Ask HN: TorProject Bug 33613, JavaScript Execution with NoScript Bypass

Hi HN. I stumbled across this [1] bug report in the Tor-Browser-Bundle (TBB) while rabbit-holing a somewhat related matter. Its current status is (from the last entry in the bug report) "We believe the current mitigation in NoScript successfully avoids the bug, but I want to give enough time for more people to poke at it before thinking about relying on NoScript completely for blocking javascript execution on the Safest security level." The bug report was filed 3 months ago and updated with the above comments 8 weeks ago so this is an Ask HN - Can people take a look and see if the NoScript mitigation is effective please? I have noticed a few 'quirks' but the more people that can kick the tires on this one the better. For background here is the link to the original Tor Project blog entry announcing the bug. https://blog.torproject.org/new-release-tor-browser-907 [1] https://trac.torproject.org/projects/tor/ticket/33613