[tor-bugs] #27553 [Applications/Tor Browser]: Tor Browser 8 enables JS in local files even when JS is disabled by default

[Tor Bug Tracker & Wiki]

#27553: Tor Browser 8 enables JS in local files even when JS is disabled by default
-------------------------------------------------+-------------------------
 Reporter:  pf.team                              |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  noscript tbb-8.0-issues tbb-         |  Actual Points:
  regression                                     |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by ma1):

 file:/// URLs are not processed by webRequest, so in theory this would be
 out of reach for WebExtensions, which usually operate on page permissions
 by injecting a customized CSP in webRequest.onResponseHeaders.

 But luckily enough, I've very recently I devised a new redundant approach
 for dealing with edge cases like this, so
 [https://github.com/hackademix/noscript/releases 10.1.9.2 RCs] should
 "fix" this.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27553#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online