January 2021 - tbb-commits - lists.torproject.org

[Git][tpo/applications/fenix] Pushed new branch tor-browser-86.0.0b1-10.5-1
by Matthew Finkel 27 Jan '21

27 Jan '21

Matthew Finkel pushed new branch tor-browser-86.0.0b1-10.5-1 at The Tor Project / Applications / fenix -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/tree/tor-browser-86.… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor-browser-bundle-testsuite/master] Bug 40014: Update tests for 85
by gk＠torproject.org 27 Jan '21

27 Jan '21

commit 17d1464de523a8c4972f237bad9f7d376073fa2a Author: Alex Catarineu <acat(a)torproject.org> Date: Tue Jan 26 12:52:19 2021 +0100 Bug 40014: Update tests for 85 --- marionette/tor_browser_tests/test_dom-objects-enumeration.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/marionette/tor_browser_tests/test_dom-objects-enumeration.py b/marionette/tor_browser_tests/test_dom-objects-enumeration.py index 66fc8be..26ff945 100644 --- a/marionette/tor_browser_tests/test_dom-objects-enumeration.py +++ b/marionette/tor_browser_tests/test_dom-objects-enumeration.py @@ -764,6 +764,8 @@ class Test(testsuite.TorBrowserTest): expectedObjects = expectedObjects.union({"onbeforeinput"}) if self.get_version() >= 84: expectedObjects = expectedObjects.union({"PerformancePaintTiming"}).difference({"Sanitizer"}) + if self.get_version() >= 85: + expectedObjects = expectedObjects.difference({"onshow", "HTMLMenuItemElement"}) with self.marionette.using_context('content'): self.marionette.navigate(self.test_page_file_url)

1 0

[tor-browser-build/master] Merge remote-tracking branch 'gitlab/merge-requests/202'
by gk＠torproject.org 27 Jan '21

27 Jan '21

commit 39b14d15d26f7b56e13c48c02f7fda1cbd6703eb Merge: 79f54e6 6d4081c Author: Georg Koppen <gk(a)torproject.org> Date: Wed Jan 27 11:17:57 2021 +0000 Merge remote-tracking branch 'gitlab/merge-requests/202' tools/update-responses/README.md | 8 ++++---- tools/update-responses/update_responses | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-)

1 0

[tor-browser-build/master] Bug 33274: Use YAML::XS instead of YAML in update_responses
by gk＠torproject.org 27 Jan '21

27 Jan '21

commit 6d4081c0a5d5f7094203c208df5e633f9dada54c Author: Nicolas Vigier <boklm(a)torproject.org> Date: Sun Jan 24 22:04:05 2021 +0100 Bug 33274: Use YAML::XS instead of YAML in update_responses --- tools/update-responses/README.md | 8 ++++---- tools/update-responses/update_responses | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/tools/update-responses/README.md b/tools/update-responses/README.md index 5209ed5..8326983 100644 --- a/tools/update-responses/README.md +++ b/tools/update-responses/README.md @@ -12,14 +12,14 @@ Dependencies ------------ The following perl modules need to be installed to run the script: - FindBin YAML File::Slurp Digest::SHA XML::Writer File::Temp + FindBin YAML::XS File::Slurp Digest::SHA XML::Writer File::Temp IO::CaptureOutput Parallel::ForkManager XML::LibXML LWP JSON On Debian / Ubuntu you can install them with: ``` - # apt-get install libfindbin-libs-perl libyaml-perl libfile-slurp-perl \ - libdigest-sha-perl libxml-writer-perl \ + # apt-get install libfindbin-libs-perl libyaml-libyaml-perl \ + libfile-slurp-perl libdigest-sha-perl libxml-writer-perl \ libio-captureoutput-perl libparallel-forkmanager-perl \ libxml-libxml-perl libwww-perl libjson-perl ``` @@ -27,7 +27,7 @@ On Debian / Ubuntu you can install them with: On Red Hat / Fedora you can install them with: ``` - # for module in FindBin YAML File::Slurp Digest::SHA XML::Writer \ + # for module in FindBin YAML::XS File::Slurp Digest::SHA XML::Writer \ File::Temp IO::CaptureOutput Parallel::ForkManager \ XML::LibXML LWP JSON do yum install "perl($module)"; done diff --git a/tools/update-responses/update_responses b/tools/update-responses/update_responses index de24235..35b971f 100755 --- a/tools/update-responses/update_responses +++ b/tools/update-responses/update_responses @@ -4,7 +4,7 @@ use strict; use feature "state"; use English; use FindBin; -use YAML qw(LoadFile); +use YAML::XS qw(LoadFile); use File::Slurp; use File::Path qw(make_path); use Digest::SHA qw(sha256_hex);

1 0

[tor-browser-spec/master] Bug 40012: Add FF85 audit
by gk＠torproject.org 27 Jan '21

27 Jan '21

commit b72a5306255a41b46a6b86d9189e3833cf35019e Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Tue Jan 19 03:15:14 2021 +0000 Bug 40012: Add FF85 audit --- audits/FF85_NETWORK_AUDIT | 159 ++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 159 insertions(+) diff --git a/audits/FF85_NETWORK_AUDIT b/audits/FF85_NETWORK_AUDIT new file mode 100644 index 0000000..17ad0db --- /dev/null +++ b/audits/FF85_NETWORK_AUDIT @@ -0,0 +1,159 @@ +`git diff 2a47450172493d64c311336281c1860802b3c9fc 5a2e34d5821fa203454eb9a8b12d7749a7c50d00` +and then go over all the changes containing the +below mentioned potentially dangerous calls and features. Grep the diff for +the following strings and examine surrounding usage. + +=============== Native DNS Portion ============= + +PR_GetHostByName +PR_GetIPNodeByName +PR_GetAddrInfoByName +PR_StringToNetAddr (itself is good as it passes AI_NUMERICHOST to getaddrinfo. No resolution.) + +# FF85: Nothing new + +MDNS +TRR (DNS Trusted Recursive Resolver) +Direct Paths to DNS resolution: +nsDNSService::Resolve +nsDNSService::AsyncResolve +nsHostResolver::ResolveHost + +# FF85: +# Bug 1667743: +# - Deleting unused esni code +# - Review Result: Safe + +# Bug 1634065: +# - ensure nsIDNSService is only created on the main thread +# - Review Result: Safe + +# Bug 1678614 +# - Don't retry with native DNS if it's trr only mode +# - Review Result: Safe + +# Bug 1670982 +# - Make the bitfields in nsHostResolver atomic +# - Review Result: Safe + +============ Misc Socket Portion ============== + +SOCK_ +SOCKET_ +_SOCKET + +# FF85: +# - Bug 1675491 +# - Count number of bytes send and received over a socket +# - Review Result: Safe + +UDPSocket +TCPSocket + PR_NewTCPSocket + AsyncTCPSocket + +# FF85: Nothing of interest + + +Misc PR_Socket + +# FF85: Nothing new + +=========== Misc XPCOM Portion ================ + +Misc XPCOM (including commands for pre-diff review approach) + *SocketProvider + grep -R udp-socket . + grep -R tcp-socket . + grep for tcpsocket + grep -R "NS_" | grep SOCKET | grep "_C" + grep -R "@mozilla.org/network/" . | grep socket | grep -v udp-socket + +# FF85: +# Bug 1673931: +# - Resolve Document/Element cycle, no harm +# - Review Result: Safe + +# Bug 1626278 +# - Shutdown MediaTransportHandlerSTS on STS shutdown +# - Review Result: Safe + +# Bug 1677759 +# - Mark STUN/TURN client contexts failed when we encounter a socket read/write failure for TCP +# - Review Result: Safe + +============ Rust Portion ================ + +Rust + - XXX: What do we grep for here? Or do we rely on Ritter's compile-time tool? + - Check for new sendmsg and recvmsg usage + +# FF85: +# Bug 1662868 +# - Create a Viaduct-based Glean uploader +# - Review Result: Safe + +============ Android Portion ============= + +Android Java calls + - URLConnection + - XXX: getInputStream? other methods? + - HttpURLConnection + - UrlConnectionDownloader + - ch.boye.httpclientandroidlib.impl.client.* (look for execute() calls) + - grep -n openConnection\( mobile/android/thirdparty/ + - java.net.URL -- has SEVERAL proxy bypass URL fetching methods :/ + - java.net + - javax.net + - ch.boye.httpclientandroidlib.conn.* (esp ssl) + - ch.boye.httpclientandroidlib.impl.conn.* (esp ssl) + - Sudden appearance of thirdparty libs: + - OkHttp + - Retrofit + - Glide + - com.amitshekhar.android + - IntentHelper + - openUriExternal (can come from GeckoAppShell too) + - getHandlersForMimeType + - getHandlersForURL + - getHandlersForIntent + - android.content.Intent - too common; instead find launch methods: + - startActivity + - startActivities + - sendBroadcast + - sendOrderedBroadcast + - startService + - bindService + - android.app.PendingIntent + - android.app.DownloadManager + - ActivityHandlerHelper.startIntentAndCatch + +# FF85: Nothing new (using `java_audit.sh`) + +============ Application Services Portion ============= + +Start: 6a234c2b1e1972f11e585551d4cf2e40e84bf16f # v67.0.0 +End: 4cc798c8cd8a1e38ce88e0bb22a05692be63b164 # v67.2.0 + +# FF85: Nothing related to networking in Java/Koltlin/Rust code (using `java_audit.sh`) + +============ Android Components Portion ============= + +Start: 2095f1a5d0ed42c3680aa8582934ea2739ff02c9 # v67.0.17 +End: 21ce9abdda0bc4001a72835fbbe7d71026ac0e66 # v70.0.16 + +# FF85: Zero new usage found of known proxy-bypass APIs (using `java_audit.sh`) + +============ Fenix Portion ============= + +Start: 2d1e15692ebe5ec697abdeacaa332f25ce406a3b # v84.1.4 +End: 24995d51a12d8e0bb10166f9f286c68d23b84a6a # v85.1.0 + +# FF85: Nothing new (using `java_audit.sh`) + +============ Regression/Prior Vuln Review ========= + +Review proxy bypass bugs; check for new vectors to look for: + - https://trac.torproject.org/projects/tor/query?keywords=~tbb-proxy + - Look for new features like these. Especially external app launch vectors +

1 0

[tor-browser-build/master] Bug 40188: Build and ship snowflake only if it is enabled
by sysrqb＠torproject.org 26 Jan '21

26 Jan '21

commit a933946d441b87255de74271480a24332f5498c3 Author: Georg Koppen <gk(a)torproject.org> Date: Sat Jan 16 21:05:38 2021 +0000 Bug 40188: Build and ship snowflake only if it is enabled --- ...01-Revert-Bug-30318-Add-snowflake-support.patch | 78 ++++++++++++++++++++++ projects/tor-android-service/build | 4 +- projects/tor-android-service/config | 2 + projects/tor-onion-proxy-library/build | 29 +++++--- projects/tor-onion-proxy-library/config | 5 ++ 5 files changed, 108 insertions(+), 10 deletions(-) diff --git a/projects/tor-android-service/0001-Revert-Bug-30318-Add-snowflake-support.patch b/projects/tor-android-service/0001-Revert-Bug-30318-Add-snowflake-support.patch new file mode 100644 index 0000000..b7be2ae --- /dev/null +++ b/projects/tor-android-service/0001-Revert-Bug-30318-Add-snowflake-support.patch @@ -0,0 +1,78 @@ +From f3cf622e537a1283b821b3f3ce8e396a01bcb84b Mon Sep 17 00:00:00 2001 +From: Georg Koppen <gk(a)torproject.org> +Date: Sat, 16 Jan 2021 20:56:30 +0000 +Subject: [PATCH] Revert "Bug 30318: Add snowflake support" + +This reverts commit ecc251d0a73f7e2034a271efd28036a0108b8688. + +diff --git a/service/src/main/assets/common/bridges.txt b/service/src/main/assets/common/bridges.txt +index 1525eba..fe37735 100644 +--- a/service/src/main/assets/common/bridges.txt ++++ b/service/src/main/assets/common/bridges.txt +@@ -13,5 +13,3 @@ obfs4 45.145.95.6:27015 C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C cert=TD7PbUO0/0 + obfs4 [2a0c:4d80:42:702::1]:27015 C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0 + obfs4 51.222.13.177:80 5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 cert=2uplIpLQ0q9+0qMFrK5pkaYRDOe460LL9WHBvatgkuRr/SL31wBOEupaMMJ6koRE6Ld0ew iat-mode=0 + meek_lite 0.0.2.0:2 97700DFE9F483596DDA6264C4D7DF7641E1E39CE url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com +- +-snowflake 0.0.3.0:1 2B280B23E1107BB62ABFC40DDCC8824814F80A72 +diff --git a/service/src/main/java/org/torproject/android/service/CustomTorInstaller.java b/service/src/main/java/org/torproject/android/service/CustomTorInstaller.java +index 52bc4fe..198c981 100644 +--- a/service/src/main/java/org/torproject/android/service/CustomTorInstaller.java ++++ b/service/src/main/java/org/torproject/android/service/CustomTorInstaller.java +@@ -40,17 +40,14 @@ public class CustomTorInstaller extends TorInstaller { + @Override + public InputStream openBridgesStream() throws IOException { + /* +- BridgesList is an overloaded field, which can cause some confusion. +- The list can be: +- 1) a filter like obfs4, meek, or snowflake OR +- 2) it can be a custom bridge +- For (1), we just pass back all bridges, the filter will occur +- elsewhere in the library. +- For (2) we return the bridge list as a raw stream. +- If length is greater than 9, then we know this is a custom bridge ++ BridgesList is an overloaded field, which can cause some confusion. The list can be: ++ 1) a filter like obfs4 or meek OR 2) it can be a custom bridge ++ For (1), we just pass back all bridges, the filter will occur elsewhere in the library. ++ For (2) we return the bridge list as a raw stream ++ If length is greater than 5, then we know this is a custom bridge + */ + String userDefinedBridgeList = Prefs.getBridgesList(); +- byte bridgeType = (byte) (userDefinedBridgeList.length() > 9 ? 1 : 0); ++ byte bridgeType = (byte) (userDefinedBridgeList.length() > 5 ? 1 : 0); + // Terrible hack. Must keep in sync with topl::addBridgesFromResources. + if (bridgeType == 0) { + switch (userDefinedBridgeList) { +@@ -60,9 +57,6 @@ public class CustomTorInstaller extends TorInstaller { + case "meek": + bridgeType = 3; + break; +- case "snowflake": +- bridgeType = 4; +- break; + } + } + +diff --git a/service/src/main/java/org/torproject/android/service/TorService.java b/service/src/main/java/org/torproject/android/service/TorService.java +index f1ddcda..32d7f30 100644 +--- a/service/src/main/java/org/torproject/android/service/TorService.java ++++ b/service/src/main/java/org/torproject/android/service/TorService.java +@@ -365,12 +365,10 @@ public final class TorService extends Service implements TorServiceConstants, Or + + //Check bridges to see if we need this + File nativeDir = new File(getApplicationInfo().nativeLibraryDir); +- File pluggableTransportObfs = new File(nativeDir, "libObfs4proxy.so"); +- if(!pluggableTransportObfs.canExecute()) pluggableTransportObfs.setExecutable(true); +- File pluggableTransportSnow = new File(nativeDir, "libSnowflake.so"); +- if(!pluggableTransportSnow.canExecute()) pluggableTransportSnow.setExecutable(true); ++ File pluggableTransport = new File(nativeDir, "libObfs4proxy.so"); ++ if(!pluggableTransport.canExecute()) pluggableTransport.setExecutable(true); + +- builder.configurePluggableTransportsFromSettings(pluggableTransportObfs, pluggableTransportSnow); ++ builder.configurePluggableTransportsFromSettings(pluggableTransport); + mDataService.updateConfigBuilder(builder); + onionProxyManager.getTorInstaller().updateTorConfigCustom + (builder.asString()); +-- +2.30.0 + diff --git a/projects/tor-android-service/build b/projects/tor-android-service/build index 3989001..7efd708 100644 --- a/projects/tor-android-service/build +++ b/projects/tor-android-service/build @@ -13,7 +13,9 @@ mkdir -p /var/tmp/build $output_dir tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.gz cd /var/tmp/build/[% project %]-[% c('version') %] - +[% IF ! c("var/snowflake") %] + patch -p1 < $rootdir/0001-Revert-Bug-30318-Add-snowflake-support.patch +[% END %] # Replace pre-packaged tor library with the latest build rm -fR service/src/main/jniLibs/* [% FOREACH arch = ['armv7', 'aarch64', 'x86', 'x86_64'] -%] diff --git a/projects/tor-android-service/config b/projects/tor-android-service/config index 81a4159..d6d2fed 100644 --- a/projects/tor-android-service/config +++ b/projects/tor-android-service/config @@ -22,6 +22,8 @@ input_files: exec: '[% INCLUDE "fetch-gradle-dependencies" %]' - project: tor-onion-proxy-library name: topl + - filename: 0001-Revert-Bug-30318-Add-snowflake-support.patch + enable: '[% ! c("var/snowflake") %]' - project: tor name: tor-armv7 target_prepend: diff --git a/projects/tor-onion-proxy-library/build