#11033 |
TBB Test suite: check that the tor browser supports WebSockets
|
tbb-testcase
|
new
|
boklm
|
task
|
Medium
|
#11034 |
TBB Test suite: check that we can visit .onion web sites
|
tbb-testcase
|
new
|
boklm
|
task
|
Medium
|
#11035 |
TBB Test suite: check browser localization
|
tbb-testcase
|
new
|
boklm
|
task
|
Medium
|
#11037 |
TBB Test suite: remanence checks
|
tbb-testcase
|
new
|
boklm
|
task
|
Medium
|
#11038 |
TBB Test suite: Fingerprint test
|
tbb-testcase
|
new
|
boklm
|
task
|
Medium
|
#11083 |
TBB Test suite: check that tor-launcher is working
|
tbb-testcase
|
new
|
boklm
|
task
|
Medium
|
#11095 |
allow storing passwords in TorBrowser
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
#11106 |
Additional protections for browsing hidden websites
|
tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
#11190 |
obfsproxy shebang should point to "python2", not "python"
|
python version, obfsproxy, tbb, flashproxy
|
new
|
|
defect
|
Medium
|
#11206 |
Regression: Torbutton 1.6.6.0 will not save Exceptions in the Firefox cookie manager
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#11214 |
Gmail talkgadget/hangouts/chat infinite loop
|
tbb-usability-website, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#11254 |
Tor Browser bundle v3.5 fails to clean up cancelled downloads in Temp folder
|
tbb-disk-leak, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
#11258 |
Toggling permissions.memory_only causes crash of Tor Browser
|
tbb-crash, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
#11293 |
Users are not able to log into http://www.bouyguestelecom.fr/mon-compte/
|
tbb-usability-website, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#11294 |
Users are not able to log into https://unseen.is
|
tbb-usability-website, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#11333 |
Audit requestAnimationFrame() and possible timing attacks
|
tbb-firefox-patch, tbb-fingerprinting-time-highres
|
new
|
tbb-team
|
task
|
High
|
#11406 |
UI for ExitNode country selection in tor-launcher
|
tbb-usability, tbb-helpdesk-frequent
|
new
|
brade
|
enhancement
|
Low
|
#11506 |
Users are confused by the 2000-01-01 00:00 UTC timestamp
|
tbb-helpdesk-frequent, TorBrowserTeam201601, GeorgKoppen201601, tbb-rbm, AffectsTails
|
new
|
tbb-team
|
defect
|
Medium
|
#11698 |
Decide how to incorporate Tor Browser Manual pages into Tor Browser
|
tbb-manual, SponsorO
|
new
|
|
defect
|
Medium
|
#11949 |
Randomize Tor Browser Fingerprint
|
tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
Medium
|
#12040 |
Please make a test connection to tor SOCKS port as part as Tor Launcher
|
tbb-helpdesk-frequent tbb-usability
|
new
|
brade
|
enhancement
|
Medium
|
#12094 |
Disappearing bookmarks
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#12107 |
Test hardening features on Linux
|
tbb-testsuite
|
new
|
boklm
|
enhancement
|
Medium
|
#12113 |
Building libevent/openssl on Windows without exception handling would reduce dependencies
|
tbb-rbm
|
new
|
erinn
|
defect
|
Low
|
#12420 |
Investigate deploying STACK to check for optimization-unstable code
|
tbb-security, TorBrowserTeam201711, GeorgKoppen201711
|
new
|
tbb-team
|
task
|
Medium
|
#12425 |
Investigate setjmp/longjmp-based exception handling for Tor Browser on Windows
|
tbb-security
|
new
|
tbb-team
|
task
|
Medium
|
#12427 |
Investigate Virtual Table Verification (VTV) hardening for Tor Browser on Linux and Windows
|
tbb-security
|
new
|
tbb-team
|
task
|
High
|
#12429 |
Enable Assertions in Tor Browser release builds
|
tbb-security, tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
Medium
|
#12449 |
Firefox is insecure, it can't used with Tor
|
tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
Medium
|
#12472 |
HTTPS-Everywhere should not dump URLs to stdout by default
|
tbb-disk-leak
|
new
|
zyan
|
defect
|
High
|
#12481 |
Tor Browser crashes on shutdown on Linux and Mac OS X debug builds
|
tbb-crash, tbb-firefox-patch
|
new
|
tbb-team
|
defect
|
High
|
#12511 |
Skip German exits when using Youtube
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#12514 |
Tor Button does not work unless Navigation toolbar is enabled
|
tbb-usability, tbb-torbutton, tbb-easy
|
new
|
tbb-team
|
defect
|
Medium
|
#12594 |
Languages for displaying web pages are not saved in Options
