[tor-bugs] #3976 [Tor bundles/installation]: Unnecessary white listed web sites for NoScript(?)
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Thu Apr 26 21:25:19 UTC 2012
#3976: Unnecessary white listed web sites for NoScript(?)
--------------------------------------+-------------------------------------
Reporter: joyton | Owner: erinn
Type: defect | Status: needs_review
Priority: normal | Milestone: TorBrowserBundle 2.2.x-stable
Component: Tor bundles/installation | Version:
Keywords: | Parent:
Points: | Actualpoints:
--------------------------------------+-------------------------------------
Comment(by ma1):
Replying to [comment:10 mikeperry]:
> Giorgio now has an account on our bugtracker. Perhaps he can comment on
the about:blank, about:certerror, and other about urls in the whitelist.
about:credits was whitelisted when it was a local popup with a scroller of
the major contributors, which depended on JavaScript for its animation.
Now that it's just a remote scriptless web page it's useless, and it has
been removed indeed.
about:blank is needed by some edge cases, included one which would prevent
bookmarklets from being emulated on scriptless pages.
Many about:xyz URLs don't need to be whitelisted to run scripts because
they're flagged as "trusted" by their protocol handler implementation and
bypass CAPS: those are in the mandatory whitelist to prevent confusion in
the user, because JavaScript just cannot be disabled there (and the
mandatory whitelist reflect this on the UX level).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3976#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list