[tor-bugs] #18782 [Tor Browser]: media tab in Page Info can bypass NoScript

Wed Apr 13 03:29:09 UTC 2016

#18782: media tab in Page Info can bypass NoScript
-------------------------+-----------------------------------
 Reporter:  cypherpunks  |          Owner:  tbb-team
     Type:  defect       |         Status:  needs_information
 Priority:  Very High    |      Milestone:
Component:  Tor Browser  |        Version:
 Severity:  Critical     |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
 Reviewer:               |        Sponsor:
-------------------------+-----------------------------------

Comment (by cypherpunks):

 Okay, just discovered via #13543 that gstreamer can be disabled in Firefox
 via about:config (and indeed doing so does disable the example content in
 Media Preview), so it doesn't need to be uninstalled from the OS.

 But disabling it in the browser leaves the user without an in-browser
 playback method for various formats.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18782#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online