[tbb-bugs] #27589 [Applications/Tor Browser]: "Javascript is disabled on non-HTTPS sites" from security slider has regressed in TBB 8 / NoScript 10

[Tor Bug Tracker & Wiki]

#27589: "Javascript is disabled on non-HTTPS sites" from security slider has
regressed in TBB 8 / NoScript 10
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks_reply                    |          Owner:  tbb-
                                                 |  team
     Type:  enhancement                          |         Status:
                                                 |  reopened
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  noscript, tbb-8.0-issues, tbb-       |  Actual Points:
  regression                                     |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by reportUrl):

 And you? Mixed passive content is allowed in Firefox:
 {{{
 10:46:54.579 Loading mixed (insecure) display content
 “http://video.com/2013.mp4” on a secure page
 }}}
 and if you allow Media for that domain before you allow js to load it,
 then NoScript will ignore it, block Media later anyway and add a new row
 for that domain.

 Of course, usual behavior is like in
 https://www.w3schools.com/html/html5_video.asp
 But click-to-play is better, and also NoScript silently blocks Media in
 https://www.w3schools.com/html/tryit.asp?filename=tryhtml5_video_js_prop
 and doesn't show it on its icon.

 (BTW, https://blog.torproject.org/comment/277566#comment-277566)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27589#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online