#8919 |
Windows Registry contains path to Tor Browser Bundle executable
|
tbb-disk-leak
|
reopened
|
tbb-team
|
defect
|
Medium
|
#8920 |
Windows Search indexes the Tor Browser Bundle
|
tbb-disk-leak
|
reopened
|
tbb-team
|
defect
|
Medium
|
#8921 |
Windows Thumbnail Cache contains Onion Logo icon
|
tbb-disk-leak
|
reopened
|
tbb-team
|
defect
|
Medium
|
#8951 |
Get information about HS from within browser
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#8982 |
Apple System Log (ASL) files contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#8983 |
OS X Crash Reporter and Diagnostic Messages contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#8984 |
OSX FSEvents API files contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#8985 |
OS X HFS+ files may contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#8986 |
OS X preference files contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#8988 |
Spotlight and mds may have indexed the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#8989 |
OS X swap file may contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#8990 |
OS X per-user temp files contain traces of the Tor Browser Bundle
|
tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#8994 |
Always end TBB window titles in "- Tor Browser"
|
tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
Medium
|
#9018 |
Concerning debug assertions in the font patch
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
#9189 |
Tor Browser forgets zoom level
|
tbb-torbutton, tbb-fingerprinting-resolution, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
#9211 |
FTP download too difficult
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
#9334 |
Ship torbrowser with a tor-specifc firefox background theme ("Persona")
|
tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
#9345 |
enabling only the strongest ciphers in the tor browser to make cryptanalysis harder
|
encryption, https, cipher, suite, tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
High
|
#9451 |
de-anonymisation by readable @font-face CSS attribute - TBB settings update
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
#9456 |
Reset file attribute information after usage
|
tbb-disk-leak
|
new
|
tbb-team
|
enhancement
|
Medium
|
#9484 |
Allow setting of window dimensions in TBB
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
enhancement
|
Medium
|
#9521 |
"new identity" leaks memory in eventSuppressor.suppressEventHandling()
|
tbb-newnym, interview, tbb-torbutton, ff52-esr, tbb-performance-leaking
|
assigned
|
tbb-team
|
defect
|
Medium
|
#9541 |
"Work Offline" button should stop/start tor (as well)
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
#9783 |
New Identity does not always clear all OCSP/favicon related network activity
|
tbb-linkability, tbb-newnym, interview, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
#9790 |
The Torbutton startup observer component is sometimes not initialized
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Very High
|
#9800 |
tor browser still an option of default browser even after removal
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#9809 |
Re-disable Ctypes in TBB 7.0
|
tbb-3.0, tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
High
|
#9888 |
Add link to Tor Q&A site on about:tor page
|
tbb-3.0, tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
#9899 |
Revisit decision to disable rendering acceleration for everyone
|
tbb-3.0, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#9907 |
Viewing websites without Tor with Tor Browser: intranet, local, Tor-blocking sites
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#9924 |
Firefox bug - TBB queries the A record of the hostname of the machine it is running on.
|
tbb-firefox-patch,tbb-proxy-bypass
|
new
|
tbb-team
|
defect
|
Medium
|
#9936 |
TBB TorButton 'New Identity' with remote 'tor' says "It does not have access to the Tor Control Port."
