i wrote: > However, javascript is not required for either Torbutton or > Tor Browser Bundle functionality, so you can turn javascript off > for additional security.
Ack! For some reason i thought Torbutton was implemented purely in XUL but a lot of it is actually implemented in javascript. Sorry for misleading - i should have read the pages i pointed to :( On the other hand, so far i have not found a test with javascript off that leaks info or uncloaks Torbutton...
