#25014 closed defect (duplicate)

Options UX for Extensions isn't allowing JS execution

Reported by: legind Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

When you visit about:addons within Tor Browser while TorButton is in the middle ("Safer") or highest ("Safest") security levels, the HTTPS Everywhere options UX does not work. This is because it is dependent on JavaScript execution, which is disabled in those security levels, but should not be disabled for extension UX in general.

This problem is also exhibited when JavaScript is disabled in Firefox ESR, so this is an underlying Firefox problem. A fix has been made as the latest Firefox does not exhibit this problem, but they haven't bothered backporting it to ESR.

This problem is very similar to what we encountered in https://trac.torproject.org/projects/tor/ticket/23258. In that case, UX elements for the HTTPS Everywhere extension popup were not working properly. This is the same, but applied to the options UX. We had to apply a backported patch to the TB build then in order to restore functionality.

Child Tickets

Change History (1)

comment:1 Changed 21 months ago by gk

Resolution: duplicate
Status: newclosed

Duplicate of #23322.

Note: See TracTickets for help on using tickets.