[tor-bugs] #27589 [Applications/Tor Browser]: "Javascript is disabled on non-HTTPS sites" from security slider has regressed in TBB 8 / NoScript 10

[Tor Bug Tracker & Wiki]

#27589: "Javascript is disabled on non-HTTPS sites" from security slider has
regressed in TBB 8 / NoScript 10
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks_reply                    |          Owner:  tbb-
                                                 |  team
     Type:  enhancement                          |         Status:
                                                 |  reopened
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  noscript, tbb-8.0-issues, tbb-       |  Actual Points:
  regression                                     |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by cypherpunks_reply):

 1st point:  If that would avoid enabling javascript for all HTTP domains,
 that sounds good.  I think that's the basic expectation of users.  If per-
 domain permissions already gives more specific matches a higher priority
 then this would only be a change to the pop-up display?  I guess you'd
 have to add a delete button to the per-domain permissions UI in the
 settings since setting a domain to default is now a legitimate override
 that should be saved.

 2nd point:  Yes, I mean that every domain would have two rows, but not
 that all domains should be set to custom.  I mean that the second row
 should show the details for the domain's current setting.  The point is to
 quickly see that media is unchecked with a red background on 2 out of 10
 domains.  At this point the user could switch these domains to trusted and
 see the media checkbox get filled in (the checkboxes could be read-only in
 this case) or easily create a custom rule by clicking on the media
 checkbox which would switch the domain to the custom tab.  The first is
 probably better so that the users stick to the presets and the presets can
 be changed by browser updates if necessary.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27589#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online