November 2019 - tbb-commits - lists.torproject.org

[torbutton/maint-9.0] Bug 27268: Preference clean up
by gk＠torproject.org 02 Nov '19

02 Nov '19

commit 09e3050265303eff776ba540861c533d5cab2254 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Oct 11 10:23:22 2019 +0000 Bug 27268: Preference clean up --- chrome/content/torbutton.js | 2 -- 1 file changed, 2 deletions(-) diff --git a/chrome/content/torbutton.js b/chrome/content/torbutton.js index 3ecc2b24..9846b864 100644 --- a/chrome/content/torbutton.js +++ b/chrome/content/torbutton.js @@ -1464,9 +1464,7 @@ function torbutton_update_fingerprinting_prefs() { var letterboxing = m_tb_prefs.getBoolPref("privacy.resistFingerprinting.letterboxing", false); m_tb_prefs.setBoolPref("webgl.disable-extensions", mode); - m_tb_prefs.setBoolPref("dom.network.enabled", !mode); m_tb_prefs.setBoolPref("dom.enable_performance", !mode); - m_tb_prefs.setBoolPref("plugin.expose_full_path", !mode); m_tb_prefs.setBoolPref("browser.zoom.siteSpecific", !mode); m_tb_prefs.setBoolPref("extensions.torbutton.resize_new_windows", mode && !letterboxing);

1 0

[torbutton/master] Bug 27268: Preference clean up
by gk＠torproject.org 02 Nov '19

02 Nov '19

commit 73a43f2f4d846b2870757d7aa18a1b33643ba2b5 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Oct 11 10:23:22 2019 +0000 Bug 27268: Preference clean up --- chrome/content/torbutton.js | 2 -- 1 file changed, 2 deletions(-) diff --git a/chrome/content/torbutton.js b/chrome/content/torbutton.js index 3ecc2b24..9846b864 100644 --- a/chrome/content/torbutton.js +++ b/chrome/content/torbutton.js @@ -1464,9 +1464,7 @@ function torbutton_update_fingerprinting_prefs() { var letterboxing = m_tb_prefs.getBoolPref("privacy.resistFingerprinting.letterboxing", false); m_tb_prefs.setBoolPref("webgl.disable-extensions", mode); - m_tb_prefs.setBoolPref("dom.network.enabled", !mode); m_tb_prefs.setBoolPref("dom.enable_performance", !mode); - m_tb_prefs.setBoolPref("plugin.expose_full_path", !mode); m_tb_prefs.setBoolPref("browser.zoom.siteSpecific", !mode); m_tb_prefs.setBoolPref("extensions.torbutton.resize_new_windows", mode && !letterboxing);

1 0

[tor-browser/tor-browser-68.2.0esr-9.0-1] fixup! Regression tests for TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 02 Nov '19

