Opened 5 months ago

Closed 5 months ago

#30567 closed defect (worksforme)

No way to configure NoScript per tabulator in TorBrowser 8.5

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

There is no way to re-enable the NoScript menu so that JavaScript could be enabled per tabulator. At least in the Linux version.
The design document about the new menu bar mentions, that it should be possible for the user to re-enable the NoScript icon manually, but it is not.
The NoScript configuration is only accessible via the AddOns Noscipt Preferences, but

(1) all changes there effect the whole session including reloading all tabs - which is a security risk if you do not inspect all tabs before doing so
(2) in the Appearance tab there, it is only possible to enable the NoScript context menu, which seems to be blocked in Tor Browser. No option to get the menu button back.

Without safe way to enable JavaScript for a single tabulator, TorBrowser 8.5.x is not safe. At least I will fall back to 8.0.9 until this has been fixed.

Child Tickets

Change History (1)

comment:1 in reply to:  description Changed 5 months ago by gk

Resolution: worksforme
Status: newclosed

Replying to cypherpunks:

There is no way to re-enable the NoScript menu so that JavaScript could be enabled per tabulator. At least in the Linux version.

We did not change any functionality here. Thus, you should be able to just drag the NoScript icon to the toolbar again (by customizing your toolbar) and then enjoy the usual NoScript options.

The design document about the new menu bar mentions, that it should be possible for the user to re-enable the NoScript icon manually, but it is not.
The NoScript configuration is only accessible via the AddOns Noscipt Preferences, but

See, above you should be able to drag the icon back to your toolbar.

(1) all changes there effect the whole session including reloading all tabs - which is a security risk if you do not inspect all tabs before doing so
(2) in the Appearance tab there, it is only possible to enable the NoScript context menu, which seems to be blocked in Tor Browser. No option to get the menu button back.

Yes, that's a bug and something we failed to clean up, see: #29886.

For what it is worth: the right fix is doing #30570 which should give you a way to have per-site security settings exposed in the browser UI. We hope to start working on that one soon but did not get to it for 8.5.

Note: See TracTickets for help on using tickets.