mullvad / mullvad-browser

Privacy-focused browser for Linux, macOS and Windows. Made in collaboration between @torproject and @mullvad
https://mullvad.net/browser
1.22k stars 24 forks source link

Safest Mode makes some JS not to execute, even if explicitly enabled in NoScript #27

Open otrdriver opened 1 year ago

otrdriver commented 1 year ago

I have been using Firefox (macOS) with the NoScript and uBlock Origin extensions for some time. My default is to disallow JavaScript and enable it as might be required on a site by site basis

I downloaded Mullvad Browser yesterday and have been getting my feet wet. I am using Safest Mode and enabling JavaScript, etc. as needed on a site by site basis. I most often enable JavaScript when a site requires user login.

In some instances with Safest Mode and JavaScript enabled for the site; I am unable to login. It seems that is because Mullvad Browser is hardened in Safest Mode such that "Some fonts, icons, math symbols, and images are disabled" the site's login image/link is prevented from loading.

Assuming my above assumption is correct might someone point to the line/s in about:config that I might edit to allow images/elements? to be allowed and loaded?

I am not a trained professional but I manage to get around and am comfortable in editing "about:config" given a little bit of direction. I realize of course that I am assuming a simple edit in about:config will allow the desired change in behavior but I realize that may not be true.

Example: I first stumbled upon this Mullvad Browser behavior when accessing https://mullvad.net/ to check my Mullvad Connection. If Mullvad Browser is in Safest Mode and even though NoScript is set to allow Javascript on the page the "Server Connction and Check for leaks" banner is not displayed. The banner will subsequently appear if one clicks on the "Mullvad VPN" image. It is possible to directly access the page "https://mullvad.net/en/check."

thanks

ruihildt commented 1 year ago

@otrdriver do you have an example of website you can't login to?