August 2024 - tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser][tor-browser-128.1.0esr-14.0-1] fixup! Firefox preference overrides.
by morgan (＠morgan) 22 Aug '24

22 Aug '24

morgan pushed to branch tor-browser-128.1.0esr-14.0-1 at The Tor Project / Applications / Tor Browser Commits: 5ad278a4 by Pier Angelo Vendrame at 2024-08-22T22:10:52+00:00 fixup! Firefox preference overrides. Bug 42830: Enable Web Audio API. We were concerned about fingerprintability of these APIs. However, Mozilla switched to the same Math library for all platforms, so these concerns are less reduced (and are mostly about different architectures, that probably leak anyway). So, for compatibility, we decided to enable Web Audio. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -377,8 +377,7 @@ pref("dom.disable_window_move_resize", true); // Set video VP9 to 0 for everyone (bug 22548) pref("media.benchmark.vp9.threshold", 0); pref("privacy.resistFingerprinting.block_mozAddonManager", true); // Bug 26114 -pref("dom.webaudio.enabled", false); // Bug 13017: Disable Web Audio API -pref("dom.webmidi.enabled", false); // Bug 41398: Disable Web MIDI API +pref("dom.webmidi.enabled", false); // Bug 41398: Disable Web MIDI API // tor-browser#42043: Stop reporting device IDs (and spoof their number without // RFP, RFP already reports 1 audioinput and 1 videoinput, but still has // randomized IDs when this pref is true). View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5ad278a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5ad278a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.1.0esr-14.0-1] fixup! Firefox preference overrides.
by morgan (＠morgan) 22 Aug '24

22 Aug '24

morgan pushed to branch mullvad-browser-128.1.0esr-14.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 3dd4deb5 by Pier Angelo Vendrame at 2024-08-22T22:07:24+00:00 fixup! Firefox preference overrides. Bug 42611: Set clipboard.imageAsFile.enabled to false In this way, when you copy an image to the clipboard, its URL is not copied as well. This replaces a patch we used to have in the previous versions after Mozilla implemented this preference in Firefox 120. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -100,6 +100,11 @@ pref("browser.pagethumbnails.capturing_disabled", true); // Empty clipboard content from private windows on exit (tor-browser#42154) pref("browser.privatebrowsing.preserveClipboard", false); +// tor-browser#42611: Do not include the URL of the image, when copying it. +// Also, do not save clipboard in history/cloud. +pref("clipboard.imageAsFile.enabled", false); +pref("clipboard.copyPrivateDataToClipboardCloudOrHistory", false); + // Enable HTTPS-Only mode (tor-browser#19850) pref("dom.security.https_only_mode", true); // The previous pref automatically sets this to true (see StaticPrefList.yaml), View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/3dd… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/3dd… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-128.1.0esr-14.0-1] fixup! Firefox preference overrides.
by morgan (＠morgan) 22 Aug '24

22 Aug '24

morgan pushed to branch base-browser-128.1.0esr-14.0-1 at The Tor Project / Applications / Tor Browser Commits: bc758fe5 by Pier Angelo Vendrame at 2024-08-22T22:06:34+00:00 fixup! Firefox preference overrides. Bug 42611: Set clipboard.imageAsFile.enabled to false In this way, when you copy an image to the clipboard, its URL is not copied as well. This replaces a patch we used to have in the previous versions after Mozilla implemented this preference in Firefox 120. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -100,6 +100,11 @@ pref("browser.pagethumbnails.capturing_disabled", true); // Empty clipboard content from private windows on exit (tor-browser#42154) pref("browser.privatebrowsing.preserveClipboard", false); +// tor-browser#42611: Do not include the URL of the image, when copying it. +// Also, do not save clipboard in history/cloud. +pref("clipboard.imageAsFile.enabled", false); +pref("clipboard.copyPrivateDataToClipboardCloudOrHistory", false); + // Enable HTTPS-Only mode (tor-browser#19850) pref("dom.security.https_only_mode", true); // The previous pref automatically sets this to true (see StaticPrefList.yaml), View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bc758fe… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bc758fe… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-128.1.0esr-14.0-1] fixup! Firefox preference overrides.
by morgan (＠morgan) 22 Aug '24

22 Aug '24

morgan pushed to branch tor-browser-128.1.0esr-14.0-1 at The Tor Project / Applications / Tor Browser Commits: 8d480877 by Pier Angelo Vendrame at 2024-08-22T21:44:14+00:00 fixup! Firefox preference overrides. Bug 42611: Set clipboard.imageAsFile.enabled to false In this way, when you copy an image to the clipboard, its URL is not copied as well. This replaces a patch we used to have in the previous versions after Mozilla implemented this preference in Firefox 120. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -100,6 +100,11 @@ pref("browser.pagethumbnails.capturing_disabled", true); // Empty clipboard content from private windows on exit (tor-browser#42154) pref("browser.privatebrowsing.preserveClipboard", false); +// tor-browser#42611: Do not include the URL of the image, when copying it. +// Also, do not save clipboard in history/cloud. +pref("clipboard.imageAsFile.enabled", false); +pref("clipboard.copyPrivateDataToClipboardCloudOrHistory", false); + // Enable HTTPS-Only mode (tor-browser#19850) pref("dom.security.https_only_mode", true); // The previous pref automatically sets this to true (see StaticPrefList.yaml), View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/8d48087… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/8d48087… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.1.0esr-14.0-1] 2 commits: fixup! Bug 41916: Letterboxing preferences UI
by morgan (＠morgan) 22 Aug '24

22 Aug '24

morgan pushed to branch mullvad-browser-128.1.0esr-14.0-1 at The Tor Project / Applications / Mullvad Browser Commits: ff38c562 by Henry Wilkes at 2024-08-22T19:31:59+00:00 fixup! Bug 41916: Letterboxing preferences UI Bug 42665: Drop the "tail-with-learn-more" class from our descriptions. - - - - - a3af591b by Henry Wilkes at 2024-08-22T19:32:03+00:00 fixup! Bug 40925: Implemented the Security Level component Bug 42665: Drop the "tail-with-learn-more" class from our descriptions. - - - - - 2 changed files: - browser/components/preferences/letterboxing.inc.xhtml - browser/components/securitylevel/content/securityLevelPreferences.inc.xhtml Changes: ===================================== browser/components/preferences/letterboxing.inc.xhtml ===================================== @@ -7,10 +7,7 @@ > <html:h1 data-l10n-id="letterboxing-header" /> <description class="letterboxing-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" @@ -26,10 +23,7 @@ <label><html:h2 data-l10n-id="letterboxing-window-size-header"/></label> <description class="letterboxing-search-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" @@ -51,10 +45,7 @@ data-l10n-id="letterboxing-alignment-header" /></label> <description class="letterboxing-search-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" @@ -100,10 +91,7 @@ <label class="letterboxing-search-heading"><html:h2 data-l10n-id="letterboxing-header"/></label> <description class="letterboxing-search-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" ===================================== browser/components/securitylevel/content/securityLevelPreferences.inc.xhtml ===================================== @@ -9,7 +9,6 @@ <description class="description-deemphasized" flex="1"> <html:span id="securityLevel-overview" - class="tail-with-learn-more" data-l10n-id="security-level-preferences-overview" ></html:span> <html:a View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/53… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/53… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-128.1.0esr-14.0-1] 2 commits: fixup! Bug 41916: Letterboxing preferences UI
by morgan (＠morgan) 22 Aug '24

22 Aug '24

morgan pushed to branch base-browser-128.1.0esr-14.0-1 at The Tor Project / Applications / Tor Browser Commits: ee9f5a52 by Henry Wilkes at 2024-08-22T19:29:14+00:00 fixup! Bug 41916: Letterboxing preferences UI Bug 42665: Drop the "tail-with-learn-more" class from our descriptions. - - - - - dafeecd7 by Henry Wilkes at 2024-08-22T19:29:21+00:00 fixup! Bug 40925: Implemented the Security Level component Bug 42665: Drop the "tail-with-learn-more" class from our descriptions. - - - - - 2 changed files: - browser/components/preferences/letterboxing.inc.xhtml - browser/components/securitylevel/content/securityLevelPreferences.inc.xhtml Changes: ===================================== browser/components/preferences/letterboxing.inc.xhtml ===================================== @@ -7,10 +7,7 @@ > <html:h1 data-l10n-id="letterboxing-header" /> <description class="letterboxing-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" @@ -26,10 +23,7 @@ <label><html:h2 data-l10n-id="letterboxing-window-size-header"/></label> <description class="letterboxing-search-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" @@ -51,10 +45,7 @@ data-l10n-id="letterboxing-alignment-header" /></label> <description class="letterboxing-search-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" @@ -100,10 +91,7 @@ <label class="letterboxing-search-heading"><html:h2 data-l10n-id="letterboxing-header"/></label> <description class="letterboxing-search-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" ===================================== browser/components/securitylevel/content/securityLevelPreferences.inc.xhtml ===================================== @@ -9,7 +9,6 @@ <description class="description-deemphasized" flex="1"> <html:span id="securityLevel-overview" - class="tail-with-learn-more" data-l10n-id="security-level-preferences-overview" ></html:span> <html:a View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/1a4edd… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/1a4edd… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-128.1.0esr-14.0-1] 4 commits: fixup! Bug 30237: Add v3 onion services client authentication prompt
by morgan (＠morgan) 22 Aug '24

22 Aug '24

morgan pushed to branch tor-browser-128.1.0esr-14.0-1 at The Tor Project / Applications / Tor Browser Commits: 1825488a by Henry Wilkes at 2024-08-22T19:26:55+00:00 fixup! Bug 30237: Add v3 onion services client authentication prompt Bug 42665: Drop the "tail-with-learn-more" class from our descriptions. - - - - - ec4aaaf5 by Henry Wilkes at 2024-08-22T19:26:55+00:00 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection Bug 42665: Drop the "tail-with-learn-more" class from our descriptions. - - - - - 0c7a4ea1 by Henry Wilkes at 2024-08-22T19:26:55+00:00 fixup! Bug 41916: Letterboxing preferences UI Bug 42665: Drop the "tail-with-learn-more" class from our descriptions. - - - - - 5b238c40 by Henry Wilkes at 2024-08-22T19:26:55+00:00 fixup! Bug 40925: Implemented the Security Level component Bug 42665: Drop the "tail-with-learn-more" class from our descriptions. - - - - - 5 changed files: - browser/components/onionservices/content/authPreferences.inc.xhtml - browser/components/preferences/letterboxing.inc.xhtml - browser/components/securitylevel/content/securityLevelPreferences.inc.xhtml - browser/components/torpreferences/content/connectionPane.xhtml - browser/components/torpreferences/content/provideBridgeDialog.xhtml Changes: ===================================== browser/components/onionservices/content/authPreferences.inc.xhtml ===================================== @@ -12,7 +12,6 @@ > <html:span id="torOnionServiceKeys-overview" - class="tail-with-learn-more" data-l10n-id="onion-site-authentication-preferences-overview" ></html:span> <label ===================================== browser/components/preferences/letterboxing.inc.xhtml ===================================== @@ -7,10 +7,7 @@ > <html:h1 data-l10n-id="letterboxing-header" /> <description class="letterboxing-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" @@ -26,10 +23,7 @@ <label><html:h2 data-l10n-id="letterboxing-window-size-header"/></label> <description class="letterboxing-search-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" @@ -51,10 +45,7 @@ data-l10n-id="letterboxing-alignment-header" /></label> <description class="letterboxing-search-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" @@ -100,10 +91,7 @@ <label class="letterboxing-search-heading"><html:h2 data-l10n-id="letterboxing-header"/></label> <description class="letterboxing-search-overview description-deemphasized"> - <html:span - data-l10n-id="letterboxing-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" tor-manual-page="anti-fingerprinting_letterboxing" ===================================== browser/components/securitylevel/content/securityLevelPreferences.inc.xhtml ===================================== @@ -9,7 +9,6 @@ <description class="description-deemphasized" flex="1"> <html:span id="securityLevel-overview" - class="tail-with-learn-more" data-l10n-id="security-level-preferences-overview" ></html:span> <html:a ===================================== browser/components/torpreferences/content/connectionPane.xhtml ===================================== @@ -13,10 +13,7 @@ > <html:h1 data-l10n-id="tor-connection-settings-heading"></html:h1> <description class="description-deemphasized" flex="1"> - <html:span - data-l10n-id="tor-connection-overview" - class="tail-with-learn-more" - ></html:span> + <html:span data-l10n-id="tor-connection-overview"></html:span> <label class="learnMore text-link" is="text-link" @@ -112,10 +109,7 @@ hidden="true" > <description class="description-deemphasized" flex="1"> - <html:span - class="tail-with-learn-more" - data-l10n-id="tor-bridges-overview" - /> + <html:span data-l10n-id="tor-bridges-overview"></html:span> <label class="learnMore text-link" is="text-link" ===================================== browser/components/torpreferences/content/provideBridgeDialog.xhtml ===================================== @@ -30,7 +30,6 @@ <html:div id="user-provide-bridge-entry-page"> <description id="user-provide-bridge-description"> <html:span - class="tail-with-learn-more" data-l10n-id="user-provide-bridge-dialog-description" ></html:span> <label View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/da2d11… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/da2d11… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-13.5] 2 commits: Bug 41168: Check that we are not changing other channel when deploying update_responses
by morgan (＠morgan) 22 Aug '24

22 Aug '24

morgan pushed to branch maint-13.5 at The Tor Project / Applications / tor-browser-build Commits: 32537994 by Nicolas Vigier at 2024-08-22T19:09:19+00:00 Bug 41168: Check that we are not changing other channel when deploying update_responses - - - - - fb9e1493 by Nicolas Vigier at 2024-08-22T19:09:23+00:00 Bug 41168: Fix check in update_responses deploy script The check for modified files from other channels was inverted. - - - - - 1 changed file: - tools/signing/upload-update_responses-to-staticiforme Changes: ===================================== tools/signing/upload-update_responses-to-staticiforme ===================================== @@ -63,6 +63,18 @@ echo "update_responses_commit: $update_responses_commit" cd "$update_dir" git fetch +changed_files="\$(git diff --name-only HEAD $update_responses_commit)" +if echo "\$changed_files" | grep -qv "$tbb_version_type" +then + echo >&2 "Error: checking out new update_response_commit will changes" + echo >&2 "some files outside of the $tbb_version_type directory:" + echo "\$changed_files" | grep -v "$tbb_version_type" >&2 + echo >&2 "--" + echo >&2 "If this is really what you want to do, edit this script to" + echo >&2 "remove the line 'exit 1' and run it again." + echo >&2 "See tor-browser-build#41168 for more details." + exit 1 +fi git checkout "$update_responses_commit" static-update-component aus1.torproject.org View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41168: Fix check in update_responses deploy script
by morgan (＠morgan) 22 Aug '24

22 Aug '24

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: db976d61 by Nicolas Vigier at 2024-08-22T19:01:47+00:00 Bug 41168: Fix check in update_responses deploy script The check for modified files from other channels was inverted. - - - - - 1 changed file: - tools/signing/upload-update_responses-to-staticiforme Changes: ===================================== tools/signing/upload-update_responses-to-staticiforme ===================================== @@ -64,7 +64,7 @@ echo "update_responses_commit: $update_responses_commit" cd "$update_dir" git fetch changed_files="\$(git diff --name-only HEAD $update_responses_commit)" -if ! echo "\$changed_files" | grep -qv "$tbb_version_type" +if echo "\$changed_files" | grep -qv "$tbb_version_type" then echo >&2 "Error: checking out new update_response_commit will changes" echo >&2 "some files outside of the $tbb_version_type directory:" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41013: Add a README to each project
by morgan (＠morgan) 22 Aug '24

22 Aug '24

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 2a175fce by Pier Angelo Vendrame at 2024-08-21T20:55:55+00:00 Bug 41013: Add a README to each project - - - - - 30 changed files: - doc/how-to-update-go-dependencies.txt - + projects/android-toolchain/README.md - + projects/application-services/README.md - + projects/binutils/README.md - + projects/browser/README.md - + projects/cbindgen/README.md - + projects/cctools/README.md - + projects/clang/README.md - + projects/cmake/README.md - + projects/common/README.md - + projects/conjure/README.md - + projects/container-image/README.md - + projects/firefox-l10n/README.md - + projects/firefox/README.md - + projects/fonts/README.md - projects/fonts/README.txt - + projects/fxc2/README.md - + projects/gcc-source/README.md - + projects/gcc/README.md - + projects/geckoview/README.md - + projects/glean/README.md - + projects/go-bootstrap/README.md - + projects/go/README.md - + projects/gradle/README.md - + projects/hfsplus-tools/README.md - + projects/libdmg-hfsplus/README.md - + projects/libevent/README.md - + projects/libtapi/README.md - + projects/llvm-project/README.md - + projects/llvm-runtimes/README.md The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/2… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/2… You're receiving this email because of your account on gitlab.torproject.org.

1 0