This was done for usability reasons, to make it easier for novice users to run Tor Browser with scripting disabled most of the time. Selecting 'Temporarily allow scripts' will now automatically allow all scripts in a page.

In addition to the updater, this release should also re-enable the basic hardening features on Windows, including ASLR, DEP, and SSP.įurthermore, the NoScript behavior in this release has changed. Even if you are feeling adventurous, you should probably back up your Tor Browser directory before updating. By default, neither the download nor the update will happen automatically, so if you are not feeling adventurous, you need not allow it to update in this way. You will then be able to download and install it directly via the browser UI. This means that if all goes well, 4.0-alpha-2 users will notified of an available update via a notification similar to that in Firefox. In addition to including the changes in 3.6.5, this release also is the first Tor Browser release to enable the in-browser Firefox-based updater. This release also includes important security updates to Firefox. In addition, we are also releasing the second alpha in the 4.0 series, available for download on the extended downloads page. Bug 12103: Adding RELRO hardening back to browser binaries.Bug 9881: Open popups in new tabs by default.Bug 2874: Remove Components.* from content access (regression).Bug 12974: Disable NTLM and Negotiate HTTP Auth.That attempt to extract canvas images to Browser console. Bug 7265: Only prompt for first party canvas access.Bug 12684: Improve Canvas image extraction permissions prompt.Bug 9531: Workaround to avoid rare hangs during New Identity.Bug 8940: Move RecommendedTBBVersions file to.Bug 12684: New strings for canvas image extraction message.Here is the complete changelog for 3.6.5:

To avoid resolution fingerprinting, popups are also opened in new tabs by default. It also restores the missing RELRO hardening option to the Linux bundles, and disables NTLM and Negotiate HTTP auth (which can leak sensitive information about the computer). This release also features improvements to the canvas image extraction permissions prompt, and will now log offending script urls to the browser console. This release features important security updates to Firefox. The fifth pointfix release of the 3.6 series is available from the Tor Browser Project page and also from our distribution directory.

Download Tor 12.5.5