#22478 closed defect (not a bug)

Tor Browser fails to load Google Docs with security slider set to "high" (if SVG is involved)

Reported by: teor Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-security-slider, tbb-usability-website
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

When I try to read a Google Doc with Tor Browser, I get this error:

"Unable to load file
Try to load it again or send an error report."

For example, this happens when I scroll to the second or third page on:
https://docs.google.com/document/d/119plBq2oIeNS3okHCBNaBSqm_a1jJObYxKB_n6jodoQ/edit#
(The Tor Launcher automation document)

But the document is actually fine, if I delete the modal dialog (using Inspect Element), everything is ok.

I wonder if this is a latency issue, or a Tor issue.

Child Tickets

Change History (7)

comment:1 Changed 17 months ago by cypherpunks

I just tried it with Tor Browser 7.0a4 and I did not experience this issue.

comment:2 in reply to:  1 ; Changed 17 months ago by teor

Replying to cypherpunks:

I just tried it with Tor Browser 7.0a4 and I did not experience this issue.

I think it might be latency related.

I'm using Tor Browser 6.5.2 in High Security Mode (with a JS exception for Google Docs) on macOS from Australia. Typical Tor page load latencies from my networks are 3-10 seconds. (I tried on several networks, they all have this issue.)

I wonder if trying over meek would give you similar latency to what I experience?

comment:3 in reply to:  2 ; Changed 17 months ago by gk

Status: newneeds_information

Replying to teor:

Replying to cypherpunks:

I just tried it with Tor Browser 7.0a4 and I did not experience this issue.

I think it might be latency related.

I'm using Tor Browser 6.5.2 in High Security Mode (with a JS exception for Google Docs) on macOS from Australia.

I see the same with this setup (not being in Australia, though). I suspect you are not excepting enough from your JS ban or some other high level setting is interfering because it works fine for me with a clean 6.5.2 on the default security level. Could you try that scenario?

comment:4 in reply to:  3 ; Changed 17 months ago by teor

Status: needs_informationnew

Replying to gk:

Replying to teor:

Replying to cypherpunks:

I just tried it with Tor Browser 7.0a4 and I did not experience this issue.

I think it might be latency related.

I'm using Tor Browser 6.5.2 in High Security Mode (with a JS exception for Google Docs) on macOS from Australia.

I see the same with this setup (not being in Australia, though). I suspect you are not excepting enough from your JS ban or some other high level setting is interfering because it works fine for me with a clean 6.5.2 on the default security level. Could you try that scenario?

Yes, this works for me on 6.5.2 when I start in Medium security mode, and Low security mode.

So this is a NoScript bug: I expect that "Temporarily allow all this page" actually does allow all the scripts needed for the google docs page.

comment:5 in reply to:  4 ; Changed 17 months ago by gk

Keywords: tbb-security-slider tbb-usability-website added

Replying to teor:

Replying to gk:

Replying to teor:

Replying to cypherpunks:

I just tried it with Tor Browser 7.0a4 and I did not experience this issue.

I think it might be latency related.

I'm using Tor Browser 6.5.2 in High Security Mode (with a JS exception for Google Docs) on macOS from Australia.

I see the same with this setup (not being in Australia, though). I suspect you are not excepting enough from your JS ban or some other high level setting is interfering because it works fine for me with a clean 6.5.2 on the default security level. Could you try that scenario?

Yes, this works for me on 6.5.2 when I start in Medium security mode, and Low security mode.

Good.

So this is a NoScript bug: I expect that "Temporarily allow all this page" actually does allow all the scripts needed for the google docs page.

Might be something else that is interfering on the high level. Worth investigating.

comment:6 Changed 17 months ago by gk

Summary: Tor Browser fails to load Google DocsTor Browser fails to load Google Docs with security slider set to "high"

comment:7 in reply to:  5 Changed 15 months ago by gk

Resolution: not a bug
Status: newclosed
Summary: Tor Browser fails to load Google Docs with security slider set to "high"Tor Browser fails to load Google Docs with security slider set to "high" (if SVG is involved)

Replying to gk:

Replying to teor:

Replying to gk:

Replying to teor:

Replying to cypherpunks:

I just tried it with Tor Browser 7.0a4 and I did not experience this issue.

I think it might be latency related.

I'm using Tor Browser 6.5.2 in High Security Mode (with a JS exception for Google Docs) on macOS from Australia.

I see the same with this setup (not being in Australia, though). I suspect you are not excepting enough from your JS ban or some other high level setting is interfering because it works fine for me with a clean 6.5.2 on the default security level. Could you try that scenario?

Yes, this works for me on 6.5.2 when I start in Medium security mode, and Low security mode.

Good.

So this is a NoScript bug: I expect that "Temporarily allow all this page" actually does allow all the scripts needed for the google docs page.

Might be something else that is interfering on the high level. Worth investigating.

Yes. The problem is not NoScript but svg.in-content.enabled set to false. ALlowing SVG to load and render solves this problem. But that's not a bug but a design decision made for the high security level.

Note: See TracTickets for help on using tickets.