[tbb-bugs] #27939 [Applications/Tor Browser]: Remind the user if they have enabled noscript_persist

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Oct 3 03:01:33 UTC 2018


#27939: Remind the user if they have enabled noscript_persist
-------------------------------------+-------------------------------------
 Reporter:  cypherpunks_reply        |          Owner:  tbb-team
     Type:  defect                   |         Status:  new
 Priority:  Medium                   |      Component:  Applications/Tor
                                     |  Browser
  Version:                           |       Severity:  Normal
 Keywords:  noscript,                |  Actual Points:
  tbb-8.0-issues                     |
Parent ID:                           |         Points:
 Reviewer:                           |        Sponsor:
-------------------------------------+-------------------------------------
 In reply to [ticket:27175#comment:12 arthuredelstein] who submitted a
 patch to introduce `extensions.torbutton.noscript_persist`:

 > However, enabling this pref is dangerous in my opinion and should only
 be used with caution.

 I agree, and I prefer to browse similarly to ticket:27175#comment:11 (in
 the same ticket), changing NoScript permissions away from the defaults
 only seldom and applying them only as Temporary using the clock icon
 modifier in NoScript.

 To enable `extensions.torbutton.noscript_persist`, the user would have to
 accept the `about:config` warning, but that warning does not explain the
 implications of enabling this preference in particular, and the user may
 later forget that they enabled it. The user could be reminded that it is
 enabled by a Big Scary Warning when it is detected as enabled, displayed
 perhaps by `about:tor` in similar fashion to the old "Tor Browser is
 outdated!" bold arrow so it would be displayed again on each New Identity.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27939>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list