Re: [tor-bugs] #22165 [Applications/Tor Browser]: Rip out the option to collect local IP addresses

2017-07-19 Thread Tor Bug Tracker & Wiki
#22165: Rip out the option to collect local IP addresses -+- Reporter: gk | Owner: tbb- | team Type: enhancement

Re: [tor-bugs] #21830 [Applications/Tor Browser]: Copying large text from web console leaks to /tmp

2017-07-19 Thread Tor Bug Tracker & Wiki
#21830: Copying large text from web console leaks to /tmp --+-- Reporter: gk| Owner: neillm Type: defect| Status: assigned Priority: Medium|

Re: [tor-bugs] #22948 [Core Tor/Tor]: Padding, Keepalive and Drop cells should have random payloads

2017-07-19 Thread Tor Bug Tracker & Wiki
#22948: Padding, Keepalive and Drop cells should have random payloads --+ Reporter: teor | Owner: Type: defect| Status: new Priority: Medium| Milestone: Tor: 0.3.2.x-final

[tor-bugs] #22988 [Internal Services/Service - trac]: Make all trac child tickets have the same headers and inherit fields

2017-07-19 Thread Tor Bug Tracker & Wiki
#22988: Make all trac child tickets have the same headers and inherit fields --+- Reporter: teor | Owner: qbi Type: enhancement | Status: new Priority:

Re: [tor-bugs] #22987 [Core Tor/Tor]: TAP Hybrid Encryption case 1 is used when the payload is equal to the maximum length

2017-07-19 Thread Tor Bug Tracker & Wiki
#22987: TAP Hybrid Encryption case 1 is used when the payload is equal to the maximum length --+ Reporter: teor | Owner: teor Type: defect| Status: needs_review Priority: Medium|

[tor-bugs] #22987 [Core Tor/Tor]: TAP Hybrid Encryption case 1 is used when the payload is equal to the maximum length

2017-07-19 Thread Tor Bug Tracker & Wiki
#22987: TAP Hybrid Encryption case 1 is used when the payload is equal to the maximum length --+ Reporter: teor | Owner: teor Type: defect| Status: new Priority: Medium|

Re: [tor-bugs] #21847 [Applications/Tor Browser]: Update copy for security slider to be consistent with the mobile experience

2017-07-19 Thread Tor Bug Tracker & Wiki
#21847: Update copy for security slider to be consistent with the mobile experience +-- Reporter: isabela | Owner: tbb-team Type: enhancement |

Re: [tor-bugs] #22636 [Core Tor/Tor]: Add Travis configs so GitHub forks get CI coverage

2017-07-19 Thread Tor Bug Tracker & Wiki
#22636: Add Travis configs so GitHub forks get CI coverage -+- Reporter: catalyst | Owner: | patrickod Type: defect

Re: [tor-bugs] #21569 [Applications/Tor Browser]: Investigate and neuter fingerprinting potential of Permissions API

2017-07-19 Thread Tor Bug Tracker & Wiki
#21569: Investigate and neuter fingerprinting potential of Permissions API -+- Reporter: gk | Owner: | arthuredelstein Type:

Re: [tor-bugs] #22986 [- Select a component]: update Alison's GPG key in db.torproject.org

2017-07-19 Thread Tor Bug Tracker & Wiki
#22986: update Alison's GPG key in db.torproject.org --+ Reporter: alison| Owner: alison Type: task | Status: closed Priority: Medium| Milestone: Component: -

Re: [tor-bugs] #22986 [- Select a component]: update Alison's GPG key in db.torproject.org

2017-07-19 Thread Tor Bug Tracker & Wiki
#22986: update Alison's GPG key in db.torproject.org --+ Reporter: alison| Owner: alison Type: task | Status: closed Priority: Medium| Milestone: Component: -

Re: [tor-bugs] #22986 [- Select a component]: update Alison's GPG key in db.torproject.org

2017-07-19 Thread Tor Bug Tracker & Wiki
#22986: update Alison's GPG key in db.torproject.org --+-- Reporter: alison| Owner: alison Type: task | Status: assigned Priority: Medium| Milestone:

[tor-bugs] #22986 [- Select a component]: update Alison's GPG key in db.torproject.org

2017-07-19 Thread Tor Bug Tracker & Wiki
#22986: update Alison's GPG key in db.torproject.org --+- Reporter: alison| Owner: Type: task | Status: new Priority: Medium| Milestone: Component: - Select a

Re: [tor-bugs] #22979 [Core Tor/Tor]: prop224: Add an introduction point onion key in the descriptor

2017-07-19 Thread Tor Bug Tracker & Wiki
#22979: prop224: Add an introduction point onion key in the descriptor ---+--- Reporter: dgoulet| Owner: dgoulet Type: enhancement| Status: merge_ready Priority:

Re: [tor-bugs] #22985 [Applications/Tor Browser]: Can we simplify and clarify click-to-play of audio/video?

2017-07-19 Thread Tor Bug Tracker & Wiki
#22985: Can we simplify and clarify click-to-play of audio/video? -+- Reporter: arthuredelstein | Owner: tbb- | team Type: defect

Re: [tor-bugs] #22979 [Core Tor/Tor]: prop224: Add an introduction point onion key in the descriptor

2017-07-19 Thread Tor Bug Tracker & Wiki
#22979: prop224: Add an introduction point onion key in the descriptor ---+--- Reporter: dgoulet| Owner: dgoulet Type: enhancement| Status: needs_review Priority:

Re: [tor-bugs] #22981 [Applications/Tor Browser]: Don't block audio/video on https sites under Medium Security

2017-07-19 Thread Tor Bug Tracker & Wiki
#22981: Don't block audio/video on https sites under Medium Security -+- Reporter: arthuredelstein | Owner: tbb- | team Type: defect

Re: [tor-bugs] #22985 [Applications/Tor Browser]: Can we simplify and clarify click-to-play of audio/video?

2017-07-19 Thread Tor Bug Tracker & Wiki
#22985: Can we simplify and clarify click-to-play of audio/video? -+- Reporter: arthuredelstein | Owner: tbb- | team Type: defect

Re: [tor-bugs] #22979 [Core Tor/Tor]: prop224: Add an introduction point onion key in the descriptor

2017-07-19 Thread Tor Bug Tracker & Wiki
#22979: prop224: Add an introduction point onion key in the descriptor ---+--- Reporter: dgoulet| Owner: dgoulet Type: enhancement| Status: needs_review Priority:

[tor-bugs] #22985 [Applications/Tor Browser]: Can we simplify and clarify click-to-play of audio/video?

2017-07-19 Thread Tor Bug Tracker & Wiki
#22985: Can we simplify and clarify click-to-play of audio/video? -+- Reporter: arthuredelstein | Owner: tbb-team Type: defect | Status: new Priority: Medium |

Re: [tor-bugs] #22967 [Applications/Tor Browser Sandbox]: Kill "Tor Browser Crash Dumps" with fire once implemented.

2017-07-19 Thread Tor Bug Tracker & Wiki
#22967: Kill "Tor Browser Crash Dumps" with fire once implemented. --+- Reporter: yawning | Owner: yawning Type: enhancement | Status: closed Priority:

Re: [tor-bugs] #20792 [Applications/Tor Browser Sandbox]: Add more options for changing the install process behavior

2017-07-19 Thread Tor Bug Tracker & Wiki
#20792: Add more options for changing the install process behavior --+- Reporter: yawning | Owner: yawning Type: enhancement | Status: new Priority: Low

Re: [tor-bugs] #22262 [Applications/Tor Browser Sandbox]: Tor Browser Sandbox should offer the possibility to download the Tor Browser from mirrors

2017-07-19 Thread Tor Bug Tracker & Wiki
#22262: Tor Browser Sandbox should offer the possibility to download the Tor Browser from mirrors --+--- Reporter: blockflare| Owner: yawning Type: enhancement |

Re: [tor-bugs] #22984 [Applications/Tor Browser Sandbox]: Enable network.IDN_show_punycode by default in the sandboxed browser.

2017-07-19 Thread Tor Bug Tracker & Wiki
#22984: Enable network.IDN_show_punycode by default in the sandboxed browser. --+- Reporter: yawning | Owner: yawning Type: enhancement | Status: closed

[tor-bugs] #22984 [Applications/Tor Browser Sandbox]: Enable network.IDN_show_punycode by default in the sandboxed browser.

2017-07-19 Thread Tor Bug Tracker & Wiki
#22984: Enable network.IDN_show_punycode by default in the sandboxed browser. --+- Reporter: yawning | Owner: yawning Type: enhancement | Status: new

Re: [tor-bugs] #22925 [Applications/Tor Browser Sandbox]: Make the extension whitelist public key cryptography based.

2017-07-19 Thread Tor Bug Tracker & Wiki
#22925: Make the extension whitelist public key cryptography based. --+- Reporter: yawning | Owner: yawning Type: enhancement | Status: new Priority:

Re: [tor-bugs] #22925 [Applications/Tor Browser Sandbox]: Make the extension whitelist public key cryptography based.

2017-07-19 Thread Tor Bug Tracker & Wiki
#22925: Make the extension whitelist public key cryptography based. --+- Reporter: yawning | Owner: yawning Type: enhancement | Status: new Priority:

Re: [tor-bugs] #22976 [Core Tor/Tor]: disallow tor exec'ing

2017-07-19 Thread Tor Bug Tracker & Wiki
#22976: disallow tor exec'ing --+ Reporter: dawuud| Owner: Type: defect| Status: new Priority: Medium| Milestone: Tor: 0.3.2.x-final Component: Core Tor/Tor |Version:

Re: [tor-bugs] #21321 [Applications/Tor Browser]: .onion HTTP is shown as non-secure in Tor Browser

2017-07-19 Thread Tor Bug Tracker & Wiki
#21321: .onion HTTP is shown as non-secure in Tor Browser -+- Reporter: cypherpunks | Owner: tbb- | team Type: task

Re: [tor-bugs] #22428 [Metrics/CollecTor]: add webstats module to collector

2017-07-19 Thread Tor Bug Tracker & Wiki
#22428: add webstats module to collector ---+- Reporter: iwakeh | Owner: iwakeh Type: enhancement| Status: accepted Priority: Medium | Milestone: CollecTor 1.3.0

[tor-bugs] #22983 [Metrics/metrics-lib]: add a descriptor interface and implementation for web-logs

2017-07-19 Thread Tor Bug Tracker & Wiki
#22983: add a descriptor interface and implementation for web-logs -+-- Reporter: iwakeh | Owner: metrics-team Type: enhancement | Status: new Priority: Medium |

Re: [tor-bugs] #22981 [Applications/Tor Browser]: Don't block audio/video on https sites under Medium Security

2017-07-19 Thread Tor Bug Tracker & Wiki
#22981: Don't block audio/video on https sites under Medium Security -+- Reporter: arthuredelstein | Owner: tbb- | team Type: defect

Re: [tor-bugs] #22972 [Core Tor/Tor]: tor expert bundle only read the first letter from config

2017-07-19 Thread Tor Bug Tracker & Wiki
#22972: tor expert bundle only read the first letter from config --+ Reporter: lanealucy | Owner: erinn Type: defect| Status: new Priority: Medium| Milestone: Tor: 0.3.2.x-final

Re: [tor-bugs] #22192 [Webpages/Website]: Update tor-mirrors.csv / mirror site

2017-07-19 Thread Tor Bug Tracker & Wiki
#22192: Update tor-mirrors.csv / mirror site --+--- Reporter: Samdney | Owner: Sebastian Type: task | Status: reopened Priority: Medium| Milestone: Component: Webpages/Website

Re: [tor-bugs] #22979 [Core Tor/Tor]: prop224: Add an introduction point onion key in the descriptor

2017-07-19 Thread Tor Bug Tracker & Wiki
#22979: prop224: Add an introduction point onion key in the descriptor ---+--- Reporter: dgoulet| Owner: dgoulet Type: enhancement| Status: needs_review Priority:

[tor-bugs] #22982 [Applications/Tor Browser]: Introduce a single "adjust security" toolbar button for security slider and noscript options

2017-07-19 Thread Tor Bug Tracker & Wiki
#22982: Introduce a single "adjust security" toolbar button for security slider and noscript options -+- Reporter: arthuredelstein | Owner: tbb-team Type: defect | Status: new

Re: [tor-bugs] #22831 [Applications/Tor Browser]: Merge Snowflake for mac

2017-07-19 Thread Tor Bug Tracker & Wiki
#22831: Merge Snowflake for mac -+-- Reporter: dcf | Owner: tbb-team Type: task | Status: closed Priority: Medium |

Re: [tor-bugs] #21321 [Applications/Tor Browser]: .onion HTTP is shown as non-secure in Tor Browser

2017-07-19 Thread Tor Bug Tracker & Wiki
#21321: .onion HTTP is shown as non-secure in Tor Browser -+- Reporter: cypherpunks | Owner: tbb- | team Type: task

Re: [tor-bugs] #22979 [Core Tor/Tor]: prop224: Add an introduction point onion key in the descriptor

2017-07-19 Thread Tor Bug Tracker & Wiki
#22979: prop224: Add an introduction point onion key in the descriptor ---+--- Reporter: dgoulet| Owner: dgoulet Type: enhancement| Status: accepted Priority: Medium

[tor-bugs] #22981 [Applications/Tor Browser]: Don't block audio/video on https sites under Medium Security

2017-07-19 Thread Tor Bug Tracker & Wiki
#22981: Don't block audio/video on https sites under Medium Security -+- Reporter: arthuredelstein | Owner: tbb-team Type: defect | Status: new Priority: Medium

[tor-bugs] #22980 [Applications/Tor Browser]: Indicate Security Slider Level applies globally

2017-07-19 Thread Tor Bug Tracker & Wiki
#22980: Indicate Security Slider Level applies globally -+- Reporter: arthuredelstein | Owner: tbb-team Type: defect | Status: new Priority: Medium |

Re: [tor-bugs] #22959 [Applications/Tor Browser]: Merge Snowflake for mac, in rbm tor-browser

2017-07-19 Thread Tor Bug Tracker & Wiki
#22959: Merge Snowflake for mac, in rbm tor-browser -+ Reporter: boklm| Owner: boklm Type: task | Status: closed Priority: Medium

Re: [tor-bugs] #22827 [Core Tor/Tor]: Formalise CollecTor spec for sanitised bridge descriptors and put in torspec

2017-07-19 Thread Tor Bug Tracker & Wiki
#22827: Formalise CollecTor spec for sanitised bridge descriptors and put in torspec -+- Reporter: isis | Owner: karsten Type: enhancement | Status:

Re: [tor-bugs] #22895 [Core Tor/Tor]: Unused variables in donna's SSE2 header

2017-07-19 Thread Tor Bug Tracker & Wiki
#22895: Unused variables in donna's SSE2 header -+- Reporter: cypherpunks | Owner: Type: defect | Status:

Re: [tor-bugs] #22972 [Core Tor/Tor]: tor expert bundle only read the first letter from config

2017-07-19 Thread Tor Bug Tracker & Wiki
#22972: tor expert bundle only read the first letter from config --+ Reporter: lanealucy | Owner: erinn Type: defect| Status: new Priority: Medium| Milestone: Tor: 0.3.2.x-final

Re: [tor-bugs] #22976 [Core Tor/Tor]: disallow tor exec'ing

2017-07-19 Thread Tor Bug Tracker & Wiki
#22976: disallow tor exec'ing --+ Reporter: dawuud| Owner: Type: defect| Status: new Priority: Medium| Milestone: Tor: 0.3.2.x-final Component: Core Tor/Tor |Version:

Re: [tor-bugs] #22735 [Core Tor/Tor]: prop224: HS desc overlap period func uses absolute times instead of slots

2017-07-19 Thread Tor Bug Tracker & Wiki
#22735: prop224: HS desc overlap period func uses absolute times instead of slots -+- Reporter: asn | Owner: asn Type: task | Status:

Re: [tor-bugs] #22976 [Core Tor/Tor]: disallow tor exec'ing

2017-07-19 Thread Tor Bug Tracker & Wiki
#22976: disallow tor exec'ing --+ Reporter: dawuud| Owner: Type: defect| Status: new Priority: Medium| Milestone: Tor: 0.3.2.x-final Component: Core Tor/Tor |Version:

Re: [tor-bugs] #22976 [Core Tor/Tor]: disallow tor exec'ing

2017-07-19 Thread Tor Bug Tracker & Wiki
#22976: disallow tor exec'ing --+ Reporter: dawuud| Owner: Type: defect| Status: new Priority: Medium| Milestone: Tor: 0.3.2.x-final Component: Core Tor/Tor |Version:

Re: [tor-bugs] #22884 [Applications/Tor Browser]: about:tor page is not showing up in non-e10s mode after fix for #18913 landed

2017-07-19 Thread Tor Bug Tracker & Wiki
#22884: about:tor page is not showing up in non-e10s mode after fix for #18913 landed -+- Reporter: gk | Owner: tbb- | team

Re: [tor-bugs] #22884 [Applications/Tor Browser]: about:tor page is not showing up in non-e10s mode after fix for #18913 landed

2017-07-19 Thread Tor Bug Tracker & Wiki
#22884: about:tor page is not showing up in non-e10s mode after fix for #18913 landed -+- Reporter: gk | Owner: tbb- | team

Re: [tor-bugs] #22735 [Core Tor/Tor]: prop224: HS desc overlap period func uses absolute times instead of slots

2017-07-19 Thread Tor Bug Tracker & Wiki
#22735: prop224: HS desc overlap period func uses absolute times instead of slots -+- Reporter: asn | Owner: asn Type: task | Status:

Re: [tor-bugs] #22979 [Core Tor/Tor]: prop224: Add an introduction point onion key in the descriptor

2017-07-19 Thread Tor Bug Tracker & Wiki
#22979: prop224: Add an introduction point onion key in the descriptor ---+--- Reporter: dgoulet| Owner: dgoulet Type: enhancement| Status: needs_review Priority:

Re: [tor-bugs] #22979 [Core Tor/Tor]: prop224: Add an introduction point onion key in the descriptor

2017-07-19 Thread Tor Bug Tracker & Wiki
#22979: prop224: Add an introduction point onion key in the descriptor ---+--- Reporter: dgoulet| Owner: dgoulet Type: enhancement| Status: needs_review Priority:

Re: [tor-bugs] #19910 [Applications/Tor Browser]: Rip out optimistic data socks handshake variant (#3875)

2017-07-19 Thread Tor Bug Tracker & Wiki
#19910: Rip out optimistic data socks handshake variant (#3875) --+--- Reporter: cypherpunks | Owner: tbb-team Type: defect| Status: needs_information Priority: Medium

Re: [tor-bugs] #22810 [Core Tor/Tor]: prop224: Make the client/service extend properly to the IP/RP

2017-07-19 Thread Tor Bug Tracker & Wiki
#22810: prop224: Make the client/service extend properly to the IP/RP -+ Reporter: dgoulet | Owner: dgoulet Type: enhancement | Status: needs_revision Priority: Very High|

Re: [tor-bugs] #22977 [Applications/Tor Browser]: TorBrowser 7.0.2 crash on Mac OS X 10.12.6

2017-07-19 Thread Tor Bug Tracker & Wiki
#22977: TorBrowser 7.0.2 crash on Mac OS X 10.12.6 --+-- Reporter: cypherpunks | Owner: tbb-team Type: defect| Status: new Priority: High |

Re: [tor-bugs] #22977 [Applications/Tor Browser]: TorBrowser 7.0.2 crash on Mac OS X 10.12.6

2017-07-19 Thread Tor Bug Tracker & Wiki
#22977: TorBrowser 7.0.2 crash on Mac OS X 10.12.6 --+-- Reporter: cypherpunks | Owner: tbb-team Type: defect| Status: new Priority: High |

Re: [tor-bugs] #22979 [Core Tor/Tor]: prop224: Add an introduction point onion key in the descriptor

2017-07-19 Thread Tor Bug Tracker & Wiki
#22979: prop224: Add an introduction point onion key in the descriptor ---+--- Reporter: dgoulet| Owner: dgoulet Type: enhancement| Status: accepted Priority: Medium

[tor-bugs] #22979 [Core Tor/Tor]: prop224: Add an introduction point onion key in the descriptor

2017-07-19 Thread Tor Bug Tracker & Wiki
#22979: prop224: Add an introduction point onion key in the descriptor ---+--- Reporter: dgoulet| Owner: dgoulet Type: enhancement| Status: new Priority: Medium | Milestone: Tor:

Re: [tor-bugs] #22977 [Applications/Tor Browser]: TorBrowser 7.0.2 crash on Mac OS X 10.12.6

2017-07-19 Thread Tor Bug Tracker & Wiki
#22977: TorBrowser 7.0.2 crash on Mac OS X 10.12.6 --+-- Reporter: cypherpunks | Owner: tbb-team Type: defect| Status: new Priority: Low |

Re: [tor-bugs] #22976 [Core Tor/Tor]: disallow tor exec'ing

2017-07-19 Thread Tor Bug Tracker & Wiki
#22976: disallow tor exec'ing --+ Reporter: dawuud| Owner: Type: defect| Status: new Priority: Medium| Milestone: Tor: 0.3.2.x-final Component: Core Tor/Tor |Version:

Re: [tor-bugs] #22972 [Core Tor/Tor]: tor expert bundle only read the first letter from config

2017-07-19 Thread Tor Bug Tracker & Wiki
#22972: tor expert bundle only read the first letter from config --+ Reporter: lanealucy | Owner: erinn Type: defect| Status: needs_information Priority: Medium| Milestone: Tor:

Re: [tor-bugs] #22952 [Applications/Tor Browser]: Tor Browser Arabic Fonts Issue !

2017-07-19 Thread Tor Bug Tracker & Wiki
#22952: Tor Browser Arabic Fonts Issue ! --+--- Reporter: sigma4111 | Owner: tbb-team Type: defect| Status: needs_information Priority: Medium|

Re: [tor-bugs] #22972 [Core Tor/Tor]: tor expert bundle only read the first letter from config

2017-07-19 Thread Tor Bug Tracker & Wiki
#22972: tor expert bundle only read the first letter from config --+-- Reporter: lanealucy | Owner: erinn Type: defect| Status: new Priority: High | Milestone: Component: Core Tor/Tor |

Re: [tor-bugs] #22978 [Applications/Tor Browser]: BUG "Could not connect to control port" + Temporary solution

2017-07-19 Thread Tor Bug Tracker & Wiki
#22978: BUG "Could not connect to control port" + Temporary solution --+--- Reporter: wunderbar | Owner: tbb-team Type: defect| Status: needs_information Priority:

[tor-bugs] #22978 [Applications/Tor Browser]: BUG "Could not connect to control port" + Temporary solution

2017-07-19 Thread Tor Bug Tracker & Wiki
#22978: BUG "Could not connect to control port" + Temporary solution --+-- Reporter: wunderbar | Owner: tbb-team Type: defect| Status: new Priority: High

Re: [tor-bugs] #22973 [Applications/Tor Browser]: Storage API allows fingerprinting

2017-07-19 Thread Tor Bug Tracker & Wiki
#22973: Storage API allows fingerprinting --+--- Reporter: tom | Owner: tbb-team Type: defect| Status: closed Priority: Medium| Milestone:

Re: [tor-bugs] #21785 [Applications/Tor Browser]: Keep an eye on the Storage API

2017-07-19 Thread Tor Bug Tracker & Wiki
#21785: Keep an eye on the Storage API --+-- Reporter: gk| Owner: tbb-team Type: task | Status: new Priority: High |

Re: [tor-bugs] #22974 [Applications/Tor Browser]: NoScript (and Tor Browser) vulnerable to Mozilla Add-On Code Execution

