[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #3976 [Tor bundles/installation]: Unnecessary white listed web sites for NoScript(?)
#3976: Unnecessary white listed web sites for NoScript(?)
--------------------------------------+-------------------------------------
Reporter: joyton | Owner: erinn
Type: defect | Status: needs_review
Priority: normal | Milestone: TorBrowserBundle 2.2.x-stable
Component: Tor bundles/installation | Version:
Keywords: | Parent:
Points: | Actualpoints:
--------------------------------------+-------------------------------------
Comment(by mikeperry):
Replying to [comment:4 Sebastian]:
> Mike, do you foresee any problems when we also remove the about:* stuff?
noscript claims we "better" keep them enabled to keep firefox happy,
but... do we really?
Pretty sure that disabling scripting on about:blank will break JS-driven
popup windows and AJAX sites that want to create a blank frame and then
populate it.
I'd guess that they are whitelisted because of Firefox API weirdness. Say
you whitelist mail.google.com, for example. If and when that thing decides
to do AJAX into blank frames (with 'about:blank' urls), those frames could
be blocked. This is all just a guess, though.
But, on the other hand, I think that what we're trying to provide with
NoScript is a way to *really* disable all scripts, or *really* enable
them. I think the in between modes of whitelisting can be confusing and
something we'd like to actually hide from the default UI if we could..
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3976#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs