tbb-commits

Download

tbb-commits@lists.torproject.org

August 2024

1 participants
282 discussions

[Git][tpo/applications/tor-browser][tor-browser-128.1.0esr-14.0-1] Bug 42835: Create an actor to filter file data transfers
by ma1 (＠ma1) 02 Aug '24

02 Aug '24

ma1 pushed to branch tor-browser-128.1.0esr-14.0-1 at The Tor Project / Applications / Tor Browser Commits: 693e125e by hackademix at 2024-08-01T16:28:30+02:00 Bug 42835: Create an actor to filter file data transfers - - - - - 4 changed files: - + toolkit/actors/FilesFilterChild.sys.mjs - + toolkit/actors/FilesFilterParent.sys.mjs - toolkit/actors/moz.build - toolkit/modules/ActorManagerParent.sys.mjs Changes: ===================================== toolkit/actors/FilesFilterChild.sys.mjs ===================================== @@ -0,0 +1,61 @@ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ + +const lazy = {}; + +ChromeUtils.defineLazyGetter(lazy, "console", () => { + return console.createInstance({ + prefix: "FilesFilter", + }); +}); + +export class FilesFilterChild extends JSWindowActorChild { + handleEvent(event) { + // drop or paste + const { composedTarget } = event; + const dt = event.clipboardData || event.dataTransfer; + + if (dt.files.length) { + if ( + ["HTMLInputElement", "HTMLTextAreaElement"].includes( + ChromeUtils.getClassName(composedTarget) + ) + ) { + event.preventDefault(); + lazy.console.log( + `Preventing path leak on ${event.type} for ${[...dt.files] + .map(f => f.name) + .join(", ")}.` + ); + } + return; + } + + // "Paste Without Formatting" (ctrl+shift+V) in HTML editors coerces files into paths + if (!(event.clipboardData && dt.getData("text"))) { + return; + } + + // check wether the clipboard contains a file + const { clipboard } = Services; + if ( + [clipboard.kSelectionClipboard, clipboard.kGlobalClipboard].some( + clipboardType => + clipboard.isClipboardTypeSupported(clipboardType) && + clipboard.hasDataMatchingFlavors( + ["application/x-moz-file"], + clipboardType + ) + ) + ) { + event.preventDefault(); + event.stopPropagation(); + lazy.console.log( + `Preventing path leak on "Paste Without Formatting" for ${dt.getData( + "text" + )}.` + ); + } + } +} ===================================== toolkit/actors/FilesFilterParent.sys.mjs ===================================== @@ -0,0 +1,7 @@ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ + +export class FilesFilterParent extends JSWindowActorParent { + // just a stub for now +} ===================================== toolkit/actors/moz.build ===================================== @@ -53,6 +53,8 @@ FINAL_TARGET_FILES.actors += [ "DateTimePickerChild.sys.mjs", "DateTimePickerParent.sys.mjs", "ExtFindChild.sys.mjs", + "FilesFilterChild.sys.mjs", + "FilesFilterParent.sys.mjs", "FindBarChild.sys.mjs", "FindBarParent.sys.mjs", "FinderChild.sys.mjs", ===================================== toolkit/modules/ActorManagerParent.sys.mjs ===================================== @@ -285,6 +285,22 @@ let JSWINDOWACTORS = { allFrames: true, }, + FilesFilter: { + parent: { + esModuleURI: "resource://gre/actors/FilesFilterParent.sys.mjs", + }, + + child: { + esModuleURI: "resource://gre/actors/FilesFilterChild.sys.mjs", + events: { + drop: {}, + paste: { capture: true }, + }, + }, + + allFrames: true, + }, + FindBar: { parent: { esModuleURI: "resource://gre/actors/FindBarParent.sys.mjs", View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/693e125… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/693e125… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] alpha: disable macOS updates for now
by boklm (＠boklm) 01 Aug '24

01 Aug '24

boklm pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: b5c9cf63 by Nicolas Vigier at 2024-08-01T11:59:18+02:00 alpha: disable macOS updates for now - - - - - 1 changed file: - update_3/alpha/.htaccess Changes: ===================================== update_3/alpha/.htaccess ===================================== @@ -13,16 +13,8 @@ RewriteRule ^Linux_x86_64-gcc3/13.5a8/ALL 13.5a8-14.0a1-linux-x86_64-ALL.xml [la RewriteRule ^Linux_x86_64-gcc3/13.5a9/ALL 13.5a9-14.0a1-linux-x86_64-ALL.xml [last] RewriteRule ^Linux_x86_64-gcc3/[^/]+/ALL 14.0a1-linux-x86_64-ALL.xml [last] RewriteRule ^Linux_x86_64-gcc3/ 14.0a1-linux-x86_64-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/13.5a7/ALL 13.5a7-14.0a1-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/13.5a8/ALL 13.5a8-14.0a1-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/13.5a9/ALL 13.5a9-14.0a1-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/[^/]+/ALL 14.0a1-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/ 14.0a1-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/13.5a7/ALL 13.5a7-14.0a1-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/13.5a8/ALL 13.5a8-14.0a1-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/13.5a9/ALL 13.5a9-14.0a1-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/[^/]+/ALL 14.0a1-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/ 14.0a1-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/ no-update.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/ no-update.xml [last] RewriteRule ^WINNT_x86-gcc3/13.5a7/ALL 13.5a7-14.0a1-windows-i686-ALL.xml [last] RewriteRule ^WINNT_x86-gcc3/13.5a8/ALL 13.5a8-14.0a1-windows-i686-ALL.xml [last] RewriteRule ^WINNT_x86-gcc3/13.5a9/ALL 13.5a9-14.0a1-windows-i686-ALL.xml [last] View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

Jump to page: