[tbb-bugs] #27307 [Applications/Tor Browser]: NoScript marks HTTP Onion as insecure

[Tor Bug Tracker & Wiki]

#27307: NoScript marks HTTP Onion as insecure
--------------------------------------------+--------------------------
 Reporter:  cypherpunks3                    |          Owner:  tbb-team
     Type:  defect                          |         Status:  closed
 Priority:  Low                             |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Minor                           |     Resolution:  fixed
 Keywords:  noscript, TorBrowserTeam201910  |  Actual Points:
Parent ID:  #21728                          |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+--------------------------

Comment (by gk):

 Replying to [comment:12 gk]:
 > Okay, I managed to reproduce my other issue as well: the start-up of
 rc15 is extremely slow on higher security levels. E.g. on my machine there
 is a gap of almost 10 seconds between the first two messages:
 > {{{
 > [10-29 14:15:22] Torbutton INFO: Message received from NoScript:
 [{"__meta":{"name":"collect","recipientInfo":{"tabId":1,"frameId":0}},"_messageName":"collect"},{"id":"{73a6fe31
 -595d-460b-a920-fcc0f8843232}","url":"moz-
 extension://07d31867-b62c-4014-aa90-56981c414124/_generated_background_page.html","envType":"addon_child","extensionId":"{73a6fe31
 -595d-460b-a920-fcc0f8843232}","contextId":274877906946},null]
 > }}}
 > and
 > {{{
 > [10-29 14:15:31] Torbutton INFO: Message received from NoScript:
 [{"__meta":{"name":"started","recipientInfo":null},"_messageName":"started"},{"id":"{73a6fe31
 -595d-460b-a920-fcc0f8843232}","url":"moz-
 extension://07d31867-b62c-4014-aa90-56981c414124/_generated_background_page.html","envType":"addon_child","extensionId":"{73a6fe31
 -595d-460b-a920-fcc0f8843232}","contextId":274877906946},null]
 > }}}
 > which makes me a bit nervous given that the user can meanwhile surf the
 web but the security settings are set only after the `started` or
 pageshow` one.
 >
 > I suspect that's because of #23719, actually. I wonder whether stable
 users would be hitting the bug on the standard mode, too, given that WASM
 is disabled there as well. ma1: What kind of JIT/WASM parts are you using
 for the initial loading of NoScript's state that could cause this?

 Actually that issue is solved with 11.0.7 for me. However, the options
 button is still behaving funky. Part of that is #23719 but other parts
 not. I've opened #32403 for the latter.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27307#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online