[tor-bugs] #30624 [Applications/Tor Browser]: Disable NoScript's XSS protection to avoid the whole computer freezing

[Tor Bug Tracker & Wiki]

#30624: Disable NoScript's XSS protection to avoid the whole computer freezing
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  TorBrowserTeam201905,                |  Actual Points:
  GeorgKoppen201905                              |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by ma1):

 Replying to [comment:8 gk]:
 > . While I can't reproduce on https://zeit.de anymore
 https://www.sravni.ru/kredity/na-1000000-rublej/ still freezes my browser
 (or makes it extremely sluggish) with 10.6.3rc3 (that's 9.0a1). Disabling
 NoScript's XSS feature gets back a smooth experience.

 Sadly, it looks like my first asynchronous work around attempt is not
 doing as good as it could, because apparently the resistFingerprinting
 clamping of Date.now() affects not just web content but WebExtensions too,
 causing the CPU to be relinquished every 100ms (which is the artificially
 imposed resolution), rather than 10ms as intended, therefore making long-
 running checks 10 times more sluggish than they should :(

 Trying something else, stay tuned...

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30624#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online