JavaScript still runs in Safest security setting
Operating System: Debian unstable
Tor Browser version: 15.0.3
Tor Browser Security Level: Safest and Standard
Steps to get the issue: Use a web site that reports if JavaScript is enabled (like https://www.whatismybrowser.com/detect/is-javascript-enabled/) to test all 4 combinations of 1.) varying the security level between Safest and Standard, and 2.) varying the configuration variable javascript.enabled in about:config between true and false.
My test found javascript.enabled always over-rode TORBrowser's security level.
I think TORBrowser's security level should over-ride javascript.enabled.
I think it's important because 1.) JavaScript is insecure and 2.) TORBRowser's privacy and security settings say its Safest setting disables JavaScript by default.