[tor-bugs] #29733 [Applications/Tor Browser]: Disable NoSript XSS protection for now due to bug 1532530

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Mar 11 15:18:58 UTC 2019


#29733: Disable NoSript XSS protection for now due to bug 1532530
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  Very High            |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  noscript,
     Severity:  Normal               |  TorBrowserTeam201903
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 It seems there is a Firefox bug in relation to NoScript's XSS feature that
 makes large uploads stall which is bad for SecureDrop, Onionshare and
 others. We'll therefore disable the XSS feature for now until this gets
 fixed.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29733>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list