[tor-bugs] #18101 [Tor Browser]: IP leak from Windows UI dialog with URI

[Tor Bug Tracker & Wiki]

#18101: IP leak from Windows UI dialog with URI
---------------------------------------+--------------------------
 Reporter:  uileak                     |          Owner:  tbb-team
     Type:  defect                     |         Status:  new
 Priority:  High                       |      Milestone:
Component:  Tor Browser                |        Version:
 Severity:  Normal                     |     Resolution:
 Keywords:  tbb-proxy-bypass, ip-leak  |  Actual Points:
Parent ID:                             |         Points:
  Sponsor:                             |
---------------------------------------+--------------------------

Comment (by cypherpunks):

 Seems like it is undocumented (?) but
 [https://superuser.com/questions/671167/how-do-i-use-a-url-path-instead-
 of-a-file-path-in-an-open-file-dialog-in-mac-osx well known] feature for
 Windows Vista+

 Possible workarounds (need to check if they actually works and useful):
 1. To use [https://mxr.mozilla.org/mozilla-
 esr38/source/widget/windows/nsFilePicker.cpp#664 file picker's code for
 old Windows]
 2. To remove "File name" edit box by [https://msdn.microsoft.com/en-
 us/library/windows/desktop/bb775918%28v=vs.85%29.aspx
 IFileDialogCustomize::RemoveControlItem]
 3. To filter user input on by [https://msdn.microsoft.com/en-
 us/library/windows/desktop/bb775879%28v=vs.85%29.aspx OnFileOk]
 ([https://mxr.mozilla.org/mozilla-
 esr38/source/widget/windows/nsFilePicker.cpp#406 nsFilePicker::OnFileOk])

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18101#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online