Opened 2 years ago

Closed 2 years ago

#22904 closed defect (duplicate)

macOS: Downloaded files in Tor Browser are being added to a system download history list.

Reported by: DrMikeTwiddle Owned by: tbb-team
Priority: Very High Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: Mac, File Quarantine, com.apple.LaunchServices.QuarantineEventsV2
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Files downloaded with Tor Browser on the Mac are getting added to the list:

/Users/whoever/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2

From what I can understand, this seems to be a behavior applications have added on Apple's request going back to Snow Leopard as part of File Quarantine, GateKeeper and Xprotect features of macOS. Also data is being added to the downloaded file itself in the form of the quarantine attribute, available with the xattr command.

I guess Tor Browser has inherited this behavior from Firefox. I think it needs to be removed. Downloads over Tor definitely shouldn't be put in a global list of files and the downloaded files themselves should not have extra metadata added to them by TB.

I'm using the 7.02 Mac TB on 10.11, but it will apply to all macOS versions with these security features.

AFAIK there is only the list at the user level, but someone should check if there isn't a system wide list.

Child Tickets

Change History (2)

comment:1 Changed 2 years ago by DrMikeTwiddle

Summary: macOS: Downloaded files in Tor Browser are being added to a system download list.macOS: Downloaded files in Tor Browser are being added to a system download history list.

comment:2 Changed 2 years ago by gk

Resolution: duplicate
Status: newclosed

Duplicate of #22642.

Note: See TracTickets for help on using tickets.