[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #25916 [Applications/Tor Browser]: Disable MOZ_DISABLE_CONTENT_SANDBOX

#25916: Disable MOZ_DISABLE_CONTENT_SANDBOX
------------------------------------------+----------------------
     Reporter:  tom                       |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  ff60-esr
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 MOZ_DISABLE_CONTENT_SANDBOX can be used at runtime to disable the content
 sandbox.  If an attacker can influence this, we're probably already sunk,
 but just like we disable the "Dump all your TLS Session Keys here please"
 environment variable, we should disable this one too.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25916>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs