| #22981 |
Don't block audio/video on https sites under Medium Security
|
tbb-usability, tbb-security-slider, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
| #22982 |
Introduce a single "adjust security" toolbar button for security slider and noscript options
|
tbb-usability, tbb-security-slider, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
| #22985 |
Can we simplify and clarify click-to-play of audio/video?
|
tbb-usability, tbb-security, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
| #23024 |
Flags to increase hardening on Windows
|
TorBrowserTeam201711, tbb-rbm
|
needs_revision
|
tbb-team
|
defect
|
Medium
|
| #23045 |
Replace *.tlb with our own during build time
|
tbb-rbm
|
new
|
tbb-team
|
defect
|
Medium
|
| #23050 |
Tab keeps crashing on Win 8.1 with Tor Browser 7 (in e10s mode)
|
tbb-7.0-issues, tbb-e10s
|
new
|
tbb-team
|
defect
|
High
|
| #23062 |
Tor browser bundle crashed when clicking on a link
|
tbb-crash
|
new
|
tbb-team
|
defect
|
High
|
| #23115 |
If "Tor is not working in this browser", don't download an update
|
tbb-update
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #23210 |
Favicons are getting reloaded over catch-all-circuit if content process crashes
|
tbb-7.0-issues, tbb-e10s, tbb-linkability
|
new
|
tbb-team
|
defect
|
High
|
| #23214 |
Defend against stack overflow due to overly deep nested (unclosed) XML tags
|
tbb-crash
|
new
|
tbb-team
|
defect
|
Medium
|
| #23216 |
The `languagechange` event is noticeable on all open tabs
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #23317 |
Update font whitelists to reflect any changed Firefox default fonts
|
tbb-fingerprinting-fonts, ff60-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #23350 |
Website loads endlessly if connection went back then came, while other websites work just fine if they're loaded afterwards
|
ff52-esr, tbb-e10s, tbb-usability, tbb-7.0-issues, tbb-regression
|
new
|
tbb-team
|
defect
|
Medium
|
| #23390 |
TBB 7.5a4 STATUS_FATAL_APP_EXIT crash in msvcr100.dll
|
tbb-crash
|
new
|
tbb-team
|
defect
|
Medium
|
| #23424 |
Stop exposing the moz-icon URL scheme to the web
|
tbb-fingerprinting, ff60-esr
|
new
|
tbb-team
|
defect
|
High
|
| #23447 |
Audiobookbay login is broken in Tor Browser
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #23550 |
layout.css.devPixelsPerPx should be integer
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #23627 |
Filter device power management keyboard events?
|
tbb-fingerprinting-os
|
new
|
tbb-team
|
defect
|
Medium
|
| #23656 |
Use .mozconfig files in tor-browser repo for rbm builds
|
tbb-rbm
|
new
|
tbb-team
|
defect
|
Medium
|
| #23660 |
Handle exceptions in content sandboxing code for Tor Browser on Windows properly
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
| #23664 |
Deal with UUID for content sandbox temp folder on Windows and Mac
|
tbb-security, tbb-disk-leak
|
new
|
tbb-team
|
defect
|
High
|
| #23701 |
Lower parts of letters get eaten by making line-height uniform
|
tbb-usability, tbb-fingerprinting-os
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #23719 |
Make sure WebExtensions are spared from JIT disabling in higher security settings (Medium-High)
|
tbb-performance, GeorgKoppen201911, TorBrowserTeam201912
|
assigned
|
acat
|
defect
|
Medium
|
| #23729 |
Sound is broken on http://websdr.sp3pgx.uz.zgora.pl:8901/
|
tbb-usability-website, tbb-7.0-issues, tbb-regession
|
new
|
tbb-team
|
defect
|
Medium
|
| #23768 |
Update code to wipe indexedDB in New Identity
|
tbb-linkability, tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #23875 |
Facebook's onion site is a single hop onion, but clicking on the Tor onion icon shows that it is a 6 hop circuit.
|
tbb-circuit-display, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
| #23884 |
After Oct 10 MS update my TOR Browser won't open.
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
High
|
| #23893 |
Tor Browser page tabs crash on initial loading of sites including Tor
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
High
|
| #23918 |
tor button and tor browser home page says "not connected to network"
|
tbb-torbutton
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #23930 |
Tor Browser 7.x for Mac crashes at startup
|
tbb-crash, TorBrowserTeam201805
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #24045 |
Measure and map overloaded or over-weighted relays
|
bwauth-needs, tbb-performance, tbb-usability, performance, tbb-needs
|
reopened
|
metrics-team
|
defect
|
Medium
|
| #24177 |
screenshot command in Web Developer toolbar is broken in Tor Browser
|
tbb-usability
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #24236 |
plugin-container.app crash for TBB for Mac 7.0.9 (based on Mozilla Firefox 52.4.1) (64-bit)
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
High
|
| #24261 |
Tor - Gah. Your tab just crashed
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #24383 |
Window rounding is broken on Debian 9 live with mutter
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
| #24385 |
Add Windows 64 mozconfig file to tor-browser.git
|
tbb-rbm
|
new
|
tbb-team
|
defect
|
Medium
|
| #24387 |
Update tor-browser.git/.mozconfig-mac for rbm builds
|
tbb-rbm
|
new
|
tbb-team
|
defect
|
Medium
|
| #24408 |
New Identity fails to clear unprotected cookies when private browsing mode is disabled
|
tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #24415 |
Unhandled exception at 0x6850687D (d2d1.dll) in firefox.exe
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #24515 |
Make the script for downloading missing MAR files smarter
|
tbb-rbm
|
new
|
tbb-team
|
defect
|
Medium
|
| #24570 |
[Meta] Mitigations for DLL Injection
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
| #24619 |
Tor 0.3.1.9 exited unexpectedly on Windows
|
tbb-crash
|
new
|
|
defect
|
High
|
| #24620 |
Can't see chat on wm.exchanger.ru
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #24638 |
Welcome dialog missing protocol from link
|
tbb-usability, ux-team
|
needs_information
|
brade
|
defect
|
Low
|
| #24657 |
Firefox crashes everyday
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
High
|
| #24698 |
Torbrowser keeps hanging and freezing, plus it takes a very long time to load after hibernation
|
tbb-performance
|
needs_information
|
tbb-team
|
defect
|
Immediate
|
| #24723 |
When I go to https://www.sss.gov/ I get a error "secure Connection Failed" every time
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
| #24957 |
Tor Browser Help menu item goes to mozilla support page
|
tbb-mobile, tbb-parity
|
new
|
tbb-team
|
defect
|
Medium
|
| #24965 |
Automatically remove metadata from images (EXIF) before upload
|
tbb-fingerprinting, gsoc-proposed
|
new
|
tbb-team
|
defect
|
Medium
|
| #25021 |
Update Tor Browser spec for 9.0
|
tbb-spec, TorBrowserTeam201912
|
assigned
|
gk
|
defect
|
High
|
| #25064 |
Don't record update history on the Tor Browser
|
tbb-disk-leak, tbb-update
|
new
|
tbb-team
|
defect
|
Medium
|
| #25072 |
New Identity does not clear HTTPS Everywhere extension storage
|
tbb-torbutton, tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #25082 |
Uploads are not cancelled when a New Identity is requested
|
tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #25166 |
Clipboard may be cleared or modified by websites
|
tbb-proxy-bypass
|
new
|
tbb-team
|
defect
|
Medium
|
| #25197 |
Design document isn't precise about "Security" and "Privacy".
|
tbb-spec
|
new
|
tbb-team
|
defect
|
Medium
|
| #25209 |
TBB crashes after startup clicking the ONION
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #25247 |
mochitest failures for #23104 patch
|
tbb-fingerprinting, tbb-regression, TorBrowserTeam201806
|
needs_revision
|
tbb-team
|
defect
|
Medium
|
| #25294 |
Unhandled exception error in firefox.exe
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #25340 |
"Restart the Tor Browser to apply updates" notification disappears with New Identity, maybe it shouldn't?
|
tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #25347 |
Tor keeps on trying the same overloaded guard over and over
|
tor-guard, tor-client, tbb-usability, tbb-needs, 033-triage-20180320, 033-included-20180320, 031-unreached-backport, 035-removed-20180711, 032-unreached-backport, 040-roadmap-proposed, tor-hs, reachability, needs-proposal
|
needs_revision
|
asn
|
defect
|
Medium
|
| #25431 |
"Tor is censored in my country" does not cover some scenarios
|
tbb-usability, ux-team, s32-o32a2
|
new
|
brade
|
defect
|
Medium
|
| #25463 |
Learn More link fails to work from add-on preferences
|
tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #25555 |
Reimplement Optimistic SOCKS feature
|
tbb-performance, TorBrowserTeam201811
|
new
|
tbb-team
|
defect
|
High
|
| #25559 |
Miscellaneous security- and privacy-related prefs for Tor Browser
|
tbb-security, ff60-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #25633 |
Ctrl-D makes it too easy to create bookmarks accidentally
|
tbb-disk-leak
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #25672 |
Debugger in developer tools is fetching website over catch-all circuit
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
| #25737 |
Tor Browser's update check bypassed Tor once on macos, because of xpcproxy?
|
tbb-proxy-bypass
|
new
|
tbb-team
|
defect
|
Medium
|
| #25764 |
TBA - Activity 4.1: Improve how circuits are displayed to the user
|
ux-team, tbb-mobile, tbb-torbutton, TBA-a3, tbb-8.5, tbb-parity, TorBrowserTeam201904, user-feedback, blog
|
new
|
tbb-team
|
defect
|
High
|
| #25795 |
Decide which settings to hide in Tor Browser
|
ux-team, tbb-security, tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
Medium
|
| #25850 |
Eval error on content include via iframe
|
tbb-usability-website
|
reopened
|
tbb-team
|
defect
|
Medium
|
| #25934 |
Disable unnecessary bits when compiling the Rust compilers
|
tbb-rbm, ff60-esr
|
new
|
tbb-team
|
defect
|
Medium
|
| #26080 |
torbrowser 7.5.4 update seems to generate file with unique uuid in it
|
tbb-easy
|
new
|
tbb-team
|
defect
|
Medium
|
| #26176 |
Display .onion services with "mixed" content in circuit display properly
|
tbb-torbutton, tbb-circuit-display
|
new
|
tbb-team
|
defect
|
Medium
|
| #26236 |
"myController is null" error when closing the browser
|
ff60-esr, tbb-torbutton
|
new
|
tbb-team
|
defect
|
Medium
|
| #26242 |
Implement update strategy for TBA
|
tbb-mobile, tbb-8.5, tbb-parity, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
Medium
|
| #26247 |
On some chrome pages (about:addons) are tooltips just a black bar on Linux
|
ff60-esr, tbb-8.0-issues, tbb-regression
|
new
|
tbb-team
|
defect
|
Medium
|
| #26322 |
Circuit display - UI bug - Long v3 name
|
tbb-torbutton, tbb-circuit-display
|
new
|
tbb-team
|
defect
|
Medium
|
| #26368 |
Consider circuit isolation when closing redundant intro points
|
tor-hs, tor-client, tbb-needs, 041-can
|
needs_revision
|
|
defect
|
Low
|
| #26369 |
Re-fetch onion service descriptor for isolated request
|
tor-hs, tor-client, tbb-needs, 040-roadmap-proposed, 040-deferred-20190220
|
new
|
|
defect
|
Medium
|
| #26377 |
Fresh Tor Browser 7.5.5 (2018-06-09) for macOS install crashes on start
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
High
|
| #26417 |
Tor Browser build is not working with the runc version in debian testing
|
tbb-rbm, TorBrowserTeam201806
|
new
|
tbb-team
|
defect
|
Medium
|
| #26419 |
TBA - Evaluate Android Intent Referrers
|
tbb-mobile, TorBrowserTeam201809
|
new
|
tbb-team
|
defect
|
High
|
| #26444 |
OSX 10.14 adds persisted-to-disk permission prompts for WebCam/Mic access
|
tbb-disk-leak
|
new
|
tbb-team
|
defect
|
Medium
|
| #26445 |
Tor Browsers on Windows crashes clicking through `about:addons` menu
|
tbb-crash
|
needs_information
|
tbb-team
|
defect
|
Medium
|
| #26517 |
When I have security setting set to "Safest" and I open NoScrip's preferences and click reset, TorBrowser still says Security setting "Safest" even though many sites are now whitelisted
|
ff60-esr, tbb-security-slider, noscript
|
new
|
tbb-team
|
defect
|
High
|
| #26529 |
TBA - Notify user about possible proxy-bypass before opening external app
|
tbb-mobile, tbb-proxy-bypass, tbb-parity, TorBrowserTeam201910, tbb-backport
|
needs_information
|
tbb-team
|
defect
|
High
|
| #26553 |
Sign our own extensions in Tor Browser
|
ff60-esr, tbb-security, AffectsTails, TorBrowserTeam201904, GeorgKoppen201904
|
new
|
tbb-team
|
defect
|
High
|
| #26574 |
Save TBA updates in the internal android storage
|
tbb-mobile, TorBrowserTeam201901
|
new
|
tbb-team
|
defect
|
Medium
|
| #26599 |
investigate CSS masks feature for fingerprinting potential
|
tbb-fingerprinting, ff60-esr, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
High
|
| #26601 |
investigate whether SVGGeometryElement introduces a fingerprinting vector
|
tbb-fingerprinting, ff60-esr, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
High
|
| #26602 |
investigate whether CSS clip-path adds a fingerprinting risk
|
tbb-fingerprinting, ff60-esr, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
High
|
| #26606 |
investigate fingerprinting and linkability risks of the Intersection Observer API
|
tbb-fingerprinting, tbb-linkability, ff60-esr, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
High
|
| #26607 |
verify that subpixel accuracy of window scroll properties does not add fingerprinting risk
|
tbb-fingerprinting, ff60-esr, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
High
|
| #26610 |
investigate whether hardware encoding of media adds fingerprinting risk for TBA
|
tbb-mobile, tbb-fingerprinting, ff60-esr, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
High
|
| #26612 |
increase the TLS handshake timeout
|
tbb-usability, ff60-esr, TorBrowserTeam201809
|
new
|
tbb-team
|
defect
|
High
|
| #26858 |
TBA: Investigating patching AccountManager
|
tbb-mobile, TBA-a3, TorBrowserTeam201904
|
needs_revision
|
tbb-team
|
defect
|
Very High
|
| #26861 |
Bump available ulimit in runc container in tor-browser-build
|
tbb-rbm, TorBrowserTeam201912R
|
needs_review
|
tbb-team
|
defect
|
Medium
|
| #26879 |
Disk leak on macOS due to Notification API
|
tbb-disk-leak, tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #26880 |
On macOS a list of downloaded files is kept on disk and survives New Identity
|
tbb-disk-leak, tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
| #26895 |
'Error downloading build result' after GCC in container Tor Browser Bundle Build (rbm)... most descriptive error ever ocurred in the world
|
tbb-rbm
|
needs_information
|
tbb-team
|
defect
|
Medium
|