b/projects/tor-onion-proxy-library/build index 7865aa7..c9b1e7a 100644 --- a/projects/tor-onion-proxy-library/build +++ b/projects/tor-onion-proxy-library/build @@ -20,31 +20,42 @@ cd /var/tmp/build/[% project %]-[% c('version') %] # build will pull down the correct android tool versions patch -p1 < $rootdir/gradle.patch patch -p1 < $rootdir/0001-Bug-33931-Filter-bridges-in-stream-by-type.patch -patch -p1 < $rootdir/0001-Bug-30318-Add-snowflake-support.patch +[% IF c("var/snowflake") %] + patch -p1 < $rootdir/0001-Bug-30318-Add-snowflake-support.patch +[% END %] [% FOREACH arch = ['armv7', 'aarch64', 'x86', 'x86_64'] -%] # Extract obfs4proxy from TorBrowser/Tor/PluggableTransports/obfs4proxy tar --strip-components=4 -xf $rootdir/[% c('input_files_by_name/obfs4-' _ arch) %] - # Extract snowflake from TorBrowser/Tor/PluggableTransports/snowflake - tar --strip-components=4 -xf $rootdir/[% c('input_files_by_name/snowflake-' _ arch) %] - + [% IF c("var/snowflake") %] + # Extract snowflake from TorBrowser/Tor/PluggableTransports/snowflake + tar --strip-components=4 -xf $rootdir/[% c('input_files_by_name/snowflake-' _ arch) %] + [% END %] # Overwrite the obfs4proxy binary provided by Pluto and add Snowflake [% IF arch == "armv7" -%] cp obfs4proxy external/pluto/bin/armeabi-v7a/ cp obfs4proxy external/pluto/bin/armeabi/ - cp snowflake-client external/pluto/bin/armeabi-v7a/ - cp snowflake-client external/pluto/bin/armeabi/ + [% IF c("var/snowflake") %] + cp snowflake-client external/pluto/bin/armeabi-v7a/ + cp snowflake-client external/pluto/bin/armeabi/ + [% END %] [% ELSIF arch == "aarch64" -%] cp obfs4proxy external/pluto/bin/arm64-v8a/ - cp snowflake-client external/pluto/bin/arm64-v8a/ + [% IF c("var/snowflake") %] + cp snowflake-client external/pluto/bin/arm64-v8a/ + [% END %] [% ELSE -%] cp obfs4proxy external/pluto/bin/[% arch %]/ - cp snowflake-client external/pluto/bin/[% arch %]/ + [% IF c("var/snowflake") %] + cp snowflake-client external/pluto/bin/[% arch %]/ + [% END %] [% END -%] rm obfs4proxy - rm snowflake-client + [% IF c("var/snowflake") %] + rm snowflake-client + [% END %] [% END -%] # Build Android Libraries and Apps diff --git a/projects/tor-onion-proxy-library/config b/projects/tor-onion-proxy-library/config index 401142c..d07c37b 100644 --- a/projects/tor-onion-proxy-library/config +++ b/projects/tor-onion-proxy-library/config @@ -39,21 +39,26 @@ input_files: name: snowflake-armv7 target_prepend: - android-armv7 + enable: '[% c("var/snowflake") %]' - project: snowflake name: snowflake-aarch64 target_prepend: - android-aarch64 + enable: '[% c("var/snowflake") %]' - project: snowflake name: snowflake-x86 target_prepend: - android-x86 + enable: '[% c("var/snowflake") %]' - project: snowflake name: snowflake-x86_64 target_prepend: - android-x86_64 + enable: '[% c("var/snowflake") %]' - filename: 'gradle-dependencies-[% c("var/gradle_dependencies_version") %]' name: gradle-dependencies exec: '[% INCLUDE "fetch-gradle-dependencies" %]' - filename: gradle.patch - filename: 0001-Bug-33931-Filter-bridges-in-stream-by-type.patch - filename: 0001-Bug-30318-Add-snowflake-support.patch + enable: '[% c("var/snowflake") %]'

