Tor browser: set security slider to safest, javascript.enabled to false by default in a TemplateVM

This is very complicated. Lots of upstream issues stacking up making this very complicated.

Related failed feature, history:
add Tor Browser first startup popup to ask whether security slider should be set to safest

Multiple sources of errors.

A) You need to figure out how to start with a clean Tor Browser without any customized settings. Then figuring out which customization settings are required to for configuring the security slider.

Tor Browser doesn’t have an API / documented setting for that. That feature request was rejected by its upstream (original) developers.

Even if the security slider says “safest”, it might not be. The status shown and all the settings internally changed by moving the slider indeed are different things.

To figure that out, you’d need Generic Bug Reproduction but unless you’re a developer that’s impossible since upstream already rejected such a feature request.


B) Qubes persistence would also be an additional source of confusion. See:
Tor Browser Update: Technical Details


All of this is for the most part unspecific to Whonix. You could try to reproduce this in a Debian based VM.

One alternative idea will be posted soon…