[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #13618 [Tor Messenger]: Handling links in the chat window

#13618: Handling links in the chat window
-------------------------------+--------------------
     Reporter:  sukhbir        |      Owner:
         Type:  defect         |     Status:  closed
     Priority:  normal         |  Milestone:
    Component:  Tor Messenger  |    Version:
   Resolution:  fixed          |   Keywords:
Actual Points:                 |  Parent ID:
       Points:                 |
-------------------------------+--------------------

Comment (by arlolra):

 Something to keep in mind here, from gk's audit,

 > I noticed the disable-links.patch locks the restrictive mode even more
 down by not rendering links at all. This is important not for the reasons
 mentioned in the respective trac ticket but to avoid proxy bypasses. It
 turns out that it is already enough to drag a link on some platforms to
 bypass proxy settings of an application. See:
 https://bigs.torproject.org/4517 for details. One thing you could do, if
 you want to allow the drawing of links later on, is to write extension
 code that intercepts this dragging and makes sure it is not dangerous
 anymore. Torbutton is doing that right now.

 Also, see Ricochet's UI for opening/copying links.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13618#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs