Opened 12 months ago

Last modified 5 months ago

#27313 new enhancement

Help NoScript marking HTTP .onions as secure

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: ma1, micahlee, pospeselr Actual Points:
Parent ID: #21728 Points:
Reviewer: Sponsor: Sponsor27


#27307 is a report that NoScript shows HTTP .onions in red (compared to HTTPS ones in green). Giorgio would be happy to change that. We should think about a good way signaling NoScript that it is running in Tor Browser as it could then treat .onion domains differently.

Giorgio's suggestion was:

> > console.log(await browser.runtime.getBrowserInfo())
> Object { name: "Firefox", vendor: "Mozilla", version: "60.1.0", buildID: "20180204020101" }
> Maybe you could send an "isTorBrowser: true" additional property within your updateSettings messages.

There might be other ones we could consider

Child Tickets

#29021taskclosedtbb-teamProvide a means to inform NoScript about being run in a Tor Browser context

Change History (3)

comment:1 Changed 6 months ago by gk

Cc: micahlee pospeselr added

comment:2 Changed 5 months ago by gk

Sponsor: Sponsor27

comment:3 Changed 5 months ago by gk

Parent ID: #21728
Note: See TracTickets for help on using tickets.