[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #27589 [Applications/Tor Browser]: "Javascript is disabled on non-HTTPS sites" from security slider has regressed in TBB 8 / NoScript 10
#27589: "Javascript is disabled on non-HTTPS sites" from security slider has
regressed in TBB 8 / NoScript 10
-------------------------------------------------+-------------------------
Reporter: cypherpunks_reply | Owner: tbb-
| team
Type: enhancement | Status:
| reopened
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: noscript, tbb-8.0-issues, tbb- | Actual Points:
regression |
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------------------------------+-------------------------
Comment (by reportUrl):
And you? Mixed passive content is allowed in Firefox:
{{{
10:46:54.579 Loading mixed (insecure) display content
“http://video.com/2013.mp4”; on a secure page
}}}
and if you allow Media for that domain before you allow js to load it,
then NoScript will ignore it, block Media later anyway and add a new row
for that domain.
Of course, usual behavior is like in
https://www.w3schools.com/html/html5_video.asp
But click-to-play is better, and also NoScript silently blocks Media in
https://www.w3schools.com/html/tryit.asp?filename=tryhtml5_video_js_prop
and doesn't show it on its icon.
(BTW, https://blog.torproject.org/comment/277566#comment-277566)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27589#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs