Limited (and partially wrong) advice in documentation. Consider uBlock Origin and uMatrix extensions.
It’s strongly discouraged to install new add-ons in Tor Browser, because they can compromise both your privacy and your security. Plus, Tor Browser already comes installed with two add-ons — HTTPS Everywhere and NoScript — which give you a lot of added protection.
However this is a limited and (in the case of uBlock Origin and uMatrix) pretty irrelevant advice because:
- HTTPS-E and NoScript lack important functionality which uMatrix and uBO have. Example: blocking 3rd party requests can be critical to enhancing privacy.
OTOH
-
uMatrix and uBO can fully block JavaScript (which makes NoScript unnecessary) and uM can block mixed content.
-
HTTPS-E is pretty much a meaningless extension because it attempts to provide a workaround for websites which are not configured properly. IOW it may create a false sense of security by potentially enforcing HTTPS which may not be configured properly by the website owners. Additionally it has a privacy issue too as it needs connection to a particular host to update its lists.
Please consider working with gorhill to use uBO and uMatrix instead of HTTPS-E and NoScript.