Opened 2 months ago

Last modified 2 months ago

#31428 needs_information defect

NoScript doesn't work again on Windows 7

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: noscript
Cc: ma1 Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Child Tickets

Change History (5)

comment:1 Changed 2 months ago by ma1

Could you please be more descriptive?
What does not work exactly (e.g. the file is played but is not expected to / is blocked while it should play / you get no placeholder...)?
Which Tor Browser / NoScript versions are you using?
Which Security level?
Can you provide a NoScript options export file?
Thanks.

comment:2 Changed 2 months ago by boklm

Status: newneeds_information

comment:3 in reply to:  1 ; Changed 2 months ago by cypherpunks

Replying to ma1:

Could you please be more descriptive?

Sometimes.

What does not work exactly (e.g. the file is played but is not expected to / is blocked while it should play / you get no placeholder...)?

The latter.

Which Tor Browser / NoScript versions are you using?

Strange question. 8.5.4 / 11.0.2.

Which Security level?

On which level have you tested NoScript before shipping?

Can you provide a NoScript options export file?

Defaults.

Thanks.

comment:4 in reply to:  3 ; Changed 2 months ago by ma1

Replying to cypherpunks:

Replying to ma1:

What does not work exactly (e.g. the file is played but is not expected to / is blocked while it should play / you get no placeholder...)?

The latter.

You get no placeholder. And it plays, right? Because it's what it should do by default in a fresh Tor Browser 8.5.4 installation.

Which Tor Browser / NoScript versions are you using?

Strange question. 8.5.4 / 11.0.2.

Not so strange: you could be using a Tor Browser alpha and/or have installed a different NoScript version (not the one shipping with the browser). But you're standard, it seems.

Which Security level?

On which level have you tested NoScript before shipping?

My answer is irrelevant, because even if I develop NoScript, I do not ship in the Tor Browser neither decide its configuration presets. On the other hand, you actually answering my question would have been helpful, as the security level determines what you can expect to be the "normal" behavior.

However I've just tried to reproduce any anomaly on a fresh Tor Browser 8.5.4 installation w/ default NoScript 11.0.2, both on Linux (Ubuntu 18.0.4.3 LTS), macOS Mojave and Windows 10. I obtained the following expected behaviors for each of the three security levels, upon opening https://www.sample-videos.com/video123/mp4/720/big_buck_bunny_720p_10mb.mp4:

  1. STANDARD: the video plays as soon as the page loads
  2. SAFER: I get a window-sized placeholder, which if clicked opens a prompt to let me decide whether letting the video play. If I authorize it, the video plays as expected
  3. SAFEST: like n.2 (SAFER)

I cannot test on other platforms, but a Windows 7-specific bug of this kind would be extremely weird.

Can you actually observe anything different?
If you can, what is that?

Thank you again.

Last edited 2 months ago by ma1 (previous) (diff)

comment:5 in reply to:  4 Changed 2 months ago by cypherpunks

Replying to ma1:

Replying to cypherpunks:

Replying to ma1:

What does not work exactly (e.g. the file is played but is not expected to / is blocked while it should play / you get no placeholder...)?

The latter.

You get no placeholder. And it plays, right? Because it's what it should do by default in a fresh Tor Browser 8.5.4 installation.

No. Nothing after enabling the video. And it's not the default security level, because it's what you should change first to test NoScript.

Which Tor Browser / NoScript versions are you using?

Strange question. 8.5.4 / 11.0.2.

Not so strange: you could be using a Tor Browser alpha and/or have installed a different NoScript version (not the one shipping with the browser). But you're standard, it seems.

Those options are incompatible with anonymity, so they should be explicitly specified.

Which Security level?

On which level have you tested NoScript before shipping?

My answer is irrelevant, because even if I develop NoScript, I do not ship in the Tor Browser neither decide its configuration presets. On the other hand, you actually answering my question would have been helpful, as the security level determines what you can expect to be the "normal" behavior.

Updates land automatically on the stable TBB, bringing a lot of pain sometimes...

However I've just tried to reproduce any anomaly on a fresh Tor Browser 8.5.4 installation w/ default NoScript 11.0.2, both on Linux (Ubuntu 18.0.4.3 LTS), macOS Mojave and Windows 10. I obtained the following expected behaviors for each of the three security levels, upon opening https://www.sample-videos.com/video123/mp4/720/big_buck_bunny_720p_10mb.mp4:

  1. STANDARD: the video plays as soon as the page loads
  2. SAFER: I get a window-sized placeholder, which if clicked opens a prompt to let me decide whether letting the video play. If I authorize it, the video plays as expected
  3. SAFEST: like n.2 (SAFER)

I cannot test on other platforms, but a Windows 7-specific bug of this kind would be extremely weird.

Yes, Windows 7 is specified in the summary of this ticket.

Can you actually observe anything different?
If you can, what is that?

Loading failed for the <script> with source “chrome://global/content/TopLevelVideoDocument.js”.  big_buck_bunny_720p_10mb.mp4:1
Security Error: Content at https://www.sample-videos.com/video123/mp4/720/big_buck_bunny_720p_10mb.mp4 may not load or link to moz-extension://%NS_UUID%/content/content.css.

Thank you again.

Note: See TracTickets for help on using tickets.