Tor: XSS on about:tbupdate

A cross-site scripting vulnerability was discovered on the about:tbupdate page in the past. By visiting a specially crafted URL, arbitrary JavaScript code could be executed in the context of the privileged about:tbupdate page. This could potentially allow an attacker to execute privileged...