September 2026 - tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser][tor-browser-153.3.0esr-16.0-1] 2 commits: BB 45249: Remove the duplicate "Verified by" from the old site identity panel.
by henry (＠henry) 17 Sep '26

17 Sep '26

henry pushed to branch tor-browser-153.3.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 18e1b0a6 by Henry Wilkes at 2026-09-17T16:47:40+01:00 BB 45249: Remove the duplicate "Verified by" from the old site identity panel. - - - - - 088c60ee by Henry Wilkes at 2026-09-17T16:49:05+01:00 fixup! TB 23247: Communicating security expectations for .onion TB 45249: Hide verifier information when it is empty. Special thanks to @soni. - - - - - 3 changed files: - browser/base/content/browser-siteIdentity.js - browser/components/controlcenter/content/securityInformation.inc.xhtml - browser/themes/shared/controlcenter/panel.css Changes: ===================================== browser/base/content/browser-siteIdentity.js ===================================== @@ -1203,16 +1203,21 @@ var gIdentityHandler = { let owner = ""; // Fill in the CA name if we have a valid TLS certificate. - if (this._isSecureConnection || this._isCertUserOverridden) { - verifier = this._identityIconLabel.tooltipText; + if ( + this._secInfo && + (this._isSecureConnection || this._isCertUserOverridden) + ) { + // Remove "Verified by " from the verifier string. tor-browser#45249. + verifier = this.getIdentityData().caOrg; } // Fill in organization information if we have a valid EV certificate or // QWAC. - if (this._isEV || this._qwac) { + if (this._secInfo && (this._isEV || this._qwac)) { let iData = this.getIdentityData(this._qwac || this._secInfo.serverCert); owner = iData.subjectOrg; - verifier = this._identityIconLabel.tooltipText; + // Remove "Verified by " from the verifier string. tor-browser#45249. + verifier = iData.caOrg; // Build an appropriate supplemental block out of whatever location data we have if (iData.city) { @@ -1263,6 +1268,12 @@ var gIdentityHandler = { this._identityPopupContentOwner.textContent = owner; this._identityPopupContentSupp.textContent = supplemental; this._identityPopupContentVerif.textContent = verifier; + + // Hide "Verified by" section if this is empty for an onion host. + // tor-browser#45249. + document + .getElementById("identity-popup-securityView-extended-info") + .toggleAttribute("noverifier", this._uriIsOnionHost && verifier === ""); }, setURI(uri) { ===================================== browser/components/controlcenter/content/securityInformation.inc.xhtml ===================================== @@ -36,9 +36,11 @@ when-connection="secure-ev secure-etsi"/> <description id="identity-popup-content-verifier-label" when-connection="secure secure-ev secure-etsi" + when-verifier="true" data-l10n-id="identity-verifier-label"/> <description id="identity-popup-content-verifier" when-connection="secure secure-ev secure-etsi" + when-verifier="true" class="header"/> <description id="identity-popup-content-etsi" when-connection="secure-etsi" ===================================== browser/themes/shared/controlcenter/panel.css ===================================== @@ -109,6 +109,11 @@ display: none; } +/* Hide verifier information. tor-browser#45249. */ +#identity-popup-securityView-extended-info[noverifier] description[when-verifier] { + display: none !important; +} + /* Make sure hidden elements don't accidentally become visible from one of the above selectors (see Bug 1194258) */ #identity-popup [hidden] { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/fd1c19… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/fd1c19… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41877: Check windows-app-sdk in list_toolchain_updates
by boklm (＠boklm) 17 Sep '26

17 Sep '26

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 95c6131b by Nicolas Vigier at 2026-09-17T16:45:52+02:00 Bug 41877: Check windows-app-sdk in list_toolchain_updates - - - - - 2 changed files: - projects/windows-app-sdk/config - tools/toolchain-updates/extract-firefox-versions-infos Changes: ===================================== projects/windows-app-sdk/config ===================================== @@ -3,6 +3,7 @@ filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("co version: '2.2.0' var: + windowsappsdk_url: https://aka.ms/windowsappsdk/2.2/2.2.0/Microsoft.WindowsAppRuntime.Redist.2… windowsappsdk_sha256sum: ab078d5b1d730f093ed4e1a33d0e709d1dbca85fa4a10f546cc6824e3b48057f short_version: 2 @@ -16,5 +17,5 @@ targets: input_files: - name: windowsappsdk-redist - URL: https://aka.ms/windowsappsdk/2.2/2.2.0/Microsoft.WindowsAppRuntime.Redist.2… + URL: '[% c("var/windowsappsdk_url") %]' sha256sum: '[% c("var/windowsappsdk_sha256sum") %]' ===================================== tools/toolchain-updates/extract-firefox-versions-infos ===================================== @@ -282,16 +282,12 @@ sub get_toolchains_fetch_info { 'wasi-sysroot' => 'wasi-sdk', 'mingw-w64-clang' => 'mingw-w64', ); - # projects which have an different rbm option than git_hash - my %rbm_option = ( - 'windows-app-sdk' => 'var/windowsappsdk_sha256sum', - ); my $d = YAML::XS::LoadFile('taskcluster/kinds/fetch/toolchains.yml'); foreach my $name (@projects) { set_rbm_info($name, { project => $name, - option => ($rbm_option{$name} ? $rbm_option{$name} : 'git_hash'), + option => 'git_hash', }); my $toolchain_name = $toolchain_names{$name} ? $toolchain_names{$name} : $name; my $revision = $d->{$toolchain_name}{fetch}{revision}; @@ -323,6 +319,33 @@ sub get_toolchains_fetch_info { } else { set_error('windows-rs-sha256sum'); } + + my %winappsdk_rbm_opt = ( + sha256sum => "var/windowsappsdk_sha256sum", + url => "var/windowsappsdk_url", + version => "version", + short_version => "var/short_version", + ); + my %winappsdk_vals = ( + sha256sum => $d->{'windowsappsdk-redist'}{fetch}{sha256}, + url => $d->{'windowsappsdk-redist'}{fetch}{url}, + ); + ($winappsdk_vals{version}) = + $winappsdk_vals{url} =~ m|windowsappsdk/[^/]+/([^/]+)/Microsoft\.WindowsAppRuntime\.Redist|; + my $toolchain_misc = YAML::XS::LoadFile('taskcluster/kinds/toolchain/misc.yml'); + (undef, $winappsdk_vals{short_version}) = + @{$toolchain_misc->{'win64-WindowsAppSDK'}{run}{arguments}}; + foreach my $name (sort keys %winappsdk_rbm_opt) { + set_rbm_info("windows-app-sdk-$name", { + project => 'windows-app-sdk', + option => $winappsdk_rbm_opt{$name}, + }); + if ($winappsdk_vals{$name}) { + set_version_info("windows-app-sdk-$name", $winappsdk_vals{$name}); + } else { + set_error("windows-app-sdk-$name"); + } + } } ## Extract infos from python/mozboot/mozboot/android.py View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41878: Update the Windows app SDK to 2.2.
by Pier Angelo Vendrame (＠pierov) 17 Sep '26

17 Sep '26

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: d38ce195 by Pier Angelo Vendrame at 2026-09-17T15:38:13+02:00 Bug 41878: Update the Windows app SDK to 2.2. - - - - - 2 changed files: - projects/windows-app-sdk/build - projects/windows-app-sdk/config Changes: ===================================== projects/windows-app-sdk/build ===================================== @@ -10,7 +10,7 @@ unzip $rootdir/[% c('input_files_by_name/windowsappsdk-redist') %] target_folder_name=$distdir ARCH_SUFFIX=[% c("var/zip_arch") %] -SHORT_VERSION=[% c("version") %] +SHORT_VERSION=[% c("var/short_version") %] unzip MSIX/win10-${ARCH_SUFFIX}/Microsoft.WindowsAppRuntime.${SHORT_VERSION}.msix @@ -25,6 +25,8 @@ cp Microsoft.UI.Composition.OSSupport.dll $target_folder_name cp Microsoft.UI.Input.dll $target_folder_name cp Microsoft.UI.Windowing.Core.dll $target_folder_name cp Microsoft.UI.Windowing.dll $target_folder_name +cp Microsoft.WindowsAppRuntime.dll $target_folder_name +cp Microsoft.WindowsAppRuntime.Insights.Resource.dll $target_folder_name cd $rootdir [% c('tar', { ===================================== projects/windows-app-sdk/config ===================================== @@ -1,9 +1,10 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' -version: '1.8' +version: '2.2.0' var: - windowsappsdk_sha256sum: a2dccd1d4d3b47857e1f4c36a140b976ff2da61fff8dc9fcf029cd8e829a61fc + windowsappsdk_sha256sum: ab078d5b1d730f093ed4e1a33d0e709d1dbca85fa4a10f546cc6824e3b48057f + short_version: 2 targets: windows-i686: @@ -15,5 +16,5 @@ targets: input_files: - name: windowsappsdk-redist - URL: https://aka.ms/windowsappsdk/1.8/1.8.250916003/Microsoft.WindowsAppRuntime.… + URL: https://aka.ms/windowsappsdk/2.2/2.2.0/Microsoft.WindowsAppRuntime.Redist.2… sha256sum: '[% c("var/windowsappsdk_sha256sum") %]' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser] Pushed new branch mullvad-browser-155.0a1-17.0-1
by boklm (＠boklm) 17 Sep '26

17 Sep '26

boklm pushed new branch mullvad-browser-155.0a1-17.0-1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag base-browser-155.0a1-17.0-1-build1
by boklm (＠boklm) 17 Sep '26

17 Sep '26

boklm pushed new tag base-browser-155.0a1-17.0-1-build1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/base-… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.3.0esr-16.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 17 Sep '26

17 Sep '26

Pier Angelo Vendrame pushed to branch mullvad-browser-153.3.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 8f834f52 by Pier Angelo Vendrame at 2026-09-17T12:43:38+02:00 fixup! Firefox preference overrides. BB 45073: Pref review, part 1: 000-tor-browser.js. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -34,7 +34,12 @@ pref("browser.privatebrowsing.resetPBM.enabled", false, locked); pref("app.update.auto", true); #endif -// Try to nag a bit more about updates: Pop up a restart dialog an hour after the initial dialog +pref("app.update.notifyDuringDownload", true); + +// Try to nag a bit more about updates. +// Show the badge immediately on the hamburger menu... +pref("app.update.badgeWaitTime", 0); +// ... and pop up a restart dialog an hour after the initial dialog. pref("app.update.promptWaitTime", 3600); #ifndef XP_MACOSX View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/8f8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/8f8… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.3.0esr-16.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 17 Sep '26

17 Sep '26

Pier Angelo Vendrame pushed to branch mullvad-browser-153.3.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 10371358 by Pier Angelo Vendrame at 2026-09-17T12:42:56+02:00 fixup! Firefox preference overrides. TB 45276: Deprecate the Android-specific pref file. We are importing our main preference file anyway, which has higher visibility to all devs. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -26,11 +26,13 @@ pref("browser.aboutwelcome.enabled", false); pref("browser.privatebrowsing.resetPBM.enabled", false, locked); #endif +#ifndef ANDROID // Bug 41668: allow users to apply updates. This is set also in firefox.js for // all platforms, except for Windows. As explained on firefox.js, Firefox uses a // per-installation preference on Windows. However, we patch this behavior, and // we set this preference also for Windows. pref("app.update.auto", true); +#endif // Try to nag a bit more about updates: Pop up a restart dialog an hour after the initial dialog pref("app.update.promptWaitTime", 3600); @@ -693,6 +695,11 @@ pref("media.gmp-widevinecdm.visible", false); pref("media.gmp-widevinecdm.enabled", false); pref("media.eme.enabled", false); pref("media.mediadrm-widevinecdm.visible", false); +#ifdef ANDROID +// tor-browser#29859: no HLS (HTTP Live Streaming) support for now due to +// browser freezing. Notice that HLS is enabled only on Android on Firefox. +pref("media.hls.enabled", false); +#endif // The in-browser debugger for debugging chrome code is not coping with our // restrictive DNS look-up policy. We use "127.0.0.1" instead of "localhost" as // a workaround. See bug 16523 for more details. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/103… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/103… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.3.0esr-16.0-1] fixup! Base Browser's .mozconfigs.
by Pier Angelo Vendrame (＠pierov) 17 Sep '26

