[tor-bugs] #16783 [Tor Browser]: NoScript whitelist reset is fingerprintable

[Tor Bug Tracker & Wiki]

#16783: NoScript whitelist reset is fingerprintable
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  mikeperry
  mikeperry              |     Status:  closed
         Type:  defect   |  Milestone:
     Priority:  normal   |    Version:
    Component:  Tor      |   Keywords:  tbb-fingerprinting,
  Browser                |  MikePerry201508, tbb-5.0-regression,
   Resolution:  fixed    |  TorBrowserTeam201509
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------
Changes (by mikeperry):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 This turned out to not to require a Torbutton patch. Because NoScript
 ensures that noscript.mandatory is copied into the current whitelist
 already upon every browser restart, all we really needed to do is sync the
 three NoScript prefs so that resetting them to default values yields a
 consistent result.

 I pushed these pref updates for 5.0 and 5.5 already.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16783#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online