[tor-bugs] #5427 [Tor Browser]: NoScript configuration overwritten on every update

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue Mar 20 09:04:32 UTC 2012


#5427: NoScript configuration overwritten on every update
-------------------------+--------------------------------------------------
 Reporter:  cypherpunks  |          Owner:  mikeperry                    
     Type:  enhancement  |         Status:  new                          
 Priority:  normal       |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  Tor Browser  |        Version:                               
 Keywords:               |         Parent:                               
   Points:               |   Actualpoints:                               
-------------------------+--------------------------------------------------
 I'm aware that [https://trac.torproject.org/projects/tor/ticket/3007
 #3007] and [https://trac.torproject.org/projects/tor/ticket/4794 #4794]
 have been closed as non-bugs. However, even if the design philosophy
 requires not to activate NoScript by default, then it would be good if
 NoScript was not deactivated with every update.
 To be specific: I enable NoScript manually (Forbid Scripts Globally). For
 an update of TorBrowser, I extract the tar archive.  This extraction
 silently overwrites my manual configuration to NoScript, leaving me with
 scripts enabled globally. This is a security bug.

 P.S. Why do you include NoScript at all?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5427>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list