Answer some FAQs about JavaScript in TBB
Robert Ransom

Robert Ransom commited on 2012-02-14 10:59:53
Zeige 1 geänderte Dateien mit 37 Einfügungen und 0 Löschungen.

... ...
@@ -61,6 +61,8 @@
61 61
     go?</a></li>
62 62
     <li><a href="#TBBOtherExtensions">Can I install other Firefox
63 63
     extensions?</a></li>
64
+    <li><a href="#TBBJavaScriptEnabled">Why is NoScript configured to allow JavaScript by default in the Tor Browser Bundle?  Isn't that unsafe?</a></li>
65
+    <li><a href="#TBBCanIBlockJS">I'm an expert!  (No, really!)  Can I configure NoScript to block JavaScript by default?</a></li>
64 66
     <li><a href="#TBBOtherBrowser">I want to use Chrome/IE/Opera/etc
65 67
     with Tor.</a></li>
66 68
     <li><a href="#TBBCloseBrowser">I want to leave Tor Browser Bundle
... ...
@@ -850,6 +852,41 @@ its name).
850 852
 
851 853
 <hr>
852 854
 
855
+<a id="TBBJavaScriptEnabled"></a>
856
+<h3><a class="anchor" href="#TBBJavaScriptEnabled">Why is NoScript configured to allow JavaScript by default in the Tor Browser Bundle?  Isn't that unsafe?</a></h3>
857
+
858
+<p>
859
+We configure NoScript to allow JavaScript by default in the Tor
860
+Browser Bundle because many websites will not work with JavaScript
861
+disabled.  Most users would give up on Tor entirely if a website
862
+they want to use requires JavaScript, because they would not know
863
+how to allow a website to use JavaScript (or that enabling
864
+JavaScript might make a website work).
865
+</p>
866
+
867
+<hr>
868
+
869
+<a id="TBBCanIBlockJS"></a>
870
+<h3><a class="anchor" href="#CanIBlockJS">I'm an expert!  (No, really!)  Can I configure NoScript to block JavaScript by default?</a></h3>
871
+
872
+<p>
873
+You can configure your copies of Tor Browser Bundle however you want
874
+to.  However, we recommend that even users who know how to use
875
+NoScript leave JavaScript enabled if possible, because a website or
876
+exit node can easily distinguish users who disable JavaScript from
877
+users who use Tor Browser bundle with its default settings (thus
878
+users who disable JavaScript are less anonymous).
879
+</p>
880
+
881
+<p>
882
+Disabling JavaScript by default, then allowing a few websites to run
883
+scripts, is especially bad for your anonymity: the set of websites
884
+which you allow to run scripts is very likely to <em>uniquely</em>
885
+identify your browser.
886
+</p>
887
+
888
+<hr>
889
+
853 890
 <a id="TBBOtherBrowser"></a>
854 891
 <h3><a class="anchor" href="#TBBOtherBrowser">I want to use
855 892
 Chrome/IE/Opera/etc with Tor.</a></h3>
856 893