02 Nov '19

commit 479630e18d3c184846f94e2e1e53f6d4df1c5cbc Author: Georg Koppen <gk(a)torproject.org> Date: Fri Oct 11 17:55:29 2019 +0000 fixup! Regression tests for TB4: Tor Browser's Firefox preference overrides. --- tbb-tests/browser_tor_TB4.js | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/tbb-tests/browser_tor_TB4.js b/tbb-tests/browser_tor_TB4.js index 3ce02a5301c4..c1f748a3338f 100644 --- a/tbb-tests/browser_tor_TB4.js +++ b/tbb-tests/browser_tor_TB4.js @@ -27,7 +27,6 @@ let expectedPrefs = [ ["dom.indexedDB.enabled", false], ["permissions.memory_only", true], ["network.cookie.lifetimePolicy", 2], - ["browser.download.manager.retention", 1], ["security.nocertdb", true], // Disk activity: TBB Directory Isolation @@ -47,11 +46,8 @@ let expectedPrefs = [ ["geo.enabled", false], ["geo.wifi.uri", ""], ["browser.search.suggest.enabled", false], - ["browser.safebrowsing.enabled", false], ["browser.safebrowsing.malware.enabled", false], - ["browser.download.manager.scanWhenDone", false], // prevents AV remote reporting of downloads ["extensions.ui.lastCategory", "addons://list/extension"], - ["datareporting.healthreport.service.enabled", false], // Yes, all three of these must be set ["datareporting.healthreport.uploadEnabled", false], ["datareporting.policy.dataSubmissionEnabled", false], ["security.mixed_content.block_active_content", false], // Disable until https://bugzilla.mozilla.org/show_bug.cgi?id=878890 is patched @@ -65,7 +61,6 @@ let expectedPrefs = [ ["webgl.min_capability_mode", true], ["webgl.disable-extensions", true], ["dom.battery.enabled", false], // fingerprinting due to differing OS implementations - ["dom.network.enabled",false], // fingerprinting due to differing OS implementations ["browser.display.max_font_attempts",10], ["browser.display.max_font_count",10], ["gfx.downloadable_fonts.fallback_delay", -1], @@ -81,10 +76,6 @@ let expectedPrefs = [ ["general.useragent.vendorSub", ""], ["dom.enable_performance", false], ["browser.zoom.siteSpecific", false], - ["intl.charset.default", "windows-1252"], - //["intl.accept_languages", "en-us, en"], // Set by Torbutton - //["intl.accept_charsets", "iso-8859-1,*,utf-8"], // Set by Torbutton - //["intl.charsetmenu.browser.cache", "UTF-8"], // Set by Torbutton // Third party stuff ["network.cookie.cookieBehavior", 1], @@ -155,10 +146,6 @@ let expectedPrefs = [ ["javascript.options.asmjs", false], ["javascript.options.typeinference", false], - // Audio_data is deprecated in future releases, but still present - // in FF24. This is a dangerous combination (spotted by iSec) - ["media.audio_data.enabled", false], - // Enable TLS 1.1 and 1.2: // https://trac.torproject.org/projects/tor/ticket/11253 ["security.tls.version.max", 3], @@ -168,9 +155,6 @@ let expectedPrefs = [ ]; - - - let getPref = function (prefName) { let type = gPrefService.getPrefType(prefName); if (type === gPrefService.PREF_INT) return gPrefService.getIntPref(prefName);

1 0

[tor-browser/tor-browser-68.2.0esr-9.5-1] fixup! Regression tests for TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 02 Nov '19

02 Nov '19

commit 1762a2a4ba9eb9eca76f9d522f456dd262a99f84 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Oct 11 17:55:29 2019 +0000 fixup! Regression tests for TB4: Tor Browser's Firefox preference overrides. --- tbb-tests/browser_tor_TB4.js | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/tbb-tests/browser_tor_TB4.js b/tbb-tests/browser_tor_TB4.js index 3ce02a5301c4..c1f748a3338f 100644 --- a/tbb-tests/browser_tor_TB4.js +++ b/tbb-tests/browser_tor_TB4.js @@ -27,7 +27,6 @@ let expectedPrefs = [ ["dom.indexedDB.enabled", false], ["permissions.memory_only", true], ["network.cookie.lifetimePolicy", 2], - ["browser.download.manager.retention", 1], ["security.nocertdb", true], // Disk activity: TBB Directory Isolation @@ -47,11 +46,8 @@ let expectedPrefs = [ ["geo.enabled", false], ["geo.wifi.uri", ""], ["browser.search.suggest.enabled", false], - ["browser.safebrowsing.enabled", false], ["browser.safebrowsing.malware.enabled", false], - ["browser.download.manager.scanWhenDone", false], // prevents AV remote reporting of downloads ["extensions.ui.lastCategory", "addons://list/extension"], - ["datareporting.healthreport.service.enabled", false], // Yes, all three of these must be set ["datareporting.healthreport.uploadEnabled", false], ["datareporting.policy.dataSubmissionEnabled", false], ["security.mixed_content.block_active_content", false], // Disable until https://bugzilla.mozilla.org/show_bug.cgi?id=878890 is patched @@ -65,7 +61,6 @@ let expectedPrefs = [ ["webgl.min_capability_mode", true], ["webgl.disable-extensions", true], ["dom.battery.enabled", false], // fingerprinting due to differing OS implementations - ["dom.network.enabled",false], // fingerprinting due to differing OS implementations ["browser.display.max_font_attempts",10], ["browser.display.max_font_count",10], ["gfx.downloadable_fonts.fallback_delay", -1], @@ -81,10 +76,6 @@ let expectedPrefs = [ ["general.useragent.vendorSub", ""], ["dom.enable_performance", false], ["browser.zoom.siteSpecific", false], - ["intl.charset.default", "windows-1252"], - //["intl.accept_languages", "en-us, en"], // Set by Torbutton - //["intl.accept_charsets", "iso-8859-1,*,utf-8"], // Set by Torbutton - //["intl.charsetmenu.browser.cache", "UTF-8"], // Set by Torbutton // Third party stuff ["network.cookie.cookieBehavior", 1], @@ -155,10 +146,6 @@ let expectedPrefs = [ ["javascript.options.asmjs", false], ["javascript.options.typeinference", false], - // Audio_data is deprecated in future releases, but still present - // in FF24. This is a dangerous combination (spotted by iSec) - ["media.audio_data.enabled", false], - // Enable TLS 1.1 and 1.2: // https://trac.torproject.org/projects/tor/ticket/11253 ["security.tls.version.max", 3], @@ -168,9 +155,6 @@ let expectedPrefs = [ ]; - - - let getPref = function (prefName) { let type = gPrefService.getPrefType(prefName); if (type === gPrefService.PREF_INT) return gPrefService.getIntPref(prefName);

1 0

[tor-browser/tor-browser-68.2.0esr-9.5-1] Bug 1534339 - make OriginAttributes deserializable; r=baku
by gk＠torproject.org 02 Nov '19

02 Nov '19

commit 6dfcb949b8375614b588a191035c5cc36fa3e943 Author: Liang-Heng Chen <xeonchen(a)gmail.com> Date: Wed Oct 23 14:10:19 2019 +0000 Bug 1534339 - make OriginAttributes deserializable; r=baku `CreateSuffix` is irreversible by `PopulateFromSuffix` because it uses a multi-to-one mapping. Since only ':' will happen in a IPv6 format, we can make it a 1-to-1 mapping so that the `firstPartyDomain` is consistent after `CreateSuffix` and `PopulateFromSuffix`. Differential Revision: https://phabricator.services.mozilla.com/D47910 --HG-- extra : moz-landing-system : lando --- caps/OriginAttributes.cpp | 10 +++++++--- caps/tests/gtest/TestOriginAttributes.cpp | 2 ++ 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/caps/OriginAttributes.cpp b/caps/OriginAttributes.cpp index 0737bce36321..e987f0e4fc2e 100644 --- a/caps/OriginAttributes.cpp +++ b/caps/OriginAttributes.cpp @@ -13,6 +13,9 @@ #include "nsIURI.h" #include "nsURLHelper.h" +static const char kSourceChar = ':'; +static const char kSanitizedChar = '+'; + namespace mozilla { using dom::URLParams; @@ -158,8 +161,7 @@ void OriginAttributes::CreateSuffix(nsACString& aStr) const { if (!mFirstPartyDomain.IsEmpty()) { nsAutoString sanitizedFirstPartyDomain(mFirstPartyDomain); - sanitizedFirstPartyDomain.ReplaceChar( - dom::quota::QuotaManager::kReplaceChars, '+'); + sanitizedFirstPartyDomain.ReplaceChar(kSourceChar, kSanitizedChar); params.Set(NS_LITERAL_STRING("firstPartyDomain"), sanitizedFirstPartyDomain); @@ -246,7 +248,9 @@ class MOZ_STACK_CLASS PopulateFromSuffixIterator final if (aName.EqualsLiteral("firstPartyDomain")) { MOZ_RELEASE_ASSERT(mOriginAttributes->mFirstPartyDomain.IsEmpty()); - mOriginAttributes->mFirstPartyDomain.Assign(aValue); + nsAutoString firstPartyDomain(aValue); + firstPartyDomain.ReplaceChar(kSanitizedChar, kSourceChar); + mOriginAttributes->mFirstPartyDomain.Assign(firstPartyDomain); return true; } diff --git a/caps/tests/gtest/TestOriginAttributes.cpp b/caps/tests/gtest/TestOriginAttributes.cpp index 582de8c1c9d3..e86c5248689d 100644 --- a/caps/tests/gtest/TestOriginAttributes.cpp +++ b/caps/tests/gtest/TestOriginAttributes.cpp @@ -26,6 +26,8 @@ static void TestFPD(const nsAString& spec, const nsAString& fpd) { ASSERT_EQ(NS_NewURI(getter_AddRefs(url), spec), NS_OK); attrs.SetFirstPartyDomain(true, url); EXPECT_TRUE(attrs.mFirstPartyDomain.Equals(fpd)); + + TestSuffix(attrs); } TEST(OriginAttributes, Suffix_default)

1 0

[tor-browser/tor-browser-68.2.0esr-9.5-1] Bug 1546832 - Adjust letterboxing to take the FindBar and Devtools into account r=johannh
by gk＠torproject.org 02 Nov '19

02 Nov '19

commit 8bd51d4e30d4ed1201fab6112ac23f6ddc5858c1 Author: Tom Ritter <tom(a)mozilla.com> Date: Fri May 24 07:53:11 2019 +0000 Bug 1546832 - Adjust letterboxing to take the FindBar and Devtools into account r=johannh Differential Revision: https://phabricator.services.mozilla.com/D31639 --HG-- extra : moz-landing-system : lando --- browser/actors/RFPHelperChild.jsm | 5 +++++ browser/components/BrowserGlue.jsm | 4 ++++ toolkit/components/resistfingerprinting/RFPHelper.jsm | 11 ++++++++++- 3 files changed, 19 insertions(+), 1 deletion(-) diff --git a/browser/actors/RFPHelperChild.jsm b/browser/actors/RFPHelperChild.jsm index 0658d34ee910..90b675efbc93 100644 --- a/browser/actors/RFPHelperChild.jsm +++ b/browser/actors/RFPHelperChild.jsm @@ -27,4 +27,9 @@ class RFPHelperChild extends ActorChild { this.mm.sendAsyncMessage("Letterboxing:ContentSizeUpdated"); } } + receiveMessage(aMessage) { + if (isLetterboxingEnabled) { + this.mm.sendAsyncMessage("Letterboxing:ContentSizeUpdated"); + } + } } diff --git a/browser/components/BrowserGlue.jsm b/browser/components/BrowserGlue.jsm index d22f9512184d..4e851289fbe9 100644 --- a/browser/components/BrowserGlue.jsm +++ b/browser/components/BrowserGlue.jsm @@ -268,6 +268,10 @@ let LEGACY_ACTORS = { events: { resize: {}, }, + messages: [ + "Finder:FindbarOpen", + "Finder:FindbarClose", + ], }, }, diff --git a/toolkit/components/resistfingerprinting/RFPHelper.jsm b/toolkit/components/resistfingerprinting/RFPHelper.jsm index 772b0259432e..a5d5bed86f98 100644 --- a/toolkit/components/resistfingerprinting/RFPHelper.jsm +++ b/toolkit/components/resistfingerprinting/RFPHelper.jsm @@ -406,11 +406,20 @@ class _RFPHelper { let containerWidth = browserContainer.clientWidth; let containerHeight = browserContainer.clientHeight; + // If the findbar or devtools are out, we need to subtract their height (plus 1 + // for the separator) from the container height, because we need to adjust our + // letterboxing to acount for it; however it is not included in that dimension + // (but rather is subtracted from the content height.) + let findBar = browserContainer.getElementsByClassName("findbar-container"); + let findBarOffset = findBar.length ? findBar[0].clientHeight + 1 : 0; + let devtools = browserContainer.getElementsByClassName("devtools-toolbox-bottom-iframe"); + let devtoolsOffset = devtools.length ? devtools[0].clientHeight + 1 : 0; + return { contentWidth, contentHeight, containerWidth, - containerHeight, + containerHeight: containerHeight - findBarOffset - devtoolsOffset, }; });

1 0

[tor-browser/tor-browser-68.2.0esr-9.5-1] Bug 1556017 - Fixing the off-by-one-pixel issue of find bar and devtool iframe for Letterboxing. r=johannh
by gk＠torproject.org 02 Nov '19

02 Nov '19

commit e10f77aa1b2f91f861841118fa634bbf94429f31 Author: Tim Huang <tihuang(a)mozilla.com> Date: Tue Jun 11 08:53:44 2019 +0000 Bug 1556017 - Fixing the off-by-one-pixel issue of find bar and devtool iframe for Letterboxing. r=johannh This patch fixes the off-by-one-pixel issue of Letterboxing. For FindBar, it will be created when the user requests it and will be hidden if the user close it after that. The problem of the original approach is that it only observes the existance of the FindBar element but not the fact that whether or not it is visible. So, it will miscalculate the offset of FindBar after it has been created and closed. For devtools, the original approach adds one pixel offset for the separator. However, this one pixel offset is not required since there is no extra separator outside the devtools iframe. So, we don't need that and this patch removes this one pixel for the devtools. Differential Revision: https://phabricator.services.mozilla.com/D34156 --HG-- extra : moz-landing-system : lando --- toolkit/components/resistfingerprinting/RFPHelper.jsm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/toolkit/components/resistfingerprinting/RFPHelper.jsm b/toolkit/components/resistfingerprinting/RFPHelper.jsm index a5d5bed86f98..f73ccf1797b0 100644 --- a/toolkit/components/resistfingerprinting/RFPHelper.jsm +++ b/toolkit/components/resistfingerprinting/RFPHelper.jsm @@ -408,12 +408,12 @@ class _RFPHelper { // If the findbar or devtools are out, we need to subtract their height (plus 1 // for the separator) from the container height, because we need to adjust our - // letterboxing to acount for it; however it is not included in that dimension + // letterboxing to account for it; however it is not included in that dimension // (but rather is subtracted from the content height.) - let findBar = browserContainer.getElementsByClassName("findbar-container"); - let findBarOffset = findBar.length ? findBar[0].clientHeight + 1 : 0; + let findBar = win.gFindBarInitialized ? win.gFindBar : undefined; + let findBarOffset = (findBar && !findBar.hidden) ? findBar.clientHeight + 1 : 0; let devtools = browserContainer.getElementsByClassName("devtools-toolbox-bottom-iframe"); - let devtoolsOffset = devtools.length ? devtools[0].clientHeight + 1 : 0; + let devtoolsOffset = devtools.length ? devtools[0].clientHeight : 0; return { contentWidth,

1 0

[tor-browser-build/master] Bug 32342 - Store omni.ja after recreating apk
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit 3c7fb0e610a4f85d7b157221ac9049d99d958c24 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Fri Nov 1 13:38:19 2019 +0000 Bug 32342 - Store omni.ja after recreating apk --- projects/tor-browser/build.android | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/projects/tor-browser/build.android b/projects/tor-browser/build.android index 2c1c3b2..5148c36 100644 --- a/projects/tor-browser/build.android +++ b/projects/tor-browser/build.android @@ -54,5 +54,9 @@ cd tmp zip_args => '$apk', }) %] +# omni.ja was likely deflated in the above zipping operation. It must be stored, instead. +zip $apk -d assets/omni.ja +zip -Z store $apk assets/omni.ja + # Sign a QA build. This apk is not a debug version and doesn't contain a debug flag in the manifest java -jar /usr/share/apksigner/apksigner.jar sign --verbose --min-sdk-version [% c("var/android_min_api") %] --ks $rootdir/android-qa.keystore --out $qa_apk --in $apk --ks-key-alias androidqakey --key-pass pass:android --ks-pass pass:android

1 0

[tor-browser/tor-browser-68.2.0esr-9.5-1] fixup! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit b9e148eb996515e18ce47cd42f18b6dd967c1cbd Author: Georg Koppen <gk(a)torproject.org> Date: Fri Oct 11 17:51:32 2019 +0000 fixup! TB4: Tor Browser's Firefox preference overrides. --- browser/app/profile/000-tor-browser.js | 36 +--------------------------------- 1 file changed, 1 insertion(+), 35 deletions(-) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 23a64c0cf2d3..9f2537df5557 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -21,7 +21,6 @@ pref("startup.homepage_override_url", "https://blog.torproject.org/category/tags pref("app.update.promptWaitTime", 3600); pref("app.update.badge", true); pref("app.update.notifyDuringDownload", true); -pref("extensions.hotfix.id", ""); // Bug 16837: Disable hotfix updates as they may cause compat issues #ifndef XP_MACOSX // Disable staged updates on platforms other than macOS. @@ -50,7 +49,6 @@ pref("browser.cache.disk.enable", false); pref("browser.cache.offline.enable", false); pref("permissions.memory_only", true); pref("network.cookie.lifetimePolicy", 2); -pref("browser.download.manager.retention", 1); pref("security.nocertdb", true); // Disk activity: TBB Directory Isolation @@ -71,7 +69,6 @@ pref("browser.send_pings", false); pref("geo.enabled", false); pref("geo.wifi.uri", ""); pref("browser.search.suggest.enabled", false); -pref("browser.safebrowsing.enabled", false); pref("browser.safebrowsing.malware.enabled", false); pref("browser.safebrowsing.phishing.enabled", false); pref("browser.safebrowsing.downloads.enabled", false); @@ -84,15 +81,9 @@ pref("browser.safebrowsing.provider.google4.updateURL", ""); pref("browser.safebrowsing.provider.google4.gethashURL", ""); pref("browser.safebrowsing.provider.mozilla.updateURL", ""); pref("browser.safebrowsing.provider.mozilla.gethashURL", ""); -pref("browser.download.manager.scanWhenDone", false); // prevents AV remote reporting of downloads pref("extensions.ui.lastCategory", "addons://list/extension"); -pref("datareporting.healthreport.service.enabled", false); // Yes, all three of these must be set pref("datareporting.healthreport.uploadEnabled", false); pref("datareporting.policy.dataSubmissionEnabled", false); -// Don't fetch a localized remote page that Tor Browser interacts with, see -// #16727. And, yes, it is "reportUrl" and not "reportURL". -pref("datareporting.healthreport.about.reportUrl", "data:text/plain,"); -pref("datareporting.healthreport.about.reportUrlUnified", "data:text/plain,"); // Make sure Unified Telemetry is really disabled, see: #18738. pref("toolkit.telemetry.unified", false); pref("toolkit.telemetry.enabled", false); @@ -105,19 +96,14 @@ pref("services.sync.engine.prefs", false); // Never sync prefs, addons, or tabs pref("services.sync.engine.addons", false); pref("services.sync.engine.tabs", false); pref("extensions.getAddons.cache.enabled", false); // https://blog.mozilla.org/addons/how-to-opt-out-of-add-on-metadata-updates/ -pref("browser.newtabpage.preload", false); // Bug 16316 - Avoid potential confusion over tiles for now. pref("browser.newtabpage.enabled", false); -pref("browser.search.countryCode", "US"); // The next three prefs disable GeoIP search lookups (#16254) -pref("browser.search.region", "US"); +pref("browser.search.region", "US"); // The next two prefs disable GeoIP search lookups (#16254) pref("browser.search.geoip.url", ""); pref("browser.fixup.alternate.enabled", false); // Bug #16783: Prevent .onion fixups // Make sure there is no Tracking Protection active in Tor Browser, see: #17898. pref("privacy.trackingprotection.pbmode.enabled", false); // Disable the Pocket extension (Bug #18886 and #31602) -pref("browser.pocket.enabled", false); pref("extensions.pocket.enabled", false); -pref("browser.pocket.api", ""); -pref("browser.pocket.site", ""); pref("network.http.referer.hideOnionSource", true); // Disable ServiceWorkers by default @@ -139,7 +125,6 @@ pref("general.useragent.vendor", ""); pref("general.useragent.vendorSub", ""); pref("dom.enable_performance", false); pref("browser.zoom.siteSpecific", false); -pref("intl.charset.default", "windows-1252"); pref("browser.link.open_newwindow.restriction", 0); // Bug 9881: Open popups in new tabs (to avoid fullscreen popups) pref("dom.gamepad.enabled", false); // bugs.torproject.org/13023 // Disable video statistics fingerprinting vector (bug 15757) @@ -149,10 +134,8 @@ pref("media.benchmark.vp9.threshold", 0); // Disable device sensors as possible fingerprinting vector (bug 15758) pref("device.sensors.enabled", false); pref("dom.enable_resource_timing", false); // Bug 13024: To hell with this API -pref("dom.enable_user_timing", false); // Bug 16336: To hell with this API pref("privacy.resistFingerprinting", true); pref("privacy.resistFingerprinting.block_mozAddonManager", true); // Bug 26114 -pref("dom.event.highrestimestamp.enabled", true); // Bug #17046: "Highres" (but truncated) timestamps prevent uptime leaks pref("privacy.suppressModifierKeyEvents", true); // Bug #17009: Suppress ALT and SHIFT events" pref("ui.use_standins_for_native_colors", true); // https://bugzilla.mozilla.org/232227 pref("privacy.use_utc_timezone", true); @@ -221,14 +204,12 @@ pref("browser.eme.ui.enabled", false); pref("media.gmp-widevinecdm.visible", false); pref("media.gmp-widevinecdm.enabled", false); pref("media.eme.enabled", false); -pref("media.eme.apiVisible", false); pref("media.mediadrm-widevinecdm.visible", false); // WebIDE can bypass proxy settings for remote debugging. It also downloads // some additional addons that we have not reviewed. Turn all that off. pref("devtools.webide.autoinstallADBHelper", false); pref("devtools.webide.autoinstallFxdtAdapters", false); pref("devtools.webide.enabled", false); -pref("devtools.appmanager.enabled", false); // The in-browser debugger for debugging chrome code is not coping with our // restrictive DNS look-up policy. We use "127.0.0.1" instead of "localhost" as // a workaround. See bug 16523 for more details. @@ -302,18 +283,6 @@ pref("browser.search.geoSpecificDefaults", false); pref("browser.search.order.extra.1", "DuckDuckGo"); pref("browser.search.order.extra.2", "YouTube"); -// Audio_data is deprecated in future releases, but still present -// in FF24. This is a dangerous combination (spotted by iSec) -pref("media.audio_data.enabled", false); - -// If true, remote JAR files will not be opened, regardless of content type -// Patch written by Jeff Gibat (iSEC). -pref("network.jar.block-remote-files", true); - -// Disable RC4 fallback. This will go live in Firefox 44, Chrome and IE/Edge: -// https://blog.mozilla.org/security/2015/09/11/deprecating-the-rc4-cipher/ -pref("security.tls.unrestricted_rc4_fallback", false); - // Enforce certificate pinning, see: https://bugs.torproject.org/16206 pref("security.cert_pinning.enforcement_level", 2); @@ -326,9 +295,6 @@ pref("security.enterprise_roots.enabled", false); // Don't ping Mozilla for MitM detection, see bug 32321 pref("security.certerrors.mitm.priming.enabled", false); -// Enforce SHA1 deprecation, see: bug 18042. -pref("security.pki.sha1_enforcement_level", 2); - // Disable the language pack signing check for now on macOS, see #31942 #ifdef XP_MACOSX pref("extensions.langpacks.signatures.required", false);

1 0

[tor-browser-build/maint-9.0] Bug 32342 - Store omni.ja after recreating apk
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit f9d0383fb9e7585e8476029913c1a22572fa042e Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Fri Nov 1 13:38:19 2019 +0000 Bug 32342 - Store omni.ja after recreating apk --- projects/tor-browser/build.android | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/projects/tor-browser/build.android b/projects/tor-browser/build.android index 2c1c3b2..5148c36 100644 --- a/projects/tor-browser/build.android +++ b/projects/tor-browser/build.android @@ -54,5 +54,9 @@ cd tmp zip_args => '$apk', }) %] +# omni.ja was likely deflated in the above zipping operation. It must be stored, instead. +zip $apk -d assets/omni.ja +zip -Z store $apk assets/omni.ja + # Sign a QA build. This apk is not a debug version and doesn't contain a debug flag in the manifest java -jar /usr/share/apksigner/apksigner.jar sign --verbose --min-sdk-version [% c("var/android_min_api") %] --ks $rootdir/android-qa.keystore --out $qa_apk --in $apk --ks-key-alias androidqakey --key-pass pass:android --ks-pass pass:android

1 0