[tbb-bugs] #34209 [Applications/Tor Browser]: about:tor and about:tbupdate fail to load in debug build of Tor Browser

[Tor Bug Tracker & Wiki]

#34209: about:tor and about:tbupdate fail to load in debug build of Tor Browser
------------------------------------------+--------------------------------
     Reporter:  mcs                       |      Owner:  mcs
         Type:  defect                    |     Status:  assigned
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
                                          |  TorBrowserTeam202005
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:  Sponsor58-can             |
------------------------------------------+--------------------------------
 When using a debug build based on acat's 33533+5 branch, trying to open
 about:tor or about:tbupdate leads to an assertion failure and a tab crash:
  Assertion failure: foundObjectSrc (about: page must contain a CSP denying
 object-src), at /.../dom/security/nsContentSecurityUtils.cpp:818

 We need to add `object-src 'none'` to the CSP for those pages.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/34209>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online