commit 9b5324a8bb68e1e8e10d113e087db24aee712fe4
Author: Georg Koppen <gk(a)torproject.org>
Date: Fri May 12 12:49:08 2017 +0000
fixup! TB4: Tor Browser's Firefox preference overrides.
Mozilla still finds critical bugs in Graphite, let#s keep it disabled
for now. Fixes bug 21726.
---
browser/app/profile/000-tor-browser.js | 3 +++
1 file changed, 3 insertions(+)
diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index 9483702..…
[View More]05899cc 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -245,6 +245,9 @@ pref("mathml.disabled", false);
// Until we address at least the linkability concerns in #19417 let's disable
// asmjs.
pref("javascript.options.asmjs", false);
+// Mozilla keeps still finding critical bugs in Graphite code. Disable it for
+// now, see bug 21726.
+pref("gfx.font_rendering.graphite.enabled"; false);
// Network and performance
pref("network.http.pipelining", true);
[View Less]
commit 38e1a1966adbbcb5a15edbf300f33f5de8d7aae6
Author: Georg Koppen <gk(a)torproject.org>
Date: Fri May 12 15:11:46 2017 +0000
fixup! TB4: Tor Browser's Firefox preference overrides.
The old blocklist update system is still running. Thus, no need to
contact the new, on Kinto based system in addition. Fixes bug 22071.
---
browser/app/profile/000-tor-browser.js | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/…
[View More]profile/000-tor-browser.js
index 73cb896..9483702 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -29,6 +29,10 @@ pref("extensions.hotfix.id", ""); // Bug 16837: Disable hotfix updates as they m
pref("app.update.staging.enabled", false);
#endif
+// No need to contact the Kinto-based blocklist system in addition to the old
+// one which is still used, see bug 22071.
+pref("services.blocklist.update_enabled", false);
+
// Disable "Slow startup" warnings and associated disk history
// (bug #13346)
pref("browser.slowStartup.notificationDisabled", true);
[View Less]
commit 859140af51e3a6e9aee5b745cc2e48d061d7fb4f
Author: Georg Koppen <gk(a)torproject.org>
Date: Fri May 12 10:31:59 2017 +0000
fixup! TB4: Tor Browser's Firefox preference overrides.
No need to leak local network things to Mozilla, see bug 21790
---
browser/app/profile/000-tor-browser.js | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index 5261c28..a948c45 100644
--- a/…
[View More]browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -257,7 +257,8 @@ pref("network.http.pipelining.read-timeout", 60000);
pref("network.http.pipelining.max-optimistic-requests", 3);
pref("security.ssl.disable_session_identifiers", true);
pref("network.manage-offline-status", false);
-
+// No need to leak things to Mozilla, see bug 21790
+pref("network.captive-portal-service.enabled", false);
// As a "defense in depth" measure, configure an empty push server URL (the
// DOM Push features are disabled by default via other prefs).
pref("dom.push.serverURL", "");
[View Less]
commit c56819cf6e7f9f394d2ce8553ccd77f7a6559644
Author: Georg Koppen <gk(a)torproject.org>
Date: Fri May 12 13:28:50 2017 +0000
fixup! TB4: Tor Browser's Firefox preference overrides.
We don't need any Mozilla experiments in Tor Browser. Let's make sure
this feature is disabled. Fixes bug 22073.
---
browser/app/profile/000-tor-browser.js | 2 ++
1 file changed, 2 insertions(+)
diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.…
[View More]js
index 956eb2d..5261c28 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -80,6 +80,8 @@ pref("datareporting.healthreport.about.reportUrlUnified", "data:text/plain,");
pref("browser.selfsupport.enabled", false);
pref("browser.selfsupport.url", "");
pref("toolkit.telemetry.unified", false);
+// No experiments, use Tor Browser. See 21797.
+pref("experiments.enabled", false);
// Disable the UITour backend so there is no chance that a remote page
// can use it to confuse Tor Browser users.
pref("browser.uitour.enabled", false);
[View Less]
commit e4848686fd6078cd9cbdf3c8a9fe979f0f9a7283
Author: Georg Koppen <gk(a)torproject.org>
Date: Fri May 12 13:05:35 2017 +0000
fixup! TB4: Tor Browser's Firefox preference overrides.
Hide the TLS error reporting checkbox for now as Mozilla seems to be the
wrong party to get Tor Browser reports. One day we might want to
repurpose this checkbox to point to our own infrastructure to help
finding bad relays (see bug 19119). Fixes bug 22072.
---
browser/app/…
[View More]profile/000-tor-browser.js | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index 98cfec5..956eb2d 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -314,6 +314,11 @@ pref("security.cert_pinning.enforcement_level", 2);
// Enforce SHA1 deprecation, see: bug 18042.
pref("security.pki.sha1_enforcement_level", 2);
+// Avoid report TLS errors to Mozilla. We might want to repurpose this feature
+// one day to help detecting bad relays (which is bug 19119). For now we just
+// hide the checkbox, see bug 22072.
+pref("security.ssl.errorReporting.enabled", false);
+
// Workaround for https://bugs.torproject.org/13579. Progress on
// `about:downloads` is only shown if the following preference is set to `true`
// in case the download panel got removed from the toolbar.
[View Less]
commit b51157dc9a520a693c2fb27ab3213e3bdf1cb5f1
Author: Georg Koppen <gk(a)torproject.org>
Date: Fri May 12 14:05:05 2017 +0000
fixup! TB3: Tor Browser's official .mozconfigs.
The executables are not PIE anymore with the switch to ESR52. We need to
set --enable-pie now even though we still use the hardening wrapper.
Fixes #22238, patch by boklm.
---
.mozconfig | 1 +
.mozconfig-asan | 1 +
2 files changed, 2 insertions(+)
diff --git a/.mozconfig b/.mozconfig
…
[View More]index cde5b49..4398849 100755
--- a/.mozconfig
+++ b/.mozconfig
@@ -27,3 +27,4 @@ ac_add_options --disable-webrtc
ac_add_options --disable-eme
#ac_add_options --disable-ctypes
ac_add_options --enable-jemalloc=4
+ac_add_options --enable-pie
diff --git a/.mozconfig-asan b/.mozconfig-asan
index 096bcc6..87e5008 100644
--- a/.mozconfig-asan
+++ b/.mozconfig-asan
@@ -41,3 +41,4 @@ ac_add_options --disable-crashreporter
ac_add_options --disable-webrtc
#ac_add_options --disable-ctypes
ac_add_options --disable-eme
+ac_add_options --enable-pie
[View Less]