Tor Browser - Toggling svg.disabled deletes all Per-site Permissions

Ask for help about NoScript, no registration needed to post
ppxxbu

Tor Browser - Toggling svg.disabled deletes all Per-site Permissions

Post by ppxxbu »

Yes I'm aware I shouldn't toggle `svg.disabled` to `True` on Tor Browser due to security reasons, but sometimes I really need to look at a math equation properly on wikipedia :)

Steps to reproduce -

0. NS Version 11.2.12rc3 or the stable version that ships with Tor Browser.

1. Get Tor Browser - https://dist.torproject.org/torbrowser/11.0.1/

2. Tick "Override Tor Browser's Security Level preset" option in NoScript.

3. Visit any website and set a permanent permission so it shows up on the "Per-site Permissions" tab on NoScript Options.

4. Go to about:config and Toggle `svg.disabled` to True and back to False.

5. Check the "Per-site Permissions" tab and all per-site permissions that you may have set, have vanished.
Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0
ppxxbu

Re: Tor Browser - Toggling svg.disabled deletes all Per-site Permissions

Post by ppxxbu »

EDIT: I know I shouldn't toggle svg.disabled to **False** on Tor Browser.
Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Re: Tor Browser - Toggling svg.disabled deletes all Per-site Permissions

Post by barbaz »

I don't use Tor Browser, but this sounds outside the scope of NoScript and the following quote suggests it maybe intentional behavior -
Asphyx wrote: Mon Oct 25, 2021 9:27 am unfortunally, Torbrowser bundles this setting with NoScript-settings. When switch off SVG, all individual NoScript-settings are removed. :-(
Have you asked about this in a Tor Browser support venue (or their bug tracker if you think it's a bug)?
*Always* check the changelogs BEFORE updating that important software!
-
ppxxbu

Re: Tor Browser - Toggling svg.disabled deletes all Per-site Permissions

Post by ppxxbu »

You're right, the issue doesn't exist in regular Firefox. I might report the issue to the Tor Browser folks.

However they seem to require me to give them my email address https://gitlab.onionize.space/ to be able to talk on their gitlab https://gitlab.torproject.org/?

That seems a little tedious, but okay.

If somebody reading this wants to do the reporting instead, @Asphyx maybe, assuming I haven't already done so, feel free to go ahead.

Regardless, thank you @barbaz :)
Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0
Asphyx
Junior Member
Posts: 23
Joined: Mon Oct 04, 2021 8:40 am

Re: Tor Browser - Toggling svg.disabled deletes all Per-site Permissions

Post by Asphyx »

It's already an issue: https://gitlab.torproject.org/tpo/appli ... sues/40666

Because of bugs I still use TB 10. There this setting helps:
user_pref("extensions.torbutton.noscript_persist", true);
--
Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
Post Reply