Opened 4 years ago

Closed 4 years ago

#16656 closed task (wontfix)

Forbid Java, Microsoft Silverlight etc.

Reported by: 900909090 Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Why are options like "Forbid Java, Microsoft Silverlight etc." in embeddings within NoScript not checked?

I understand they may be done on a deeper levels but I don't think it would hurt to forbid these settings and others and avoid confusion especially among new users.

Child Tickets

Change History (1)

comment:1 in reply to:  description Changed 4 years ago by gk

Resolution: wontfix
Status: newclosed

Replying to 900909090:

Why are options like "Forbid Java, Microsoft Silverlight etc." in embeddings within NoScript not checked?

I understand they may be done on a deeper levels but I don't think it would hurt to forbid these settings and others and avoid confusion especially among new users.

Because they are already forbidden by a Tor Browser patch. Moreover, you won't be able to load plugins apart from Flash in the process space in the first place. This seems enough to me especially as new and unexperienced users won't dig deep into the NoScript configure options. Experienced users that might do this should be able to read our design document which helps avoiding this confusion as well. See: https://www.torproject.org/projects/torbrowser/design/ section 4.1.2.

Note: See TracTickets for help on using tickets.