#23027 closed defect (duplicate)

Tor sandbox should to reset all of tor browser bundle settings at launch

Reported by: Dbryrtfbcbhgf Owned by: yawning
Priority: Medium Milestone: Tor: 0.3.2.x-final
Component: Archived/Tor Browser Sandbox Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

If a zero day JavaScript exploit is able to compromise Firefox, it may be able to override TBB’s Settings. If it overrides the default homepage setting, every single time the user opens TBB it will open up a possibly malicious homepage. In attacker may be able to do much worse if they’re able to TBB Preferences. A simple way to solve this would be have the sandbox launcher reset the settings every single time tor browser starts, adding an option for users to opt out my also be useful.

Child Tickets

Change History (1)

comment:1 Changed 17 months ago by yawning

Resolution: duplicate
Status: newclosed

Dup of #22932.

Note: See TracTickets for help on using tickets.