1 0

[tor-browser-build/master] Merge remote-tracking branch 'gkgl/bug_40188_v2'
by sysrqb＠torproject.org 26 Jan '21

26 Jan '21

commit 79f54e66f8f2d181276a5b8e39867edde7dcbbb4 Merge: 47ab0aa a933946 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Tue Jan 26 23:40:39 2021 +0000 Merge remote-tracking branch 'gkgl/bug_40188_v2' ...01-Revert-Bug-30318-Add-snowflake-support.patch | 78 ++++++++++++++++++++++ projects/tor-android-service/build | 4 +- projects/tor-android-service/config | 2 + projects/tor-onion-proxy-library/build | 29 +++++--- projects/tor-onion-proxy-library/config | 5 ++ 5 files changed, 108 insertions(+), 10 deletions(-)

1 0

[tor-browser/tor-browser-85.0-10.5-1] squash! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 26 Jan '21

26 Jan '21

commit cbad6095b5740bfeb6b2a8fc00c616b5b1d2366b Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jan 26 08:03:10 2021 +0000 squash! TB4: Tor Browser's Firefox preference overrides. Bug 40308: Disable network partitioning until we evaluate dFPI --- browser/app/profile/000-tor-browser.js | 1 + 1 file changed, 1 insertion(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 19991a801fcd..5ffdc386042b 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -190,6 +190,7 @@ pref("media.videocontrols.picture-in-picture.enabled", false); // Bug 40148: dis // Third party stuff pref("privacy.firstparty.isolate", true); // Always enforce first party isolation +pref("privacy.partition.network_state", false); // Disable for now until audit pref("network.cookie.cookieBehavior", 1); pref("network.http.spdy.allow-push", false); // Disabled for now. See https://bugs.torproject.org/27127 pref("network.predictor.enabled", false); // Temporarily disabled. See https://bugs.torproject.org/16633

1 0

[tor-browser-build/maint-10.0-android] Pick up tor-browser -build2
by gk＠torproject.org 26 Jan '21

26 Jan '21

commit a4244c3f9ec18e3a28cb61b749c709a1de82bb1f Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jan 26 09:48:09 2021 +0000 Pick up tor-browser -build2 --- projects/geckoview/config | 2 +- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 1 + rbm.conf | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/projects/geckoview/config b/projects/geckoview/config index 5ebe6c4..475385b 100644 --- a/projects/geckoview/config +++ b/projects/geckoview/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'geckoview-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' -git_hash: 'tor-browser-[% c("var/geckoview_version") %]-[% c("var/torbrowser_branch") %]-1-build1' +git_hash: 'tor-browser-[% c("var/geckoview_version") %]-[% c("var/torbrowser_branch") %]-1-build2' tag_gpg_id: 1 git_url: https://git.torproject.org/tor-browser.git git_submodule: 1 diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 7228ed7..935c1a6 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -4,6 +4,7 @@ Tor Browser 10.0.9 -- January 26 2021 * Update NoScript to 11.1.9 * Bug 40137: Remove EOY 2020 Campaign [fenix] * Bug 40165: Update zstd to 1.4.8 [tor-browser-build] + * Bug 40308: Disable network state partitioning until audit [tor-browser] * Build System * Android * Bug 40190: Update toolchain for Fenix 85 [tor-browser-build] diff --git a/rbm.conf b/rbm.conf index 9048bf3..8fc7ebd 100644 --- a/rbm.conf +++ b/rbm.conf @@ -25,7 +25,7 @@ buildconf: var: torbrowser_version: '10.0.9' - torbrowser_build: 'build2' + torbrowser_build: 'build3' torbrowser_incremental_from: - 10.5a1 project_name: tor-browser

1 0

[tor-browser/tor-browser-85.0-10.0-1] squash! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 26 Jan '21

26 Jan '21

commit 6018ee49083c876636a1084426a5741944a8ba42 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jan 26 08:03:10 2021 +0000 squash! TB4: Tor Browser's Firefox preference overrides. Bug 40308: Disable network partitioning until we evaluate dFPI --- browser/app/profile/000-tor-browser.js | 1 + 1 file changed, 1 insertion(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 19991a801fcd..5ffdc386042b 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -190,6 +190,7 @@ pref("media.videocontrols.picture-in-picture.enabled", false); // Bug 40148: dis // Third party stuff pref("privacy.firstparty.isolate", true); // Always enforce first party isolation +pref("privacy.partition.network_state", false); // Disable for now until audit pref("network.cookie.cookieBehavior", 1); pref("network.http.spdy.allow-push", false); // Disabled for now. See https://bugs.torproject.org/27127 pref("network.predictor.enabled", false); // Temporarily disabled. See https://bugs.torproject.org/16633

1 0