|
tbb-usability, needs-triage
|
new
|
tbb-team
|
defect
|
Medium
|
#12653 |
Revisit JIT options
|
tbb-firefox-patch
|
new
|
tbb-team
|
task
|
High
|
#12682 |
Tor Browser's HTML5 canvas fingerprinting dialogue could use a "Revoke" button
|
tbb-usability, tbb-linkability, tbb-firefox-patch
|
new
|
tbb-team
|
enhancement
|
Medium
|
#12683 |
Permissions in nsIPermissionManager aren't cleared with TorButton's "New Identity"
|
tbb-linkability, tbb-newnym, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
#12695 |
Audit Application Reputation feature
|
tbb-firefox-patch
|
new
|
tbb-team
|
task
|
Medium
|
#12736 |
DLL hijacking vulnerability in TBB
|
tbb-security, TorBrowserTeam201608
|
new
|
tbb-team
|
defect
|
High
|
#12740 |
TorButton menu items should be clearer in the UI
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
#12814 |
No space left in /var prevents Tor Browser from starting properly
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
#12950 |
Backport Windows ASLR forcing patch
|
tbb-security
|
new
|
tbb-team
|
task
|
Medium
|
#12977 |
Fix Firefox's Full Screen Permissions Prompt
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
High
|
#12979 |
Opening new windows/resizing them with JavaScript should not leak screen size
|
tbb-usability, tbb-fingerprinting-resolution
|
new
|
tbb-team
|
enhancement
|
Medium
|
#12995 |
default font seems seems to leak system locale information
|
tbb-fingerprinting-locale
|
new
|
tbb-team
|
defect
|
Medium
|
#12999 |
Use one clock skew per URL bar domain
|
tbb-fingerprinting-time-skew
|
new
|
tbb-team
|
enhancement
|
Medium
|
#13017 |
Determine if AudioBuffers/OfflineAudioContext are a fingerprinting vector
|
tbb-fingerprinting
|
new
|
arthuredelstein
|
task
|
High
|
#13018 |
Math routines are OS fingerprintable
|
tbb-fingerprinting-os-version, ff31-esr
|
new
|
tbb-team
|
defect
|
Medium
|
#13033 |
Apply mixed content blocking patch?
|
tbb-security
|
new
|
tbb-team
|
task
|
Medium
|
#13065 |
counter downgrade / stale mirror attacks on RecommendedTBBVersions - sign / verify tbb versions file
|
tbb-security, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
#13181 |
Add DNS proxy bypass tests for protocols in addition to ws://
|
tbb-mozilla-merge, ff38-esr
|
new
|
tbb-team
|
task
|
Medium
|
#13236 |
investigate Firefox SSL for things that might allow user tracking
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
#13309 |
Make it clearer that the Tor Browser update download is happening over Tor
|
tbb-usability, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
#13367 |
Rate limit gyroscope sampling frequency on FF mobile
|
tbb-security, tbb-fingerprinting, tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
#13510 |
Master password can't be changed from default
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
#13543 |
HTML5 media support may lead to fingerprinting
|
tbb-fingerprinting, TorBrowserTeam201910
|
new
|
tbb-team
|
defect
|
High
|
#13730 |
Make use of MAR files with more than one signature
|
tbb-security, tbb-update
|
new
|
tbb-team
|
enhancement
|
Medium
|
#13747 |
Block non .onion content on .onion addresses (mixed content blocking)
|
tbb-security, TorBrowserTeam201903
|
new
|
tbb-team
|
enhancement
|
High
|
#13775 |
Tor Browser won't open with OpenVPN
|
tbb-helpdesk-frequent
|
new
|
tbb-team
|
defect
|
Medium
|
#13854 |
"view page source" isn't cleared/cleaned when click "create new identity"
|
tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
#14089 |
Google Drive/Docs do not work in Tor Browser
|
tbb-usability-website, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#14098 |
TBB still doesn't round windows in some cases
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
#14181 |
Add option for ExitNodes / StrictNodes
|
tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
#14246 |
Can't book room in Hotel Valencia Center with Tor Browser
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
#14269 |
Imported certificate doesn't works at all
|
TBB, certificate
|
new
|
tbb-team
|
defect
|
High
|
#14390 |
Browser configuration fingerprinting
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
High
|
#14393 |
Users may be confused by relocated directories
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
#14633 |
