Opened 16 months ago

Last modified 13 months ago

#31120 new defect

Enable AssertSystemPrincipalMustNotLoadRemoteDocuments

Reported by: tom Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: ff68-esr
Cc: Actual Points:
Parent ID: #28707 Points:
Reviewer: Sponsor: Sponsor44-can


AssertSystemPrincipalMustNotLoadRemoteDocuments is a defense in depth mitigation Tor should ensure is used by default.

This will involve removing some ifdefs and possibly backporting the updates to the function from -central to -esr68

Child Tickets

Change History (3)

comment:1 Changed 16 months ago by tom

Parent ID: #28707

comment:2 Changed 15 months ago by pili

Sponsor: Sponsor44-can

Adding Sponsor 44 to ESR68 tickets

comment:3 Changed 13 months ago by gk

Alpha material but might miss 9.5a1. The bug in question is:

Note: See TracTickets for help on using tickets.