[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #27589 [Applications/Tor Browser]: "Javascript is disabled on non-HTTPS sites" from security slider has regressed in TBB 8 / NoScript 10
#27589: "Javascript is disabled on non-HTTPS sites" from security slider has
regressed in TBB 8 / NoScript 10
--------------------------------------+-----------------------------------
Reporter: cypherpunks_reply | Owner: tbb-team
Type: enhancement | Status: needs_information
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: noscript regression | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+-----------------------------------
Comment (by cypherpunks_reply):
As shipped in the slider, it functions differently and unexpectedly worse
than before TBB 8.0 / NoScript 10. The difference being that you can't
easily allow scripts to run on a single HTTP site without allowing it for
all of them, and arguably worse, you can't even settle for temporarily
allowing scripts for all HTTP sites, because there's no obvious way to
revoke the permission without restarting the browser.
As for where the bug is, the previous implementation relied on a specific
feature of NoScript but now it seems that the per-site permission in
NoScript for "http://http:"; is something special that came from the
TorBrowser security slider, since NoScript's settings UI won't allow the
user to add it as a per-site permission.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27589#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs