[tor-bugs] #30388 [Applications/Tor Browser]: NoScript and all user-installed add-ons got deactivated! (armagadd-on-2.0)

[Tor Bug Tracker & Wiki]

#30388: NoScript and all user-installed add-ons got deactivated! (armagadd-on-2.0)
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks                          |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:
                                                 |  needs_review
 Priority:  Immediate                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Blocker                              |     Resolution:
 Keywords:  AffectsTails, TorBrowserTeam201905R  |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by flowerpt):

 Since the blog asked people to "Please remember to" re-enable security,
 and that's the kind of thing which is the bane of security when it comes
 to ordinary users, can a subsequent release please force this back to
 'false' and alert the user if the flip is made?

 It's better to have people need to toggle it again than to leave people
 unintentionally unguarded.  I realize both options are sub-optimal, but
 "fail safe" is better than "fail dangerous".  Without such a change, it's
 very likely that some users will go on forever set to not validate addons
 - the typical user pattern is "fix it and forget it".

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30388#comment:42>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online