[tor-bugs] #27553 [Applications/Tor Browser]: Tor Browser 8 enables JS in local files even when JS is disabled by default

[Tor Bug Tracker & Wiki]

#27553: Tor Browser 8 enables JS in local files even when JS is disabled by default
-------------------------------------------------+-------------------------
 Reporter:  pf.team                              |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  closed
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:  fixed
 Keywords:  noscript tbb-8.0-issues tbb-         |  Actual Points:
  regression                                     |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by gk):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 Replying to [comment:3 ma1]:
 > file:/// URLs are not processed by webRequest, so in theory this would
 be out of reach for WebExtensions, which usually operate on page
 permissions by injecting a customized CSP in webRequest.onResponseHeaders.
 >
 > But luckily enough, I've very recently I devised a new redundant
 approach for dealing with edge cases like this, so
 [https://github.com/hackademix/noscript/releases 10.1.9.2 RCs] should
 "fix" this.

 Hey, this got release faster than I could test it. ;) Anyway, this works
 for me now with 10.1.9.5, thanks!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27553#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online