17 Sep '26

Pier Angelo Vendrame pushed to branch mullvad-browser-153.3.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 3d40341b by Pier Angelo Vendrame at 2026-09-17T12:40:45+02:00 fixup! Base Browser's .mozconfigs. BB 45336: Add --disable-proxy-direct-failover. - - - - - 2 changed files: - browser/config/mozconfigs/base-browser - browser/config/mozconfigs/base-browser-android Changes: ===================================== browser/config/mozconfigs/base-browser ===================================== @@ -25,6 +25,8 @@ ac_add_options --disable-debug ac_add_options --disable-crashreporter ac_add_options --disable-parental-controls ac_add_options --enable-proxy-bypass-protection +# tor-browser#45336 +ac_add_options --disable-proxy-direct-failover # See bugs #30575 and #32418: system policies are harmful either because they # could allow proxy bypass, and override a number of other preferences we set ac_add_options --disable-system-policies ===================================== browser/config/mozconfigs/base-browser-android ===================================== @@ -25,6 +25,8 @@ ac_add_options --disable-webrtc ac_add_options --disable-parental-controls ac_add_options --enable-proxy-bypass-protection +# tor-browser#45336 +ac_add_options --disable-proxy-direct-failover ac_add_options --disable-system-policies # See tor-browser#41131 View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/3d4… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/3d4… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.3.0esr-16.0-1] fixup! Base Browser's .mozconfigs.
by Pier Angelo Vendrame (＠pierov) 17 Sep '26

17 Sep '26

Pier Angelo Vendrame pushed to branch tor-browser-153.3.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: fd1c1914 by Pier Angelo Vendrame at 2026-09-17T12:32:26+02:00 fixup! Base Browser's .mozconfigs. BB 45336: Add --disable-proxy-direct-failover. - - - - - 2 changed files: - browser/config/mozconfigs/base-browser - browser/config/mozconfigs/base-browser-android Changes: ===================================== browser/config/mozconfigs/base-browser ===================================== @@ -27,6 +27,8 @@ ac_add_options --disable-crashreporter ac_add_options --disable-webrtc ac_add_options --disable-parental-controls ac_add_options --enable-proxy-bypass-protection +# tor-browser#45336 +ac_add_options --disable-proxy-direct-failover # See bugs #30575 and #32418: system policies are harmful either because they # could allow proxy bypass, and override a number of other preferences we set ac_add_options --disable-system-policies ===================================== browser/config/mozconfigs/base-browser-android ===================================== @@ -25,6 +25,8 @@ ac_add_options --disable-webrtc ac_add_options --disable-parental-controls ac_add_options --enable-proxy-bypass-protection +# tor-browser#45336 +ac_add_options --disable-proxy-direct-failover ac_add_options --disable-system-policies # See tor-browser#41131 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/fd1c191… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/fd1c191… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.3.0esr-16.0-1] fixup! BB 41930: Remove the UI to customize accept_languages.
by henry (＠henry) 17 Sep '26

17 Sep '26

henry pushed to branch tor-browser-153.3.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 3429a71f by Henry Wilkes at 2026-09-16T17:36:49+01:00 fixup! BB 41930: Remove the UI to customize accept_languages. TB 45177: Remove websiteSpoofEnglishControl. - - - - - 3 changed files: - browser/components/preferences/config/languages.mjs - browser/components/preferences/main.inc.xhtml - browser/components/preferences/main.js Changes: ===================================== browser/components/preferences/config/languages.mjs ===================================== @@ -951,15 +951,6 @@ SettingGroupManager.registerGroups({ }, ], }, - // TODO: Remove once we switch to the new settings redesign. tor-browser#45177 - websiteSpoofEnglishControl: { - items: [ - { - id: "websiteSpoofEnglish", - l10nId: "languages-customize-spoof-english", - }, - ], - }, translations: { inProgress: true, subcategory: "translations", ===================================== browser/components/preferences/main.inc.xhtml ===================================== @@ -103,9 +103,6 @@ " /> --> </hbox> -  - <html:setting-group groupid="websiteSpoofEnglishControl"></html:setting-group> <checkbox id="useSystemLocale" hidden="true" data-l10n-id="use-system-locale" ===================================== browser/components/preferences/main.js ===================================== @@ -831,7 +831,6 @@ var gMainPane = { initSettingGroup("fonts"); initSettingGroup("browserLanguage"); initSettingGroup("websiteLanguage"); - initSettingGroup("websiteSpoofEnglishControl"); initSettingGroup("browsing"); initSettingGroup("keyboardAndScrolling"); initSettingGroup("motionAndLink"); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3429a71… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3429a71… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0