The Tor team reports a Tor browser error that runs JavaScript in places that it should not – Mash Viral

Image: Project Tor

The Tor project yesterday warned users about a major browser bug that could execute JavaScript on sites that were specifically blocked by users from running JavaScript.

Tor developers said they are working on a solution; however, they did not provide a timeline for a patch.

The ability to block JavaScript execution is a crucial security feature of the Tor Bundle Bundle (TBB), a browser with improved privacy protection features that also masks actual IP addresses (locations) to keep users anonymous. line.

Because of these features, the browser is often used by journalists, political activities and dissidents in oppressive countries, as a way to protect firewalls and online censorship.

In the past, there have been efforts that used JavaScript to mask the actual IP address of a Tor browser user. Some have been used to target and unmask criminal activities (1, 2), while others have been used in mysterious circumstances (1, 2).

Yesterday, Tors team said they found an error in TBBs security options. When the browser was configured to use the highest level of security (called safest), it still allowed JavaScript to run, even if it should have been blocked.

Image: ZDNet

We are aware of a bug that allows JavaScript to be run at the most secure level (in some situations), said Tors team.

We are working to fix this. If you need JavaScript to be blocked, you may need to disable it completely.

To completely disable JavaScript in the Tor browser, the Tor team provided the following instructions:

Link:
The Tor team reports a Tor browser error that runs JavaScript in places that it should not - Mash Viral