[tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs

[Tor Bug Tracker & Wiki]

#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
--------------------------------------+-----------------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by gk):

 Replying to [comment:2 adrelanos]:
 > > Tor Browser in Whonix blocks JavaScript (only when started for the
 first time) and in DispVMs
 >
 > > There is a long standing issue with Tor Browser that I reported to
 Whonix, but they say that it is an upstream issue.
 >
 > Citation required.
 >
 > "blocks JavaScript (only when started for the first time)" - No, I don't
 think this is an issue caused by Tor Browser which Tor Project could fix.
 Except, if
 >
 > > If you take the Tor Browser as we ship it (by downloading it from our
 website and extracting it) and run that inside your environment, does this
 happen as well?
 >
 > above quote was the case.

 Could you make your point a bit clearer here? I was trying to figure out
 whether the Tor Browser as we offer it from our website is giving the same
 behavior as the software Whonix is shipping (which I don't know anything
 about), but I am still not sure what the answer here is.

 > There are other recent changes and decisions by Tor Project which often
 cause questions. List of things up to The Tor Project having decided for
 now at the time of writing:
 >
 > * not enable to set noscript to blocking of all scripts globally by
 default,

 That's not a recent decision or change but has been that way forever, see
 our FAQ entry: https://support.torproject.org/#tbb-34

 > * not persist noscript per-site settings by default,

 Per-site permissions saved by default would risk making you linkability
 across different website because you probably have a non-generic
 whitelist. But if someone really wants that then there is a pref you can
 flip. See: #27175 for the full discussion.

 > * remove noscript from Tor Browser menu bar by default.

 #25658 is the ticket you want and proposal 101
 (https://gitweb.torproject.org/tor-browser-spec.git/tree/proposals/101
 -security-controls-redesign.txt) for more background. You can follow the
 tbb-dev list for proposal discussions like that one. This feature has been
 in the works for months.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31094#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online