Opened 12 years ago

#522 closed defect (Fixed)

PDF handling is broken (and dangerous)

Reported by: mikeperry Owned by:
Priority: Very High Milestone:
Component: Applications/Torbutton Version: 1.1
Severity: Keywords:
Cc: mikeperry, nickm Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

The Adobe PDF plugin does not obey the docShell.allowPlugins attribute. It could be because the pdf load
creates a new docshell. This requires investigating.

Also, the collaboration IP leak issue discovered by Goldy should probably be reported to Adobe as well,
and perhaps a workaround can be introduced by chopping up pdf link requests (though this is likely to
get very tricky).

[Automatically added by flyspray2trac: Operating System: All]

Child Tickets

Change History (2)

comment:1 Changed 12 years ago by mikeperry

Turns out the pdf is still able to make a network connection in some cases before we kill it. In other cases it hangs...

comment:2 Changed 12 years ago by mikeperry

flyspray2trac: bug closed.
Fixed in r12428 for 1.1.10.

Note: See TracTickets for help on using tickets.