#26602 |
investigate whether CSS clip-path adds a fingerprinting risk
|
tbb-fingerprinting, ff60-esr, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
High
|
#26606 |
investigate fingerprinting and linkability risks of the Intersection Observer API
|
tbb-fingerprinting, tbb-linkability, ff60-esr, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
High
|
#26607 |
verify that subpixel accuracy of window scroll properties does not add fingerprinting risk
|
tbb-fingerprinting, ff60-esr, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
High
|
#26610 |
investigate whether hardware encoding of media adds fingerprinting risk for TBA
|
tbb-mobile, tbb-fingerprinting, ff60-esr, TorBrowserTeam201904
|
new
|
tbb-team
|
defect
|
High
|
#26612 |
increase the TLS handshake timeout
|
tbb-usability, ff60-esr, TorBrowserTeam201809
|
new
|
tbb-team
|
defect
|
High
|
#26648 |
Add bridge country to circuit display where applicable
|
tbb-torbutton, tbb-circuit-display
|
new
|
tbb-team
|
enhancement
|
Medium
|
#26691 |
add 'working DNS' to the list of mandatory requirements for the 'exit' flag
|
needs-proposal, tor-exit, tor-dirauth, tbb-needs
|
new
|
|
enhancement
|
Medium
|
#26782 |
TBA: Translation/Localization Support
|
tbb-mobile, TBA-a3, tbb-8.5, TorBrowserTeam201908
|
new
|
tbb-team
|
project
|
High
|
#26844 |
TBA: Investigate/Setup Fastlane
|
tbb-mobile, tbb-9.5, TorBrowserTeam201912
|
needs_revision
|
tbb-team
|
task
|
High
|
#26858 |
TBA: Investigating patching AccountManager
|
tbb-mobile, TBA-a3, TorBrowserTeam201904
|
needs_revision
|
tbb-team
|
defect
|
Very High
|
#26877 |
Declare gcc version in rbm.conf
|
tbb-rbm, TorBrowserTeam201808
|
needs_information
|
tbb-team
|
enhancement
|
Medium
|
#26879 |
Disk leak on macOS due to Notification API
|
tbb-disk-leak, tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
#26880 |
On macOS a list of downloaded files is kept on disk and survives New Identity
|
tbb-disk-leak, tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
#26895 |
'Error downloading build result' after GCC in container Tor Browser Bundle Build (rbm)... most descriptive error ever ocurred in the world
|
tbb-rbm
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#26938 |
TBA - Enable updater
|
tbb-mobile, tbb-update
|
new
|
tbb-team
|
enhancement
|
High
|
#26982 |
TBA - httpclientandroidlib leaks information about Android version
|
tbb-mobile, tbb-fingerprinting
|
new
|
tbb-team
|
defect
|
High
|
#27045 |
Add option for firefox incremental builds
|
tbb-rbm, TorBrowserTeam201912R
|
needs_review
|
tbb-team
|
task
|
Medium
|
#27065 |
TBA: Delete AccountManager usage from Tabs
|
tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
#27069 |
TBA: Make SendTab Safe
|
tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
#27070 |
TBA: FxAccountStatusActivity shouldn't modify Android Accounts
|
tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
#27072 |
TBA: Delete SyncPreference from tablet layout
|
tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
#27083 |
TBA: Window size rounding isn't used
|
tbb-mobile, tbb-fingerprinting-resolution, TorBrowserTeam201901, tbb-parity
|
new
|
tbb-team
|
defect
|
Very High
|
#27105 |
Fix Tor Browser testsuite for esr60
|
tbb-testsuite, boklm201904, TorBrowserTeam201905
|
assigned
|
boklm
|
task
|
Very High
|
#27120 |
tbb-testsuite: marionette tests are failing when using strace
|
tbb-testsuite, boklm201811, TorBrowserTeam201904
|
assigned
|
boklm
|
defect
|
Medium
|
#27123 |
Investigate PING/SETTINGS-related timing side-channels
|
tbb-security
|
new
|
tbb-team
|
defect
|
Medium
|
#27127 |
Audit and enable HTTP/2 push
|
tbb-linkability, tbb-performance
|
new
|
tbb-team
|
defect
|
Medium
|
#27128 |
Consider homogenizing HTTP/2 Settings prefs.
|
tbb-fingerprinting-os
|
new
|
tbb-team
|
defect
|
Medium
|
#27137 |
tbb-testsuite: fix the navigation-timing, performance-observer, resource-timing, user-timing tests
|
tbb-testsuite, boklm201903, TorBrowserTeam201904
|
assigned
|
boklm
|
task
|
Medium
|
#27142 |
Unable to clear history / history remains after closing browser
|
tbb-disk-leak
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#27217 |
TBA: Consider excluding ACCESS_NETWORK_STATE permission
|
tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
#27219 |
TBA: Investigate ACCESS_COARSE_LOCATION error message
|
tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
#27254 |
TBA: Investigate "Assist app" functionality
|
tbb-mobile
|
needs_information
|
tbb-team
|
task
|
Very High
|
#27258 |
font whitelist means we don't have to set gfx.downloadable_fonts.fallback_delay
|
tbb-fingerprinting-font, ff60-esr
|
new
|
tbb-team
|
defect
|
Medium
|
#27260 |
Audit network.http.spdy.enabled.deps
|
tbb-fingerprinting, tbb-linkability, ff60-esr
|
new
|
tbb-team
|
defect
|
Medium
|
#27280 |
HTTPS Everywhere upgrade-insecure-header injection appears to be broken on 8.0a9 / 8.0a10
|
tbb-8.0-issues, tbb-regression, noscript
|
new
|
tbb-team
|
defect
|
Medium
|
#27352 |
TBA: Set ReducedConnectionPadding 1
|
tbb-mobile
|
new
|
tbb-team
|
enhancement
|
Medium
|
#27375 |
TBA opens input.mozilla.org URL on its own
|
tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
#27408 |
Make it possible to find which tor-browser-build.git commit was used to build a nightly
|
tbb-rbm, TorBrowserTeam201809, boklm201811
|
new
|
tbb-team
|
task
|
Medium
|
#27413 |
Implement better communication between NoScript and Tor Browser
|
noscript, tbb-security-slider, tbb-torbutton, TorBrowserTeam201809
|
new
|
tbb-team
|
enhancement
|
Very High
|
#27431 |
TBA connects to location.services.mozilla.com
|
tbb-mobile
|
reopened
|
sysrqb
|
defect
|
Medium
|
#27447 |
also show ip address of destination at tor circuit
|
tbb-circuit-display
|
new
|
tbb-team
|
defect
|
Medium
|
#27452 |
"New Identity" does not properly clear state of the find bar
|
tbb-newnym
|
new
|
tbb-team
|
defect
|
Medium
|
#27457 |
Add architecture to 32bit Windows bundle filename
|
tbb-rbm
|
new
|
tbb-team
|
enhancement
|
Medium
|
#27462 |
Use OSS-Fuzz for Tor Browser
|
tbb-security
|
new
|
tbb-team
|
task
|
Medium
|
#27476 |
Remove gap between Tor Launcher window and main browser window
|
tor-launcher tbb-performance ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
#27483 |
Onboarding: dialog closure is effectively treated as "read", causing screen advancement
|
tbb-8.0-issues, tbb-onboarding, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
#27501 |
Local color override broken with 8.0 update
|
tbb-8.0-issues, tbb-regression
|
new
|
tbb-team
|
defect
|
Medium
|
#27507 |
DuckDuckGo can't be used without JS in Tor Browser 8 anymore
|
noscript, tbb-8.0-issues, tbb-regression, tbb-8.0.1-can, GeorgKoppen201809, TorBrowserTeam201809
|
needs_revision
|
tbb-team
|
defect
|
Medium
|
#27510 |
Bookmark sidebar gets closed after New Identity
|
tbb-8.0-issues, tbb-regression
|
new
|
tbb-team
|
defect
|
Medium
|
#27515 |
video placeholder didn't work in Tor browser 8.0 on highest security level
|
tbb-8.0-issues, tbb-regression, tbb-security-slider, noscript
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#27518 |
firefox tries to access system's snapd profile
|
tbb-security, tbb-8.0-issues, tbb-regression
|
new
|
tbb-team
|
defect
|
Medium
|
#27522 |
Screen Size doesn't change with customizing Firefox toolbars
|
tbb-fingerprinting-resolution
|
new
|
tbb-team
|
defect
|
Medium
|
#27524 |
Hide "New Identity" "New circuit" burger menu buttons if "extensions.torbutton.use_nontor_proxy" is true.
|
tbb-torbutton, tbb-newnym
|
new
|
tbb-team
|
task
|
Medium
|
#27529 |
Fix disable CSS regression in Firefox 60/TORBrowser 8
|
tbb-8.0-issues, tbb-regression
|
new
|
tbb-team
|
defect
|
Medium
|
#27536 |
Opening new tabs leads to error message: browser-child.js, line 359: NS_ERROR_NOT_AVAILABLE
|
tbb-8.0-issues, tbb-regression
|
new
|
tbb-team
|
defect
|
Medium
|
#27537 |
ExtensionContent.jsm, line 489: TypeError: Argument 1 of PrecompiledScript.executeInGlobal is not an object.
|
tbb-8.0-issues, tbb-regression
|
new
|
tbb-team
|
defect
|
Medium
|
#27539 |
Create plan for releasing on F-Droid
|
tbb-mobile, tbb-9.5, TorBrowserTeam202001
|
accepted
|
sysrqb
|
enhancement
|
Medium
|
#27542 |
Saving websites locally loses pictures and layout
|
tbb-8.0-issues
|
new
|
tbb-team
|
defect
|
Medium
|
#27551 |
Build HTTPS Everywhere with the SecureDrop custom ruleset update channel
|
tbb-rbm
|
new
|
tbb-team
|
enhancement
|
Medium
|
#27589 |
"Javascript is disabled on non-HTTPS sites" from security slider has regressed in TBB 8 / NoScript 10
|
noscript, tbb-8.0-issues, tbb-regression
|
reopened
|
tbb-team
|
enhancement
|
Medium
|
#27590 |
Display .onion alt-svc route in the circuit display
|
tbb-circuit-display, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
#27592 |
TBA: 'Clear private data' option does not clear browsing history
|
tbb-mobile, tbb-disk-leak, tbb-parity
|
new
|
tbb-team
|
defect
|
High
|
#27602 |
iis windows authentication prompt not showing up
|
tbb-usability-website
|
new
|
tbb-team
|
defect
|
Medium
|
#27603 |
Internet Download Manager (IDM) is broken with Tor Browser 8
|
tbb-8.0-issues, tbb-regression
|
new
|
tbb-team
|
defect
|
Medium
|
#27607 |
Enabling SVG sets security slider back to "Safer"
|
tbb-security-slider, tbb-8.0-issues, tbb-regression, tbb-8.0.1-can
|
new
|
tbb-team
|
defect
|
Medium
|
#27608 |
TB 8.5a1 failed to check for noscript updates because of missing manifest type
|
tbb-8.0-issues, noscript
|
new
|
tbb-team
|
defect
|
Medium
|
#27614 |
Check TCP FastOpen for potential proxy bypass
|
tbb-proxy-bypass, tbb-performance, ff78-esr
|
new
|
tbb-team
|
defect
|
Medium
|
#27633 |
Do subscribed feeds adhere to first party isolation?
|
tbb-linkability
|
new
|
tbb-team
|
defect
|
Medium
|
#27732 |
New Identity does not reset NoScript's Temporarily Trusted settings
|
tbb-newnym, tbb-8.0-issues, tbb-regression, tbb-8.0.1-can, noscript
|
new
|
tbb-team
|
defect
|
High
|
#27733 |
Multiple Fast Flashing Tabs
|
tbb-8.0-issues
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#27768 |
Menu button does not work in Tor Browser 8 on Windows
|
tbb-8.0-issues, tbb-regression
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#27796 |
removed style does not work
|
tbb-8.0-issues
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#27807 |
Add link backup feature in Tor Browser
|
tbb-mobile
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#27825 |
NoScript 10 (.1.9.6) in TBB 8 can't Export settings to a file
|
noscript, tbb-8.0-issues, tbb-regression, user-feedback, blog
|
new
|
tbb-team
|
defect
|
Medium
|
#27845 |
Tor Browser window height is is off by some pixels if bookmark toolbar and icons are available
|
tbb-fingerprinting-resolution, tbb-8.0-issues, tbb-regression
|
reopened
|
tbb-team
|
defect
|
High
|
#27867 |
Gesturify 2.x does not work with Tor Browser 8
|
tbb-8.0-issues, tbb-regression
|
new
|
tbb-team
|
defect
|
Medium
|
#27880 |
Sinhala Unicode error on Windows 10
|
tbb-usability-website
|
new
|
tbb-team
|
enhancement
|
Medium
|
#27897 |
Music streaming stopped working in update to 8.0, 8.0.1
|
tbb-8.0-issues, tbb-regression, tbb-usability-website
|
assigned
|
tbb-team
|
defect
|
Medium
|
#27903 |
Tor Browser 8 does not respect gtk3 settings
|
tbb-8.0-issues, tbb-regression, TorBrowserTeam201912R
|
needs_review
|
boklm
|
defect
|
Medium
|
#27904 |
Tor Browser for Android does not protect master password screen with FLAG_SECURE
|
tbb-mobile
|
new
|
tbb-team
|
defect
|
Medium
|
#27909 |
hide "Data Collection and Use" section within about:preferences
|
ff60-esr,tbb-8.0-issues
|
new
|
tbb-team
|
defect
|
Medium
|
#27940 |
8.0.2 crashed closing a busy tab
|
tbb-crash, tbb-8.0-issues
|
needs_information
|
tbb-team
|
defect
|
High
|
#27987 |
Add setting for enabling/disabling flag_secure in Android browser
|
tbb-mobile, ux-team
|
needs_information
|
tbb-team
|
enhancement
|
Medium
|
#28068 |
Tor not reopening on USB
|
tbb-regression, tbb-8.0-issues
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#28102 |
Make sure we pick the exact same compile environment for Tor Browser builds
|
tbb-rbm, TorBrowserTeam201811
|
new
|
tbb-team
|
defect
|
High
|
#28107 |
Tor Browser 8.0 turns off VP9 videos when detects low fps
|
tbb-fingerprinting
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#28117 |
Some URLs can't be downloaded with LC_ALL=C
|
tbb-rbm
|
new
|
boklm
|
defect
|
Medium
|
#28124 |
Show Tor Browser icon as macOS volume icon
|
tbb-rbm, tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
#28145 |
TBA: Add support/Tor Browser Manual links and mission statement
|
tbb-mobile, TBA-a3, tbb-8.5, tbb-parity, TorBrowserTeam201904
|
new
|
tbb-team
|
task
|
Medium
|
#28148 |
Limit or Restrict PTCPSocket and PUDPSocket IPC mechanisms
|
tbb-proxy-bypass, TorBrowserTeamTriaged
|
new
|
tbb-team
|
defect
|
Medium
|
#28156 |
Start building Tor with NSS support in Tor Browser
|
tbb-rbm
|
new
|
tbb-team
|
enhancement
|
High
|
#28163 |
Make "new window" and "new tab" menu item labels consistent
|
tbb-usability, ux-team
|
new
|
tbb-team
|
defect
|
Medium
|
#28175 |
Add commands to upload bundles to virustotal
|
tbb-rbm, tbb-qa, TorBrowserTeam201902
|
new
|
tbb-team
|
task
|
Medium
|
#28176 |
Cleanup and add the testsuite to tor-browser-build.git
|
tbb-rbm, tbb-qa, TorBrowserTeam201811
|
assigned
|
boklm
|
task
|
Medium
|
#28195 |
TB fails to restart updating 8.5a3
|
tbb-regression
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#28200 |
Update downloader does not automatically retry when connection is interrupted
|
tbb-update
|
needs_information
|
tbb-team
|
defect
|
Medium
|
#28201 |
about:support shows "Firefox"
|
tbb-branding
|
new
|
tbb-team
|
defect
|
Medium
|
#28240 |
Think about using mingw-w64 with dwarf exception support for rustc cross-compilation for 32bit Windows
|
tbb-rbm
|
new
|
tbb-team
|
task
|
Medium
|
#28251 |
Unable to download from determinated sites
|
tbb-usability-website, tbb-8.0-issues, tbb-regression
|
assigned
|
tbb-team
|
defect
|
High
|
#28259 |
Is not saving history hurting Tor Browser retention rates?
|
gallagher2018, ux-team, tbb-usability
|
new
|
tbb-team
|
defect
|
Medium
|