[tor-bugs] #30624 [Applications/Tor Browser]: Disable NoScript's XSS protection to avoid the whole computer freezing

[Tor Bug Tracker & Wiki]

#30624: Disable NoScript's XSS protection to avoid the whole computer freezing
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  TorBrowserTeam201905,                |  Actual Points:
  GeorgKoppen201905                              |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by gk):

 Replying to [comment:10 ma1]:
 > Replying to [comment:8 gk]:
 > > . While I can't reproduce on https://zeit.de anymore
 https://www.sravni.ru/kredity/na-1000000-rublej/ still freezes my browser
 (or makes it extremely sluggish) with 10.6.3rc3 (that's 9.0a1). Disabling
 NoScript's XSS feature gets back a smooth experience.
 >
 > Sadly, it looks like my first asynchronous work around attempt is not
 doing as good as it could, because apparently the resistFingerprinting
 clamping of Date.now() affects not just web content but WebExtensions too,

 That's a bug I think. I opened #30655 for that.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30624#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online