[tbb-bugs] #23718 [Applications/Tor Browser]: Not able to log on to Protonmail with latest NoScript

[Tor Bug Tracker & Wiki]

#23718: Not able to log on to Protonmail with latest NoScript
--------------------------------------+-----------------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:
 Keywords:  noscript                  |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------
Changes (by gk):

 * priority:  Very High => High
 * status:  new => needs_information
 * severity:  Critical => Major


Comment:

 Replying to [comment:18 ma1]:
 > Does anybody with some knowledge of Tor's internal know if there's
 anything I can do to let my XMLHttpRequest-loaded XUL document
 ("chrome/content/noscript/noscriptOverlayFx57.xul") succeed in resolving
 entities against "chrome://noscript/locale/noscript.dtd"? Thanks!

 I don't have time debugging this now but it seems we have a hint on what
 is going on (see comment:19). I guess our code blocking content scripts
 from accessing resources which is a severe fingerprinting vector is
 interfering with NoScript's code. That saif: what's the impact of this
 issue? I tested updating Noscript to 5.1.1 both in Tor Browser 7.0.6 and
 7.5a5 and while I saw the same error in the browser console I kept a
 working NoScript and the security slider was not messed up as comment:16
 reports (and other users, too, on IRC). Thus, we have at least one
 additional bug that is causing this or could that somehow be a result of
 Tor Browser breaking the entity resolution? If so, how can I reproduce
 this?

 Oh, and I guess we should create a new bug for that and not clutter that
 one as the Protonmail issue should be resolved with 5.1.1.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23718#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online