Opened 5 years ago

Last modified 5 years ago

#18829 new task

Media Preview in Page Info may not meet TBB expectations for media handling

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


Media Preview seems to allow what should be disabled via internal settings, and may not be under the same controls as other parts of the browser.

Examples with gstreamer at #18782; an additional test was performed using the internal setting for disabling images (permissions.default.image) and they still showed up in Media preview. Not just in the Address section as URLs, but as actual displayed pictures. Any need for eliminating tracking pixels, for instance, might be subverted by this.

The objective here is to check where Page Info/Media Preview's settings are, whether they are under the control of settings at all, and most importantly to find out if anything they do can contradict user-intended/expected levels of security.

Child Tickets

Change History (1)

comment:1 Changed 5 years ago by cypherpunks

Related: #18770.

Note: See TracTickets for help on using tickets.