[tor-bugs] #31428 [Applications/Tor Browser]: NoScript doesn't work again on Windows 7

[Tor Bug Tracker & Wiki]

#31428: NoScript doesn't work again on Windows 7
--------------------------------------+-----------------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  noscript                  |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by cypherpunks):

 Replying to [comment:4 ma1]:
 > Replying to [comment:3 cypherpunks]:
 > > Replying to [comment:1 ma1]:
 > > > What does not work exactly (e.g. the file is played but is not
 expected to / is blocked while it should play / you get no
 placeholder...)?
 > > The latter.
 >
 > You get no placeholder. And it plays, right? Because it's what it should
 do by default in a fresh Tor Browser 8.5.4 installation.
 No. Nothing after enabling the video. And it's not the default security
 level, because it's what you should change first to test NoScript.
 > > > Which Tor Browser / NoScript versions are you using?
 > > Strange question. 8.5.4 / 11.0.2.
 >
 > Not so strange: you could be using a Tor Browser alpha and/or have
 installed a different NoScript version (not the one shipping with the
 browser). But you're standard, it seems.
 Those options are incompatible with anonymity, so they should be
 explicitly specified.
 > > > Which Security level?
 > > On which level have you tested NoScript before shipping?
 >
 > My answer is irrelevant, because even if I develop NoScript, I do not
 ship in the Tor Browser neither decide its configuration presets. On the
 other hand, you actually answering my question would have been helpful, as
 the security level determines what you can expect to be the "normal"
 behavior.
 Updates land automatically on the stable TBB, bringing a lot of pain
 sometimes...
 > However I've just tried to reproduce any anomaly on a fresh Tor Browser
 8.5.4 installation w/ default NoScript 11.0.2, both on Linux (Ubuntu
 18.0.4.3 LTS), macOS Mojave **and Windows 10**. I obtained the following
 expected behaviors for each of the three security levels, upon opening
 https://www.sample-
 videos.com/video123/mp4/720/big_buck_bunny_720p_10mb.mp4:
 >
 > 1. STANDARD: the video plays as soon as the page loads
 > 2. SAFER: I get a window-sized placeholder, which if clicked opens a
 prompt to let me decide whether letting the video play. If I authorize it,
 the video plays as expected
 > 3. SAFEST: like n.2 (SAFER)
 >
 > I cannot test on other platforms, but a Windows 7-specific bug of this
 kind would be extremely weird.
 Yes, Windows 7 is specified in the summary of this ticket.
 > Can you actually observe anything different?
 > If you can, what is that?
 {{{
 Loading failed for the <script> with source
 “chrome://global/content/TopLevelVideoDocument.js”.
 big_buck_bunny_720p_10mb.mp4:1
 Security Error: Content at https://www.sample-
 videos.com/video123/mp4/720/big_buck_bunny_720p_10mb.mp4 may not load or
 link to moz-extension://%NS_UUID%/content/content.css.
 }}}
 > Thank you again.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31428#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online