August 2026 - tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! BB 43072: Add aria label and description to moz-message-bar.
by morgan (＠morgan) 04 Aug '26

04 Aug '26

morgan pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: fd46faa3 by Henry Wilkes at 2026-08-04T12:43:06+00:00 fixup! BB 43072: Add aria label and description to moz-message-bar. BB 45186: Remove duplicate alert roles. We also restrict the `aria-labelledby` and `aria-describedby` attributes to only be used with the "alert" role. - - - - - 2 changed files: - toolkit/content/widgets/moz-message-bar/moz-message-bar.mjs - toolkit/content/widgets/notificationbox.js Changes: ===================================== toolkit/content/widgets/moz-message-bar/moz-message-bar.mjs ===================================== @@ -65,8 +65,9 @@ export default class MozMessageBar extends MozLitElement { supportPage: { type: String }, messageL10nId: { type: String }, messageL10nArgs: { type: String }, - role: { type: String, reflect: true }, - useAlertRole: { type: Boolean }, + // Move the role from the widget to its shadow root, where we can apply + // aria-labelledby and aria-describedby. tor-browser#45186. + role: { type: String, mapped: true }, }; constructor() { @@ -127,8 +128,6 @@ export default class MozMessageBar extends MozLitElement { * @type {string} */ this.role = "alert"; - - this.useAlertRole = true; } onActionSlotchange() { @@ -170,17 +169,6 @@ export default class MozMessageBar extends MozLitElement { ></slot>`; } - setAlertRole() { - // Wait a little for this to render before setting the role for more - // consistent alerts to screen readers. - this.useAlertRole = false; - window.requestAnimationFrame(() => { - window.requestAnimationFrame(() => { - this.useAlertRole = true; - }); - }); - } - iconTemplate() { let iconData = messageTypeToIconData[this.type]; if (iconData) { @@ -224,6 +212,16 @@ export default class MozMessageBar extends MozLitElement { } render() { + let ariaLabelledBy; + let ariaDescribedBy; + if (this.role === "alert") { + if (this.heading) { + ariaLabelledBy = "heading"; + ariaDescribedBy = "content"; + } else { + ariaLabelledBy = "content"; + } + } return html` <link rel="stylesheet" @@ -231,9 +229,9 @@ export default class MozMessageBar extends MozLitElement { /> <div class="container" - role=${ifDefined(this.useAlertRole ? "alert" : undefined)} - aria-labelledby=${this.heading ? "heading" : "content"} - aria-describedby=${ifDefined(this.heading ? "content" : undefined)} + role=${ifDefined(this.role || undefined)} + aria-labelledby=${ifDefined(ariaLabelledBy)} + aria-describedby=${ifDefined(ariaDescribedBy)} > ${this.iconTemplate()} <div class="content"> ===================================== toolkit/content/widgets/notificationbox.js ===================================== @@ -492,6 +492,20 @@ this.control.removeNotification(this); } + setAlertRole() { + // Wait a little for this to render before setting the role for more + // consistent alerts to screen readers. + // tor-browser#45186: "role" is a mapped attribute, so `removeAttribute` + // will go undetected by the moz-message-bar widget. Instead we set the + // role property directly. + this.role = undefined; + window.requestAnimationFrame(() => { + window.requestAnimationFrame(() => { + this.role = "alert"; + }); + }); + } + handleEvent(e) { // If clickjacking delay is active, prevent any "click"/"command" from // going through. Also restart the delay if the user tries to click too early. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/fd46faa… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/fd46faa… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] fixup! BB 42730: Patch RemoteSettings to use only local dumps as a data source
by morgan (＠morgan) 04 Aug '26

04 Aug '26

morgan pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 5bff9b07 by Pier Angelo Vendrame at 2026-08-04T12:41:31+00:00 fixup! BB 42730: Patch RemoteSettings to use only local dumps as a data source BB 45185: Make sure the Rust remote settings client stays offline. - - - - - 2 changed files: - services/settings/Utils.sys.mjs - third_party/application-services/components/viaduct/src/lib.rs Changes: ===================================== services/settings/Utils.sys.mjs ===================================== @@ -113,6 +113,9 @@ export var Utils = { log, get shouldSkipRemoteActivity() { + if (AppConstants.BASE_BROWSER_VERSION) { + return true; + } if ( (lazy.isRunningTests || Cu.isInAutomation) && this.SERVER_URL == "data:,#remote-settings-dummy/v1" ===================================== third_party/application-services/components/viaduct/src/lib.rs ===================================== @@ -96,7 +96,8 @@ impl Request { } pub fn send(self) -> Result<Response, ViaductError> { - crate::backend::send(self) + // tor-browser#44576: Force an error as a defense-in-depth. + Err(ViaductError::NetworkError("Viaduct requests are disabled.".into())) } /// Alias for `Request::new(Method::Get, url)`, for convenience. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/5bf… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/5bf… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! BB 42730: Patch RemoteSettings to use only local dumps as a data source
by Pier Angelo Vendrame (＠pierov) 04 Aug '26

04 Aug '26

Pier Angelo Vendrame pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 4cb78731 by Pier Angelo Vendrame at 2026-08-04T12:37:03+00:00 fixup! BB 42730: Patch RemoteSettings to use only local dumps as a data source BB 45185: Make sure the Rust remote settings client stays offline. - - - - - 2 changed files: - services/settings/Utils.sys.mjs - third_party/application-services/components/viaduct/src/lib.rs Changes: ===================================== services/settings/Utils.sys.mjs ===================================== @@ -113,6 +113,9 @@ export var Utils = { log, get shouldSkipRemoteActivity() { + if (AppConstants.BASE_BROWSER_VERSION) { + return true; + } if ( (lazy.isRunningTests || Cu.isInAutomation) && this.SERVER_URL == "data:,#remote-settings-dummy/v1" ===================================== third_party/application-services/components/viaduct/src/lib.rs ===================================== @@ -96,7 +96,8 @@ impl Request { } pub fn send(self) -> Result<Response, ViaductError> { - crate::backend::send(self) + // tor-browser#44576: Force an error as a defense-in-depth. + Err(ViaductError::NetworkError("Viaduct requests are disabled.".into())) } /// Alias for `Request::new(Method::Get, url)`, for convenience. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/4cb7873… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/4cb7873… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] 2 commits: BB 44629: Update the search settings for Base Browser.
by morgan (＠morgan) 04 Aug '26

04 Aug '26

morgan pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: a806677c by Henry Wilkes at 2026-08-04T11:53:41+00:00 BB 44629: Update the search settings for Base Browser. - - - - - 26523f6e by Henry Wilkes at 2026-08-04T11:53:42+00:00 fixup! Base Browser strings BB 44629: Add a search suggestions banner. - - - - - 2 changed files: - browser/components/preferences/config/search.mjs - toolkit/locales/en-US/toolkit/global/base-browser.ftl Changes: ===================================== browser/components/preferences/config/search.mjs ===================================== @@ -271,6 +271,11 @@ Preferences.addSetting({ pref: "browser.urlbar.trending.featureGate", }); +// Add a warning banner. tor-browser#44629. +Preferences.addSetting({ + id: "searchSuggestionsWarningBanner", +}); + // The show search suggestion box behaves differently depending on whether the // separate search bar is shown. When the separate search bar is shown, it // controls just the search suggestion preference, and the @@ -1147,6 +1152,16 @@ SettingGroupManager.registerGroups({ l10nId: "search-suggestions-header-2", headingLevel: 2, items: [ + // Add a warning banner. tor-browser#44629. + { + id: "searchSuggestionsWarningBanner", + l10nId: "search-suggestions-warning-banner", + control: "moz-message-bar", + controlAttrs: { + role: "status", + type: "warning", + }, + }, { id: "suggestionsInSearchFieldsCheckbox", l10nId: "search-show-suggestions-option", ===================================== toolkit/locales/en-US/toolkit/global/base-browser.ftl ===================================== @@ -110,6 +110,11 @@ browser-layout-show-sidebar-limited = .label = Show sidebar .description = Quickly access bookmarks and more without leaving your main view. +## Preferences - Search suggestions. + +search-suggestions-warning-banner = + .message = Turning this on reduces your privacy by sharing your queries with the search engine as you type. + ## Preferences - Contrast Control. preferences-contrast-control-fixed-color2 = View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/e8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/e8… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] 2 commits: BB 44629: Update the search settings for Base Browser.
by morgan (＠morgan) 04 Aug '26

04 Aug '26

morgan pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 09b63226 by Henry Wilkes at 2026-08-04T11:52:11+00:00 BB 44629: Update the search settings for Base Browser. - - - - - f1546785 by Henry Wilkes at 2026-08-04T11:52:11+00:00 fixup! Base Browser strings BB 44629: Add a search suggestions banner. - - - - - 2 changed files: - browser/components/preferences/config/search.mjs - toolkit/locales/en-US/toolkit/global/base-browser.ftl Changes: ===================================== browser/components/preferences/config/search.mjs ===================================== @@ -271,6 +271,11 @@ Preferences.addSetting({ pref: "browser.urlbar.trending.featureGate", }); +// Add a warning banner. tor-browser#44629. +Preferences.addSetting({ + id: "searchSuggestionsWarningBanner", +}); + // The show search suggestion box behaves differently depending on whether the // separate search bar is shown. When the separate search bar is shown, it // controls just the search suggestion preference, and the @@ -1147,6 +1152,16 @@ SettingGroupManager.registerGroups({ l10nId: "search-suggestions-header-2", headingLevel: 2, items: [ + // Add a warning banner. tor-browser#44629. + { + id: "searchSuggestionsWarningBanner", + l10nId: "search-suggestions-warning-banner", + control: "moz-message-bar", + controlAttrs: { + role: "status", + type: "warning", + }, + }, { id: "suggestionsInSearchFieldsCheckbox", l10nId: "search-show-suggestions-option", ===================================== toolkit/locales/en-US/toolkit/global/base-browser.ftl ===================================== @@ -110,6 +110,11 @@ browser-layout-show-sidebar-limited = .label = Show sidebar .description = Quickly access bookmarks and more without leaving your main view. +## Preferences - Search suggestions. + +search-suggestions-warning-banner = + .message = Turning this on reduces your privacy by sharing your queries with the search engine as you type. + ## Preferences - Contrast Control. preferences-contrast-control-fixed-color2 = View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/5504dc… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/5504dc… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] fixup! Firefox preference overrides.
by morgan (＠morgan) 04 Aug '26

04 Aug '26

morgan pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: e84efe02 by Henry Wilkes at 2026-08-04T11:50:12+00:00 fixup! Firefox preference overrides. BB 45123: Disable profile backup service. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -130,6 +130,9 @@ pref("browser.pagethumbnails.capturing_disabled", true); // Users can still opt-in if they wish. pref("browser.backup.enabled", false); pref("browser.backup.scheduled.enabled", false); +// tor-browser#45123: Disable the profile automated backup and restore service. +pref("browser.backup.archive.enabled", false); +pref("browser.backup.restore.enabled", false); // Empty clipboard content from private windows on exit (tor-browser#42154) pref("browser.privatebrowsing.preserveClipboard", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/e84… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/e84… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! Firefox preference overrides.
by morgan (＠morgan) 04 Aug '26

04 Aug '26

morgan pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 5504dca0 by Henry Wilkes at 2026-08-04T11:48:29+00:00 fixup! Firefox preference overrides. BB 45123: Disable profile backup service. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -130,6 +130,9 @@ pref("browser.pagethumbnails.capturing_disabled", true); // Users can still opt-in if they wish. pref("browser.backup.enabled", false); pref("browser.backup.scheduled.enabled", false); +// tor-browser#45123: Disable the profile automated backup and restore service. +pref("browser.backup.archive.enabled", false); +pref("browser.backup.restore.enabled", false); // Empty clipboard content from private windows on exit (tor-browser#42154) pref("browser.privatebrowsing.preserveClipboard", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5504dca… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5504dca… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] 3 commits: fixup! TB 40562: Added Tor Browser preferences to 000-tor-browser.js
by morgan (＠morgan) 04 Aug '26

04 Aug '26

morgan pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 880137e4 by Henry Wilkes at 2026-08-04T11:41:38+00:00 fixup! TB 40562: Added Tor Browser preferences to 000-tor-browser.js TB 45178: Update the support page to the new support URL. TB 45179: Update the feedback page to the new support URL. - - - - - b901ba66 by Henry Wilkes at 2026-08-04T11:41:38+00:00 fixup! TB 2176: Rebrand Firefox to TorBrowser TB 45178: Update the support page to the new URL. - - - - - 6f810e0a by Henry Wilkes at 2026-08-04T11:41:38+00:00 TB 45178: Update support settings for Tor Browser. - - - - - 3 changed files: - browser/app/profile/000-tor-browser.js - browser/base/content/aboutDialog.xhtml - browser/components/preferences/config/about-firefox.mjs Changes: ===================================== browser/app/profile/000-tor-browser.js ===================================== @@ -3,7 +3,7 @@ pref("app.update.notifyDuringDownload", true); pref("app.update.badgeWaitTime", 0); // point to our feedback url rather than Mozilla's -pref("app.feedback.baseURL", "https://support.torproject.org/%LOCALE%/misc/bug-or-feedback/"); +pref("app.feedback.baseURL", "https://support.torproject.org/%LOCALE/get-in-touch/bug-or-feedback"); pref("browser.shell.checkDefaultBrowser", false); @@ -49,7 +49,7 @@ pref("extensions.torbutton.use_nontor_proxy", false); pref("browser.startup.homepage", "about:tor"); // General browser support url. tor-browser#43864 and tor-browser#40899. -pref("browser.base-browser-support-url", "https://support.torproject.org/tbb"); +pref("browser.base-browser-support-url", "https://support.torproject.org/tor-browser"); // tor-browser#40701: Add new download warning pref("browser.download.showTorWarning", true); ===================================== browser/base/content/aboutDialog.xhtml ===================================== @@ -153,7 +153,7 @@ <label is="text-link" class="bottom-link" useoriginprincipal="true" href="about:license" data-l10n-id="bottomLinks-license"/> <label is="text-link" class="bottom-link" href="https://www.mozilla.org/about/legal/terms/firefox/" data-l10n-id="bottom-links-terms"/> <label is="text-link" class="bottom-link" href="https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm…" data-l10n-id="bottom-links-privacy"/> - <label is="text-link" class="bottom-link visible-bottom-link" href="https://support.torproject.org/" data-l10n-id="about-dialog-questions-link"></label> + <label is="text-link" class="bottom-link visible-bottom-link" href="https://support.torproject.org/tor-browser" data-l10n-id="about-dialog-questions-link"></label> <label is="text-link" class="bottom-link visible-bottom-link" href="https://community.torproject.org/relay/" data-l10n-id="about-dialog-grow-tor-network-link"></label> <label is="text-link" class="bottom-link visible-bottom-link" useoriginprincipal="true" href="about:license" data-l10n-id="about-dialog-browser-license-link"></label> ===================================== browser/components/preferences/config/about-firefox.mjs ===================================== @@ -573,7 +573,8 @@ SettingGroupManager.registerGroups({ l10nId: "support-share-ideas", control: "moz-box-link", controlAttrs: { - href: "https://connect.mozilla.org/", + // Update the URL for Tor Browser. tor-browser#45178. + href: "https://forum.torproject.org", }, }, ], View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/d34c34… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/d34c34… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] 2 commits: fixup! Firefox preference overrides.
by morgan (＠morgan) 04 Aug '26

04 Aug '26

morgan pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 0c752bd5 by Henry Wilkes at 2026-08-04T11:30:19+00:00 fixup! Firefox preference overrides. BB 45171: Disable split view. - - - - - 0920c05a by Henry Wilkes at 2026-08-04T11:30:19+00:00 BB 45171: Disable split view. - - - - - 2 changed files: - browser/app/profile/001-base-profile.js - browser/base/content/browser-sets.inc.xhtml Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -1126,3 +1126,6 @@ pref("browser.laterrun.enabled", false, locked); // tor-browser#44123: Never trim the protocol off of URLs. pref("browser.urlbar.trimURLs", false); + +// tor-browser#45171: Disabled split view which is janky. +pref("browser.tabs.splitView.enabled", false); ===================================== browser/base/content/browser-sets.inc.xhtml ===================================== @@ -86,8 +86,8 @@ <command id="Browser:NextTab" /> <command id="Browser:PrevTab" /> <command id="Browser:ShowAllTabs" /> - <command id="Browser:AddTabSplitView" /> - <command id="Browser:SeparateTabSplitView" /> + <command id="Browser:AddTabSplitView" disabled="true" /> + <command id="Browser:SeparateTabSplitView" disabled="true" /> <command id="cmd_fullZoomReduce" /> <command id="cmd_fullZoomEnlarge" /> <command id="cmd_fullZoomReset" /> View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/cc… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/cc… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] 2 commits: fixup! Firefox preference overrides.
by morgan (＠morgan) 04 Aug '26

04 Aug '26

morgan pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 9f75e57b by Henry Wilkes at 2026-08-04T11:21:20+00:00 fixup! Firefox preference overrides. BB 45171: Disable split view. - - - - - d34c34bd by Henry Wilkes at 2026-08-04T11:21:20+00:00 BB 45171: Disable split view. - - - - - 2 changed files: - browser/app/profile/001-base-profile.js - browser/base/content/browser-sets.inc.xhtml Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -1130,3 +1130,6 @@ pref("browser.laterrun.enabled", false, locked); // tor-browser#44123: Never trim the protocol off of URLs. pref("browser.urlbar.trimURLs", false); + +// tor-browser#45171: Disabled split view which is janky. +pref("browser.tabs.splitView.enabled", false); ===================================== browser/base/content/browser-sets.inc.xhtml ===================================== @@ -86,8 +86,8 @@ <command id="Browser:NextTab" /> <command id="Browser:PrevTab" /> <command id="Browser:ShowAllTabs" /> - <command id="Browser:AddTabSplitView" /> - <command id="Browser:SeparateTabSplitView" /> + <command id="Browser:AddTabSplitView" disabled="true" /> + <command id="Browser:SeparateTabSplitView" disabled="true" /> <command id="cmd_fullZoomReduce" /> <command id="cmd_fullZoomEnlarge" /> <command id="cmd_fullZoomReset" /> View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/7a387a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/7a387a… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0