Get graphite back into the security slider
We removed disabled graphite support in Tor Browser following Mozilla due to security concerns. We should let it be governed again by our security slider (Mozilla's bug is https://bugzilla.mozilla.org/show_bug.cgi?id=1271262).
Activity
-
Newest first Oldest first
-
Show all activity Show comments only Show history only
- Georg Koppen added TorBrowserTeam201705R in Legacy / Trac component::applications/tor browser in Legacy / Trac ff52-esr in Legacy / Trac owner::tbb-team in Legacy / Trac priority::medium in Legacy / Trac resolution::fixed in Legacy / Trac severity::normal in Legacy / Trac status::closed in Legacy / Trac tbb-7.0-must in Legacy / Trac tbb-security-slider in Legacy / Trac tbb-torbutton in Legacy / Trac type::defect in Legacy / Trac labels
added TorBrowserTeam201705R in Legacy / Trac component::applications/tor browser in Legacy / Trac ff52-esr in Legacy / Trac owner::tbb-team in Legacy / Trac priority::medium in Legacy / Trac resolution::fixed in Legacy / Trac severity::normal in Legacy / Trac status::closed in Legacy / Trac tbb-7.0-must in Legacy / Trac tbb-security-slider in Legacy / Trac tbb-torbutton in Legacy / Trac type::defect in Legacy / Trac labels
Trac:
Username: tokotoko
Cc: N/A to fdsfgs@krutt.org- Author Developer
Adding tickets to our 7.0 ticket list
Trac:
Keywords: N/A deleted, tbb-7.0-must added - Author Developer
It seems Mozilla found more issues with Graphite. I feel we should wait with getting it back to the slider and just disable it again.
Nothing should be put into the security slider, if users don't ask to (except to "Low", maybe, if it means "allow everything").
- Author Developer
Mozilla keep still finding critical bugs in this piece of code. Let's keep it disabled for the time being.
bug_21726
(https://gitweb.torproject.org/user/gk/tor-browser.git/commit/?h=bug_21726&id=b3a33a1823f8f7047e9bf53f1cbc8a98e27738a4) has a patch up for review.Trac:
Status: new to needs_review
Keywords: N/A deleted, TorBrowserTeam201705R added r=brade, r=mcs Okay.
- Author Developer
commit 9b5324a8 on
tor-browser-52.1.0esr-7.0-2
has it (and the typo in the commit message goes away after rebasing, promised ;) ).Trac:
Resolution: N/A to fixed
Status: needs_review to closed - Trac closed
closed
- Georg Koppen mentioned in issue legacy/trac#31134 (moved)
mentioned in issue legacy/trac#31134 (moved)
- Trac moved from legacy/trac#21726 (moved)
moved from legacy/trac#21726 (moved)
- Trac added Security Settings label and removed 1 deleted label
added Security Settings label and removed 1 deleted label