[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #27411 [Applications/Tor Browser]: Security slider is broken in second RC for Tor Browser 8 on Windows

#27411: Security slider is broken in second RC for Tor Browser 8 on Windows
--------------------------------------+--------------------------
 Reporter:  gk                        |          Owner:  tbb-team
     Type:  defect                    |         Status:  closed
 Priority:  Immediate                 |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:  fixed
 Keywords:  TorBrowserTam201809       |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by rustybird):

 Replying to [comment:10 arthuredelstein]:
 > Replying to [comment:4 ma1]:
 >
 > > IMHO the only way to be sure we manage to get in sync is **NoScript
 knowing from the start** that it's running in the Tor Browser (I suggested
 by [https://dxr.mozilla.org/mozilla-
 central/rev/c2e3be6a1dd352b969a45f0b85e87674e24ad284/toolkit/components/extensions/parent
 /ext-runtime.js#117 customizing the browser.runtime.getBrowserInfo()] API
 to return something meaningful, but maybe there's an easier way) and, if
 that's the case, either repeating the "start" message every 100ms until it
 gets acknowledged or waiting for an "updateSettings" message to arrive.
 >
 > Something that now occurrs to me, which doesn't require any further
 patching of NoScript, is for torbutton to keep sending its first
 updateSettings message (say every 100 ms) until NoScript responds.

 But without a further, Tor Browser specific patch for NoScript (to delay
 page loads until the updateSettings message has arrived), the first page
 load could still happen with the wrong settings.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27411#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs