Viewing a single comment thread. View all comments

cenopusi OP wrote

Wow, I forgot that too. Why doesn't the Tor Browser set that by default?

2

celebratedrecluse wrote

it is usually managed by noscript but there have been bugs/exploits in noscript which have allowed you to get around that as an attacker. So if you are not needing js, i would say to use about:config to turn it off unless needed

1