Opened 7 years ago

Closed 7 years ago

#6727 closed defect (not a bug)

Plugins no longer loading in 2.3.20

Reported by: slacka Owned by: mikeperry
Priority: High Milestone:
Component: Firefox Patch Issues Version: Tor: 0.2.3.20-rc
Severity: Keywords: tbb-usability
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

OS: windows 7 64 bit
version: tor-browser-2.3.20-alpha-1_en-US

Steps to Reproduce:
1) Install tor-browser-2.3.20-alpha-1_en-US.exe
2) Copy plugins to FirefoxPortable\App\Firefox\plugins
3) Go to Torbutton Preferences->Security Settings->Dynamic Content tab and unchecking "Disable plugins during Tor usage" box.
4) Restart

Expected Results: Plugins load and can be used
Actual Results: Only the flash plugin loads. I have tested with java, foxit PDF viewer, and google talk.

Additional info:

In previous version, tor-browser-2.3.13-alpha, the above steps worked perfectly. Now only flash will load.

I need to use tor to circumvent the Great Firewall of China. So I am not so concerned about privacy issues that plugins may introduce. If all plugins other than flash have been disabled, it should be noted somewhere. Otherwise, I consider this a major bug.

BTW, good work on 2.3. It's great to be able to have free access to the Internet again in China.

Child Tickets

Change History (5)

comment:1 Changed 7 years ago by slacka

Sorry, I believe the last working TBB was 2.3.12-alpha-2, not 2.3.13.

comment:2 Changed 7 years ago by slacka

I can confirm that this is still an issue in
tor-browser-2.3.22-alpha-1_en-US

comment:3 Changed 7 years ago by arma

Parent ID: #7470

comment:4 Changed 7 years ago by mikeperry

Keywords: tbb-usability added; tbb-alpha patch plugins removed
Parent ID: #7470

Pretty sure this is a separate issue from simply getting flash to run. The reporter says that flash does load, but other plugins are disabled. Removing parent.

The wider issue of how we can let a user simply enable *all* plugins is separate problem (possibly usability issue?). There's a lot of conflicting issues at stake for that, though.

comment:5 Changed 7 years ago by mikeperry

Resolution: not a bug
Status: newclosed

Until we get proper sandboxing, this is a feature. Java is simply a security nightmare.

Note: See TracTickets for help on using tickets.