Opened 2 years ago

Last modified 23 months ago

#24945 new defect

Tor Browser design doc says it whitelists flash and gnash as plugins

Reported by: arma Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: ff60-esr
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

The Tor Browser design doc says "we also patch the Firefox source code to prevent the load of any plugins except for Flash and Gnash. Even for Flash and Gnash, we also patch Firefox to prevent loading them into the address space until they are explicitly enabled."

If this is so, we should probably change Tor Browser to just prevent all plugins, including Flash and Gnash.

And if it is no longer so, we should fix the wrong statement in the design doc.

Noticed in #10885.

Child Tickets

Change History (1)

comment:1 Changed 23 months ago by gk

Keywords: ff60-esr added

This is so. Patches are welcome. We could consider that for our switch to ESR 60 I guess.

Note: See TracTickets for help on using tickets.