[tor-bugs] #16086 [Tor Browser]: Sites added to NoScript's Permanent Whitelist are lost on browser restart with High security level

[Tor Bug Tracker & Wiki]

#16086: Sites added to NoScript's Permanent Whitelist are lost on browser restart
with High security level
-------------------------+--------------------------
 Reporter:  axujek       |          Owner:  tbb-team
     Type:  defect       |         Status:  new
 Priority:  normal       |      Milestone:
Component:  Tor Browser  |        Version:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
-------------------------+--------------------------
 TBB Version: 4.5.1

 To reproduce:

 1. Set security slider to High

 2. Set "Permanent Allow Commands in Private Windows" in NoScript options
 (Appearance tab)

 3. Open a site that is not in NoScript's whitelist

 4. Click NoScript icon, select "Permanent Allow Commands in Private
 Windows"

 5. Click NoScript icon, select "Allow <url of site>"

 6. Select New Identity or restart browser

 Expected result:
 <url of site> will be in NoScript's whitelist with permanent permission

 Actual result:
 <url of site> is not in NoScript's whitelist at all

 Note:
 Works as expected when security slider is set to any other setting besides
 High

 Also:
 It's a separate bug, but the "Permanent Allow Commands in Private Windows"
 setting is lost across new identity/restarts as well. The option in the
 Appearance tab stays but the user has to reenable the functionality from
 the NoScript icon menu after each restart.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16086>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online