How does enabling javascript affect whether a Tor user's IP address is revealed if the site is not launching an exploit or attack?
For example, Instagram's privacy policy states that they collect IP addresses in their log file. So does enabling javascript automatically allows a site like Instagram to collect a Tor user's true IP address? Or does enabling Javascript mean only certain information about the browser is collected but not the true IP address?
From Instagram's privacy policy - Log file information:
Log file information is automatically reported by your browser each time you make a request to access (i.e., visit) a web page or app. It can also be provided when the content of the webpage or app is downloaded to your browser or device.
When you use our Service, our servers automatically record certain log file information, including your web request, Internet Protocol ("IP") address, browser type, referring / exit pages and URLs, number of clicks and how you interact with links on the Service, domain names, landing pages, pages viewed, and other such information. We may also collect similar information from emails sent to our Users which then help us track which emails are opened and which links are clicked by recipients. The information allows for more accurate reporting and improvement of the Service.