[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #3976 [Tor bundles/installation]: Unnecessary white listed web sites for NoScript(?)
#3976: Unnecessary white listed web sites for NoScript(?)
--------------------------------------+-------------------------------------
Reporter: joyton | Owner: erinn
Type: defect | Status: needs_review
Priority: normal | Milestone: TorBrowserBundle 2.2.x-stable
Component: Tor bundles/installation | Version:
Keywords: | Parent:
Points: | Actualpoints:
--------------------------------------+-------------------------------------
Comment(by ma1):
Replying to [comment:10 mikeperry]:
> Giorgio now has an account on our bugtracker. Perhaps he can comment on
the about:blank, about:certerror, and other about urls in the whitelist.
about:credits was whitelisted when it was a local popup with a scroller of
the major contributors, which depended on JavaScript for its animation.
Now that it's just a remote scriptless web page it's useless, and it has
been removed indeed.
about:blank is needed by some edge cases, included one which would prevent
bookmarklets from being emulated on scriptless pages.
Many about:xyz URLs don't need to be whitelisted to run scripts because
they're flagged as "trusted" by their protocol handler implementation and
bypass CAPS: those are in the mandatory whitelist to prevent confusion in
the user, because JavaScript just cannot be disabled there (and the
mandatory whitelist reflect this on the UX level).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3976#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs