Opened 8 months ago

Last modified 4 months ago

#32789 new defect

explain or whitelist internal js libraries

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Major Keywords: javascript disable tbb-mobile
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Android 9.0
TorBrowser 9.0.1 (built with fennec 68.2)

javascript.enabled=false
Tor Security Level = Safest
No browser extensions/add-ons except DefaultTheme/HTTPS-Everywhere/NoScript.
NoScript 11.0.9 (Default/Trusted/Untrusted) have all possible boxes unchecked.
(NoScript mandates scripting for TrustedSited, thus I have none).

I dont do javascript (if needed I use another browser).
Three times now with these settings, I've had the "Unresponsive Script" prompt.
Script: moz-extension://366bda57-ddd9-...pako-1.05/pako_inflate.min.js:865

I might be the only one seeing this, as I'm on a low-resource device.
I also saw no reference to the script on about:buildconfig

Is this .js an internal file, & what's it used for?
Also, is there a way to disable it?
Thanks.

Child Tickets

Change History (2)

comment:1 Changed 7 months ago by cypherpunks

Guess I'll post my own answers:

pako_inflate.min.js belongs to the HTTPS-Everywhere extension.

I chose to disable it (versus increasing dom.max_script_run_time).

comment:2 Changed 4 months ago by traumschule

Keywords: tbb-mobile added; pako inflate removed
Priority: Very HighMedium
Summary: Javascript can NOT be disabledexplain or whitelist internal js libraries

saw the same today. i agree, the message is confusing, turns out it is actually benign since pako is a zlib library. could it be whitelisted?

Note: See TracTickets for help on using tickets.