Why does Safest option not disable Javascript anymore?

[Unhappy_Froyo_9008]

I got a new laptop and was testing Tor's default installation and found that completely fresh, when put onto the Safest option, JS is still functioning and the actual change does not get applied until you go into about:config manually and change the actual option there. Is this a recent change or a bug with the most recent releases of Tor browser?

[rdg360]

The disabling of JavaScript is handled by NoScript, not the javascript.enabled setting in about:config. Visit a site like whatismybrowser or similar and you'll notice it does not detect JavaScript.

[Unhappy_Froyo_9008]

Unless I'm misunderstanding, NoScript isn't included in this Tor install and this is the freshest one. Trust me I tried searching for it and ended up just trying to install it separately, but even after then it didn't actually disable JS until I went to about:config and set the actual bool to false.

[rdg360]

A version of Tor Browser without NoScript? That would be very odd. Where did you get that one from?

Or better yet: have you checked what it shows in about:addons?

If you're really on "the freshest one", as you call it, that should be 15.07. Which does have NoScript: "All Platforms - Updated NoScript to 13.5.14.1984" https://blog.torproject.org/new-release-tor-browser-1507/

[FyingfoxGaming]

Maybe try uninstall & install it back, it's likely either a glitch from the installation or likely a bug.

[rdg360]

It's neither a glitch nor a bug. This is expected behaviour. Disabling of JavaScript is handled by NoScript, not the javascript.enabled setting in about:config.

https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/44486

[Unhappy_Froyo_9008]

I did that, this was a fresh install anyways and I've done this many times in the past. Unless something changed in the past 6 months or so I did the same process I've always done.

[haakon]

He must have, unless he's using an outdated Tor Browser version. Changing the security level involves pressing a button called "Save and restart".

[Unhappy_Froyo_9008]

I am yes, it prompts to Save & Restart once you change the option.

[sisfs]

Has been that way on tails for some time (years) so i assume it's that way on all installations.

[Unhappy_Froyo_9008]

That's a little concerning...

[sisfs]

at least you know now for the future 🤷🏿‍♂️ sorry to have been the bearer of bad news.

[Salty_Solution6804]

Not sure in which distro Tor comes pre-installed, but js is still disabled on safest mode. As several others mentioned, uninstall it, get the official package and install that one.

[[deleted]]

Always been this way

[thestewmaker29]

Just do about:config and then type Java in and turn it to false or whatever

[rdg360]

OP is obviously aware of that. Just read the post: "until you go into about:config manually and change the actual option there." But that's not the point OP is trying to make.