>>15
The way of browsing the internet using Tor that is recommended by the Tor project is to use their browser as is, no configuration modifications.
This
recommended configuration is easily defeated by a dishonest webserver.
The Tor project even warns
against disabling javascript.
It has plenty to do with them because they were promoting insecure practices amongst users who trusted them.
That being said I think they're working on a "security slider" for the torbrowser to fix this by allowing the user to select from several different pre-configured levels of security.