[tor-bugs] #27589 [Applications/Tor Browser]: "Javascript is disabled on non-HTTPS sites" from security slider has regressed in TBB 8 / NoScript 10

[Tor Bug Tracker & Wiki]

#27589: "Javascript is disabled on non-HTTPS sites" from security slider has
regressed in TBB 8 / NoScript 10
--------------------------------------+-----------------------------------
 Reporter:  cypherpunks_reply         |          Owner:  tbb-team
     Type:  enhancement               |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  noscript regression       |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by cypherpunks_reply):

 As shipped in the slider, it functions differently and unexpectedly worse
 than before TBB 8.0 / NoScript 10.  The difference being that you can't
 easily allow scripts to run on a single HTTP site without allowing it for
 all of them, and arguably worse, you can't even settle for temporarily
 allowing scripts for all HTTP sites, because there's no obvious way to
 revoke the permission without restarting the browser.

 As for where the bug is, the previous implementation relied on a specific
 feature of NoScript but now it seems that the per-site permission in
 NoScript for "http://http:" is something special that came from the
 TorBrowser security slider, since NoScript's settings UI won't allow the
 user to add it as a per-site permission.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27589#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online