Does Whonix prevent Javascript from deanonymiying?

[Eldricht]

There is an interesting thread about this.

(Varying opinions of Whonix contributors)

@HulaHoop

Pretty dangerous. Since it is turing complete it enables an attacker to run arbitrary code on your machine if there is a security hole in the interpreter (which is a common occurrence).

@madaidan

JavaScript de-anonymization exploits are rare (and can’t even be done on Whonix)

@HulaHoop

While it would work on a vulnerable Tor Browser in Whonix, a further total compromise would need exploit chaining to break out of the hypervisor.

While it would work on a vulnerable Tor Browser in Whonix

This means that it could compromise the machine, but not leak your IP without exploit chaining.

Realistically:

@HulaHoop

Blocking JS handles most if history is an indicator.