[tor-bugs] #27271 [Applications/Tor Browser]: Don't allow the user to install extensions from web
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Aug 22 18:53:51 UTC 2018
#27271: Don't allow the user to install extensions from web
------------------------------------------+----------------------
Reporter: igt0 | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------------------+----------------------
Tor browser for Android doesn't verify if the torbutton extension has a
signature to install it.
Thus, if someone sends a tampered torbutton extension to the user, they
can install it.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27271>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list