[tbb-bugs] #19210 [Applications/Tor Browser]: NoScript places WebM videos too late behind click-to-play in higher security levels

Tue May 31 13:34:06 UTC 2016

#19210: NoScript places WebM videos too late behind click-to-play in higher
security levels
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  High                 |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-regression, tbb-
     Severity:  Major                |  security-slider
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 If setting the security slider to medium-low or a higher level WebM videos
 start to play but are stopped shortly thereafter by NoScript's click-to-
 play feature. Expected is that they don't start playing at all until the
 user has confirmed that. Reported in our blog:
 https://blog.torproject.org/blog/tor-browser-60-released#comment-183099.

 As an example test with: http://ftp.acc.umu.se/pub/debian-meetings/2016
 /mini-debconf-vienna/webm/Debian_Installer_for_Novena.webm the video
 starts and a short time later NoScript kicks in.

 https://blog.torproject.org/blog/tor-browser-60-released#comment-183106
 suggests that this happened in earlier versions, too, although rarely.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19210>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online