Don't allow GIO supported protocols by default

Firefox allows passing URLs along to the OS (by a whitelist) which is dangerous. We should avoid that.

added component::applications/tor browser owner::tbb-team priority::immediate resolution::fixed severity::blocker status::closed tbb-proxy-bypass type::defect labels

Fixes pushed to tor-browser-52.2.0esr-7.5-1 (commit a96f898e0da42de751a5e1367a9899cc96fadb1f) and tor-browser-52.2.0esr-7.0-1 (commit 720f9061496321aa978d2f022113c40e9aeb4847). They will show up in the next releases, 7.0.3 and 7.5a3.

Trac:
Keywords: tbb-gitian deleted, tbb-proxy-bypass added
Resolution: N/A to fixed
Summary: Replace stdole2.tlb with our own during build time to Don't allow GIO supported protocols by default
Description: The mingw-w64 repo contains the binary stdole2.tlb which is needed for building Tor Browser (see: 17e09279acf8b7f44d731c9a65541a474af4f1b5). It turns out we can do better than relying on that binary blob and create that typelib during build time.

to

Firefox allows passing URLs along to the OS (by a whitelist) which is dangerous. We should avoid that.
Priority: Medium to Immediate
Severity: Normal to Blocker
Status: new to closed

closed

moved to tpo/applications/tor-browser#23044 (closed)