[tor-bugs] #27411 [Applications/Tor Browser]: Security slider is broken in second RC for Tor Browser 8 on Windows
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sun Sep 2 18:43:57 UTC 2018
#27411: Security slider is broken in second RC for Tor Browser 8 on Windows
--------------------------------------+--------------------------
Reporter: gk | Owner: tbb-team
Type: defect | Status: closed
Priority: Immediate | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution: fixed
Keywords: TorBrowserTam201809 | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+--------------------------
Comment (by rustybird):
Replying to [comment:10 arthuredelstein]:
> Replying to [comment:4 ma1]:
>
> > IMHO the only way to be sure we manage to get in sync is **NoScript
knowing from the start** that it's running in the Tor Browser (I suggested
by [https://dxr.mozilla.org/mozilla-
central/rev/c2e3be6a1dd352b969a45f0b85e87674e24ad284/toolkit/components/extensions/parent
/ext-runtime.js#117 customizing the browser.runtime.getBrowserInfo()] API
to return something meaningful, but maybe there's an easier way) and, if
that's the case, either repeating the "start" message every 100ms until it
gets acknowledged or waiting for an "updateSettings" message to arrive.
>
> Something that now occurrs to me, which doesn't require any further
patching of NoScript, is for torbutton to keep sending its first
updateSettings message (say every 100 ms) until NoScript responds.
But without a further, Tor Browser specific patch for NoScript (to delay
page loads until the updateSettings message has arrived), the first page
load could still happen with the wrong settings.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27411#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list