[tor-bugs] #16656 [Tor Browser]: Forbid Java, Microsoft Silverlight etc.

[Tor Bug Tracker & Wiki]

#16656: Forbid Java, Microsoft Silverlight etc.
-----------------------------+----------------------
     Reporter:  900909090    |      Owner:  tbb-team
         Type:  task         |     Status:  closed
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:  wontfix      |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+----------------------
Changes (by gk):

 * status:  new => closed
 * resolution:   => wontfix


Comment:

 Replying to [ticket:16656 900909090]:
 > Why are options like "Forbid Java, Microsoft Silverlight etc." in
 embeddings within NoScript not checked?
 >
 > I understand they may be done on a deeper levels but I don't think it
 would hurt to forbid these settings and others and avoid confusion
 especially among new users.

 Because they are already forbidden by a Tor Browser patch. Moreover, you
 won't be able to load plugins apart from Flash in the process space in the
 first place. This seems enough to me especially as new and unexperienced
 users won't dig deep into the NoScript configure options. Experienced
 users that might do this should be able to read our design document which
 helps avoiding this confusion as well. See:
 https://www.torproject.org/projects/torbrowser/design/ section 4.1.2.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16656#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online