[tbb-bugs] #30388 [Applications/Tor Browser]: NoScript and all user-installed add-ons got deactivated! (armagadd-on-2.0)

[Tor Bug Tracker & Wiki]

#30388: NoScript and all user-installed add-ons got deactivated! (armagadd-on-2.0)
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks                          |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:
                                                 |  needs_review
 Priority:  Immediate                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Blocker                              |     Resolution:
 Keywords:  AffectsTails, TorBrowserTeam201905R  |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by cyberpunks):

 I'm the commenter on [comment:27]. I've changed my mind.

 According to [comment:36], setting `javascript.enabled` to `false` still
 enables web fonts and audio/video media, which probably gives a different
 fingerprint than noscript-enabled users. This is bad for anti-
 fingerprinting.

 I now think that [comment:42] is the best solution, i.e. users should
 follow the instruction in the [https://blog.torproject.org/noscript-
 temporarily-disabled-tor-browser blog post], while future tor browser
 versions should warn about `xpinstall.signatures.required` being set to
 `false`.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30388#comment:45>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online