[tor-bugs] #3976 [Tor bundles/installation]: Unnecessary white listed web sites for NoScript(?)

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Thu Apr 26 21:25:19 UTC 2012


#3976: Unnecessary white listed web sites for NoScript(?)
--------------------------------------+-------------------------------------
 Reporter:  joyton                    |          Owner:  erinn                        
     Type:  defect                    |         Status:  needs_review                 
 Priority:  normal                    |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  Tor bundles/installation  |        Version:                               
 Keywords:                            |         Parent:                               
   Points:                            |   Actualpoints:                               
--------------------------------------+-------------------------------------

Comment(by ma1):

 Replying to [comment:10 mikeperry]:
 > Giorgio now has an account on our bugtracker. Perhaps he can comment on
 the about:blank, about:certerror, and other about urls in the whitelist.

 about:credits was whitelisted when it was a local popup with a scroller of
 the major contributors, which depended on JavaScript for its animation.

 Now that it's just a remote scriptless web page it's useless, and it has
 been removed indeed.

 about:blank is needed by some edge cases, included one which would prevent
 bookmarklets from being emulated on scriptless pages.

 Many about:xyz URLs don't need to be whitelisted to run scripts because
 they're flagged as "trusted" by their protocol handler implementation and
 bypass CAPS: those are in the mandatory whitelist to prevent confusion in
 the user, because JavaScript just cannot be disabled there (and the
 mandatory whitelist reflect this on the UX level).

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3976#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list