[tbb-commits] [Git][tpo/applications/tor-browser][tor-browser-115.0esrbase-13.0-1] 2 commits: fixup! Firefox preference overrides.

[ma1 (@ma1)]

ma1 pushed to branch tor-browser-115.0esrbase-13.0-1 at The Tor Project / Applications / Tor Browser


Commits:
44eff978 by cypherpunks1 at 2023-07-12T14:35:28+00:00
fixup! Firefox preference overrides.

Bug 41092: Enable URL query stripping to protect against cross-site tracking

- - - - -
9740e17d by cypherpunks1 at 2023-07-12T14:35:28+00:00
Bug 41092: Add a RemoteSettings JSON dump for query-stripping

- - - - -


3 changed files:

- browser/app/profile/001-base-profile.js
- services/settings/static-dumps/main/moz.build
- + services/settings/static-dumps/main/query-stripping.json


Changes:

=====================================
browser/app/profile/001-base-profile.js
=====================================
@@ -505,6 +505,11 @@ pref("corroborator.enabled", false);
 // stop using .textContent.
 pref("intl.multilingual.liveReload", false);
 
+// Enable URL query stripping to protect against cross-site tracking (tor-browser#41092)
+pref("privacy.query_stripping.enabled", true);
+pref("privacy.query_stripping.enabled.pbmode", true);
+pref("privacy.query_stripping.strip_on_share.enabled", true);
+
 #ifdef XP_WIN
 // prefs to disable jump-list entries in the taskbar on Windows (see bug #12885)
 // this pref changes the app's set AUMID to be dependent on the profile path, rather than


=====================================
services/settings/static-dumps/main/moz.build
=====================================
@@ -5,6 +5,7 @@
 FINAL_TARGET_FILES.defaults.settings.main += [
     "doh-config.json",
     "doh-providers.json",
+    "query-stripping.json",
 ]
 
 if CONFIG["MOZ_BUILD_APP"] == "browser":


=====================================
services/settings/static-dumps/main/query-stripping.json
=====================================
@@ -0,0 +1,44 @@
+{
+  "data": [
+    {
+      "schema": 1678379807899,
+      "allowList": [],
+      "stripList": [
+        "gclid",
+        "dclid",
+        "msclkid",
+        "_openstat",
+        "yclid",
+        "wickedid",
+        "twclid",
+        "_hsenc",
+        "__hssc",
+        "__hstc",
+        "__hsfp",
+        "hsctatracking",
+        "wbraid",
+        "gbraid",
+        "ysclid"
+      ],
+      "id": "85078bad-f31e-4d93-bb8a-81088b25d6dd",
+      "last_modified": 1678736907773
+    },
+    {
+      "schema": 1649695008608,
+      "allowList": [],
+      "stripList": [
+        "mc_eid",
+        "oly_anon_id",
+        "oly_enc_id",
+        "__s",
+        "vero_id",
+        "_hsenc",
+        "mkt_tok",
+        "fbclid"
+      ],
+      "id": "76495cfc-fac9-4079-9b5f-9ff0784484de",
+      "last_modified": 1649762862679
+    }
+  ],
+  "timestamp": 1678736907773
+}



View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/5b4fa6e2f9f50a99b9ff8827f15f9845f500cc48...9740e17dde1ca86475575dac0358ffac364a6414

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/5b4fa6e2f9f50a99b9ff8827f15f9845f500cc48...9740e17dde1ca86475575dac0358ffac364a6414
You're receiving this email because of your account on gitlab.torproject.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tbb-commits/attachments/20230712/04eac7ae/attachment-0001.htm>