[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #18782 [Tor Browser]: media tab in Page Info can bypass NoScript

#18782: media tab in Page Info can bypass NoScript
-----------------------------+----------------------
     Reporter:  cypherpunks  |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  High         |  Milestone:
    Component:  Tor Browser  |    Version:
     Severity:  Major        |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |   Reviewer:
      Sponsor:               |
-----------------------------+----------------------
 to reproduce:

  - visit machetona.neocities.org
  - [collateral/bonus: rack up a 16 year old girl's page counts]
  - Tools->Page Info->Media (tab)
  - scroll down the media list to the URL that looks like an IP address
  - press play and listen to the sweet jams and OH CRAP THAT ISN'T SUPPOSED
 TO HAPPEN
  - trouble

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18782>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs