<div dir="ltr"><div dir="ltr"><div id="gmail-magicdomid35" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">Georg</span></div><div id="gmail-magicdomid37" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">> Is that essentially Windows-only?</span></div><div id="gmail-magicdomid38" class="gmail-ace-line"><br></div><div id="gmail-magicdomid39" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">No, there were some tickets where users attached screenshots of their prompts - Windows, </span></div><div id="gmail-magicdomid39" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">Mac, and Linux user interface windows.</span></div><div id="gmail-magicdomid40" class="gmail-ace-line"><br></div><div id="gmail-magicdomid41" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">> For the Windows ones, do we know how many of those issues are due to #10416 </span></div><div id="gmail-magicdomid41" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">> (</span><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x gmail-url"><a href="https://gitlab.torproject.org/tpo/core/tor/-/issues/10416)?" rel="noreferrer noopener">https://gitlab.torproject.org/tpo/core/tor/-/issues/10416)?</a></span></div><div id="gmail-magicdomid106" class="gmail-ace-line"><br></div><div id="gmail-magicdomid108" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">From the screenshots that users shared, none alluded to this issue.</span></div><div id="gmail-magicdomid45" class="gmail-ace-line"><br></div><div id="gmail-magicdomid9" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">>
 What do you mean by "blocking larger media elements by default" There 
is no logic in Tor </span></div><div id="gmail-magicdomid9" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">> Browser that is blocking media elements depending on 
their size. Additionally, Tor Browser </span></div><div id="gmail-magicdomid9" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">> should not block anything by 
default in its standard security mode.</span></div><div id="gmail-magicdomid10" class="gmail-ace-line"><br></div><div id="gmail-magicdomid11" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">I misspoke. I was incorrect in my statement; I should have wrote "NoScript blocks media on </span></div><div id="gmail-magicdomid11" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">security levels Safer and Safest."</span></div><div id="gmail-magicdomid12" class="gmail-ace-line"><br></div><div id="gmail-magicdomid13" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">You
 are absolutely right on both fronts. Thanks for clarifying these 
aspects: Tor Browser does </span></div><div id="gmail-magicdomid13" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">not block any media by default; NoScript 
allows for media in the Standard security level.</span></div><div id="gmail-magicdomid14" class="gmail-ace-line"><br></div><div id="gmail-magicdomid15" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">> So, what is happening in those cases? Do you have an example of a report by chance?</span></div><div id="gmail-magicdomid16" class="gmail-ace-line"><br></div><div id="gmail-magicdomid17" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">So,
 I'll admit, I was mistaken. To make a long story short - one user took a
 screenshot of </span></div><div id="gmail-magicdomid17" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">NoScript blocking out its media yet I neglected to pay 
attention that the user had the Safer </span></div><div id="gmail-magicdomid17" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">security level set. I presumed 
this occurred by default.</span></div><div id="gmail-magicdomid18" class="gmail-ace-line"><br></div><div id="gmail-magicdomid19" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">After clearing up the confusion, those cases contained Flash-based XSS attempting to show a </span></div><div id="gmail-magicdomid19" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">movie. Below is the example:</span></div><div id="gmail-magicdomid20" class="gmail-ace-line"><br></div><div id="gmail-magicdomid21" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">>> Hi</span></div><div id="gmail-magicdomid22" class="gmail-ace-line"><br></div><div id="gmail-magicdomid23" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">>> Tried to watch this on Tor:</span></div><div id="gmail-magicdomid24" class="gmail-ace-line"><br></div><div id="gmail-magicdomid25" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">>> </span><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x gmail-url"><a href="https://www.brighteon.com/be689f32-5526-4601-a627-48dc4f896cf9" rel="noreferrer noopener">https://www.brighteon.com/be689f32-5526-4601-a627-48dc4f896cf9</a></span></div><div id="gmail-magicdomid26" class="gmail-ace-line"><br></div><div id="gmail-magicdomid27" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">>>
 And several other videos. but they come up with a red circle with  a 
monster with teeth in </span></div><div id="gmail-magicdomid27" class="gmail-ace-line"><span class="gmail-author-a-dm4z78z7smz74zz90zsz68zz75z2i6x">>> the middle. An even when I choose one of the 
responses it still won’t play</span></div><div id="gmail-magicdomid28" class="gmail-ace-line"><br></div><div id="gmail-magicdomid112" class="gmail-ace-line"><span class="gmail-author-a-0xxz74zz82z9z89zz88zvz77zz90zz74zn5ra">And another thing is that many Tor users are now having issues to watch YouTube:</span></div><div id="gmail-magicdomid30" class="gmail-ace-line"><br></div><div id="gmail-magicdomid31" class="gmail-ace-line"><span class="gmail-author-a-0xxz74zz82z9z89zz88zvz77zz90zz74zn5ra">"Our systems have detected unusual traffic from your computer network. Please try your </span></div><div id="gmail-magicdomid31" class="gmail-ace-line"><span class="gmail-author-a-0xxz74zz82z9z89zz88zvz77zz90zz74zn5ra">request again later. Why did this happen?</span></div><div id="gmail-magicdomid32" class="gmail-ace-line"><br></div><div id="gmail-magicdomid33" class="gmail-ace-line"><span class="gmail-author-a-0xxz74zz82z9z89zz88zvz77zz90zz74zn5ra">This
 page appears when Google automatically detects requests coming from 
your computer </span></div><div id="gmail-magicdomid33" class="gmail-ace-line"><span class="gmail-author-a-0xxz74zz82z9z89zz88zvz77zz90zz74zn5ra">network which appear to be in violation of the Terms of 
Service. The block will expire shortly </span></div><div id="gmail-magicdomid33" class="gmail-ace-line"><span class="gmail-author-a-0xxz74zz82z9z89zz88zvz77zz90zz74zn5ra">after those requests stop.</span></div><div id="gmail-magicdomid34" class="gmail-ace-line"><span class="gmail-author-a-0xxz74zz82z9z89zz88zvz77zz90zz74zn5ra">..."</span></div></div></div>