[tbb-bugs] #13204 [Tor Browser]: TOR Browser Bundle interprets 'mailto' links as downloads

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Sep 21 01:46:18 UTC 2014


#13204: TOR Browser Bundle interprets 'mailto' links as downloads
-------------------------+--------------------------
 Reporter:  Orthogonal   |          Owner:  tbb-team
     Type:  defect       |         Status:  new
 Priority:  normal       |      Milestone:
Component:  Tor Browser  |        Version:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
-------------------------+--------------------------
 If a 'mailto' link (e.g. mailto:user at example.com) is clicked, instead of
 starting a new email in an email client, the TOR Browser Bundle gives the
 warning:

 Tor Browser cannot display this file. You will need to open it with
 another application.
 Some types of files can cause applications to connect to the internet
 without using Tor.
 To be safe, you should only open downloaded files while offline, or use a
 Tor live CD such as Tails.

 mailto: addresses are not files, and no data can be leaked from clicking
 on one. To be fixed, this warning should be removed for mailto: addresses
 and an attempt should be made to open the address in the default system
 mail client.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13204>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list