[tor-bugs] #22396 [Applications/Tor Browser]: What does "never for this site" for the canvas warning really mean?

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon May 29 19:06:39 UTC 2017


#22396: What does "never for this site" for the canvas warning really mean?
--------------------------------------+--------------------------
 Reporter:  arma                      |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  ux-team                   |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cypherpunks):

 As a Tor Browser user i always ignore the warning (the warning fatigue has
 set in a long time ago) and click on the webpage to make it disappear.
 With this behavior I'm assuming Tor Browser does the (IMO) right thing by
 disallowing image data extraction through the canvas by default.

 I'm treating the canvas protection like NoScript. As i mostly run Tor
 Browser on the highest security level I assume everything is disabled it
 by default. When i notice something breaking i optionally enable
 JavaScript or lower the security level. I've never disabled the canvas
 protection through the warning dialog and I'm unsure whether lowering the
 security level automatically disables it.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22396#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list