Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
Trac
Trac
  • Project overview
    • Project overview
    • Details
    • Activity
  • Issues 246
    • Issues 246
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Operations
    • Operations
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value Stream
  • Wiki
    • Wiki
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Create a new issue
  • Issue Boards

GitLab is used only for code review, issue tracking and project management. Canonical locations for source code are still https://gitweb.torproject.org/ https://git.torproject.org/ and git-rw.torproject.org.

  • Legacy
  • TracTrac
  • Issues
  • #22904

Closed (moved)
Open
Opened Jul 12, 2017 by Trac@tracbot

macOS: Downloaded files in Tor Browser are being added to a system download history list.

Files downloaded with Tor Browser on the Mac are getting added to the list:

/Users/whoever/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2

From what I can understand, this seems to be a behavior applications have added on Apple's request going back to Snow Leopard as part of File Quarantine, GateKeeper and Xprotect features of macOS. Also data is being added to the downloaded file itself in the form of the quarantine attribute, available with the xattr command.

I guess Tor Browser has inherited this behavior from Firefox. I think it needs to be removed. Downloads over Tor definitely shouldn't be put in a global list of files and the downloaded files themselves should not have extra metadata added to them by TB.

I'm using the 7.02 Mac TB on 10.11, but it will apply to all macOS versions with these security features.

AFAIK there is only the list at the user level, but someone should check if there isn't a system wide list.

Trac:
Username: DrMikeTwiddle

To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: legacy/trac#22904