| #13309 |
Make it clearer that the Tor Browser update download is happening over Tor
|
tbb-usability, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #13367 |
Rate limit gyroscope sampling frequency on FF mobile
|
tbb-security, tbb-fingerprinting, tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
| #13400 |
Canvas Fingerprinting: fonts
|
tbb-testcase, tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
High
|
| #13510 |
Master password can't be changed from default
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #13543 |
HTML5 media support may lead to fingerprinting
|
tbb-fingerprinting, TorBrowserTeam201910
|
new
|
tbb-team
|
defect
|
High
|
| #13730 |
Make use of MAR files with more than one signature
|
tbb-security, tbb-update
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #13747 |
Block non .onion content on .onion addresses (mixed content blocking)
|
tbb-security, TorBrowserTeam201903
|
new
|
tbb-team
|
enhancement
|
High
|
| #13775 |
Tor Browser won't open with OpenVPN
|
tbb-helpdesk-frequent
|
new
|
tbb-team
|
defect
|
Medium
|
| #14089 |
Google Drive/Docs do not work in Tor Browser
|
tbb-usability-website, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #14098 |
TBB still doesn't round windows in some cases
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #14181 |
Add option for ExitNodes / StrictNodes
|
tbb-torbutton
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #14246 |
Can't book room in Hotel Valencia Center with Tor Browser
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #14269 |
Imported certificate doesn't works at all
|
TBB, certificate
|
new
|
tbb-team
|
defect
|
High
|
| #14390 |
Browser configuration fingerprinting
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
High
|
| #14393 |
Users may be confused by relocated directories
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #14633 |
Default NoScript settings says "Allow Scripts Globally" is "dangerous"
|
tbb-usability uxsprint2015
|
new
|
tbb-team
|
defect
|
Medium
|
| #14638 |
Make it easier to add a bridge in network settings
|
uxsprint2015, tbb-usability-stoppoint-wizard, s32-o32a2
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #14676 |
Implement update verification via Tor consensus in Tor Browser
|
tbb-security, tbb-update
|
new
|
tbb-team
|
task
|
High
|
| #14837 |
Support QRCode bridge entry and sharing in Tor Launcher
|
tbb-usability-stoppoint-wizard
|
new
|
brade
|
enhancement
|
Medium
|
| #14924 |
Warn users before they install any addons
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #14936 |
about:license should show be adapted for Tor Browser
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
| #14939 |
Support ipv6 addresses in Tor Circuit DIsplay
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #14941 |
Localize the Tor Browser about dialog properly
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
| #14947 |
Torbrowser 4.0.3 lacks required "user_pref" preferences of TorButton on fresh extension's installation.
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Low
|
| #14985 |
NoScript Clickjacking warning when clicking on embedded content
|
tbb-security, noscript
|
new
|
tbb-team
|
defect
|
High
|
| #15030 |
Tor Browser 4.5a4 does not cope with certain self signed certificate setups.
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #15153 |
Warn users when websites are known to have issues with Tor
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #15163 |
Some systems may cause external apps to override pdf.js?
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #15164 |
"Print to file" saves filename and most recent printer in prefs
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #15239 |
Add hyperlinks in tor circuit display to show "more info" about relays
|
tbb-circuit-display, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #15456 |
Prevent incremental updates from failing for Linux hackers
|
tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #15458 |
StrongSocksIsolation option (w/ virtual circuits?)
|
tor-client, needs-design, mike-can, intro, isolation, tbb-needs
|
new
|
|
enhancement
|
Low
|
| #15474 |
Quantize innerWidth/Height when pages are zoomed
|
tbb-fingerprinting-resolution, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #15499 |
Onion sites circuits are not properly isolated to URL bar domain
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
High
|
| #15532 |
Tor Browser 4.5 displays signature validation error during update
|
tbb-firefox-patch, ff38-esr, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #15563 |
ServiceWorkers violate first party isolation, probably
|
tbb-linkability, ff78-esr, BugSmashFund
|
new
|
tbb-team
|
defect
|
High
|
| #15569 |
Web Notification API icons get no first party on Windows systems
|
tbb-linkability, tbb-parity
|
new
|
tbb-team
|
defect
|
Medium
|
| #15687 |
Make Tor Browser work with AppLocker
|
tbb-security, tbb-usability-stoppoint-app
|
new
|
tbb-team
|
defect
|
Medium
|
| #15706 |
Extract statistics on incremental update success rates
|
MikePerry201507, tbb-update
|
new
|
|
task
|
Medium
|
| #15710 |
Consider enabling the BCJ filter when packaging bundles.
|
xz, bundle, size, tbb-rbm
|
new
|
tbb-team
|
enhancement
|
Low
|
| #15797 |
Add some explanation of certificate storage being disabled
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #15802 |
add automated tests for svg.in-content.enabled
|
tbb-testcase, ff78-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #15825 |
webgl.disable-extensions true about:config setting may allow DoS and breaks websites
|
tbb-security, tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #15882 |
Tor Browser shows up as Firefox in Ubuntu dash/launcher
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
| #15908 |
Compose key doesn't work when GTK_IM_MODULE=xim
|
tbb-usability, tbb-4.5-regression
|
new
|
tbb-team
|
defect
|
Medium
|
| #15954 |
Canvas permission and HTTP auth still use FQDN isolation
|
tbb-usability-website, tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #16028 |
Many users seem to be failing incremental updates to 4.5.1
|
tbb-update
|
new
|
tbb-team
|
defect
|
High
|
| #16029 |
Many update downloads for 4.0.8
|
tbb-update
|
new
|
tbb-team
|
defect
|
High
|
| #16250 |
Configuring the Torbutton in Tor Browser 4.5.1 on Mac with VoiceOver does not work!
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #16285 |
Make sure EME is no tracking risk in Tor Browser
|
tbb-linkability, GeorgKoppen201705, TorBrowserTeam201909, ff78-esr, tbb-no-uplift-60
|
new
|
tbb-team
|
task
|
Medium
|
| #16312 |
Limit font queries per URL bar domain
|
tbb-fingerprinting-fonts
|
new
|
arthuredelstein
|
defect
|
Medium
|
| #16335 |
Investigate whether the Symbol data type can store global identifiers accessible to content
|
ff52-esr, tbb-linkability
|
new
|
tbb-team
|
task
|
High
|
| #16341 |
Investigate fingerprinting potential of CanvasRenderingContext2D.filter
|
ff52-esr, tbb-fingerprinting, tbb-7.0-must, TorBrowserTeam201805
|
new
|
tbb-team
|
task
|
Medium
|
| #16352 |
Play with Intel's MPX for hardened Tor Browser builds
|
tbb-security, TorBrowserTeam201711
|
new
|
tbb-team
|
task
|
Very High
|
| #16364 |
Add an option to resize the browser window to the "safe default"
|
tbb-usability, tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #16453 |
View Source doesn't work on Tor Browser with HTTP AUTH
|
tbb-firefox-patch, tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #16456 |
screen size fingerprint with findbar panel/bookmarks toolbar
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #16473 |
Investigate WebGL highp precision prevalence
|
ff38-esr, tbb-fingerprinting, tbb-mobile
|
new
|
tbb-team
|
task
|
Medium
|
| #16516 |
TBB doesn't use page title when bookmarking by dragging globe/lock icon
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Low
|
| #16621 |
Can we merge torbutton_do_new_identity with Clear Private Data?
|
tbb-torbutton-conversion
|
new
|
tbb-team
|
defect
|
Medium
|
| #16624 |
Improper key passed to nsHttpChannel::DoInvalidateCacheEntry()?
|
tbb-mozilla-merge, ff52-esr
|
new
|
tbb-team
|
task
|
Medium
|
| #16633 |
Enable and isolate Firefox connection prediction
|
tbb-performance
|
new
|
tbb-team
|
enhancement
|
High
|
| #16686 |
Migrate all font fingerprinting patches to tor-browser.git
|
tbb-fingerprinting-fonts, TorBrowserTeam201603
|
new
|
arthuredelstein
|
defect
|
Medium
|
| #16693 |
Isolate TLS Channel-Bound Cookies
|
tbb-linkability, ff78-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #16739 |
Whitelist fonts by filename rather than font name
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #16740 |
Font defense in 5.0a4 crashes OS X 10.6.8
|
tbb-crash, tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #16743 |
Reconsider "Add Start Menu & Desktop shortcuts" option (Windows)
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #16888 |
Regression tests for Bug #2950 (Make Permissions Manager memory-only) never fails
|
tbb-testcase
|
new
|
tbb-team
|
defect
|
Medium
|
| #16926 |
Multiple OS: Tor Browser leaks domains to system DNS management.
|
tbb-security
|
new
|
tbb-team
|
defect
|
Very High
|
| #16936 |
Circuit display should show original circuit for each tab
|
tbb-torbutton, tbb-circuit-display
|
new
|
tbb-team
|
defect
|
Medium
|
| #16982 |
Resizing Tor Browser only issues warning if maximized fully
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #17023 |
Investigate fingerprinting of mouse/pointing events
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #17061 |
Enforcement of browser window size breaks in xmonad
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #17091 |
Support our own hotfix mechanism
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
| #17123 |
Request for certificate is sent over the catch-all circuit
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #17140 |
When Tor Browser updater runs, prefs don't get updated
|
tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #17162 |
Latest TorBrowser youtube LIVE bug
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #17208 |
New reported disk leaks in Tor Browser
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #17216 |
Make Tor Browser's updater work over Hidden Services
|
tor-hs, tbb-security, TorBrowserTeam201901, tbb-update
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #17336 |
consider re-dzip'ing language packs
|
tbb-rbm
|
new
|
tbb-team
|
defect
|
Medium
|
| #17355 |
Investigate whether we should re-implement methods of JS Date to avoid fingerprinting
|
tbb-fingerprinting-locale
|
new
|
tbb-team
|
defect
|
Medium
|
| #17356 |
Tor Browser crash on OS X while receiving Facebook notification in background
|
tbb-crash
|
new
|
tbb-team
|
defect
|
Medium
|
| #17367 |
Swap files can contain evidence of browsing history
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #17400 |
Decide how to use the multi-lingual Tor Browser in the alpha/release series
|
ux-team, tbb-usability-stoppoint-wizard, TorBrowserTeam202006, AffectsTails
|
new
|
tbb-team
|
task
|
Medium
|
| #17412 |
High-precision timestamps in JS
|
tbb-fingerprinting-time-highres
|
new
|
tbb-team
|
defect
|
Medium
|
| #17418 |
Values in about:config that aren't disabled
|
tbb-pref
|
new
|
tbb-team
|
defect
|
Medium
|
| #17431 |
Investigate attacks in fingerprinting paper
|
tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #17507 |
LSan is crashing Tor Browser on shutdown
|
tbb-crash
|
new
|
tbb-team
|
task
|
Medium
|
| #17584 |
Disable bookmark backups (easy fix) (!)
|
tbb-easy, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #17594 |
Please reopen existing tabs and windows after upgrade
|
tbb-usability, tbb-update
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #17769 |
Think of ways to make Tor Browser multi-user aware
|
tbb-usability
|
new
|
tbb-team
|
task
|
Medium
|
| #17809 |
tbb-tests/browser_tor_TB4.js is out-of-date
|
tbb-test-failures ReleaseTrainMigration
|
new
|
cypherpunks
|
defect
|
Medium
|
| #17871 |
Loading PDF files from file:/// does not show images in them
|
tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|
| #17999 |
Changed default GUI font might help fingerprinting JA Windows users
|
tbb-fingerprinting-fonts
|
new
|
tbb-team
|
defect
|
Medium
|
| #18027 |
Tor Browser canvas fingerprint pop up should have "not ever" option and timeout
|
tbb-usability
|
new
|
tbb-team
|
enhancement
|
Medium
|
| #18044 |
Prompt if Tor Browser is zoomed
|
tbb-fingerprinting-resolution, tbb-usability, tbb-bounty, tbb-torbutton
|
new
|
tbb-team
|
defect
|
High
|
| #18047 |
Performance: Memory leaking in Tor Browser
|
tbb-performance-leaking
|
new
|
tbb-team
|
defect
|
Medium
|
| #18080 |
CORS header 'Access-Control-Allow-Origin' missing
|
tbb-usability-website, TorBrowserTeam202006
|
new
|
tbb-team
|
defect
|
Medium
|
| #18097 |
Font fingerprinting defenses roadmap (parent ticket)
|
tbb-fingerprinting-fonts, tbb-fingerprinting-os
|
new
|
tbb-team
|
defect
|
Medium
|
| #18112 |
TorButton logs + Tor logs = timezone leak
|
tor tbb-torlauncher timezone-leak
|
new
|
tbb-team
|
defect
|
Medium
|
