Opened 2 years ago

Closed 2 years ago

Last modified 2 years ago

#27939 closed defect (wontfix)

Remind the user if they have enabled noscript_persist

Reported by: cypherpunks_reply Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

In reply to arthuredelstein who submitted a patch to introduce extensions.torbutton.noscript_persist:

However, enabling this pref is dangerous in my opinion and should only be used with caution.

I agree, and I prefer to browse similarly to ticket:27175#comment:11 (in the same ticket), changing NoScript permissions away from the defaults only seldom and applying them only as Temporary using the clock icon modifier in NoScript.

To enable extensions.torbutton.noscript_persist, the user would have to accept the about:config warning, but that warning does not explain the implications of enabling this preference in particular, and the user may later forget that they enabled it. The user could be reminded that it is enabled by a Big Scary Warning when it is detected as enabled, displayed perhaps by about:tor in similar fashion to the old "Tor Browser is outdated!" bold arrow so it would be displayed again on each New Identity.

Child Tickets

Change History (2)

comment:1 Changed 2 years ago by gk

Keywords: noscript tbb-8.0-issues removed
Resolution: wontfix
Status: newclosed

No, we won't remind the user. If they think they want to mess with their Tor Browser by flipping some preference (which we don't encourage), we assume the user is knowing what they are doing.

comment:2 Changed 2 years ago by cypherpunks_reply

Will TorProject document it at least? The preference was created and released by TorProject not Mozilla.

Note: See TracTickets for help on using tickets.