[tor-bugs] #27939 [Applications/Tor Browser]: Remind the user if they have enabled noscript_persist
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed Oct 3 03:01:33 UTC 2018
#27939: Remind the user if they have enabled noscript_persist
-------------------------------------+-------------------------------------
Reporter: cypherpunks_reply | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Component: Applications/Tor
| Browser
Version: | Severity: Normal
Keywords: noscript, | Actual Points:
tbb-8.0-issues |
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------------------+-------------------------------------
In reply to [ticket:27175#comment:12 arthuredelstein] who submitted a
patch to introduce `extensions.torbutton.noscript_persist`:
> However, enabling this pref is dangerous in my opinion and should only
be used with caution.
I agree, and I prefer to browse similarly to ticket:27175#comment:11 (in
the same ticket), changing NoScript permissions away from the defaults
only seldom and applying them only as Temporary using the clock icon
modifier in NoScript.
To enable `extensions.torbutton.noscript_persist`, the user would have to
accept the `about:config` warning, but that warning does not explain the
implications of enabling this preference in particular, and the user may
later forget that they enabled it. The user could be reminded that it is
enabled by a Big Scary Warning when it is detected as enabled, displayed
perhaps by `about:tor` in similar fashion to the old "Tor Browser is
outdated!" bold arrow so it would be displayed again on each New Identity.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27939>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list