diff options
Diffstat (limited to 'share/templates/receive_noscript_xss.html')
| -rw-r--r-- | share/templates/receive_noscript_xss.html | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/share/templates/receive_noscript_xss.html b/share/templates/receive_noscript_xss.html new file mode 100644 index 00000000..bf846b03 --- /dev/null +++ b/share/templates/receive_noscript_xss.html @@ -0,0 +1,35 @@ +<!DOCTYPE html> +<html> + <head> + <title>OnionShare</title> + <link href="/static/img/favicon.ico" rel="icon" type="image/x-icon" /> + <link href="/static/css/style.css" rel="stylesheet" type="text/css" /> + </head> + <body> + + <header class="clearfix"> + <img class="logo" src="/static/img/logo.png" title="OnionShare"> + <h1>OnionShare</h1> + </header> + + <div class="disable-noscript-xss-wrapper"> + <h3>Disable your Tor Browser's NoScript XSS setting</h3> + + <p>If your security slider is set to Safest, JavaScript is disabled so XSS vulnerabilities won't affect you, + which makes it safe to disable NoScript's XSS protections.</p> + + <p>Here is how to disable this setting:</p> + + <ol> + <li>Click the menu icon in the top-right of Tor Browser and open "Add-ons"</li> + <li>Next to the NoScript add-on, click the "Preferences" button</li> + <li>Switch to the "Advanced" tab</li> + <li>Uncheck "Sanitize cross-site suspicious requests"</li> + </ol> + + <p>If you'd like to learn technical details about this issue, check + <a rel="noreferrer" href="https://github.com/micahflee/onionshare/issues/899">this issue</a> + on GitHub.</p> + </div> + </body> +</html> |