Default NoScript settings says "Allow Scripts Globally" is "dangerous"
|
tbb-usability uxsprint2015
|
new
|
tbb-team
|
defect
|
Medium
|
#14638 |
Make it easier to add a bridge in network settings
|
uxsprint2015, tbb-usability-stoppoint-wizard, s32-o32a2
|
new
|
tbb-team
|
enhancement
|
Medium
|
#14676 |
Implement update verification via Tor consensus in Tor Browser
|
tbb-security, tbb-update
|
new
|
tbb-team
|
task
|
High
|
#14837 |
Support QRCode bridge entry and sharing in Tor Launcher
|
tbb-usability-stoppoint-wizard
|
new
|
brade
|
enhancement
|
Medium
|
#14924 |
Warn users before they install any addons
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
#14936 |
about:license should show be adapted for Tor Browser
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
#14939 |
Support ipv6 addresses in Tor Circuit DIsplay
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
#14941 |
Localize the Tor Browser about dialog properly
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
#14942 |
Tor Browser for BSDs
|
tbb-rbm
|
new
|
tbb-team
|
project
|
Medium
|
#14947 |
Torbrowser 4.0.3 lacks required "user_pref" preferences of TorButton on fresh extension's installation.
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Low
|
#14985 |
NoScript Clickjacking warning when clicking on embedded content
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
High
|
#15030 |
Tor Browser 4.5a4 does not cope with certain self signed certificate setups.
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
#15153 |
Warn users when websites are known to have issues with Tor
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
#15163 |
Some systems may cause external apps to override pdf.js?
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
#15164 |
"Print to file" saves filename and most recent printer in prefs
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
#15239 |
Add hyperlinks in tor circuit display to show "more info" about relays
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
#15456 |
Prevent incremental updates from failing for Linux hackers
|
tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
#15458 |
StrongSocksIsolation option (w/ virtual circuits?)
|
tor-client, needs-design, mike-can, intro, isolation, tbb-needs
|
new
|
|
enhancement
|
Low
|
#15474 |
Quantize innerWidth/Height when pages are zoomed
|
tbb-fingerprinting-resolution, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#15499 |
Onion sites circuits are not properly isolated to URL bar domain
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
High
|
#15532 |
Tor Browser 4.5 displays signature validation error during update
|
tbb-firefox-patch, ff38-esr, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
#15537 |
Tor Browser 4.5a5 fails to maximize
|
tbb-usability, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
#15563 |
ServiceWorkers violate first party isolation, probably
|
tbb-linkability, ff78-esr, BugSmashFund
|
new
|
tbb-team
|
defect
|
High
|
#15687 |
Make Tor Browser work with AppLocker
|
tbb-security, tbb-usability-stoppoint-app
|
new
|
tbb-team
|
defect
|
Medium
|
#15710 |
Consider enabling the BCJ filter when packaging bundles.
|
xz, bundle, size, tbb-rbm
|
new
|
tbb-team
|
enhancement
|
Low
|
#15797 |
Add some explanation of certificate storage being disabled
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
#15825 |
webgl.disable-extensions true about:config setting may allow DoS and breaks websites
|
tbb-security, tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
#15882 |
Tor Browser shows up as Firefox in Ubuntu dash/launcher
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
#15908 |
Compose key doesn't work when GTK_IM_MODULE=xim
|
tbb-usability, tbb-4.5-regression
|
new
|
tbb-team
|
defect
|
Medium
|
#15954 |
Canvas permission and HTTP auth still use FQDN isolation
|
tbb-usability-website, tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
#16028 |
Many users seem to be failing incremental updates to 4.5.1
|
tbb-update
|
new
|
tbb-team
|
defect
|
High
|
#16029 |
Many update downloads for 4.0.8
|
tbb-update
|
new
|
tbb-team
|
defect
|
High
|
#16250 |
Configuring the Torbutton in Tor Browser 4.5.1 on Mac with VoiceOver does not work!
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|