[tor-bugs] #30443 [Applications/Tor Browser]: NoScript still not working right, not sure if https everywhere is working right either, addons?

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri May 10 10:27:01 UTC 2019


#30443: NoScript still not working right, not sure if https everywhere is working
right either, addons?
--------------------------------------+---------------------------
 Reporter:  justmeee                  |          Owner:  tbb-team
     Type:  defect                    |         Status:  closed
 Priority:  Immediate                 |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Critical                  |     Resolution:  not a bug
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+---------------------------
Changes (by gk):

 * status:  needs_information => closed
 * resolution:   => not a bug


Comment:

 Okay, I looked closer at that. NoScript is working as expected: JavaScript
 is blocked on the highest level and all the other prefs are properly
 flipped as well. In short it's not a NoScript problem.

 What happens is that for some (probably Yahoo-internal) reason a different
 landing page is loaded sometimes. I am not sure why you did not see that
 before but probably that's because Yahoo changed their logic recently.

 I tested older Tor Browser versions from before the 8.0.9 update and I see
 the same problem on a Windows machine as well. I am not sure why I don't
 see this on Linux, though.

 I double-checked as well that SVG (while loaded on that different page you
 encountered) is not executed when we set the slider pref. So, we are good
 here and this is not a bug.

 Regarding HTTPS Everywhere: this has never been a problem and that
 extension should never have been disabled as we have it exempt from the
 signature check because we use the EFF and not the Mozilla version.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30443#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list