[tbb-bugs] #32989 [Applications/Tor Browser]: Renaming Browser directory renables JavaScript

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Jan 19 16:08:44 UTC 2020


#32989: Renaming Browser directory renables JavaScript
----------------------------+------------------------------------------
 Reporter:  pudim           |          Owner:  tbb-team
     Type:  defect          |         Status:  new
 Priority:  Medium          |      Component:  Applications/Tor Browser
  Version:                  |       Severity:  Normal
 Keywords:  tbb-9.0-issues  |  Actual Points:
Parent ID:                  |         Points:
 Reviewer:                  |        Sponsor:
----------------------------+------------------------------------------
 If I set the Safest Security Level, close the Browser, move the directory
 and open it again from the new location, **it still reports the Safest
 Security Level is selected, but JavaScript is enabled**!

 By doing a diff on a clean extracted Browser and a configured one, I
 noticed that the torrc file gets some absolute paths, like `DataDirectory
 /home/...`, which may be the cause.

 Tested with Tor Browser 9.0.4, downloaded from the website:
 [https://www.torproject.org/dist/torbrowser/9.0.4/tor-browser-linux64-9.0
 .4_en-US.tar.xz]

 Steps to reproduce:
 {{{#!sh
 wget https://www.torproject.org/dist/torbrowser/9.0.4/tor-browser-
 linux64-9.0.4_en-US.tar.xz
 tar -xf tor-browser-linux64-9.0.4_en-US.tar.xz
 cd tor-browser_en-US/Browser/
 ./start-tor-browser # set safest security level and close
 ./start-tor-browser youtube.com # site is broken
 cd ../..
 mv tor-browser_en-US somethingelse
 cd somethingelse/Browser
 ./start-tor-browser youtube.com # site is working!!1
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32989>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list