[tor-bugs] #25916 [Applications/Tor Browser]: Disable MOZ_DISABLE_CONTENT_SANDBOX
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Apr 25 16:09:59 UTC 2018
#25916: Disable MOZ_DISABLE_CONTENT_SANDBOX
------------------------------------------+----------------------
Reporter: tom | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Keywords: ff60-esr
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------------------+----------------------
MOZ_DISABLE_CONTENT_SANDBOX can be used at runtime to disable the content
sandbox. If an attacker can influence this, we're probably already sunk,
but just like we disable the "Dump all your TLS Session Keys here please"
environment variable, we should disable this one too.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25916>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list