2017-07-19 Thread Tor Bug Tracker & Wiki
#22974: NoScript (and Tor Browser) vulnerable to Mozilla Add-On Code Execution --+-- Reporter: tom | Owner: tbb-team Type: defect| Status: new Priority: Medium

Re: [tor-bugs] #22974 [Applications/Tor Browser]: NoScript (and Tor Browser) vulnerable to Mozilla Add-On Code Execution

2017-07-19 Thread Tor Bug Tracker & Wiki
#22974: NoScript (and Tor Browser) vulnerable to Mozilla Add-On Code Execution --+-- Reporter: tom | Owner: tbb-team Type: defect| Status: new Priority: Medium

Re: [tor-bugs] #22971 [Applications/Tor Browser]: The XPI signing mechanism needs to use different hash functions.

2017-07-19 Thread Tor Bug Tracker & Wiki
#22971: The XPI signing mechanism needs to use different hash functions. --+-- Reporter: yawning | Owner: tbb-team Type: defect| Status: new Priority: High

Re: [tor-bugs] #22971 [Applications/Tor Browser]: The XPI signing mechanism needs to use different hash functions.

2017-07-19 Thread Tor Bug Tracker & Wiki
#22971: The XPI signing mechanism needs to use different hash functions. --+-- Reporter: yawning | Owner: tbb-team Type: defect| Status: new Priority: High

Re: [tor-bugs] #16931 [Applications/Tor Browser]: Sanitize the add-on blocklist update URL

2017-07-19 Thread Tor Bug Tracker & Wiki
#16931: Sanitize the add-on blocklist update URL --+-- Reporter: cypherpunks | Owner: tbb-team Type: defect| Status: new Priority: Medium| Milestone:

Re: [tor-bugs] #22966 [Applications/Tor Browser]: Nasty MitM possibility with the Firefox blocklist service

2017-07-19 Thread Tor Bug Tracker & Wiki
#22966: Nasty MitM possibility with the Firefox blocklist service --+--- Reporter: basvd | Owner: tbb-team Type: defect| Status: closed Priority: High

Re: [tor-bugs] #16931 [Applications/Tor Browser]: Sanitize the add-on blocklist update URL

2017-07-19 Thread Tor Bug Tracker & Wiki
#16931: Sanitize the add-on blocklist update URL --+-- Reporter: cypherpunks | Owner: tbb-team Type: defect| Status: new Priority: Medium| Milestone:

Re: [tor-bugs] #22971 [Applications/Tor Browser]: The XPI signing mechanism needs to use different hash functions.

2017-07-19 Thread Tor Bug Tracker & Wiki
#22971: The XPI signing mechanism needs to use different hash functions. --+-- Reporter: yawning | Owner: tbb-team Type: defect| Status: new Priority: High

Re: [tor-bugs] #22974 [Applications/Tor Browser]: NoScript (and Tor Browser) vulnerable to Mozilla Add-On Code Execution

2017-07-19 Thread Tor Bug Tracker & Wiki
#22974: NoScript (and Tor Browser) vulnerable to Mozilla Add-On Code Execution --+-- Reporter: tom | Owner: tbb-team Type: defect| Status: new Priority: Medium

Re: [tor-bugs] #22966 [Applications/Tor Browser]: Nasty MitM possibility with the Firefox blocklist service

2017-07-19 Thread Tor Bug Tracker & Wiki
#22966: Nasty MitM possibility with the Firefox blocklist service --+-- Reporter: basvd | Owner: tbb-team Type: defect| Status: new Priority: High |

[tor-bugs] #22976 [Core Tor/Tor]: disallow tor exec'ing

2017-07-19 Thread Tor Bug Tracker & Wiki
#22976: disallow tor exec'ing --+- Reporter: dawuud| Owner: Type: defect| Status: new Priority: Medium| Milestone: Component: Core Tor/Tor |Version: Severity: Normal|

Re: [tor-bugs] #22950 [Applications/Tor Browser Sandbox]: Filter out X11 root window property queries.

2017-07-19 Thread Tor Bug Tracker & Wiki
#22950: Filter out X11 root window property queries. --+- Reporter: yawning | Owner: yawning Type: enhancement | Status: new Priority: Medium