[tor-bugs] #3976 [Tor bundles/installation]: Unnecessary white listed web sites for NoScript(?)

[Tor Bug Tracker & Wiki]

#3976: Unnecessary white listed web sites for NoScript(?)
--------------------------------------+-------------------------------------
 Reporter:  joyton                    |          Owner:  erinn                        
     Type:  defect                    |         Status:  needs_review                 
 Priority:  normal                    |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  Tor bundles/installation  |        Version:                               
 Keywords:                            |         Parent:                               
   Points:                            |   Actualpoints:                               
--------------------------------------+-------------------------------------

Comment(by mikeperry):

 Replying to [comment:4 Sebastian]:
 > Mike, do you foresee any problems when we also remove the about:* stuff?
 noscript claims we "better" keep them enabled to keep firefox happy,
 but... do we really?

 Pretty sure that disabling scripting on about:blank will break JS-driven
 popup windows and AJAX sites that want to create a blank frame and then
 populate it.

 I'd guess that they are whitelisted because of Firefox API weirdness. Say
 you whitelist mail.google.com, for example. If and when that thing decides
 to do AJAX into blank frames (with 'about:blank' urls), those frames could
 be blocked. This is all just a guess, though.

 But, on the other hand, I think that what we're trying to provide with
 NoScript is a way to *really* disable all scripts, or *really* enable
 them. I think the in between modes of whitelisting can be confusing and
 something we'd like to actually hide from the default UI if we could..

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3976#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online