|
tbb-newnym, extdev-interview, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#9997 |
remote_tor_check fails open
|
tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Low
|
#10025 |
TBB 3.x's ChangeLog pretends the world started at TBB 3.0a1
|
tbb-3.0
|
assigned
|
tbb-team
|
defect
|
Medium
|
#10137 |
ESR24 won't work without ctypes being enabled
|
tbb-3.0, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
#10334 |
Multiple problems with TBB3.0rc1
|
tbb-3.0, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#10388 |
TBB should disable "New Private Window" menu option if disk history is disabled
|
tbb-usability, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
#10393 |
Torbrowser updates are verified through the Tor consensus
|
tbb-security, tbb-update
|
new
|
tbb-team
|
project
|
Medium
|
#10394 |
Torbrowser's updater updates HTTPS-everywhere
|
tbb-security, TorBrowserTeam201805, https-everywhere
|
reopened
|
tbb-team
|
task
|
Medium
|
#10397 |
Torbrowser's updater integrates additional protections from Thandy's threat model
|
tbb-security, tbb-update
|
new
|
tbb-team
|
project
|
Medium
|
#10399 |
Tor Browser should be visually distinguished from Firefox to prevent user error
|
tbb-usability, ux-team
|
new
|
tbb-team
|
enhancement
|
Very Low
|
#10408 |
version information
|
tbb-3.0, tbb-usability, needs-triage
|
reopened
|
tbb-team
|
defect
|
Medium
|
#10426 |
"new identity" button causes in-progress downloads to be aborted
|
tbb-3.0, tbb-usability, tbb-newnym, tbb-easy, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#10467 |
URLs are leaked to third party if they contain typos
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
#10487 |
TBB OS X: Last directory recorded in /Users/User/Library/Preferences/
|
macosx, tbb-3.5, tbb-3.0, tbb-disk-leak, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#10493 |
History not being deleted in TBB after disabling and enabling Private Browsing Mode
|
tbb-torbutton, tbb-newnym
|
new
|
tbb-team
|
defect
|
High
|
#10575 |
Unused code confuses validator
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#10586 |
Login problems in a forum site
|
tbb-usability-website, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
#10607 |
Tor Browser Bundle 3.5 holds open files (gvfsd-metadata)
|
tbb-3.5, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#10756 |
TowBrowser should zero-out cleared partial downloads or not delete them at all
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
#10763 |
Torbrowser does not work on FreeBSD
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
#10773 |
TorBrowser Noscript plugin does not block HTML5 audio/video tags
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#10820 |
Create preferences for Firefox patches that need them
|
tbb-mozilla-merge, interview, tbb-bounty, tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
Medium
|
#10824 |
Using Firefox UI to remember history disables third party tracking/cookie protection
|
tbb-linkability, tbb-usability
|
reopened
|
tbb-team
|
defect
|
Medium
|
#10839 |
Block 127.0.0.0/8, RFC1918, and others ranges (for Non-Tor SOCKS proxies)
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
#10854 |
Limit IPv4 addresses to dotted-decimal form (as per RFC3986)
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
#10864 |
Please create a specific “Unable to connect” page
|
tbb-usability-stoppoint-navigation, tbb-branding, tbb-helpdesk-frequent, tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
#10888 |
Mozilla trademarks still remain in some about: urls
|
tbb-branding, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
#10925 |
white-list lightspark plugin (adobe flash alternative)
|
tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
Medium
|
#10952 |
Tor Browser leaves developer windows open after New Identity
|
tbb-newnym, tbb-torbutton
|
reopened
|
tbb-team
|
defect
|
Medium
|
#11095 |
allow storing passwords in TorBrowser
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
#11096 |
Randomize MAC address before start of Tor
|
tbb-security
|
assigned
|
tbb-team
|
enhancement
|
Medium
|
#11106 |
Additional protections for browsing hidden websites
|
tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
#11206 |
Regression: Torbutton 1.6.6.0 will not save Exceptions in the Firefox cookie manager
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#11214 |
Gmail talkgadget/hangouts/chat infinite loop
|
tbb-usability-website, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#11254 |
Tor Browser bundle v3.5 fails to clean up cancelled downloads in Temp folder
|
tbb-disk-leak, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
#11258 |
Toggling permissions.memory_only causes crash of Tor Browser
|
tbb-crash, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
#11293 |
Users are not able to log into http://www.bouyguestelecom.fr/mon-compte/
|
tbb-usability-website, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#11294 |
Users are not able to log into https://unseen.is
|
tbb-usability-website, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#11333 |
Audit requestAnimationFrame() and possible timing attacks
|
tbb-firefox-patch, tbb-fingerprinting-time-highres
|
new
|
tbb-team
|
task
|
High
|
#11506 |
Users are confused by the 2000-01-01 00:00 UTC timestamp
|
tbb-helpdesk-frequent, TorBrowserTeam201601, GeorgKoppen201601, tbb-rbm, AffectsTails
|
new
|
tbb-team
|
defect
|
Medium
|
#11511 |
Investigate why TorLauncher is sometimes not loaded when starting TBB
|
tbb-security
|
assigned
|
tbb-team
|
task
|
Medium
|
#11949 |
Randomize Tor Browser Fingerprint
|
tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
Medium
|
#12094 |
Disappearing bookmarks
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#12418 |
TBBs with UBSan create lots of errors when running
|
tbb-security, TorBrowserTeam201711
|
assigned
|
tbb-team
|
defect
|
Medium
|
#12420 |
Investigate deploying STACK to check for optimization-unstable code
|
tbb-security, TorBrowserTeam201711, GeorgKoppen201711
|
new
|
tbb-team
|
task
|
Medium
|
#12425 |
Investigate setjmp/longjmp-based exception handling for Tor Browser on Windows
|
tbb-security
|
new
|
tbb-team
|
task
|
Medium
|
#12427 |
Investigate Virtual Table Verification (VTV) hardening for Tor Browser on Linux and Windows
|
tbb-security
|
new
|
tbb-team
|
task
|
High
|
#12429 |
Enable Assertions in Tor Browser release builds
|
tbb-security, tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
Medium
|
#12449 |
Firefox is insecure, it can't used with Tor
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
#12481 |
Tor Browser crashes on shutdown on Linux and Mac OS X debug builds
|
tbb-crash, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
#12511 |
Skip German exits when using Youtube
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#12514 |
Tor Button does not work unless Navigation toolbar is enabled
|
tbb-usability, tbb-torbutton, tbb-easy
|
new
|
tbb-team
|
defect
|
Medium
|
#12594 |
Languages for displaying web pages are not saved in Options
|
tbb-usability, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#12653 |
Revisit JIT options
|
tbb-firefox-patch
|
new
|
tbb-team
|
task
|
High
|
#12682 |
Tor Browser's HTML5 canvas fingerprinting dialogue could use a "Revoke" button
|
tbb-usability, tbb-linkability, tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
Medium
|
#12683 |
Permissions in nsIPermissionManager aren't cleared with TorButton's "New Identity"
|
tbb-linkability, tbb-newnym, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
#12695 |
Audit Application Reputation feature
|
tbb-firefox-patch
|
new
|
tbb-team
|
task
|
Medium
|
#12736 |
DLL hijacking vulnerability in TBB
|
tbb-security, TorBrowserTeam201608
|
new
|
tbb-team
|
defect
|
High
|
#12740 |
TorButton menu items should be clearer in the UI
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
#12814 |
No space left in /var prevents Tor Browser from starting properly
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
#12820 |
Test+Recommend Tor Browser with MS EMET (Enhanced Mitigation Experience Toolkit)
|
tbb-security, tbb-isec-report, GeorgKoppen201610, TorBrowserTeam201610, ff52-esr
|
assigned
|
tbb-team
|
project
|
Medium
|
#12950 |
Backport Windows ASLR forcing patch
|
tbb-security
|
new
|
tbb-team
|
task
|
Medium
|
#12968 |
Specify HEASLR (High Entropy Address Space Layout Randomization) in MinGW-w64
|
tbb-security, tbb-rbm, boklm201811, TorBrowserTeam201908
|
needs_revision
|
tbb-team
|
enhancement
|
Very High
|
#12977 |
Fix Firefox's Full Screen Permissions Prompt
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
High
|
#12979 |
Opening new windows/resizing them with JavaScript should not leak screen size
|
tbb-usability, tbb-fingerprinting-resolution
|
new
|
tbb-team
|
enhancement
|
Medium
|
#12995 |
default font seems seems to leak system locale information
|
tbb-fingerprinting-locale
|
new
|
tbb-team
|
defect
|
Medium
|
#12999 |
Use one clock skew per URL bar domain
|
tbb-fingerprinting-time-skew
|
new
|
tbb-team
|
enhancement
|
Medium
|
#13018 |
Math routines are OS fingerprintable
|
tbb-fingerprinting-os-version, ff31-esr
|
new
|
tbb-team
|
defect
|
Medium
|
#13033 |
Apply mixed content blocking patch?
|
tbb-security
|
new
|
tbb-team
|
task
|
Medium
|