[tor-bugs] #4517 [Tor Browser]: drag-n-drop bypasses tor

[Tor Bug Tracker & Wiki]

#4517: drag-n-drop bypasses tor
----------------------------------------+-----------------------------------
 Reporter:  cypherpunks                 |          Owner:  mikeperry
     Type:  defect                      |         Status:  accepted 
 Priority:  critical                    |      Milestone:           
Component:  Tor Browser                 |        Version:           
 Keywords:  MikePerryIteration20111211  |         Parent:           
   Points:  8                           |   Actualpoints:           
----------------------------------------+-----------------------------------
Changes (by mikeperry):

 * cc: rransom (added)


Comment:

 Ok.. some good news and some bad news..

 Good news is I can intercept this in XPCOM and pop up a dialog before the
 drag begins.

 The bad news is that if you click OK on the dialog, you lose the object
 you were dragging.. Unless you use the keyboard to accept the dialog...

 Does this mean we just disable drag and drop entirely and call it a day?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4517#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online