Opened 4 months ago

Last modified 4 weeks ago

#31120 new defect

Enable AssertSystemPrincipalMustNotLoadRemoteDocuments

Reported by: tom Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: ff68-esr
Cc: Actual Points:
Parent ID: #28707 Points:
Reviewer: Sponsor: Sponsor44-can

Description

AssertSystemPrincipalMustNotLoadRemoteDocuments is a defense in depth mitigation Tor should ensure is used by default.

This will involve removing some ifdefs and possibly backporting the updates to the function from -central to -esr68

Child Tickets

Change History (3)

comment:1 Changed 4 months ago by tom

Parent ID: #28707

comment:2 Changed 3 months ago by pili

Sponsor: Sponsor44-can

Adding Sponsor 44 to ESR68 tickets

comment:3 Changed 4 weeks ago by gk

Alpha material but might miss 9.5a1. The bug in question is: https://bugzilla.mozilla.org/show_bug.cgi?id=1513445.

Note: See TracTickets for help on using tickets.