#27589: "Javascript is disabled on non-HTTPS sites" from security slider has regressed in TBB 8 / NoScript 10 -------------------------------------------------+------------------------- Reporter: cypherpunks_reply | Owner: tbb- | team Type: enhancement | Status: | reopened Priority: Medium | Milestone: Component: Applications/Tor Browser | Version: Severity: Normal | Resolution: Keywords: noscript, tbb-8.0-issues, tbb- | Actual Points: regression | Parent ID: | Points: Reviewer: | Sponsor: -------------------------------------------------+-------------------------
Comment (by cypherpunks_reply): To allow scripts to run on an HTTP site you change the trust level for "http:" which applies to all HTTP sites. In fact it's hardly obvious to the beginner that "http:" applies to the top level site that they wish to allow, and for more experienced users that they're changing permissions for all HTPP sites. This is a regression over the old version as well as an unexpected change. The old version had a checkbox enabled feature that modified the defaults for HTTPS sites, while allowing them to each have their own entry in the temporary grant UI (the box that pops out when clicking the NoScript button on the toolbar. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27589#comment:11> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs