[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #27589 [Applications/Tor Browser]: "Javascript is disabled on non-HTTPS sites" from security slider has regressed in TBB 8 / NoScript 10
#27589: "Javascript is disabled on non-HTTPS sites" from security slider has
regressed in TBB 8 / NoScript 10
-------------------------------------------------+-------------------------
Reporter: cypherpunks_reply | Owner: tbb-
| team
Type: enhancement | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: noscript, tbb-8.0-issues, tbb- | Actual Points:
regression |
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------------------------------+-------------------------
Comment (by cypherpunks_reply):
I should clarify that the issue of "no obvious way to revoke the
permission without restarting the browser" only applies if you grant HTTP
sites the default permission. You could grant all HTTP sites Trusted
permissions, and then when you're done, change them to Untrusted
permission. This seems wrong since HTTPS sites only get Default
permissions with the slider on Safer.
This is because of how NoScript works. A changing a site to default
permissions deletes it from from the per-site permission list. This is
only problematic because the way the "scripts disable for non-HTTPS"
features is implemented. The site's domain doesn't appear in the NoScript
button popup as normal, but only as a line "http://http:"; that applies to
all http sites.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27589#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs