[tor-bugs] #22067 [Applications/Tor Browser]: NoScript Click-to-Play bypass with embedded videos and audios

[Tor Bug Tracker & Wiki]

#22067: NoScript Click-to-Play bypass with embedded videos and audios
-------------------------------------------------+-------------------------
 Reporter:  samantharis                          |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  closed
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:  fixed
 Keywords:  tbb-security, noscript,              |  Actual Points:
  TorBrowserTeam201707R                          |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by gk):

 * status:  needs_review => closed
 * resolution:   => fixed


Comment:

 Replying to [comment:9 ma1]:
 > Please check 5.0.7rc2 from https://noscript.net/getit#devel, thank you.
 If no major regression is found, I plan to release 5.0.7 stable by Sunday.

 Looks good to me, fwiw. I bumped the NoScript versions we ship on `master`
 and `maint-7.0` (commit 0437834017c1c7ff168da868d9dcb2f2519fd122 and
 12565f000a09b27b7dbd9ea864c5004b6d8324a9)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22067#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online