[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #21685 [Applications/Tor Browser]: Remote New Tab pages have access to internal browser APIs in Firefox 52
#21685: Remote New Tab pages have access to internal browser APIs in Firefox 52
-------------------------------------+-------------------------------------
Reporter: gk | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor | Version:
Browser | Keywords: ff52-esr, tbb-7.0-must,
Severity: Normal | TorBrowserTeam201703
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: Sponsor4 |
-------------------------------------+-------------------------------------
It is possible that remote New Tab pages have access to internal browser
APIs in Firefox 52.
PreviewProvider Messaging API
(https://bugzilla.mozilla.org/show_bug.cgi?id=1239119),
NewTabPrefsProvider Messaging API
(https://bugzilla.mozilla.org/show_bug.cgi?id=1239118), and
PlacesProvider Messaging API
(https://bugzilla.mozilla.org/show_bug.cgi?id=1239116)
are relevant. The content signature service
(https://bugzilla.mozilla.org/show_bug.cgi?id=1252882) is important in
this picture, too.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21685>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs