[tbb-bugs] #30388 [Applications/Tor Browser]: NoScript and all user-installed add-ons got deactivated! (armagadd-on-2.0)

[Tor Bug Tracker & Wiki]

#30388: NoScript and all user-installed add-ons got deactivated! (armagadd-on-2.0)
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks                          |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:
                                                 |  needs_review
 Priority:  Immediate                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Blocker                              |     Resolution:
 Keywords:  AffectsTails, TorBrowserTeam201905R  |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by gk):

 Replying to [comment:42 flowerpt]:
 > Since the blog asked people to "Please remember to" re-enable security,
 and that's the kind of thing which is the bane of security when it comes
 to ordinary users, can a subsequent release please force this back to
 'false' and alert the user if the flip is made?
 >
 > It's better to have people need to toggle it again than to leave people
 unintentionally unguarded.  I realize both options are sub-optimal, but
 "fail safe" is better than "fail dangerous".  Without such a change, it's
 very likely that some users will go on forever set to not validate addons
 - the typical user pattern is "fix it and forget it".

 I don't think we can do that as our decisions don't overwrite user prefs.
 We could think about showing a notification bar, though, reminding the
 users of that problem and allow them to flip the pref back easily that
 way.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30388#comment:43>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online