September 2026 - tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-update-responses][main] 6 commits: release: new version, 15.0.23 (linux-i686)
by ma1 (＠ma1) 15 Sep '26

15 Sep '26

ma1 pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: a213715b by hackademix at 2026-09-15T14:05:32+02:00 release: new version, 15.0.23 (linux-i686) - - - - - d71249a5 by hackademix at 2026-09-15T14:05:34+02:00 release: new version, 15.0.23 (linux-x86_64) - - - - - 8b49c0a6 by hackademix at 2026-09-15T14:05:36+02:00 release: new version, 15.0.23 (macos) - - - - - c78346f7 by hackademix at 2026-09-15T14:05:38+02:00 release: new version, 15.0.23 (windows-i686) - - - - - a1be3099 by hackademix at 2026-09-15T14:05:39+02:00 release: new version, 15.0.23 (windows-x86_64) - - - - - f400949a by hackademix at 2026-09-15T14:05:42+02:00 release: new version, 15.0.23 - - - - - 38 changed files: - update_3/release/download-android-aarch64.json - update_3/release/download-android-armv7.json - update_3/release/download-android-x86.json - update_3/release/download-android-x86_64.json - update_3/release/download-linux-i686.json - update_3/release/download-linux-x86_64.json - update_3/release/download-macos.json - update_3/release/download-windows-i686.json - update_3/release/download-windows-x86_64.json - update_3/release/downloads.json - update_3/release/linux-i686/.htaccess - − update_3/release/linux-i686/update-15.0.19-15.0.22-linux-i686.xml - update_3/release/linux-i686/update-15.0.20-15.0.22-linux-i686.xml → update_3/release/linux-i686/update-15.0.20-15.0.23-linux-i686.xml - update_3/release/linux-i686/update-15.0.21-15.0.22-linux-i686.xml → update_3/release/linux-i686/update-15.0.21-15.0.23-linux-i686.xml - + update_3/release/linux-i686/update-15.0.22-15.0.23-linux-i686.xml - update_3/release/linux-i686/update-15.0.22-linux-i686.xml → update_3/release/linux-i686/update-15.0.23-linux-i686.xml - update_3/release/linux-x86_64/.htaccess - − update_3/release/linux-x86_64/update-15.0.19-15.0.22-linux-x86_64.xml - update_3/release/linux-x86_64/update-15.0.20-15.0.22-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.20-15.0.23-linux-x86_64.xml - − update_3/release/linux-x86_64/update-15.0.21-15.0.22-linux-x86_64.xml - + update_3/release/linux-x86_64/update-15.0.21-15.0.23-linux-x86_64.xml - + update_3/release/linux-x86_64/update-15.0.22-15.0.23-linux-x86_64.xml - update_3/release/linux-x86_64/update-15.0.22-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.23-linux-x86_64.xml - update_3/release/macos/.htaccess - update_3/release/macos/update-15.0.19-15.0.22-macos.xml → update_3/release/macos/update-15.0.20-15.0.23-macos.xml - update_3/release/macos/update-15.0.20-15.0.22-macos.xml → update_3/release/macos/update-15.0.21-15.0.23-macos.xml - update_3/release/macos/update-15.0.21-15.0.22-macos.xml → update_3/release/macos/update-15.0.22-15.0.23-macos.xml - update_3/release/macos/update-15.0.22-macos.xml → update_3/release/macos/update-15.0.23-macos.xml - update_3/release/windows-i686/.htaccess - update_3/release/windows-i686/update-15.0.19-15.0.22-windows-i686.xml → update_3/release/windows-i686/update-15.0.20-15.0.23-windows-i686.xml - update_3/release/windows-i686/update-15.0.20-15.0.22-windows-i686.xml → update_3/release/windows-i686/update-15.0.21-15.0.23-windows-i686.xml - update_3/release/windows-i686/update-15.0.21-15.0.22-windows-i686.xml → update_3/release/windows-i686/update-15.0.22-15.0.23-windows-i686.xml - update_3/release/windows-i686/update-15.0.22-windows-i686.xml → update_3/release/windows-i686/update-15.0.23-windows-i686.xml - update_3/release/windows-x86_64/.htaccess - update_3/release/windows-x86_64/update-15.0.20-15.0.22-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.20-15.0.23-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.21-15.0.22-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.21-15.0.23-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.19-15.0.22-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.22-15.0.23-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.22-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.23-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.3.0esr-16.0-1] 36 commits: Add CI for Mullvad Browser
by morgan (＠morgan) 15 Sep '26

15 Sep '26

morgan pushed to branch mullvad-browser-153.3.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: be97d13c by Henry Wilkes at 2026-09-14T11:42:13+02:00 Add CI for Mullvad Browser - - - - - cfacf589 by Pier Angelo Vendrame at 2026-09-14T11:42:13+02:00 MB 38: Mullvad Browser configuration - - - - - 293d3ad1 by Pier Angelo Vendrame at 2026-09-14T11:43:39+02:00 fixup! MB 38: Mullvad Browser configuration MB 537: Migrate from Mullvad to Quad9 DoH. - - - - - 38febb28 by Pier Angelo Vendrame at 2026-09-14T11:43:39+02:00 MB 1: Mullvad Browser branding See also: mullvad-browser#5: Product name and directory customization mullvad-browser#12: Create new branding directories and integrate Mullvad icons+branding mullvad-browser#14: Remove Default Built-in bookmarks mullvad-browser#35: Add custom PDF icons for Windows builds mullvad-browser#48: Replace Mozilla copyright and legal trademarks in mullvadbrowser.exe metadata mullvad-browser#51: Update trademark string mullvad-browser#104: Update shipped dll metadata copyright/licensing info mullvad-browser#107: Add alpha and nightly icons - - - - - a7e45362 by Pier Angelo Vendrame at 2026-09-14T11:43:39+02:00 fixup! MB 1: Mullvad Browser branding No issue: fix lint. - - - - - 512968c6 by Pier Angelo Vendrame at 2026-09-14T11:43:39+02:00 fixup! MB 1: Mullvad Browser branding MB 575: Remove an unused customization. That block is removed from about:license in a BB commit. - - - - - ae3aec5f by Henry Wilkes at 2026-09-14T11:43:40+02:00 Mullvad Browser strings This commit adds strings needed by the following Mullvad Browser patches. - - - - - 974c1cd5 by Henry Wilkes at 2026-09-14T11:43:40+02:00 fixup! Mullvad Browser strings MB 538: Strings for the DoH notification. - - - - - b01b474f by Pier Angelo Vendrame at 2026-09-14T11:43:40+02:00 fixup! Mullvad Browser strings MB 549: Customize the DoH preferences UI. - - - - - 8028d7f2 by Morgan at 2026-09-14T11:43:41+02:00 fixup! Mullvad Browser strings No issue: fix typo - - - - - a311ca97 by Pier Angelo Vendrame at 2026-09-14T11:43:41+02:00 MB 20: Allow packaged-addons in PBM. We install a few addons from the distribution directory, but they are not automatically enabled for PBM mode. This commit modifies the code that installs them to also add the PBM permission to the known ones. - - - - - 4071cf8a by Pier Angelo Vendrame at 2026-09-14T11:43:41+02:00 MB 63: Customize some about pages for Mullvad Browser Also: mullvad-browser#57: Purge unneeded about: pages - - - - - 5ef0e670 by Pier Angelo Vendrame at 2026-09-14T11:43:41+02:00 MB 37: Customization for the about dialog - - - - - 8976ba3d by Henry Wilkes at 2026-09-14T11:43:42+02:00 MB 39: Add home page about:mullvad-browser - - - - - 2ef1b2e6 by hackademix at 2026-09-14T11:43:42+02:00 MB 97: Remove UI cues to install new extensions. - - - - - 0984344d by hackademix at 2026-09-14T11:43:42+02:00 MB 47: uBlock Origin customization - - - - - bb9ab146 by Pier Angelo Vendrame at 2026-09-14T11:43:43+02:00 MB 21: Disable the password manager This commit disables the about:login page and removes the "Login and Password" section of about:preferences. We do not do anything to the real password manager of Firefox, that is in toolkit: it contains C++ parts that make it difficult to actually prevent it from being built.. Finally, we modify the the function that opens about:login to report an error in the console so that we can quickly get a backtrace to the code that tries to use it. - - - - - 436cd27d by Pier Angelo Vendrame at 2026-09-14T11:43:43+02:00 MB 112: Updater customization for Mullvad Browser MB 71: Set the updater base URL to Mullvad domain - - - - - 78191bde by Nicolas Vigier at 2026-09-14T11:43:43+02:00 MB 79: Add Mullvad Browser MAR signing keys MB 256: Add mullvad-browser nightly mar signing key - - - - - aa9386c1 by Pier Angelo Vendrame at 2026-09-14T11:43:43+02:00 MB 34: Hide unwanted setting controls in Mullvad Browser. - - - - - 2bcdb130 by hackademix at 2026-09-14T11:43:44+02:00 MB 163: Prevent uBlock Origin from being uninstalled/disabled - - - - - fa3cd8d0 by Pier Angelo Vendrame at 2026-09-14T11:43:44+02:00 MB 160: Disable the cookie exceptions button Besides disabling the "Delete on close checkbox", disable also the "Manage Exceptions" button when always using PBM. - - - - - 8f2229d8 by Richard Pospesel at 2026-09-14T11:43:44+02:00 MB 188: Customize Gitlab Issue and Merge templates - - - - - 43f3bf38 by rui hildt at 2026-09-14T11:43:44+02:00 MB 213: Customize the search engines list. - - - - - f5a21109 by hackademix at 2026-09-14T11:43:45+02:00 MB 214: Enable cross-tab identity leak protection in "quiet" mode - - - - - f6d6a1dc by Pier Angelo Vendrame at 2026-09-14T11:43:45+02:00 MB 320: Temporarily disable WebRTC and WDBA on Windows. WebRTC should be re-enabled when tor-browser#42758 is resolved, and and the default browser agent when in general we make this feature work again. - - - - - abc3f4a1 by Henry Wilkes at 2026-09-14T11:43:45+02:00 MB 329: Customize toolbar for mullvad-browser. - - - - - 4640c9a8 by Henry Wilkes at 2026-09-14T11:43:46+02:00 MB 419: Mullvad Browser migration procedures. This commit implements the the Mullvad Browser's version of _migrateUI. - - - - - 576498a6 by Pier Angelo Vendrame at 2026-09-14T11:43:46+02:00 fixup! MB 419: Mullvad Browser migration procedures. BB 45039: Make it easier to test ProfileDataUpgrader customization. - - - - - 10699168 by Pier Angelo Vendrame at 2026-09-14T11:43:46+02:00 fixup! MB 419: Mullvad Browser migration procedures. MB 537: Implement DoH migration. - - - - - cf4e6e6e by Henry Wilkes at 2026-09-14T11:43:46+02:00 MB 488: Adjust search engine removal notification for Mullvad Leta. - - - - - 3b3e97b6 by Pier Angelo Vendrame at 2026-09-14T11:43:47+02:00 MB 80: Enable Mullvad Browser as a default browser - - - - - 77304fb1 by Beatriz Rizental at 2026-09-14T11:43:47+02:00 MB 43564: Modify ./mach bootstrap for Mullvad Browser - - - - - c047819b by june wilde at 2026-09-14T11:43:47+02:00 MB 446: Selective Saving Mode Backend - - - - - 7cbc92eb by Henry Wilkes at 2026-09-14T11:43:48+02:00 MB 538: Mullvad DoH discontinued notification. - - - - - a7e3c19b by Pier Angelo Vendrame at 2026-09-14T11:43:48+02:00 MB 549: Customize the