[tor-bugs] #25790 [Applications/Tor Browser]: Orfox lists external apps when the user clicks and holds an Android URI in a WebPage
    Tor Bug Tracker & Wiki 
    blackhole at torproject.org
       
    Fri Apr 13 01:23:42 UTC 2018
    
    
  
#25790: Orfox lists external apps when the user clicks and holds an Android URI in
a WebPage
------------------------------------------+------------------------
     Reporter:  igt0                      |      Owner:  tbb-team
         Type:  defect                    |     Status:  assigned
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  tbb-mobile
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+------------------------
 Even if the network.protocol-handler.external-default is false an user can
 open an external application.
 When an user clicks and holds an Android URI[1] the browser context menu
 opens and if the android has an app with the same package id in the URI,
 the app is listed in the context menu allowing the user to click on it and
 open an external app.
 [1] http://mcomella.xyz/test/uri.html
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25790>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
    
    
More information about the tor-bugs
mailing list