Opened 13 days ago

Closed 10 days ago

#30754 closed defect (duplicate)

Unresponsive NoScript prompt in mobile

Reported by: acat Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-mobile
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by acat)

This is related to #30624. The difference is that in mobile when this happens a prompt is shown offering the user to disable the unresponsive script (which is XSS noscript protection one). If user accepts, then it's not possible to navigate more until browser is restarted.

I could reproduce it with an example given in the ticket mentioned above: https://www.sravni.ru/kredity/na-1000000-rublej/

Child Tickets

Change History (6)

comment:1 Changed 13 days ago by acat

Description: modified (diff)

comment:2 Changed 13 days ago by gaba

Component: - Select a componentApplications/Tor Browser
Owner: set to tbb-team

comment:3 Changed 12 days ago by gk

Does the latest NoScript rc solve the problem for you?

comment:4 Changed 12 days ago by acat

I tried with 10.6.3rc4 and I could not reproduce. Functionality wise not sure if it should be possible to stop scripts from NoScript webextension if they are too slow, but hopefully this will not happen again after the fixes.

Something I'm curious about: I did not see the common XSS popup on Android, is the XSS protection from NoScript doing anything there?

comment:6 in reply to:  4 Changed 10 days ago by gk

Resolution: duplicate
Status: newclosed

Replying to acat:

I tried with 10.6.3rc4 and I could not reproduce. Functionality wise not sure if it should be possible to stop scripts from NoScript webextension if they are too slow, but hopefully this will not happen again after the fixes.

Something I'm curious about: I did not see the common XSS popup on Android, is the XSS protection from NoScript doing anything there?

Good question. I'd assume, yes, it is doing something given that you hit the issue and rrc4 is fixing it. But I have not looked closer. Duping this over to #30624.

Note: See TracTickets for help on using tickets.