Re: [tor-bugs] #10941 [Tor Messenger]: Secure messaging window

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#10941: Secure messaging window
---------------------------+--------------------------
 Reporter:  sukhbir        |          Owner:  sukhbir
     Type:  task           |         Status:  assigned
 Priority:  Medium         |      Milestone:
Component:  Tor Messenger  |        Version:
 Severity:  Normal         |     Resolution:
 Keywords:                 |  Actual Points:
Parent ID:                 |         Points:
  Sponsor:                 |
---------------------------+--------------------------

Comment (by mikeperry):

 Oh, my comments there simply were that it would be strictly better if we
 knew the message content window had scripts disabled fully, rather than
 (or actually, in addition to) being XSS filtered.

 I know there was some contention with the instantbird team over this, as
 they felt this would negatively impact UI, so my thought was that we could
 have a security slider here, too. So for example, look at all of the stuff
 that Coy.im disables: https://coy.im/about/. Rather than killing all of
 that up-front (which will negatively impact UX), it could be progressively
 disabled as security level is increased.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10941#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs