[tor-bugs] #20255 [Applications/Tor Browser]: Noscript fails to block webm in high security settings, but still prevents watching

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Sep 28 03:00:46 UTC 2016


#20255: Noscript fails to block webm in high security settings, but still prevents
watching
-------------------------------------+-------------------------------------
     Reporter:  test400              |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  High                 |  Milestone:
    Component:  Applications/Tor     |    Version:  Tor: unspecified
  Browser                            |   Keywords:  noscript webm
     Severity:  Major                |  torbrowser
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 I'm on Tor Browser 6.0.5 64-bit on Linux.
 Security Slider is on high settings, and all additional privacy options
 are enabled.

 Description
 ===========
 When i click on .webm video, it opens in new tab, and starts play despite
 these settings.
 After 2 seconds, video gets covered by noscript banner and symbol. audio
 keeps running.
 After click on noscript banner and confirm in dialog, webm video starts
 again but now for whole time.

 Comment
 =======
 This is completely ridiculous.
 Video MUST not play before confirm.
 It should not even be remotely possible this happens.

 Or, if the descision is, to allow webm even in high security settings,
 it is dumb to have user click on confirm after video start.

 PLEASE investigate how this happened!!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20255>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list