Opened 4 years ago

Closed 4 years ago

Last modified 14 months ago

#16475 closed defect (fixed)

Tor Messenger sets all Mozilla plug-ins to "always activate" by default

Reported by: teor Owned by: sukhbir
Priority: Medium Milestone:
Component: Archived/Tor Messenger Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: #14161 Points:
Reviewer: Sponsor:

Description

I am using Tor Messenger 0.0.6 on OS X 10.10.3.

I opened the Tor Messenger Add-Ons Manager / Plugins from Tor Messenger -> Preferences -> General -> Manage Add Ons -> Plugins, and saw that all my existing Firefox plugins were listed, and set to "Always Activate".

I'd like to see plugins such as Flash, Java, and Unity Player be permanently disabled, deactivated by default, or set to "Ask to Activate".

I'd do this out of an excess of paranoia, even if there is no way for the plugins to be loaded within Tor Messenger.

Child Tickets

Change History (5)

comment:1 Changed 4 years ago by sukhbir

Owner: set to sukhbir
Status: newassigned

comment:2 Changed 4 years ago by arlolra

Parent ID: #14161

comment:3 Changed 4 years ago by arlolra

See 0005-Block-all-plugins-except-flash.patch in #16536, but also block flash.

comment:4 in reply to:  3 Changed 4 years ago by sukhbir

Resolution: fixed
Status: assignedclosed

Replying to arlolra:

See 0005-Block-all-plugins-except-flash.patch in #16536, but also block flash.

We are using this patch, but additionally, we also block Flash (and Gnash). Committed in 147fb0aa31550 and confirmed to be working.

comment:5 Changed 14 months ago by traumschule

<+sukhe> hello. yes, I think it's fine to close the tickets. thanks for doing what we should done earlier :)

sad but true:
https://blog.torproject.org/sunsetting-tor-messenger

luckily there are alternatives:
https://blog.torproject.org/tor-heart-onion-messaging

.. and maybe someday

Note: See TracTickets for help on using tickets.