[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #27220 [Applications/Tor Browser]: Allow TBA to install tor button, tor launcher and https everywhere extensions without signatures
#27220: Allow TBA to install tor button, tor launcher and https everywhere
extensions without signatures
--------------------------------------+--------------------------
Reporter: igt0 | Owner: tbb-team
Type: defect | Status: closed
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution: fixed
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+--------------------------
Comment (by gk):
Replying to [comment:12 tom]:
> Can anyone confirm that this doesn't allow someone to install any random
add-on that they name torbutton@xxxxxxxxxxxxxx ?
FWIW this gets addressed with the patch for #27271.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27220#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs