Opened 7 years ago

Closed 6 years ago

Last modified 6 years ago

#6210 closed enhancement (fixed)

set plugin.expose_full_path to false

Reported by: proper Owned by: mikeperry
Priority: High Milestone:
Component: TorBrowserButton Version:
Severity: Keywords: tbb-pref, MikePerry201302
Cc: proper Actual Points: 0.5
Parent ID: #7008 Points:
Reviewer: Sponsor:

Description

I know, plugins are disabled anyway. For those, who activate them anyway, I know again, it's not recommend anyway. Some who are behind a transparent proxy or torsocks (or similar) will risk to activate plugins anyway.

Please set plugin.expose_full_path to false.

It doesn't cost you anything, it's easy to add to your already existing changes. It should not effect normal operation of TorButton and it's a little improvement against those shooting their own feet.

Child Tickets

Change History (5)

comment:1 Changed 7 years ago by mikeperry

Parent ID: #7008

My only concern with this is the interactions with our "Block all plugins except flash" hack-patch:
https://gitweb.torproject.org/torbrowser.git/blob/maint-2.2:/src/current-patches/firefox/0005-Block-all-plugins-except-flash.patch

At a glance, it looks like it should be fine, since we only care about the leaf name..

comment:2 Changed 7 years ago by mikeperry

Keywords: tbb-pref added

comment:3 Changed 6 years ago by mikeperry

Actual Points: 0.5
Resolution: fixed
Status: newclosed

Fixed in TBB-2.3.25-4.

comment:4 Changed 6 years ago by mikeperry

Keywords: MikePerry201202 added

comment:5 Changed 6 years ago by mikeperry

Keywords: MikePerry201302 added; MikePerry201202 removed
Note: See TracTickets for help on using tickets.