[tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs

[Tor Bug Tracker & Wiki]

#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
--------------------------------------+-----------------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by adrelanos):

 Could this be related to or being a duplicate or regression of #27401?

 Replying to [comment:4 cypherpunks]:
 > Simmer down gk, adrelanos wasn't contesting those things but merely
 reminding the OP about them :)

 Indeed.

 Replying to [comment:3 gk]:
 > Replying to [comment:2 adrelanos]:
 > > > Tor Browser in Whonix blocks JavaScript (only when started for the
 first time) and in DispVMs
 > >
 > > > There is a long standing issue with Tor Browser that I reported to
 Whonix, but they say that it is an upstream issue.
 > >
 > > Citation required.
 > >
 > > "blocks JavaScript (only when started for the first time)" - No, I
 don't think this is an issue caused by Tor Browser which Tor Project could
 fix. Except, if
 > >
 > > > If you take the Tor Browser as we ship it (by downloading it from
 our website and extracting it) and run that inside your environment, does
 this happen as well?
 > >
 > > above quote was the case.
 >
 > Could you make your point a bit clearer here? I was trying to figure out
 whether the Tor Browser as we offer it from our website is giving the same
 behavior as the software Whonix is shipping (which I don't know anything
 about), but I am still not sure what the answer here is.

 I can't reproduce this. Only reporter can confirm.

 > as the software Whonix is shipping (which I don't know anything about)

 Btw the differences are here:
 https://www.whonix.org/wiki/Tor_Browser#Tor_Browser_Bundle_versus_Whonix_Tor_Browser

 And here:
 #19652 (which still up to date)

 > > There are other recent changes and decisions by Tor Project which
 often cause questions. List of things up to The Tor Project having decided
 for now at the time of writing:
 > >
 > > * not enable to set noscript to blocking of all scripts globally by
 default,
 >
 > That's not a recent decision or change but has been that way forever,
 see our FAQ entry: https://support.torproject.org/#tbb-34

 Indeed, however users often bring it up and blame it on Whonix.

 > > * not persist noscript per-site settings by default,
 >
 > Per-site permissions saved by default would risk making you linkability
 across different website because you probably have a non-generic
 whitelist. But if someone really wants that then there is a pref you can
 flip. See: #27175 for the full discussion.

 Not contesting that. Even have that in Whonix documentation:
 https://www.whonix.org/wiki/Tor_Browser#NoScript_Custom_Setting_Persistence

 > > * remove noscript from Tor Browser menu bar by default.
 >
 > #25658 is the ticket you want and proposal 101
 (https://gitweb.torproject.org/tor-browser-spec.git/tree/proposals/101
 -security-controls-redesign.txt) for more background. You can follow the
 tbb-dev list for proposal discussions like that one. This feature has been
 in the works for months.

 Not contesting that either (would create a ticket if I had a suggestion)
 but good to have the links to further information so we can link it from
 Whonix documentation.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31094#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online