HTTPS Everywhere is not working when noscript is enabled globally

HTTPS Everywhere auto updated and now there is a new icon in the toolbar, clicking on the new icon shows a blank popup with 2 checkboxes. TorBrowser 7.0.4 Https everywhere 2017.8.15

Trac:
Username: Dbryrtfbcbhgf

added TorBrowserTeam201708R component::applications/tor browser owner::tbb-team priority::high reporter::Dbryrtfbcbhgf resolution::fixed severity::major status::closed type::defect labels

HTTPS everywhere changelog 2017.8.15

• Incorporating numerous fixes for WebExtensions to work within Firefox
• Firefox: Creating Embedded WebExtension wrapper to migrate legacy settings
• Removing legacy XPCOM codebase, unifying Firefox and Chrome codebase
• Ruleset updates https://www.eff.org/files/Changelog.txt

Trac:
Username: Dbryrtfbcbhgf

Trac:
Username: Dbryrtfbcbhgf

Image showing bug

Trac:
Username: Dbryrtfbcbhgf

Trac:

I guess I have the same on GNU/Linux with 7.5a4. I don't remember if the icon was on the toolbar before or not. In my case, the panel isn't blank, unlike Dbryrtfbcbhgf's bug.png|bug.png.

The new icon should be as expected but the blank one not. legind: Do you track this bug somewhere?

Trac:
Owner: tbb-team to jsha
Component: Applications/Tor Browser to HTTPS Everywhere/EFF-HTTPS Everywhere
Status: new to needs_information

Trac:
Status: needs_information to assigned
Owner: jsha to legind

Trac:
Status: assigned to needs_information

Replying to dcf:

I guess I have the same on GNU/Linux with 7.5a4. I don't remember if the icon was on the toolbar before or not. In my case, the panel isn't blank, unlike Dbryrtfbcbhgf's bug.png|bug.png.

This only happens when the security level is set to high or medium, only the low level shows the panel correctly.

Additionally HTTPS Everywhere has stopped redirecting pages to HTTPS according to the rules. For example, [http://imgur.com/] used to redirect to HTTPS, now it does not.

Replying to cypherpunks:

Additionally HTTPS Everywhere has stopped redirecting pages to HTTPS according to the rules. For example, [http://imgur.com/] used to redirect to HTTPS, now it does not. I confirm, even at Low security setting redirects don't happen.

Also rulesets aren't shown when clicking on the HTTPS Everywhere icon, so we can't disable some, unlike with other versions.

Trac:
Username: Lolint

Trac:
Cc: N/A to tbb-team

Replying to cypherpunks:

Additionally HTTPS Everywhere has stopped redirecting pages to HTTPS according to the rules. For example, [http://imgur.com/] used to redirect to HTTPS, now it does not.

I can reproduce this problem (and the blank popup too) when security level is set to High or Medium. It is however still working when using the Low security level (after restarting the browser when changing the level).

It seems the problem is related to noscript. Setting noscript.global to false and restarting the browser is enough to cause HTTPS Everywhere to stop working.

Trac:
Summary: HTTPS Everywhere auto updated and now there is a new icon in the toolbar to HTTPS Everywhere is not working when noscript is enabled globally

Once again the developers messed the "stable" series without testing, even when they had been warned https://blog.torproject.org/comment/270389#comment-270389. This is unprofessional.

Replying to dcf:

I guess I have the same on GNU/Linux with 7.5a4. I don't remember if the icon was on the toolbar before or not. In my case, the panel isn't blank, unlike Dbryrtfbcbhgf's bug.png|bug.png.

comment:6, comment:7, comment:10 are correct as far as a I can tell. Yesterday I was on the Low security setting and the panel was not blank. Today I am on the Medium security level and the panel is blank. And typing "web.archive.org" into the URL bar does not automatically take me to !https://web.archive.org/.

I guess what we can and maybe even should do is whitelist moz-extension: (see #21270 (moved)). That solves the problem for me. However, it causes a startup delay of several seconds on my Linux debug build. So, hrm.

Trac:
Cc: tbb-team to legind
Status: needs_information to assigned
Component: HTTPS Everywhere/EFF-HTTPS Everywhere to Applications/Tor Browser
Owner: legind to tbb-team
Keywords: N/A deleted, TorBrowserTeam201708 added

Replying to gk:

I guess what we can and maybe even should do is whitelist moz-extension: (see #21270 (moved)). That solves the problem for me. However, it causes a startup delay of several seconds on my Linux debug build. So, hrm.

So, the startup delay is not related to the whitelisting but to the new HTTPS-E itself. :/