Skip to content

Disable NoScript's XSS protection to avoid the whole computer freezing

We've had it numerous times now (see e.g. legacy/trac#25315 (moved), legacy/trac#24125 (moved), legacy/trac#22362 (moved)) that Tor Browser freezes the whole computer due to NoScript's XSS protection. This is currently visible on https://zeit.de again cause by an embedded https://facebook.com/tr.

I'd finally like to stop playing this whack-a-mole game and come to a better solution. Meanwhile, we can stop enabling XSS protection given that those experiences seriously risk users abandoning Tor Browser, claiming it is broken, and moving on to a much worse solution for their privacy requirements.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information