
tbb-team
|
task
|
Medium
|
| #11083 |
TBB Test suite: check that tor-launcher is working
|
tbb-testcase
|
assigned
|
tbb-team
|
task
|
Medium
|
| #11190 |
obfsproxy shebang should point to "python2", not "python"
|
python version, obfsproxy, tbb, flashproxy
|
new
|
|
defect
|
Medium
|
| #11206 |
Tor Browser will not save Exceptions in the Firefox cookie manager
|
tbb-torbutton, gitlab-tb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #11214 |
Gmail talkgadget/hangouts/chat infinite loop
|
tbb-usability-website
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #11222 |
Inform user if reachable bridges drop below a configurable fraction/number
|
tbb-usability
|
needs_information
|
brade
|
defect
|
High
|
| #11333 |
Audit requestAnimationFrame() and possible timing attacks
|
tbb-firefox-patch, tbb-fingerprinting-time-highres
|
new
|
tbb-team
|
task
|
High
|
| #11406 |
UI for ExitNode country selection in tor-launcher
|
tbb-usability, tbb-helpdesk-frequent
|
new
|
brade
|
enhancement
|
Low
|
