[tor-bugs] #33614 [Applications/Tor Browser]: Issue with NoScript in Tor Browser

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Mar 14 01:34:13 UTC 2020


#33614: Issue with NoScript in Tor Browser
------------------------------+------------------------------------------
 Reporter:  Tor235            |          Owner:  tbb-team
     Type:  defect            |         Status:  new
 Priority:  Very High         |      Component:  Applications/Tor Browser
  Version:  Tor: unspecified  |       Severity:  Critical
 Keywords:                    |  Actual Points:
Parent ID:                    |         Points:
 Reviewer:                    |        Sponsor:
------------------------------+------------------------------------------
 While using Tor Browser (set to the "safest" security level), upon
 visiting a website, the NoScript icon stopped having the red "do not
 enter" symbol -- instead, it had a question mark next to the "letter S".

 Normally, with the security level set to "safest" and visiting a website
 that has scripts, the red "do not enter" symbol appears over the NoScript
 icon (i.e. it blocks scripts). This time, when visiting a website with
 scripts, the red "do not enter" symbol did NOT appear. When I clicked the
 NoScript icon, the following message appeared:

 "In order to operate on this tab, NoScript needs to reload it. Proceed?"

 My question is, when this happened, were the scripts blocked or not? Did
 the scripts on the website "leak" (i.e. not get blocked) in spite of the
 fact that I had the browser set to the "safest" security level?

 Is this a known bug with NoScript? Did NoScript fail to block the scripts
 on the website I visited?

 The Tor Browser used is/was version 9.0.6.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/33614>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list