[tor-bugs] #3007 [Tor bundles/installation]: NoScript configured to globally allow all scripts

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Sat Jul 9 17:20:08 UTC 2011


#3007: NoScript configured to globally allow all scripts
--------------------------------------+-------------------------------------
 Reporter:  HG2G                      |          Owner:  erinn
     Type:  defect                    |         Status:  new  
 Priority:  critical                  |      Milestone:       
Component:  Tor bundles/installation  |        Version:       
 Keywords:                            |         Parent:       
   Points:                            |   Actualpoints:       
--------------------------------------+-------------------------------------

Comment(by mikeperry):

 We're not sure that disabling scripts globally is a good default option
 for people. We're trying really hard to engineer a default private
 browsing setup that does not rely on filters or feature breakage, but we
 may need some browser muscle to help things along:

 https://blog.torproject.org/blog/improving-private-browsing-modes-do-not-
 track-vs-real-privacy-design

 Can you explain why you believe that this might not be possible? Ie, what
 is it specifically about Google Analytics that makes you think we can't
 deal with it by enhancing browser privacy in a general sense?

 We provide NoScript mostly for the non-filter features it provides, such
 as click-to-play for media, webgl and plugins, XSS protection, remote font
 blockage, and so on. The ability to globally disable JS is also a bonus
 for the malware and exploit-laden corners of the web, but having JS
 disabled (or worse, filtered) by default doesn't seem very intuitive for
 new Tor users.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3007#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list