[tor-bugs] #26624 [Applications/Tor Browser]: NoScript blocks on Standard-Safer security setting in 8.0a9 contrary to behavior in 8.0a8

2018-07-03 Thread Tor Bug Tracker & Wiki 
#26624: NoScript blocks  on Standard-Safer security setting in 8.0a9
contrary to behavior in 8.0a8
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+--


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26624 [Applications/Tor Browser]: NoScript blocks on Standard-Safer security setting in 8.0a9 contrary to behavior in 8.0a8

2018-07-03 Thread Tor Bug Tracker & Wiki 
#26624: NoScript blocks  on Standard-Safer security setting in 8.0a9
contrary to behavior in 8.0a8
--+--
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ff60-esr  |  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by cypherpunks):

 * keywords:   => ff60-esr


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26624 [Applications/Tor Browser]: NoScript blocks on Standard-Safer security setting in 8.0a9 contrary to behavior in 8.0a8

2018-07-05 Thread Tor Bug Tracker & Wiki 
#26624: NoScript blocks  on Standard-Safer security setting in 8.0a9
contrary to behavior in 8.0a8
---+--
 Reporter:  cypherpunks|  Owner:  tbb-team
 Type:  defect | Status:  new
 Priority:  Medium |  Milestone:
Component:  Applications/Tor Browser   |Version:
 Severity:  Normal | Resolution:
 Keywords:  ff60-esr, tbb-security-slider  |  Actual Points:
Parent ID: | Points:
 Reviewer: |Sponsor:
---+--
Changes (by gk):

 * keywords:  ff60-esr => ff60-esr, tbb-security-slider


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26624 [Applications/Tor Browser]: NoScript blocks on Standard-Safer security setting in 8.0a9 contrary to behavior in 8.0a8

2018-08-18 Thread Tor Bug Tracker & Wiki 
#26624: NoScript blocks  on Standard-Safer security setting in 8.0a9
contrary to behavior in 8.0a8
-+-
 Reporter:  cypherpunks  |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  ff60-esr, tbb-security-slider,   |  Actual Points:
  noscript   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by traumschule):

 * keywords:  ff60-esr, tbb-security-slider => ff60-esr, tbb-security-
 slider, noscript


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26624 [Applications/Tor Browser]: NoScript blocks on Standard-Safer security setting in 8.0a9 contrary to behavior in 8.0a8

2018-09-06 Thread Tor Bug Tracker & Wiki 
#26624: NoScript blocks  on Standard-Safer security setting in 8.0a9
contrary to behavior in 8.0a8
-+-
 Reporter:  cypherpunks  |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-security-slider, noscript,   |  Actual Points:
  tbb-8.0-issues, tbb-regression |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * keywords:  ff60-esr, tbb-security-slider, noscript => tbb-security-
 slider, noscript, tbb-8.0-issues, tbb-regression


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26624 [Applications/Tor Browser]: NoScript blocks on Standard-Safer security setting in 8.0a9 contrary to behavior in 8.0a8

2018-09-11 Thread Tor Bug Tracker & Wiki 
#26624: NoScript blocks  on Standard-Safer security setting in 8.0a9
contrary to behavior in 8.0a8
-+-
 Reporter:  cypherpunks  |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-security-slider, noscript,   |  Actual Points:
  tbb-8.0-issues, tbb-regression,|
  tbb-8.0.1-can, GeorgKoppen201809   |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * keywords:
 tbb-security-slider, noscript, tbb-8.0-issues, tbb-regression,
 tbb-8.0.1-can
 =>
 tbb-security-slider, noscript, tbb-8.0-issues, tbb-regression,
 tbb-8.0.1-can, GeorgKoppen201809


Comment:

 https://blog.torproject.org/comment/276736#comment-276736 is a report for
 this issue (bing translations are broken)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26624 [Applications/Tor Browser]: NoScript blocks on Standard-Safer security setting in 8.0a9 contrary to behavior in 8.0a8

2018-09-11 Thread Tor Bug Tracker & Wiki 
#26624: NoScript blocks  on Standard-Safer security setting in 8.0a9
contrary to behavior in 8.0a8
-+-
 Reporter:  cypherpunks  |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  needs_review
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-security-slider, noscript,   |  Actual Points:
  tbb-8.0-issues, tbb-regression,|
  tbb-8.0.1-can, GeorgKoppen201809,  |
  TorBrowserTeam201809R  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * cc: arthuredelstein (added)
 * status:  new => needs_review
 * keywords:
 tbb-security-slider, noscript, tbb-8.0-issues, tbb-regression,
 tbb-8.0.1-can, GeorgKoppen201809
 =>
 tbb-security-slider, noscript, tbb-8.0-issues, tbb-regression,
 tbb-8.0.1-can, GeorgKoppen201809, TorBrowserTeam201809R


Comment:

 See `bug_26624`
 
(https://gitweb.torproject.org/user/gk/torbutton.git/commit/?h=bug_26624&id=8418acef23573dcd63a4bc2e04fac22bda7a25ba)
 in my public Torbutton repo for a fix for review.

 I think it is okay to allow OBJECT for http:// on the safer level as well
 as there is a special permission `fetch` which is used for
 `object_subrequest` and which is not enabled for http:// on the safer
 level. Thus, it should prevent loading scripts from http:// sources behind
 OBJECT elements.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26624 [Applications/Tor Browser]: NoScript blocks on Standard-Safer security setting in 8.0a9 contrary to behavior in 8.0a8

2018-09-17 Thread Tor Bug Tracker & Wiki 
#26624: NoScript blocks  on Standard-Safer security setting in 8.0a9
contrary to behavior in 8.0a8
-+-
 Reporter:  cypherpunks  |  Owner:  tbb-
 |  team
 Type:  defect   | Status:
 |  merge_ready
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:
 Keywords:  tbb-security-slider, noscript,   |  Actual Points:
  tbb-8.0-issues, tbb-regression,|
  tbb-8.0.1-can, GeorgKoppen201809,  |
  TorBrowserTeam201809R  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by arthuredelstein):

 * status:  needs_review => merge_ready


Comment:

 Looks good to me.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #26624 [Applications/Tor Browser]: NoScript blocks on Standard-Safer security setting in 8.0a9 contrary to behavior in 8.0a8

2018-09-18 Thread Tor Bug Tracker & Wiki 
#26624: NoScript blocks  on Standard-Safer security setting in 8.0a9
contrary to behavior in 8.0a8
-+-
 Reporter:  cypherpunks  |  Owner:  tbb-
 |  team
 Type:  defect   | Status:  closed
 Priority:  Medium   |  Milestone:
Component:  Applications/Tor Browser |Version:
 Severity:  Normal   | Resolution:  fixed
 Keywords:  tbb-security-slider, noscript,   |  Actual Points:
  tbb-8.0-issues, tbb-regression,|
  tbb-8.0.1-can, GeorgKoppen201809,  |
  TorBrowserTeam201809R  |
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+-
Changes (by gk):

 * status:  merge_ready => closed
 * resolution:   => fixed


Comment:

 Thanks. Cherry-picked to `master` (commit
 b9626557ddf9a3faf5fb88f99f479145d7789a7f).

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs