[tor-bugs] #29872 [Applications/Tor Browser]: Searching from about:tor cause a NoScript XSS warning popup

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Mar 26 09:56:04 UTC 2019


#29872: Searching from about:tor cause a NoScript XSS warning popup
--------------------------------------+------------------------
 Reporter:  boklm                     |          Owner:  gk
     Type:  defect                    |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:  fixed
 Keywords:  TorBrowserTeam201903      |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+------------------------
Changes (by gk):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 Replying to [comment:5 ma1]:
 > Fixed in [https://github.com/hackademix/noscript/releases/tag/10.2.5
 10.2.5], thanks.

 Thanks. This fixes the problem for me. Pushed to `master` (commit
 aac31f8aa81a76cd33e0bfd1de2294db4ee79c1c) and `maint-8.0` (commit
 a9c6707fcf44fa22e7e9cd806b3d3b11677e87ae) in our `tor-browser-build` repo.

 ma1: Once the right fix on Mozilla's side landed I'll open a ticket to
 track the backport if necessary. We'll ship the next releases with that
 fix (either we got Mozilla to backport the fix to esr60 or we do it
 ourselves). Once that's done you can remove all the workarounds on your
 side and we are back at the status quo ante. :)

 Thanks for helping us here.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29872#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list