[tor-talk] Another issue "never remember history" at Tor browser setting didn't last for actualisation

[tortalk@xxxxxxxx]

Hi Torusers,

there isn't a notice for Tor users that you can't set Tor browser from:
about:preferences#privacy or Tools Options Privacy:

"Use custom settings for history" to "Never remember history" 

You can check that from default "Use custom settings for history" to "Never remember history". But it is not saved. Whenever you press "reload current page" right to the address bar or "New Tor Circuit for this Site" or you do another session it jumps back do default "Use custom settings for history".

You can click on "You may also want to clear all current history." in the mode "Never remember history". But you can't check "Clear history when Tor Browser closes" during the default setting "Use custom settings for history", it is greyed and does not turn blue while your mouse is over it nor "Space" key is doing to check it.

Referring to the closed issue 15 months ago:

https://trac.torproject.org/projects/tor/ticket/16889
" #16889 closed defect (worksforme)
Privacy Preferences Bug "

The device got a clean System reinstall because of some sudden power loss (immediate quick shut down, all went black) even when it was not connected with internet. There was only one shut down of that kind after the reinstall. The Tor bowser was reinstalled with the four default Add-ons (e. g. NoScript).

While experiencing that issue with NoScript mentioned/answered here:

https://lists.torproject.org/pipermail/tor-talk/2016-November/042613.html:
https://trac.torproject.org/projects/tor/ticket/20752

there is something more to say. 
1. That NoScript issue appears not only when the "security slider is set to "Medium-High" or "High"" but also to Low. You have one search for free before NoScript prohibits any further search. That search was used to get above result concerning "privacy".
2. Anti-XSS Protection Exception was:
"
^https?://([a-z]+)\.google\.(?:[a-z]{1,3}\.)?[a-z]+/(?:search|custom|\1)\?
^https?://([a-z]*)\.?search\.yahoo\.com/search(?:\?|/\1\b)
^https?://[a-z]+\.wikipedia\.org/wiki/[^"<>\?%]+$
^https://secure\.wikimedia\.org/wikipedia/[a-z]+/wiki/[^";<>\?%]+$
"
When it is set to (as mentioned in that ticket)

"
^https://www\.startpage\.com/do/search
^https?://[^/]+\.startpage\.com/do/search
^https://startpage\.com/do/dsearch
^https://startpage\.com/rto/search
^https://duckduckgo\.com/html
^http://3g2upl4pq6kufc4m\.onion/html
"
A red text appeared in the box
"Pattern matching sample: "https://www.google.com/search?q=test";

Aloha,
Toruser
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk