Bug #8062
Lack of security slider makes it too easy to fingerprint e.g. disabling JS/canvas/etc
| Status: | New | Start date: | 12/01/2016 | |
|---|---|---|---|---|
| Priority: | High | Due date: | ||
| Assignee: | - | % Done: | 0% | |
| Category: | - | |||
| Target version: | - | |||
| Component: |
Description
All the problems that TBB had due to not having a security slider, apply equally to Orfox.
I appreciate there not being enough developers and that there are too many bugs to fix already, but even a "pull requests welcome" would be great, just to know that a security slider is not ruled out. Hopefully it will block SVG (so that when another exploit like deecribed at https://blog.torproject.org/blog/tor-browser-607-released#comment-223692 is found everyone can disable SVG until iy's fixed), at least on the highest setting. SVG is currently impossible to block manually(https://trac.torproject.org/projects/tor/ticket/20772).
Its amazing what has been done here with such limited resources. The progress that has already been made is very much appreciated.