October 2020 - tbb-commits - lists.torproject.org

[tor-browser-build/master] Changelog fixes
by gk＠torproject.org 16 Oct '20

16 Oct '20

commit 5e51b7fbdf7cad129287826c2347d3cbcb3de7d1 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Oct 16 06:03:17 2020 +0000 Changelog fixes --- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 953c3fd..e33a54d 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -10,12 +10,12 @@ Tor Browser 10.0.1 -- October 13 2020 * Bug 40148: Disable Picture-in-Picture until we investigate and possibly fix it [tor-browser] * Translations update * Windows - * Bug 40140: Videos stop working with Tor Browser 10.0 on Windows + * Bug 40140: Videos stop working with Tor Browser 10.0 on Windows [tor-browser] * Build System * Windows + OS X + Linux * Bump Go to 1.14.9 * Windows - * Bug 40051: Remove SOURCE_DATE_EPOCH patch for OpenSSL + * Bug 40051: Remove SOURCE_DATE_EPOCH patch for OpenSSL [tor-browser-build] Tor Browser 10.0a8 -- October 8 2020 * Android

1 0

[tor-browser-build/master] Bump tor-browser-bundle-testsuite commit
by gk＠torproject.org 16 Oct '20

16 Oct '20

commit e3063faf925e90b329bd97106d98dca9a8dc1a22 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Oct 15 19:44:34 2020 +0000 Bump tor-browser-bundle-testsuite commit --- tools/ansible/roles/tbb-nightly-build/defaults/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/ansible/roles/tbb-nightly-build/defaults/main.yml b/tools/ansible/roles/tbb-nightly-build/defaults/main.yml index 131983e..1e45b1a 100644 --- a/tools/ansible/roles/tbb-nightly-build/defaults/main.yml +++ b/tools/ansible/roles/tbb-nightly-build/defaults/main.yml @@ -5,7 +5,7 @@ nightly_build_cron_minute: 20 nightly_build_keep_builds: 3 testsuite_dir: "/home/{{ nightly_build_user }}/tbb-testsuite" testsuite_git_url: https://git.torproject.org/tor-browser-bundle-testsuite.git -testsuite_git_commit: f87d747ce6dc5eee2bbc2b878203f0fefbb06be7 +testsuite_git_commit: 71bce1264f10e8f184095aad54cf27e81f56a7a4 nightly_build_wwwdir: "/home/{{ nightly_build_user }}/www" nightly_build_nginx_enable: true nightly_build_nginx_listen: 127.0.0.1:80

1 0

[Git][tpo/applications/fenix][tor-browser-82.0.0b4-10.0-1] 3 commits: fixup! Bug 40026: Integrate Security Level settings
by Matthew Finkel 16 Oct '20

16 Oct '20

Matthew Finkel pushed to branch tor-browser-82.0.0b4-10.0-1 at The Tor Project / Applications / fenix Commits: 268e56f4 by Matthew Finkel at 2020-10-14T20:04:47+00:00 fixup! Bug 40026: Integrate Security Level settings Bug 40053: Provide feedback in onboarding Security Level card - - - - - be57d067 by Matthew Finkel at 2020-10-14T20:04:51+00:00 fixup! Bug 40026: Integrate Security Level settings Bug 40082: Use Security Level preference at startup - - - - - e8d4affa by Matthew Finkel at 2020-10-16T01:26:23+00:00 Merge branch 'bug_40053_00' into tor-browser-82.0.0b4-10.0-1 - - - - - 5 changed files: - app/src/main/java/org/mozilla/fenix/components/Core.kt - app/src/main/java/org/mozilla/fenix/home/sessioncontrol/viewholders/onboarding/TorOnboardingSecurityLevelViewHolder.kt - app/src/main/java/org/mozilla/fenix/utils/Settings.kt - app/src/main/res/layout/tor_onboarding_security_level.xml - app/src/main/res/values/torbrowser_strings.xml Changes: ===================================== app/src/main/java/org/mozilla/fenix/components/Core.kt ===================================== @@ -92,7 +92,8 @@ class Core(private val context: Context, private val crashReporter: CrashReporti fontInflationEnabled = context.settings().shouldUseAutoSize, suspendMediaWhenInactive = false, forceUserScalableContent = context.settings().forceEnableZoom, - loginAutofillEnabled = context.settings().shouldAutofillLogins + loginAutofillEnabled = context.settings().shouldAutofillLogins, + torSecurityLevel = context.settings().torSecurityLevel().intRepresentation ) GeckoEngine( ===================================== app/src/main/java/org/mozilla/fenix/home/sessioncontrol/viewholders/onboarding/TorOnboardingSecurityLevelViewHolder.kt ===================================== @@ -69,9 +69,20 @@ class TorOnboardingSecurityLevelViewHolder( safestSecurityLevel.onClickListener { updateSecurityLevel(SecurityLevel.SAFEST) } + + updateSecurityLevel(securityLevel) } private fun updateSecurityLevel(newLevel: SecurityLevel) { + val resources = itemView.context.resources + val securityLevel = when (newLevel) { + SecurityLevel.STANDARD -> resources.getString(R.string.tor_security_level_standard_option) + SecurityLevel.SAFER -> resources.getString(R.string.tor_security_level_safer_option) + SecurityLevel.SAFEST -> resources.getString(R.string.tor_security_level_safest_option) + } + itemView.current_level.text = resources.getString( + R.string.tor_onboarding_chosen_security_level_label, securityLevel + ) itemView.context.components.let { it.core.engine.settings.torSecurityLevel = newLevel.intRepresentation } ===================================== app/src/main/java/org/mozilla/fenix/utils/Settings.kt ===================================== @@ -40,6 +40,7 @@ import org.mozilla.fenix.settings.deletebrowsingdata.DeleteBrowsingDataOnQuitTyp import org.mozilla.fenix.settings.logins.SavedLoginsSortingStrategyMenu import org.mozilla.fenix.settings.logins.SortingStrategy import org.mozilla.fenix.settings.registerOnSharedPreferenceChangeListener +import org.mozilla.fenix.tor.SecurityLevel import java.security.InvalidParameterException private const val AUTOPLAY_USER_SETTING = "AUTOPLAY_USER_SETTING" @@ -176,6 +177,33 @@ class Settings(private val appContext: Context) : PreferencesHolder { true ) + var standardSecurityLevel by booleanPreference( + appContext.getPreferenceKey(SecurityLevel.STANDARD.preferenceKey), + default = true + ) + + var saferSecurityLevel by booleanPreference( + appContext.getPreferenceKey(SecurityLevel.SAFER.preferenceKey), + default = false + ) + + var safestSecurityLevel by booleanPreference( + appContext.getPreferenceKey(SecurityLevel.SAFEST.preferenceKey), + default = false + ) + + // torSecurityLevel is defined as the first |true| preference, + // beginning at the safest level. + // If multiple preferences are true, then that is a bug and the + // highest |true| security level is chosen. + // Standard is the default level. + fun torSecurityLevel(): SecurityLevel = when { + safestSecurityLevel -> SecurityLevel.SAFEST + saferSecurityLevel -> SecurityLevel.SAFER + standardSecurityLevel -> SecurityLevel.STANDARD + else -> SecurityLevel.STANDARD + } + // If any of the prefs have been modified, quit displaying the fenix moved tip fun shouldDisplayFenixMovingTip(): Boolean = preferences.getBoolean( ===================================== app/src/main/res/layout/tor_onboarding_security_level.xml ===================================== @@ -32,9 +32,18 @@ android:textAppearance="@style/Body14TextStyle" app:layout_constraintEnd_toEndOf="parent" app:layout_constraintStart_toStartOf="parent" - app:layout_constraintTop_toBottomOf="@id/header_text" + app:layout_constraintTop_toBottomOf="@id/current_level" tools:text="@string/tor_onboarding_security_level_description" /> + <TextView + android:id="@+id/current_level" + android:layout_width="match_parent" + android:layout_height="wrap_content" + android:layout_marginTop="12dp" + app:layout_constraintEnd_toEndOf="parent" + app:layout_constraintStart_toStartOf="parent" + app:layout_constraintTop_toBottomOf="@id/header_text" + tools:text="@string/tor_onboarding_chosen_security_level_label" /> <org.mozilla.fenix.onboarding.OnboardingRadioButton android:id="@+id/security_level_standard_option" ===================================== app/src/main/res/values/torbrowser_strings.xml ===================================== @@ -20,6 +20,7 @@ <string name="tor_onboarding_security_level">Set your Security Level</string> <string name="tor_onboarding_security_level_description">Disable certain web features that can be used to attack you, and harm your security, anonymity, and privacy.</string> + <string name="tor_onboarding_chosen_security_level_label">Current Security Level: %s</string> <string name="tor_onboarding_security_settings_button">Open Security Settings</string> <string name="tor_onboarding_donate_header">Donate and keep Tor safe</string> <string name="tor_onboarding_donate_description">Tor is free to use because of donations from people like you.</string> View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/compare/15968de01cbf… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/compare/15968de01cbf… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor-browser-build/master] Bug 40131: Remove unused binutils patches
by sysrqb＠torproject.org 15 Oct '20

15 Oct '20

commit 0d8484271a1eb7838bd4145e256231fbdb84bd72 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Oct 14 09:16:34 2020 +0000 Bug 40131: Remove unused binutils patches --- projects/binutils/64bit-fixups.patch | 60 ------- projects/binutils/enable-reloc-section-ld.patch | 219 ------------------------ 2 files changed, 279 deletions(-) diff --git a/projects/binutils/64bit-fixups.patch b/projects/binutils/64bit-fixups.patch deleted file mode 100644 index 7dc1294..0000000 --- a/projects/binutils/64bit-fixups.patch +++ /dev/null @@ -1,60 +0,0 @@ -From 05164a1162d5f6f696d7f7c4b1bc61ef06d1c288 Mon Sep 17 00:00:00 2001 -From: Georg Koppen <gk(a)torproject.org> -Date: Tue, 12 Sep 2017 07:21:16 +0000 -Subject: [PATCH] 64bit fixups - ---- - ld/emultempl/pep.em | 4 ++-- - ld/pep-dll.c | 1 + - ld/pep-dll.h | 1 + - 3 files changed, 4 insertions(+), 2 deletions(-) - -diff --git a/ld/emultempl/pep.em b/ld/emultempl/pep.em -index fccbd63..f7c0a57 100644 ---- a/ld/emultempl/pep.em -+++ b/ld/emultempl/pep.em -@@ -742,7 +742,7 @@ gld${EMULATION_NAME}_handle_option (int optc) - pep_dll_exclude_all_symbols = 1; - break; - case OPTION_ENABLE_RELOC_SECTION: -- pe_dll_enable_reloc_section = 1; -+ pep_dll_enable_reloc_section = 1; - break; - case OPTION_EXCLUDE_LIBS: - pep_dll_add_excludes (optarg, EXCLUDELIBS); -@@ -1862,7 +1862,7 @@ gld_${EMULATION_NAME}_finish (void) - #ifdef DLL_SUPPORT - if (bfd_link_pic (&link_info) - || (!bfd_link_relocatable (&link_info) -- && pe_dll_enable_reloc_section) -+ && pep_dll_enable_reloc_section) - || (!bfd_link_relocatable (&link_info) - && pep_def_file->num_exports != 0)) - { -diff --git a/ld/pep-dll.c b/ld/pep-dll.c -index b8c017f..5ad5733 100644 ---- a/ld/pep-dll.c -+++ b/ld/pep-dll.c -@@ -31,6 +31,7 @@ - #define pe_dll_export_everything pep_dll_export_everything - #define pe_dll_exclude_all_symbols pep_dll_exclude_all_symbols - #define pe_dll_do_default_excludes pep_dll_do_default_excludes -+#define pe_dll_enable_reloc_section pep_dll_enable_reloc_section - #define pe_dll_kill_ats pep_dll_kill_ats - #define pe_dll_stdcall_aliases pep_dll_stdcall_aliases - #define pe_dll_warn_dup_exports pep_dll_warn_dup_exports -diff --git a/ld/pep-dll.h b/ld/pep-dll.h -index 0a27c1f..95d9c15 100644 ---- a/ld/pep-dll.h -+++ b/ld/pep-dll.h -@@ -31,6 +31,7 @@ extern def_file * pep_def_file; - extern int pep_dll_export_everything; - extern int pep_dll_exclude_all_symbols; - extern int pep_dll_do_default_excludes; -+extern int pep_dll_enable_reloc_section; - extern int pep_dll_kill_ats; - extern int pep_dll_stdcall_aliases; - extern int pep_dll_warn_dup_exports; --- -2.1.4 - diff --git a/projects/binutils/enable-reloc-section-ld.patch b/projects/binutils/enable-reloc-section-ld.patch deleted file mode 100644 index a6600c3..0000000 --- a/projects/binutils/enable-reloc-section-ld.patch +++ /dev/null @@ -1,219 +0,0 @@ -From fba503a78c50d6134943245d55e820f53e8f19cd Mon Sep 17 00:00:00 2001 -From: Erinn Clark <erinn(a)torproject.org> -Date: Fri, 8 Aug 2014 14:23:44 -0400 -Subject: [PATCH] add relocation section so Windows bundles can have ASLR - -Patch by skruffy. ---- - ld/emultempl/pe.em | 7 ++++++ - ld/emultempl/pep.em | 11 ++++++++-- - ld/pe-dll.c | 63 ++++++++++++++++++++++++++++++----------------------- - ld/pe-dll.h | 1 + - 4 files changed, 53 insertions(+), 29 deletions(-) - -diff --git a/ld/emultempl/pe.em b/ld/emultempl/pe.em -index 339b7c5..3958b81 100644 ---- a/ld/emultempl/pe.em -+++ b/ld/emultempl/pe.em -@@ -272,6 +272,7 @@ fragment <<EOF - #define OPTION_INSERT_TIMESTAMP (OPTION_TERMINAL_SERVER_AWARE + 1) - #define OPTION_NO_INSERT_TIMESTAMP (OPTION_INSERT_TIMESTAMP + 1) - #define OPTION_BUILD_ID (OPTION_NO_INSERT_TIMESTAMP + 1) -+#define OPTION_ENABLE_RELOC_SECTION (OPTION_BUILD_ID + 1) - - static void - gld${EMULATION_NAME}_add_options -@@ -315,6 +316,7 @@ gld${EMULATION_NAME}_add_options - {"export-all-symbols", no_argument, NULL, OPTION_EXPORT_ALL}, - {"exclude-symbols", required_argument, NULL, OPTION_EXCLUDE_SYMBOLS}, - {"exclude-all-symbols", no_argument, NULL, OPTION_EXCLUDE_ALL_SYMBOLS}, -+ {"enable-reloc-section", no_argument, NULL, OPTION_ENABLE_RELOC_SECTION}, - {"exclude-libs", required_argument, NULL, OPTION_EXCLUDE_LIBS}, - {"exclude-modules-for-implib", required_argument, NULL, OPTION_EXCLUDE_MODULES_FOR_IMPLIB}, - {"kill-at", no_argument, NULL, OPTION_KILL_ATS}, -@@ -782,6 +784,9 @@ gld${EMULATION_NAME}_handle_option (int optc) - case OPTION_EXCLUDE_ALL_SYMBOLS: - pe_dll_exclude_all_symbols = 1; - break; -+ case OPTION_ENABLE_RELOC_SECTION: -+ pe_dll_enable_reloc_section = 1; -+ break; - case OPTION_EXCLUDE_LIBS: - pe_dll_add_excludes (optarg, EXCLUDELIBS); - break; -@@ -2076,6 +2081,8 @@ gld_${EMULATION_NAME}_finish (void) - #if !defined(TARGET_IS_shpe) - || (!bfd_link_relocatable (&link_info) - && pe_def_file->num_exports != 0) -+ || (!bfd_link_relocatable (&link_info) -+ && pe_dll_enable_reloc_section) - #endif - ) - { -diff --git a/ld/emultempl/pep.em b/ld/emultempl/pep.em -index c253d2f..fccbd63 100644 ---- a/ld/emultempl/pep.em -+++ b/ld/emultempl/pep.em -@@ -246,7 +246,8 @@ enum options - OPTION_INSERT_TIMESTAMP, - OPTION_NO_INSERT_TIMESTAMP, - OPTION_TERMINAL_SERVER_AWARE, -- OPTION_BUILD_ID -+ OPTION_BUILD_ID, -+ OPTION_ENABLE_RELOC_SECTION - }; - - static void -@@ -288,6 +289,7 @@ gld${EMULATION_NAME}_add_options - {"export-all-symbols", no_argument, NULL, OPTION_EXPORT_ALL}, - {"exclude-symbols", required_argument, NULL, OPTION_EXCLUDE_SYMBOLS}, - {"exclude-all-symbols", no_argument, NULL, OPTION_EXCLUDE_ALL_SYMBOLS}, -+ {"enable-reloc-section", no_argument, NULL, OPTION_ENABLE_RELOC_SECTION}, - {"exclude-libs", required_argument, NULL, OPTION_EXCLUDE_LIBS}, - {"exclude-modules-for-implib", required_argument, NULL, OPTION_EXCLUDE_MODULES_FOR_IMPLIB}, - {"kill-at", no_argument, NULL, OPTION_KILL_ATS}, -@@ -739,6 +741,9 @@ gld${EMULATION_NAME}_handle_option (int optc) - case OPTION_EXCLUDE_ALL_SYMBOLS: - pep_dll_exclude_all_symbols = 1; - break; -+ case OPTION_ENABLE_RELOC_SECTION: -+ pe_dll_enable_reloc_section = 1; -+ break; - case OPTION_EXCLUDE_LIBS: - pep_dll_add_excludes (optarg, EXCLUDELIBS); - break; -@@ -1857,7 +1862,9 @@ gld_${EMULATION_NAME}_finish (void) - #ifdef DLL_SUPPORT - if (bfd_link_pic (&link_info) - || (!bfd_link_relocatable (&link_info) -- && pep_def_file->num_exports != 0)) -+ && pe_dll_enable_reloc_section) -+ || (!bfd_link_relocatable (&link_info) -+ && pep_def_file->num_exports != 0)) - { - pep_dll_fill_sections (link_info.output_bfd, &link_info); - if (command_line.out_implib_filename) -diff --git a/ld/pe-dll.c b/ld/pe-dll.c -index c398f23..3797f1a 100644 ---- a/ld/pe-dll.c -+++ b/ld/pe-dll.c -@@ -151,6 +151,7 @@ def_file * pe_def_file = 0; - int pe_dll_export_everything = 0; - int pe_dll_exclude_all_symbols = 0; - int pe_dll_do_default_excludes = 1; -+int pe_dll_enable_reloc_section = 0; - int pe_dll_kill_ats = 0; - int pe_dll_stdcall_aliases = 0; - int pe_dll_warn_dup_exports = 0; -@@ -3430,8 +3431,15 @@ pe_dll_build_sections (bfd *abfd, struct bfd_link_info *info) - process_def_file_and_drectve (abfd, info); - - if (pe_def_file->num_exports == 0 && !bfd_link_pic (info)) -- return; -- -+ { -+ if (pe_dll_enable_reloc_section) -+ { -+ build_filler_bfd (0); -+ pe_output_file_set_long_section_names (filler_bfd); -+ } -+ return; -+ } -+ - generate_edata (abfd, info); - build_filler_bfd (1); - pe_output_file_set_long_section_names (filler_bfd); -@@ -3446,13 +3454,9 @@ pe_exe_build_sections (bfd *abfd, struct bfd_link_info *info ATTRIBUTE_UNUSED) - pe_output_file_set_long_section_names (filler_bfd); - } - --void --pe_dll_fill_sections (bfd *abfd, struct bfd_link_info *info) -+static void -+pe_dll_create_reloc (bfd *abfd, struct bfd_link_info *info) - { -- pe_dll_id_target (bfd_get_target (abfd)); -- pe_output_file_set_long_section_names (abfd); -- image_base = pe_data (abfd)->pe_opthdr.ImageBase; -- - generate_reloc (abfd, info); - if (reloc_sz > 0) - { -@@ -3469,38 +3473,43 @@ pe_dll_fill_sections (bfd *abfd, struct bfd_link_info *info) - lang_do_assignments (lang_final_phase_enum); - } - -- fill_edata (abfd, info); -- -- if (bfd_link_dll (info)) -- pe_data (abfd)->dll = 1; -- -- edata_s->contents = edata_d; - reloc_s->contents = reloc_d; - } - - void --pe_exe_fill_sections (bfd *abfd, struct bfd_link_info *info) -+pe_dll_fill_sections (bfd *abfd, struct bfd_link_info *info) - { -+ if (!reloc_s && !edata_s) -+ return; - pe_dll_id_target (bfd_get_target (abfd)); - pe_output_file_set_long_section_names (abfd); - image_base = pe_data (abfd)->pe_opthdr.ImageBase; - -- generate_reloc (abfd, info); -- if (reloc_sz > 0) -+ if (reloc_s) -+ pe_dll_create_reloc (abfd, info); -+ -+ if (edata_s) - { -- bfd_set_section_size (filler_bfd, reloc_s, reloc_sz); -+ fill_edata (abfd, info); -+ edata_s->contents = edata_d; -+ } - -- /* Resize the sections. */ -- lang_reset_memory_regions (); -- lang_size_sections (NULL, TRUE); -+ if (bfd_link_pic (info) && !bfd_link_pie (info)) -+ pe_data (abfd)->dll = 1; - -- /* Redo special stuff. */ -- ldemul_after_allocation (); - -- /* Do the assignments again. */ -- lang_do_assignments (lang_final_phase_enum); -- } -- reloc_s->contents = reloc_d; -+} -+ -+void -+pe_exe_fill_sections (bfd *abfd, struct bfd_link_info *info) -+{ -+ if (!reloc_s) -+ return; -+ pe_dll_id_target (bfd_get_target (abfd)); -+ pe_output_file_set_long_section_names (abfd); -+ image_base = pe_data (abfd)->pe_opthdr.ImageBase; -+ -+ pe_dll_create_reloc (abfd, info); - } - - bfd_boolean -diff --git a/ld/pe-dll.h b/ld/pe-dll.h -index 48d169b..05ff72b 100644 ---- a/ld/pe-dll.h -+++ b/ld/pe-dll.h -@@ -30,6 +30,7 @@ extern def_file *pe_def_file; - extern int pe_dll_export_everything; - extern int pe_dll_exclude_all_symbols; - extern int pe_dll_do_default_excludes; -+extern int pe_dll_enable_reloc_section; - extern int pe_dll_kill_ats; - extern int pe_dll_stdcall_aliases; - extern int pe_dll_warn_dup_exports; --- -2.1.4 -

1 0

[Git][tpo/applications/fenix][tor-browser-82.0.0b4-10.0-1] 4 commits: fixup! Bug 40058: Hide option for disallowing addon in private mode
by Matthew Finkel 15 Oct '20

15 Oct '20

Matthew Finkel pushed to branch tor-browser-82.0.0b4-10.0-1 at The Tor Project / Applications / fenix Commits: 8031e181 by Alex Catarineu at 2020-10-15T13:11:10+02:00 fixup! Bug 40058: Hide option for disallowing addon in private mode Fixes #40086: Disabling/Enabling addon still shows option to disallow in private mode. - - - - - 53ea7a05 by Alex Catarineu at 2020-10-15T17:30:46+02:00 fixup! Bug 40028: Implement Tor Service controller Part of #40078 fix. - - - - - 10fcc45a by Matthew Finkel at 2020-10-15T20:41:28+00:00 Merge remote-tracking branch 'acatgl/40078+1' into tor-browser-82.0.0b4-10.0-1 - - - - - 15968de0 by Matthew Finkel at 2020-10-15T20:42:44+00:00 Merge remote-tracking branch 'acatgl/40086' into tor-browser-82.0.0b4-10.0-1 - - - - - 2 changed files: - app/src/main/java/org/mozilla/fenix/addons/InstalledAddonDetailsFragment.kt - app/src/main/java/org/mozilla/fenix/tor/TorController.kt Changes: ===================================== app/src/main/java/org/mozilla/fenix/addons/InstalledAddonDetailsFragment.kt ===================================== @@ -113,7 +113,7 @@ class InstalledAddonDetailsFragment : Fragment() { runIfFragmentIsAttached { this.addon = it switch.isClickable = true - privateBrowsingSwitch.isVisible = it.isEnabled() + privateBrowsingSwitch.isVisible = false privateBrowsingSwitch.isChecked = it.isAllowedInPrivateBrowsing() switch.setText(R.string.mozac_feature_addons_enabled) view.settings.isVisible = shouldSettingsBeVisible() ===================================== app/src/main/java/org/mozilla/fenix/tor/TorController.kt ===================================== @@ -119,13 +119,6 @@ class TorController( Prefs.setBridgesList(value) } - init { - // Bug 40040: Hacky: Initialize TorService when we are instantiated. This should - // help avoid a race condition involving copying assets and starting tor in TorService. - val torServiceStatus = Intent(context, TorService::class.java) - context.startService(torServiceStatus) - } - fun start() { // Register receiver lbm.registerReceiver( View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/compare/460d5891f278… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/compare/460d5891f278… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor-browser/tor-browser-78.4.0esr-10.0-2] fixup! Bug 10760: Integrate TorButton to TorBrowser core
by sysrqb＠torproject.org 15 Oct '20

