[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #30624 [Applications/Tor Browser]: Disable NoScript's XSS protection to avoid the whole computer freezing

#30624: Disable NoScript's XSS protection to avoid the whole computer freezing
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  Very High            |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  TorBrowserTeam201905,
     Severity:  Normal               |  GeorgKoppen201905
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 We've had it numerous times now (see e.g. #25315, #24125, #22362) that Tor
 Browser freezes the whole computer due to NoScript's XSS protection. This
 is currently visible on https://zeit.de again cause by an embedded
 https://facebook.com/tr.

 I'd finally like to stop playing this whack-a-mole game and come to a
 better solution. Meanwhile, we can stop enabling XSS protection given that
 those experiences seriously risk users abandoning Tor Browser, claiming it
 is broken, and moving on to a much worse solution for their privacy
 requirements.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30624>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs