Opened 2 years ago

Closed 2 years ago

#23554 closed enhancement (duplicate)

Build noscript-style toggle for svg disable?

Reported by: arma Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: ux-team
Cc: mrphs Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by arma)

Right now things like javascript and other security-related options can be toggled per-tab via the noscript interface, but our svg block (when the security slider is set to high) has no such per-tab toggle.

Especially now that youtube has decided that svg is the way of the future, we should figure out a more usable way for people to retain most of their security while still loading youtube if they want.

Options that come to mind:

A) Build our own per-tab toggle interface for the svg blocker.

B) Ask noscript to learn how to block svg, and then use its existing per-tab toggle interface to let you configure your svg hopes.

C) Finish thinking about the "per-tab security slider settings" idea, and decide to move forward with it.

(Idea came from discussions with Nima and Nicolas.)

Child Tickets

Change History (6)

comment:1 Changed 2 years ago by arma

Keywords: ux-team added

adding ux-team keyword since samdney says the ux team has been talking about option C.

comment:2 Changed 2 years ago by arma

Description: modified (diff)

comment:3 Changed 2 years ago by mrphs

Cc: mrphs added

I'm worried option C is going to cause a lot of confusion and most certainly hope we don't take that route without having some good data to back it up. Changing such critical security settings based on our gut-feelings can be dangerous.

comment:4 in reply to:  description Changed 2 years ago by gk

Replying to arma:

C) Finish thinking about the "per-tab security slider settings" idea, and decide to move forward with it.

I guess all the time you are talking about "per-tab security slider settings" you mean "per-domain security slider settings", right? So, this is #21034. For short: As of now I have not seen a sound proposal for this idea and I am quite skeptical that there will be one. But who knows. There is likely no moving forward with that one.

comment:5 Changed 2 years ago by arma

That leaves "A" or "B" then?

I wonder if noscript wants to get into the business of becoming noscriptsvgflashandstuff.

comment:6 Changed 2 years ago by gk

Resolution: duplicate
Status: newclosed

Marking this ticket as duplicate of #20314.

Note: See TracTickets for help on using tickets.