Opened 2 years ago

Last modified 21 months ago

#27607 new defect

Enabling SVG sets security slider back to "Safer"

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-security-slider, tbb-8.0-issues, tbb-regression, tbb-8.0.1-can
Cc: ln5 Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by gk)

Set the slider to "Safest" and then enable SVG in about:config. Despite the wish to just enable SVG this sets the slider back to "Safer". Found by ln5.

Child Tickets

Change History (4)

comment:1 Changed 2 years ago by gk

Keywords: tbb-8.0-issues added; tbb-8.0-issue removed

comment:2 Changed 2 years ago by gk

Keywords: tbb-8.0.1-can added

Marking for 8.0.1 can.

comment:3 Changed 2 years ago by gk

Description: modified (diff)
Summary: Enabling SVG set security slider back to "Safer"Enabling SVG sets security slider back to "Safer"

comment:4 Changed 21 months ago by gk

We had a cypherpunk in #tor yesterday some noted the following interesting bit:

On Tor Browser, if I have my security slider to safest and change `svg.disabled` & `gfx.font_rendering.opentype_svg.enabled` in `about:config` in the order it bumps my security settings down to safer. However, if i toggle `gfx.font_rendering.opentype_svg.enabled` first then              `svg.disabled` the security slider remains on high.
Note: See TracTickets for help on using tickets.