Skip to content

Tor Browser should not have access to the list of recently used documents

Altough only Tor Browser folder is accessible by Browser by default,

you can also display your Recently Used files which has BEEN SAVED anywhere else (e.g. Desktop)

Test to upload such a file failed to proceed,
yet is it correct that browser can display your recently used files and documents?

Or should this part display “Permission denied” as well as other parts of running instance besides Tor Browser folder?

This can be reproduced easily while trying to upload any file in Tor Browser.

Feature Branch: bugfix/9126-deny-tor-browser-access-to-recently-used

Attachments

  • untitled

Original created by @nobodysees on 9126 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information