[tor-bugs] #19200 [Applications/Tor Browser]: HTML5 video not blocked with placeholder, plays automatically

[Tor Bug Tracker & Wiki]

#19200: HTML5 video not blocked with placeholder, plays automatically
--------------------------------------+--------------------------
 Reporter:  potato                    |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:
 Keywords:  tbb-security-slider       |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------
Changes (by gk):

 * keywords:  6.0a5, video, media, mse, mediasource, noscript, placeholder
     => tbb-security-slider
 * priority:  Very High => High


Comment:

 Well, the slider got implemented based on a study concerning past
 vulnerabilities. And MSE haven't been a thing back then. Thus, it is not
 surprising that they are not accounted for in the settings. We plan to
 look again at past vulnerabilities in Firefox code in the coming weeks and
 adjust the slider accordingly. This might be a good ticket to consider
 then.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19200#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online