Opened 4 years ago

Closed 4 years ago

Last modified 3 years ago

#16925 closed defect (user disappeared)

HTML5 video and audio are live on the page with Security Slider set to highest

Reported by: DrMikeTwiddle Owned by: tbb-team
Priority: High Milestone:
Component: Applications/Tor Browser Version: Tor: unspecified
Severity: Normal Keywords: HTML5 video, NoScript
Cc: mcs Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

With the slider right up at highest it says "HTML5 video and audio media become click-to-play via NoScript."

But HTML5 videos are completely live on pages I'm visiting where they are embedded without any further user interaction.

I don't know the status of potential security issues and leaks with HTML5 video but nothing I have read on that topic provides any clear consensus currently and I think video and audio should be blocked when security is set to highest to let the user decide.

I.e the slider should do exactly what it says.

Tor Browser 5.02 OS X

Child Tickets

Change History (4)

comment:1 Changed 4 years ago by DrMikeTwiddle

Priority: normalmajor

comment:2 Changed 4 years ago by gk

Status: newneeds_information

Do you have an example URL where this is happening?

comment:3 Changed 4 years ago by mcs

Cc: mcs added

comment:4 Changed 4 years ago by bugzilla

Resolution: user disappeared
Severity: Normal
Status: needs_informationclosed

NoScript might be disabled, off when checked on (bug) and a lot of other reasons.
No response for 5 months, no details, no info to reproduce = user disappeared.

Last edited 3 years ago by bugzilla (previous) (diff)
Note: See TracTickets for help on using tickets.