4 ms·

It's a JavaScript engine bug and JS is disabled by default. Still important, but I question whether anyone who enables JS in Tor is worth compromising.

• retox 4y ago
  >JS is disabled by default This isn't true any more.
  • deleted 4y ago
    [deleted]
  • beebeepka 4y ago
    But it still comes with No script built in, so concerned user is left with a choice
  • aqme28 4y ago
    I wonder why not. It seems like that's the cause of most of these.
    • staticassertion 4y ago
      Because the web isn't practically browsable without js, so rather than users fiddling with noscript and ending up disabling a ton of security features, instead they just turned js on.