[tor-bugs] #12488 [Tor bundles/installation]: Disable dom.event.clipboardevents.enabled by default in TBB

[Tor Bug Tracker & Wiki]

#12488: Disable dom.event.clipboardevents.enabled by default in TBB
--------------------------------------+----------------------------------
 Reporter:  cypherpunks               |          Owner:  erinn
     Type:  defect                    |         Status:  new
 Priority:  normal                    |      Milestone:
Component:  Tor bundles/installation  |        Version:  Tor: unspecified
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
--------------------------------------+----------------------------------
 Hi folks!

 It's been established (e.g., http://beta.slashdot.org/story/129898) that
 by using dom.event.clipboardevents websites are able to monitor the text
 that a user cuts, copies, or pastes and record it on their system.

 An option to disable this code for increased privacy led to a fix given by
 https://bugzilla.mozilla.org/show_bug.cgi?id=542938, but freshly-packaged
 installs of Firefox (and hence, Tor 0.2.4.22/Tor Browser Bundle 3.6.2)
 come with it enabled by default.

 Shouldn't we turn this off for increased privacy? I don't think it has as
 much use in TBB as it does in Firefox, and could be considered a privacy
 leak if the user in question is copying passwords or other sensitive data.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12488>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online