15 Oct '20

commit 301b7a0134ec3f28f49ce87952d19e0805917a45 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Thu Oct 15 20:30:12 2020 +0000 fixup! Bug 10760: Integrate TorButton to TorBrowser core --- toolkit/torproject/torbutton | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolkit/torproject/torbutton b/toolkit/torproject/torbutton index dd24967b1bb8..ad7c0b884586 160000 --- a/toolkit/torproject/torbutton +++ b/toolkit/torproject/torbutton @@ -1 +1 @@ -Subproject commit dd24967b1bb89e83b656a22ff887eff81946be45 +Subproject commit ad7c0b884586f5d1f3cc8e9223ae806f77ca05af

1 0

[torbutton/master] Translations update
by sysrqb＠torproject.org 15 Oct '20

15 Oct '20

commit ad7c0b884586f5d1f3cc8e9223ae806f77ca05af Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Thu Oct 15 20:27:15 2020 +0000 Translations update --- chrome/locale/es-AR/aboutTor.dtd | 2 +- chrome/locale/he/aboutTor.dtd | 4 ++-- chrome/locale/mk/aboutTor.dtd | 2 +- chrome/locale/nl/aboutTor.dtd | 2 +- chrome/locale/pt-BR/aboutTor.dtd | 2 +- chrome/locale/th/browserOnboarding.properties | 2 +- 6 files changed, 7 insertions(+), 7 deletions(-) diff --git a/chrome/locale/es-AR/aboutTor.dtd b/chrome/locale/es-AR/aboutTor.dtd index ce843db0..c86c5eb8 100644 --- a/chrome/locale/es-AR/aboutTor.dtd +++ b/chrome/locale/es-AR/aboutTor.dtd @@ -31,5 +31,5 @@ <!ENTITY aboutTor.donationBanner.buttonA "Doná ahora">  -<!ENTITY aboutTor.ey2020.useamask "Usá un tapaboca, usá Tor."> +<!ENTITY aboutTor.ey2020.useamask "Usa un tapaboca, usa Tor."> <!ENTITY aboutTor.ey2020.resistsurveillance "Resistí a la pandemia de vigilancia."> diff --git a/chrome/locale/he/aboutTor.dtd b/chrome/locale/he/aboutTor.dtd index 90c2e8f0..be1a52eb 100644 --- a/chrome/locale/he/aboutTor.dtd +++ b/chrome/locale/he/aboutTor.dtd @@ -31,5 +31,5 @@ <!ENTITY aboutTor.donationBanner.buttonA "תרום עכשיו">  -<!ENTITY aboutTor.ey2020.useamask "שים מסיכה, שים Tor."> -<!ENTITY aboutTor.ey2020.resistsurveillance "התנגד למגפת המעקב הסמוי."> +<!ENTITY aboutTor.ey2020.useamask "שימו מסכה, שימו Tor."> +<!ENTITY aboutTor.ey2020.resistsurveillance "התנגדו למגפת הריגול."> diff --git a/chrome/locale/mk/aboutTor.dtd b/chrome/locale/mk/aboutTor.dtd index 67a47e79..0ff2075f 100644 --- a/chrome/locale/mk/aboutTor.dtd +++ b/chrome/locale/mk/aboutTor.dtd @@ -32,4 +32,4 @@  <!ENTITY aboutTor.ey2020.useamask "Користи маска, користи Tor."> -<!ENTITY aboutTor.ey2020.resistsurveillance "Спротистави се на надзорот за време на пандемијата."> +<!ENTITY aboutTor.ey2020.resistsurveillance "Спротивстави се на надзорот за време на пандемијата."> diff --git a/chrome/locale/nl/aboutTor.dtd b/chrome/locale/nl/aboutTor.dtd index b191f724..252902a9 100644 --- a/chrome/locale/nl/aboutTor.dtd +++ b/chrome/locale/nl/aboutTor.dtd @@ -32,4 +32,4 @@  <!ENTITY aboutTor.ey2020.useamask "Gebruik een masker, gebruik Tor."> -<!ENTITY aboutTor.ey2020.resistsurveillance "Weersta de surveillancepandemie."> +<!ENTITY aboutTor.ey2020.resistsurveillance "Wees bestand tegen de surveillancepandemie."> diff --git a/chrome/locale/pt-BR/aboutTor.dtd b/chrome/locale/pt-BR/aboutTor.dtd index 55f1000d..1ba8a0bb 100644 --- a/chrome/locale/pt-BR/aboutTor.dtd +++ b/chrome/locale/pt-BR/aboutTor.dtd @@ -32,5 +32,5 @@ <!ENTITY aboutTor.donationBanner.buttonA "Doe Agora">  -<!ENTITY aboutTor.ey2020.useamask "Use uma máscara, use Tor."> +<!ENTITY aboutTor.ey2020.useamask "Use uma mascara, use Tor."> <!ENTITY aboutTor.ey2020.resistsurveillance "Resista à pandemia de vigilância."> diff --git a/chrome/locale/th/browserOnboarding.properties b/chrome/locale/th/browserOnboarding.properties index 1ae6bafc..d216d3cf 100644 --- a/chrome/locale/th/browserOnboarding.properties +++ b/chrome/locale/th/browserOnboarding.properties @@ -16,7 +16,7 @@ onboarding.tour-tor-network=เครือข่าย Tor onboarding.tour-tor-network.title=นำทางเพื่อกระจายเครือข่าย onboarding.tour-tor-network.description=Tor Browser เชื่อมต่อคุณเข้ากับเครือข่าย Tor ที่ทำงานโดยอาสาสมัครกว่าพันคนทั่วโลก Tor Browser ต่างจาก VPN เพราะไม่มีใครสามารถระบุความผิดพลาดหรือหน่วยงานกลางได้ คุณต้องไว้วางใจเพื่อความเพลิดเพลินในการใช้อินเทอร์เน็ตอย่างเป็นส่วนตัว onboarding.tour-tor-network.description-para2=NEW: Tor Network Settings, including the ability to request bridges where Tor is blocked, can now be found in Preferences. -onboarding.tour-tor-network.action-button=Adjust Your Tor Network Settings +onboarding.tour-tor-network.action-button=ปรับแต่งการตั้งค่าเครือข่าย Tor ของคุณ onboarding.tour-tor-network.button=ไปที่วงจรหน้าจอ onboarding.tour-tor-circuit-display=วงจรหน้าจอ

1 0

[tor-browser-bundle-testsuite/master] Bug 32537: Update marionette version
by gk＠torproject.org 15 Oct '20

15 Oct '20

commit b21127c7a42e0855ef56cf70c777e0adc451cc60 Author: Alex Catarineu <acat(a)torproject.org> Date: Mon May 11 14:00:37 2020 +0200 Bug 32537: Update marionette version Also check for virtualenv2, as in some systems virtualenv is the Python3 one, and remove code for https://bugzilla.mozilla.org/show_bug.cgi?id=1345274 workaround. --- TBBTestSuite/TestSuite/BrowserBundleTests.pm | 2 +- marionette/setup.py | 7 ++----- setup-virtualenv | 13 ++++--------- 3 files changed, 7 insertions(+), 15 deletions(-) diff --git a/TBBTestSuite/TestSuite/BrowserBundleTests.pm b/TBBTestSuite/TestSuite/BrowserBundleTests.pm index cf580f0..44c800e 100644 --- a/TBBTestSuite/TestSuite/BrowserBundleTests.pm +++ b/TBBTestSuite/TestSuite/BrowserBundleTests.pm @@ -826,7 +826,7 @@ sub marionette_run { $test->{screenshots} = []; my $screenshots_tmp = File::Temp::newdir('XXXXXX', DIR => $options->{tmpdir}); $ENV{'MARIONETTE_SCREENSHOTS'} = winpath($screenshots_tmp); - system(xvfb_run($test), "$FindBin::Bin/virtualenv-marionette-4.3.0/$bin/tor-browser-tests", + system(xvfb_run($test), "$FindBin::Bin/virtualenv-marionette-5.0.0/$bin/tor-browser-tests", '--log-unittest', winpath($result_file_txt), '--log-html', winpath($result_file_html), '--binary', ffbin_path($tbbinfos, $test), diff --git a/marionette/setup.py b/marionette/setup.py index 13970e8..78f4522 100644 --- a/marionette/setup.py +++ b/marionette/setup.py @@ -3,11 +3,8 @@ from setuptools import setup, find_packages PACKAGE_VERSION = '0.3' deps = [ - 'marionette_harness == 4.3.0', - 'marionette_driver == 2.5.0', - 'mozfile == 1.2', - 'mozinfo == 0.8', - 'mozlog == 3.0', + 'marionette_harness == 5.0.0', + 'marionette_driver == 3.0.0', ] setup(name='tor-browser-tests', diff --git a/setup-virtualenv b/setup-virtualenv index b3a412f..f0c6288 100755 --- a/setup-virtualenv +++ b/setup-virtualenv @@ -5,6 +5,8 @@ use File::Copy; use IO::CaptureOutput qw(qxx); use Cwd; use English; +use lib $FindBin::Bin; +use TBBTestSuite::Common qw(has_bin); sub winpath { return $_[0] unless $OSNAME eq 'cygwin'; @@ -13,7 +15,7 @@ sub winpath { return $res; } -my $virtenv_marionette_dir = winpath("$FindBin::Bin/virtualenv-marionette-4.3.0"); +my $virtenv_marionette_dir = winpath("$FindBin::Bin/virtualenv-marionette-5.0.0"); my $virtenv_pefile_dir = winpath("$FindBin::Bin/virtualenv-pefile"); sub run { @@ -28,7 +30,7 @@ sub run_from_dir { return $res; } -my $virtualenv_cmd = 'virtualenv'; +my $virtualenv_cmd = has_bin('virtualenv2') ? 'virtualenv2' : 'virtualenv'; my $bin = 'bin'; my $lib = 'lib'; if ($OSNAME eq 'cygwin') { @@ -45,13 +47,6 @@ unless (-d $virtenv_marionette_dir) { run("$virtenv_marionette_dir/$bin/pip", 'install', '--upgrade', 'pip'); run("$virtenv_marionette_dir/$bin/pip", 'install', '--upgrade', 'setuptools'); run_from_dir('marionette', "$virtenv_marionette_dir/$bin/python", 'setup.py', 'develop'); - # Workaround for https://bugzilla.mozilla.org/show_bug.cgi?id=1345274 - my $sitepackage = 'site-packages/marionette_harness-4.3.0-py2.7.egg/marionette_harness/runner/'; - my $marionette_runner_dir = "$virtenv_marionette_dir/$lib/python2.7/$sitepackage"; - $marionette_runner_dir = "$virtenv_marionette_dir/$lib/$sitepackage" - unless -d $marionette_runner_dir; - copy "$FindBin::Bin/data/marionette_certs/test.cert", $marionette_runner_dir; - copy "$FindBin::Bin/data/marionette_certs/test.key", $marionette_runner_dir; } if ($OSNAME eq 'cygwin') {

1 0

[tor-browser-bundle-testsuite/master] Fix url for screenshot test
by gk＠torproject.org 15 Oct '20

15 Oct '20

commit 6891edfe6228654940808a93fd36bfa6d24ae935 Author: Alex Catarineu <acat(a)torproject.org> Date: Fri May 15 13:47:01 2020 +0200 Fix url for screenshot test --- marionette/tor_browser_tests/test_screenshots.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/marionette/tor_browser_tests/test_screenshots.py b/marionette/tor_browser_tests/test_screenshots.py index 3e3a089..b7cc3d6 100755 --- a/marionette/tor_browser_tests/test_screenshots.py +++ b/marionette/tor_browser_tests/test_screenshots.py @@ -13,7 +13,7 @@ class Test(MarionetteTestCase): self.ts = ts self.URLs = [ - 'chrome://torlauncher/content/network-settings-wizard.xul', + 'chrome://torlauncher/content/network-settings-wizard.xhtml', ]; def test_check_tpo(self):

1 0

[tor-browser-bundle-testsuite/master] Bug 34189: Fix the settings test
by gk＠torproject.org 15 Oct '20

15 Oct '20

commit f4b6d697a47c2b7d856f626363152777126369ad Author: Alex Catarineu <acat(a)torproject.org> Date: Tue May 12 12:33:57 2020 +0200 Bug 34189: Fix the settings test --- marionette/tor_browser_tests/test_settings.py | 98 ++++----------------------- 1 file changed, 15 insertions(+), 83 deletions(-) diff --git a/marionette/tor_browser_tests/test_settings.py b/marionette/tor_browser_tests/test_settings.py index 97918d2..b0a9be4 100644 --- a/marionette/tor_browser_tests/test_settings.py +++ b/marionette/tor_browser_tests/test_settings.py @@ -17,7 +17,7 @@ class Test(MarionetteTestCase): # This variable contains settings we want to check on all versions of # Tor Browser. See below for settings to check on specific versions. # - # Most of the following checks and comments are taken from + # Most of the following checks and comments are taken from # https://github.com/arthuredelstein/tor-browser/blob/12620/tbb-tests/browser… self.SETTINGS = { "privacy.clearOnShutdown.cache": True, @@ -27,9 +27,6 @@ class Test(MarionetteTestCase): "privacy.clearOnShutdown.history": True, "privacy.clearOnShutdown.sessions": True, - # #16632 : Turn on the background autoupdater - "app.update.auto": True, - "browser.search.update": False, "browser.rights.3.shown": True, @@ -41,10 +38,8 @@ class Test(MarionetteTestCase): "browser.privatebrowsing.autostart": True, "browser.cache.disk.enable": False, "browser.cache.offline.enable": False, - "dom.indexedDB.enabled": True, "permissions.memory_only": True, "network.cookie.lifetimePolicy": 2, - "browser.download.manager.retention": 1, "security.nocertdb": True, # Disk activity: TBB Directory Isolation @@ -61,44 +56,30 @@ class Test(MarionetteTestCase): # Misc privacy: Remote "browser.send_pings": False, "geo.enabled": False, - "geo.wifi.uri": "", + "geo.provider.network.url": "", "browser.search.suggest.enabled": False, - "browser.safebrowsing.enabled": False, + "browser.safebrowsing.phishing.enabled": False, "browser.safebrowsing.malware.enabled": False, - "browser.download.manager.scanWhenDone": False, # prevents AV remote reporting of downloads "extensions.ui.lastCategory": "addons://list/extension", - "datareporting.healthreport.service.enabled": False, # Yes, all three of these must be set "datareporting.healthreport.uploadEnabled": False, "datareporting.policy.dataSubmissionEnabled": False, "security.mixed_content.block_active_content": True, # Activated with bug #21323 - # Don't fetch a localized remote page that Tor Browser interacts with, see - # #16727. And, yes, it is "reportUrl" and not "reportURL". - "datareporting.healthreport.about.reportUrl": "data:text/plain,", - "datareporting.healthreport.about.reportUrlUnified": "data:text/plain,", - # Make sure Unified Telemetry is really disabled, see: #18738. "toolkit.telemetry.unified": False, - "toolkit.telemetry.enabled": False, - # No experiments, use Tor Browser. See 21797. - "experiments.enabled": False, - "browser.syncPromoViewsLeftMap": "{\"addons\":0, \"passwords\":0, \"bookmarks\":0}", # Don't promote sync + "toolkit.telemetry.enabled": True if ts.t["tbbinfos"]["version"].startswith("tbb-nightly") else False, "identity.fxaccounts.enabled": False, # Disable sync by default "services.sync.engine.prefs": False, # Never sync prefs, addons, or tabs with other browsers "services.sync.engine.addons": False, "services.sync.engine.tabs": False, "extensions.getAddons.cache.enabled": False, # https://blog.mozilla.org/addons/how-to-opt-out-of-add-on-metadata-updates/ - "browser.newtabpage.preload": False, # Bug 16316 - Avoid potential confusion over tiles for now. - "browser.search.countryCode": "US", # The next three prefs disable GeoIP search lookups (#16254) "browser.search.region": "US", "browser.search.geoip.url": "", "browser.fixup.alternate.enabled": False, # Bug #16783: Prevent .onion fixups # Make sure there is no Tracking Protection active in Tor Browser, see: #17898. "privacy.trackingprotection.pbmode.enabled": False, - # Disable the Pocket extension (Bug #18886) - "browser.pocket.enabled": False, - "browser.pocket.api": "", - "browser.pocket.site": "", + # Disable the Pocket extension (Bug #18886 and #31602) + "extensions.pocket.enabled": False, "network.http.referer.hideOnionSource": True, # Fingerprinting @@ -106,45 +87,20 @@ class Test(MarionetteTestCase): "webgl.disable-fail-if-major-performance-caveat": True, "webgl.enable-webgl2": False, "gfx.downloadable_fonts.fallback_delay": -1, - "general.appname.override": "Netscape", - "general.appversion.override": "5.0 (Windows)", - "general.oscpu.override": "Windows NT 6.1", - "general.platform.override": "Win32", - "general.productSub.override": "20100101", - "general.buildID.override": "20100101", "browser.startup.homepage_override.buildID": "20100101", - "general.useragent.vendor": "", - "general.useragent.vendorSub": "", - "dom.enable_performance": False, - "plugin.expose_full_path": False, - "browser.zoom.siteSpecific": False, - "intl.charset.default": "windows-1252", "browser.link.open_newwindow.restriction": 0, # Bug 9881: Open popups in new tabs (to avoid fullscreen popups) - "dom.gamepad.enabled": False, # bugs.torproject.org/13023 - # Disable video statistics fingerprinting vector (bug 15757) - "media.video_stats.enabled": False, # Set video VP9 to 0 for everyone (bug 22548) "media.benchmark.vp9.threshold": 0, - # Disable device sensors as possible fingerprinting vector (bug 15758) - "device.sensors.enabled": False, "dom.enable_resource_timing": False, # Bug 13024: To hell with this API - "dom.enable_user_timing": False, # Bug 16336: To hell with this API "privacy.resistFingerprinting": True, "privacy.resistFingerprinting.block_mozAddonManager": True, # Bug 26114 - "dom.event.highrestimestamp.enabled": True, # Bug #17046: "Highres" (but truncated) timestamps prevent uptime leaks - "privacy.suppressModifierKeyEvents": True, # Bug #17009: Suppress ALT and SHIFT events" - "ui.use_standins_for_native_colors": True, # https://bugzilla.mozilla.org/232227 - "privacy.use_utc_timezone": True, - "media.webspeech.synth.enabled": False, # Bug 10283: Disable SpeechSynthesis API "dom.webaudio.enabled": False, # Bug 13017: Disable Web Audio API - "dom.maxHardwareConcurrency": 1, # Bug 21675: Spoof single-core cpu "dom.w3c_touch_events.enabled": 0, # Bug 10286: Always disable Touch API "dom.w3c_pointer_events.enabled": False, "dom.vr.enabled": False, # Bug 21607: Disable WebVR for now # Disable randomised Firefox HTTP cache decay user test groups (Bug: 13575) "security.webauth.webauthn": False, # Bug 26614: Disable Web Authentication API for now - "browser.cache.frecency_experiment": -1, - + # Third party stuff "network.cookie.cookieBehavior": 1, "privacy.firstparty.isolate": True, @@ -167,8 +123,7 @@ class Test(MarionetteTestCase): "network.protocol-handler.warn-external.news": True, "network.protocol-handler.warn-external.nntp": True, "network.protocol-handler.warn-external.snews": True, - "plugins.click_to_play": True, - "plugin.state.flash": 1, + "plugin.state.flash": 0, "media.peerconnection.enabled": False, # Disable WebRTC interfaces # Disables media devices but only if `media.peerconnection.enabled` is set to # `false` as well. (see bug 16328 for this defense-in-depth measure) @@ -187,18 +142,13 @@ class Test(MarionetteTestCase): # --disable-eme (which we do), we disable all of them here as well for defense # in depth. "browser.eme.ui.enabled": False, - "media.gmp-eme-adobe.visible": False, - "media.gmp-eme-adobe.enabled": False, "media.gmp-widevinecdm.visible": False, "media.gmp-widevinecdm.enabled": False, "media.eme.enabled": False, - "media.eme.apiVisible": False, # WebIDE can bypass proxy settings for remote debugging. It also downloads # some additional addons that we have not reviewed. Turn all that off. - "devtools.webide.autoinstallADBHelper": False, - "devtools.webide.autoinstallFxdtAdapters": False, + "devtools.webide.autoinstallADBExtension": False, "devtools.webide.enabled": False, - "devtools.appmanager.enabled": False, # The in-browser debugger for debugging chrome code is not coping with our # restrictive DNS look-up policy. We use "127.0.0.1" instead of "localhost" as # a workaround. See bug 16523 for more details. @@ -225,8 +175,6 @@ class Test(MarionetteTestCase): "extensions.autoDisableScopes": 0, "extensions.bootstrappedAddons": "{}", "extensions.checkCompatibility.4.*": False, - "extensions.enabledAddons": "https-everywhere%40eff.org:3.1.4,%7B73a6fe31-595d-460b-a920-fcc0f8843232%7D:2.6.6.1,torbutton%40torproject.org:1.5.2,ubufox%40ubuntu.com:2.6,tor-launcher%40torproject.org:0.1.1pre-alpha,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.5", - "extensions.enabledItems": "langpack-en-US@firefox.mozilla.org:,{73a6fe31-595d-460b-a920-fcc0f8843232}:1.9.9.57,{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}:1.2.4,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.8", # extensions.enabledScopes is set to 5 by marionette_driver #"extensions.enabledScopes": 1, "extensions.pendingOperations": False, @@ -236,25 +184,13 @@ class Test(MarionetteTestCase): # don't want to have some random Google Analytics script running either on the # about:addons page, see bug 22073 and 22900. "extensions.getAddons.showPane": False, - # Show our legacy extensions directly on about:addons and get rid of the - # warning for the default theme. - "extensions.legacy.exceptions": "{972ce4c6-7e08-4474-a285-3208198ce6fd},torbutton@torproject.org,tor-launcher@torproject.org", # Bug 26114: Allow NoScript to access addons.mozilla.org etc. "extensions.webextensions.restrictedDomains": "", - # Audio_data is deprecated in future releases, but still present - # in FF24. This is a dangerous combination (spotted by iSec) - "media.audio_data.enabled": False, - "dom.enable_resource_timing": False, - # If true, remote JAR files will not be opened, regardless of content type - # Patch written by Jeff Gibat (iSEC). - "network.jar.block-remote-files": True, - # Disable RC4 fallback. This will go live in Firefox 44, Chrome and IE/Edge: # https://blog.mozilla.org/security/2015/09/11/deprecating-the-rc4-cipher/ - "security.tls.unrestricted_rc4_fallback": False, # Enforce certificate pinning, see: https://bugs.torproject.org/16206 "security.cert_pinning.enforcement_level": 2, @@ -262,11 +198,7 @@ class Test(MarionetteTestCase): # Don't allow MitM via Microsoft Family Safety, see bug 21686 "security.family_safety.mode": 0, - # Enforce SHA1 deprecation, see: bug 18042. - "security.pki.sha1_enforcement_level": 2, - # Disable the language pack signing check for now, see: bug 26465 - "extensions.langpacks.signatures.required": False, # Avoid report TLS errors to Mozilla. We might want to repurpose this feature # one day to help detecting bad relays (which is bug 19119). For now we just @@ -283,14 +215,14 @@ class Test(MarionetteTestCase): # checking torbrowser.version match the version from the filename "torbrowser.version": ts.t["tbbinfos"]["version"], - - # Disable device sensors as possible fingerprinting vector (bug 15758) - "device.sensors.enabled": False, - # Disable video statistics fingerprinting vector (bug 15757) - "media.video_stats.enabled": False, "startup.homepage_override_url": "https://blog.torproject.org/category/tags/tor-browser", - "network.jar.block-remote-files": True, + + # Disable network information API everywhere + # but, alas, the behavior is inconsistent across platforms, see: + # https://trac.torproject.org/projects/tor/ticket/27268#comment:19. We should + # not leak that difference if possible. + "dom.netinfo.enabled": False, } # Settings for the Tor Browser 8.0

1 0