JavaScript still runs in Safest security setting

Operating System: Debian unstable

Tor Browser version: 15.0.3

Tor Browser Security Level: Safest and Standard

Steps to get the issue: Use a web site that reports if JavaScript is enabled (like https://www.whatismybrowser.com/detect/is-javascript-enabled/) to test all 4 combinations of 1.) varying the security level between Safest and Standard, and 2.) varying the configuration variable javascript.enabled in about:config between true and false.

My test found javascript.enabled always over-rode TORBrowser's security level.

I think TORBrowser's security level should over-ride javascript.enabled.

I think it's important because 1.) JavaScript is insecure and 2.) TORBRowser's privacy and security settings say its Safest setting disables JavaScript by default.

Assignee Loading
Time tracking Loading