On 9/13/19 9:31 AM, 'awokd' via qubes-users wrote:> 'b17b7bdb' via qubes-users: >> Setting tb_security_slider_safest=true (either by selecting Yes in the Tor >> Browser Starter screen or by creating a line in >> /etc/torbrowser.d/50_user.conf) does not result in the expected behavior. > >> Actual Behavior: >> - Shield icon is fully colored >> - Security Level is set to Safest in about:preferences#privacy >> - JavaScript is ALLOWED on selected sites. >> To view these sites click on the NoScript Preferences button in the >> about:addons page and then select the Per-Site Permissions tab. >> > When I do this in a fresh DispVM with the above setting, I see no sites > listed on the Per-Site Permissons tab. Are you using a disposable VM? >
That's correct. I observed the same behavior in the Whonix DispVMs on two different machines, one of which is a fresh (and updated) install of R4.0.1. Notably, if I manually set the security level to safer in about:preferences#privacy then the per-site permissions disappear. These permissions are clearly the default permissions included with no-script add-on. For example, a variety of google, microsoft, yahoo, paypal, and netflix sites are default trusted, among others. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/rfw47hJPVkOO1jkWxDuue2dwqS3Ga3MJkphci1lXAbxY_lXjy7xxwUcizvnkjAMADJeN7MYVw2-eArkTaZgKDLZYcwRjgDTafZWpoSljk4M%3D%40protonmail.ch.
