NoScript is blocking some videos outright starting with 10.1.9.2rc2 on security level "safer"

STR:

1. Take a clean Tor Browser
2. Set the security slider level to "safer" (click on the onion in the toolbar -> Security Settings... -> drag the slider to the medium level)
3. Load https://developer.mozilla.org/samples/video/chroma-key/index.xhtml
4. You get the message "No video with supported format and MIME type found." without the option to override this in order to watch the video.

Expected results:

The NoScript placeholder allowing to watch the video after clicking on it and confirming.

The last good version is NoScript 10.1.9.2rc1 and the first bad one 10.1.9.2rc2

This got reported on our blog: https://blog.torproject.org/comment/278685#comment-278685

added TorBrowserTeam201812R component::applications/tor browser noscript owner::ma1 priority::medium resolution::fixed severity::normal status::closed type::defect labels

Trac:
Summary: NoScript is blocking some videos outright starting with 10.1.9.2rc2 on security leverl "safer" to NoScript is blocking some videos outright starting with 10.1.9.2rc2 on security level "safer"

In case this is relevant: this happens on a 64bit Debian box.

Trac:
Description: STR:

1. Take a clean Tor Browser
2. Set the security slider level to "safer" (click on the onion in the toolbar -> Security Settings... -> drag the slider to the medium level)
3. Load https://developer.mozilla.org/samples/video/chroma-key/index.xhtml
4. You get the message "No video with supported format and MIME type found." without the option to override this in order to watch the video.

Expected results:

The NoScript placeholder allowing to watch the video after clicking on it and confirming.

The last good version is NoScript 10.1.9.2rc1 and the first bad one 10.1.9.2rc2

to

STR:

1. Take a clean Tor Browser
2. Set the security slider level to "safer" (click on the onion in the toolbar -> Security Settings... -> drag the slider to the medium level)
3. Load https://developer.mozilla.org/samples/video/chroma-key/index.xhtml
4. You get the message "No video with supported format and MIME type found." without the option to override this in order to watch the video.

Expected results:

The NoScript placeholder allowing to watch the video after clicking on it and confirming.

The last good version is NoScript 10.1.9.2rc1 and the first bad one 10.1.9.2rc2

This got reported on our blog: https://blog.torproject.org/comment/278685#comment-278685

Actually as far as I can see last "good" version is 10.1.9.1 (10.1.9.2rc1 already exhibits the bug for me). Investigating, thanks.

Trac:
Status: new to assigned
Owner: tbb-team to ma1

Fixed in 10.2.1rc1, thanks.

Trac:
Status: assigned to needs_review

Replying to ma1:

Fixed in 10.2.1rc1, thanks.

That gives the placeholder back, thanks. But once I allow the video to get it played I run into the same error as outlined in 4) in comment:description (instead of seeing a running video). So, this needs revision.

Trac:
Status: needs_review to needs_revision

The replaced video element not automatically reloading the media should also be fixed in 10.2.1rc2, thanks.

Trac:
Status: needs_revision to needs_review

Trac:
Keywords: N/A deleted, TorBrowserTeam201812R added

NoScript's icon is not updated.

Trac:
Username: omg

random trash: https://movies24.top/ray-donovan-season-6-episode-7-watch-online-free/ http://www.mobiles24.co/downloads/s/630855-106-basketroll_3d_-_new_trailer_update_2017 http://axqzx4s6s54s32yentfqojs3x5i7faxza6xo3ehd4bzzsg2ii4fv2iid.onion/watch?v=LpOPpBUQqcc

http://camendesign.com/code/video_for_everybody/test.html http://www.html5videoplayer.net/html5video/mp4-h-264-video-test/

Trac:
Username: omg

Icon doesn't report the media is blocked: http://musicvid.info/video-download/op4B9sNGi0k/DJ-Snake-Magenta-Riddim

Trac:
Username: omg

Replying to ma1:

The replaced video element not automatically reloading the media should also be fixed in 10.2.1rc2, thanks.

Looks good to me, thanks. I'll close the ticket once a new NoScript version containing this fix is out and I bumped the version we ship.

Fixed with the update to NoScript 10.2.1 on master (commit b32e182633bba7733b635bc5dd0fcbd55436f4d7) and maint-8.0 (commit b35cea6792f294d0a625fde5595f1c96a8a2a72a).

Trac:
Resolution: N/A to fixed
Status: needs_review to closed

closed

mentioned in issue #29904 (moved)

moved to tpo/applications/tor-browser#28720 (closed)

mentioned in issue tpo/applications/tor-browser#29904 (closed)