DoH preferences UI. - - - - - 278 changed files: - .gitlab/ci/jobs/update-translations.yml - .gitlab/issue_templates/000 Bug Report.md - .gitlab/issue_templates/010 Proposal.md - .gitlab/issue_templates/020 Web Compatibility.md - .gitlab/issue_templates/030 Test.md - .gitlab/issue_templates/040 Feature.md - .gitlab/issue_templates/041 Time-Gated Feature.md - .gitlab/issue_templates/051 Revert.md - + .gitlab/issue_templates/060 Rebase - Alpha.md - + .gitlab/issue_templates/061 Rebase - Stable.md - .gitlab/issue_templates/090 Emergency Security Issue.md - .gitlab/merge_request_templates/Default.md - + .gitlab/merge_request_templates/Rebase.md - browser/app/Makefile.in - browser/app/macbuild/Contents/Info.plist.in - browser/app/module.ver - browser/app/firefox.exe.manifest → browser/app/mullvadbrowser.exe.manifest - + browser/app/profile/000-mullvad-browser.js - browser/app/profile/001-base-profile.js - browser/base/content/aboutDialog.xhtml - browser/base/content/appmenu-viewcache.inc.xhtml - browser/base/content/browser-main.js - browser/base/content/browser-menubar.inc.xhtml - browser/base/content/browser-places.js - browser/base/content/browser.js - browser/base/content/browser.xhtml - browser/base/content/default-bookmarks.html - + browser/base/content/mullvadDoHNotification.js - browser/base/content/nsContextMenu.sys.mjs - browser/base/content/pageinfo/pageInfo.xhtml - browser/base/content/utilityOverlay.js - browser/base/jar.mn - browser/branding/branding-common.mozbuild - + browser/branding/mb-alpha/VisualElements_150.png - + browser/branding/mb-alpha/VisualElements_70.png - + browser/branding/mb-alpha/configure.sh - + browser/branding/mb-alpha/content/about-logo.png - + browser/branding/mb-alpha/content/about-logo.svg - + browser/branding/mb-alpha/content/about-logo(a)2x.png - + browser/branding/mb-alpha/content/about-wordmark.svg - + browser/branding/mb-alpha/content/about.png - + browser/branding/mb-alpha/content/aboutDialog.css - + browser/branding/mb-alpha/content/document_pdf.svg - + browser/branding/mb-alpha/content/firefox-wordmark.svg - + browser/branding/mb-alpha/content/icon128.png - + browser/branding/mb-alpha/content/icon16.png - + browser/branding/mb-alpha/content/icon256.png - + browser/branding/mb-alpha/content/icon32.png - + browser/branding/mb-alpha/content/icon48.png - + browser/branding/mb-alpha/content/icon64.png - + browser/branding/mb-alpha/content/jar.mn - + browser/branding/mb-alpha/content/moz.build - + browser/branding/mb-alpha/content/mullvad-branding.css - + browser/branding/mb-alpha/default128.png - + browser/branding/mb-alpha/default16.png - + browser/branding/mb-alpha/default22.png - + browser/branding/mb-alpha/default24.png - + browser/branding/mb-alpha/default256.png - + browser/branding/mb-alpha/default32.png - + browser/branding/mb-alpha/default48.png - + browser/branding/mb-alpha/default64.png - + browser/branding/mb-alpha/document.icns - + browser/branding/mb-alpha/document.ico - + browser/branding/mb-alpha/document_pdf.ico - + browser/branding/mb-alpha/firefox.icns - + browser/branding/mb-alpha/firefox.ico - + browser/branding/mb-alpha/firefox.svg - + browser/branding/mb-alpha/locales/en-US/brand.ftl - + browser/branding/mb-alpha/locales/en-US/brand.properties - + browser/branding/mb-alpha/locales/jar.mn - + browser/branding/mb-alpha/locales/moz.build - + browser/branding/mb-alpha/locales/mullvad-about-wordmark-en.ftl - + browser/branding/mb-alpha/moz.build - + browser/branding/mb-alpha/mullvadbrowser.VisualElementsManifest.xml - + browser/branding/mb-alpha/newtab.ico - + browser/branding/mb-alpha/newwindow.ico - + browser/branding/mb-alpha/pbmode.ico - + browser/branding/mb-alpha/pref/firefox-branding.js - + browser/branding/mb-nightly/VisualElements_150.png - + browser/branding/mb-nightly/VisualElements_70.png - + browser/branding/mb-nightly/configure.sh - + browser/branding/mb-nightly/content/about-logo.png - + browser/branding/mb-nightly/content/about-logo.svg - + browser/branding/mb-nightly/content/about-logo(a)2x.png - + browser/branding/mb-nightly/content/about-wordmark.svg - + browser/branding/mb-nightly/content/about.png - + browser/branding/mb-nightly/content/aboutDialog.css - + browser/branding/mb-nightly/content/document_pdf.svg - + browser/branding/mb-nightly/content/firefox-wordmark.svg - + browser/branding/mb-nightly/content/icon128.png - + browser/branding/mb-nightly/content/icon16.png - + browser/branding/mb-nightly/content/icon256.png - + browser/branding/mb-nightly/content/icon32.png - + browser/branding/mb-nightly/content/icon48.png - + browser/branding/mb-nightly/content/icon64.png - + browser/branding/mb-nightly/content/jar.mn - + browser/branding/mb-nightly/content/moz.build - + browser/branding/mb-nightly/content/mullvad-branding.css - + browser/branding/mb-nightly/default128.png - + browser/branding/mb-nightly/default16.png - + browser/branding/mb-nightly/default22.png - + browser/branding/mb-nightly/default24.png - + browser/branding/mb-nightly/default256.png - + browser/branding/mb-nightly/default32.png - + browser/branding/mb-nightly/default48.png - + browser/branding/mb-nightly/default64.png - + browser/branding/mb-nightly/document.icns - + browser/branding/mb-nightly/document.ico - + browser/branding/mb-nightly/document_pdf.ico - + browser/branding/mb-nightly/firefox.icns - + browser/branding/mb-nightly/firefox.ico - + browser/branding/mb-nightly/firefox.svg - + browser/branding/mb-nightly/locales/en-US/brand.ftl - + browser/branding/mb-nightly/locales/en-US/brand.properties - + browser/branding/mb-nightly/locales/jar.mn - + browser/branding/mb-nightly/locales/moz.build - + browser/branding/mb-nightly/locales/mullvad-about-wordmark-en.ftl - + browser/branding/mb-nightly/moz.build - + browser/branding/mb-nightly/mullvadbrowser.VisualElementsManifest.xml - + browser/branding/mb-nightly/newtab.ico - + browser/branding/mb-nightly/newwindow.ico - + browser/branding/mb-nightly/pbmode.ico - + browser/branding/mb-nightly/pref/firefox-branding.js - + browser/branding/mb-release/VisualElements_150.png - + browser/branding/mb-release/VisualElements_70.png - + browser/branding/mb-release/configure.sh - + browser/branding/mb-release/content/about-logo.png - + browser/branding/mb-release/content/about-logo.svg - + browser/branding/mb-release/content/about-logo(a)2x.png - + browser/branding/mb-release/content/about-wordmark.svg - + browser/branding/mb-release/content/about.png - + browser/branding/mb-release/content/aboutDialog.css - + browser/branding/mb-release/content/document_pdf.svg - + browser/branding/mb-release/content/firefox-wordmark.svg - + browser/branding/mb-release/content/icon128.png - + browser/branding/mb-release/content/icon16.png - + browser/branding/mb-release/content/icon256.png - + browser/branding/mb-release/content/icon32.png - + browser/branding/mb-release/content/icon48.png - + browser/branding/mb-release/content/icon64.png - + browser/branding/mb-release/content/jar.mn - + browser/branding/mb-release/content/moz.build - + browser/branding/mb-release/content/mullvad-branding.css - + browser/branding/mb-release/default128.png - + browser/branding/mb-release/default16.png - + browser/branding/mb-release/default22.png - + browser/branding/mb-release/default24.png - + browser/branding/mb-release/default256.png - + browser/branding/mb-release/default32.png - + browser/branding/mb-release/default48.png - + browser/branding/mb-release/default64.png - + browser/branding/mb-release/document.icns - + browser/branding/mb-release/document.ico - + browser/branding/mb-release/document_pdf.ico - + browser/branding/mb-release/firefox.icns - + browser/branding/mb-release/firefox.ico - + browser/branding/mb-release/firefox.svg - + browser/branding/mb-release/locales/en-US/brand.ftl - + browser/branding/mb-release/locales/en-US/brand.properties - + browser/branding/mb-release/locales/jar.mn - + browser/branding/mb-release/locales/moz.build - + browser/branding/mb-release/locales/mullvad-about-wordmark-en.ftl - + browser/branding/mb-release/moz.build - + browser/branding/mb-release/mullvadbrowser.VisualElementsManifest.xml - + browser/branding/mb-release/newtab.ico - + browser/branding/mb-release/newwindow.ico - + browser/branding/mb-release/pbmode.ico - + browser/branding/mb-release/pref/firefox-branding.js - browser/components/BrowserContentHandler.sys.mjs - browser/components/BrowserGlue.sys.mjs - browser/components/DesktopActorRegistry.sys.mjs - browser/components/ProfileDataUpgrader.sys.mjs - browser/components/about/AboutRedirector.cpp - browser/components/about/components.conf - browser/components/customizableui/CustomizableUI.sys.mjs - browser/components/moz.build - + browser/components/mullvad-browser/AboutMullvadBrowserChild.sys.mjs - + browser/components/mullvad-browser/AboutMullvadBrowserParent.sys.mjs - + browser/components/mullvad-browser/content/2728-sparkles.svg - + browser/components/mullvad-browser/content/aboutMullvadBrowser.css - + browser/components/mullvad-browser/content/aboutMullvadBrowser.html - + browser/components/mullvad-browser/content/aboutMullvadBrowser.js - + browser/components/mullvad-browser/jar.mn - + browser/components/mullvad-browser/moz.build - browser/components/preferences/config/passwords-autofill.mjs - browser/components/preferences/config/privacy.mjs - browser/components/preferences/config/search.mjs - browser/components/preferences/home.inc.xhtml - browser/components/preferences/preferences.js - browser/components/preferences/preferences.xhtml - browser/components/preferences/privacy.inc.xhtml - browser/components/preferences/search.inc.xhtml - browser/components/search/SearchUIUtils.sys.mjs - browser/components/shell/ShellService.sys.mjs - browser/components/shell/WindowsDefaultBrowser.cpp - browser/components/shell/nsWindowsShellService.cpp - browser/components/tabbrowser/NewTabPagePreloading.sys.mjs - + browser/components/tests/unit/test_profileDataUpgrade_mullvad_doh.js - browser/components/tests/unit/xpcshell.toml - browser/config/mozconfigs/base-browser - + browser/config/mozconfigs/mullvad-browser - browser/installer/package-manifest.in - browser/installer/windows/nsis/updater_append.ini - browser/locales/l10n.toml - browser/modules/HomePage.sys.mjs - browser/moz.build - browser/moz.configure - build/moz.configure/basebrowser-resources.configure - build/moz.configure/bootstrap.configure - config/create_rc.py - devtools/client/aboutdebugging/src/actions/runtimes.js - devtools/client/aboutdebugging/src/components/sidebar/Sidebar.js - devtools/client/jar.mn - devtools/client/themes/images/aboutdebugging-firefox-aurora.svg - devtools/client/themes/images/aboutdebugging-firefox-beta.svg - devtools/client/themes/images/aboutdebugging-firefox-logo.svg - devtools/client/themes/images/aboutdebugging-firefox-nightly.svg - devtools/client/themes/images/aboutdebugging-firefox-release.svg - + devtools/client/themes/images/aboutdebugging-mullvadbrowser-logo.svg - docshell/base/nsAboutRedirector.cpp - docshell/build/components.conf - moz.configure - mozconfig-linux-aarch64 - mozconfig-linux-aarch64-dev - mozconfig-linux-x86_64 - mozconfig-linux-x86_64-asan - mozconfig-linux-x86_64-dev - mozconfig-macos - mozconfig-macos-dev - mozconfig-windows-x86_64 - + other-licenses/nsis/Contrib/ApplicationID/Makefile - other-licenses/nsis/Contrib/ApplicationID/Set.cpp - + other-licenses/nsis/Contrib/CityHash/Makefile - python/mozboot/mozboot/bootstrap.py - python/mozbuild/mozbuild/backend/base.py - python/mozbuild/mozbuild/tbbutils.py - toolkit/components/aboutpdf/content/aboutPDF.html - toolkit/components/extensions/child/ext-storage.js - toolkit/components/extensions/parent/ext-storage.js - toolkit/components/moz.build - toolkit/components/passwordmgr/LoginHelper.sys.mjs - toolkit/components/remote/nsDBusRemoteClient.cpp - toolkit/components/remote/nsDBusRemoteServer.cpp - toolkit/components/search/SearchService.sys.mjs - toolkit/components/search/content/base-browser-search-engine-icons.json - toolkit/components/search/content/base-browser-search-engines.json - + toolkit/components/search/content/brave.svg - + toolkit/components/search/content/mojeek.ico - toolkit/components/search/tests/xpcshell/test_base_browser.js - toolkit/components/securitylevel/SecurityLevel.sys.mjs - + toolkit/components/selectivesavingmode/SelectiveSavingMode.manifest - + toolkit/components/selectivesavingmode/SelectiveSavingMode.sys.mjs - + toolkit/components/selectivesavingmode/components.conf - + toolkit/components/selectivesavingmode/content/broom-clean.svg - + toolkit/components/selectivesavingmode/content/broom-saved.svg - + toolkit/components/selectivesavingmode/jar.mn - + toolkit/components/selectivesavingmode/moz.build - + toolkit/components/selectivesavingmode/tests/xpcshell/test_selective_saving_mode.js - + toolkit/components/selectivesavingmode/tests/xpcshell/xpcshell.toml - + toolkit/content/aboutTelemetryMullvad.xhtml - toolkit/content/jar.mn - + toolkit/locales/en-US/toolkit/global/mullvad-browser.ftl - toolkit/mozapps/defaultagent/EventLog.h - toolkit/mozapps/defaultagent/SetDefaultBrowser.cpp - toolkit/mozapps/extensions/AddonManager.sys.mjs - toolkit/mozapps/extensions/content/aboutaddons.css - toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs - toolkit/mozapps/extensions/internal/XPIProvider.sys.mjs - toolkit/mozapps/update/updater/nightly_aurora_level3_primary.der - toolkit/mozapps/update/updater/nightly_aurora_level3_secondary.der - toolkit/mozapps/update/updater/release_primary.der - toolkit/mozapps/update/updater/release_secondary.der - + toolkit/themes/shared/icons/mullvadbrowser.png - toolkit/themes/shared/minimal-toolkit.jar.inc.mn - toolkit/xre/nsAppRunner.cpp - tools/lint/fluent-lint/exclusions.yml - widget/windows/WinTaskbar.cpp - widget/windows/moz.build The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/73… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/73… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41867: Update tails-dev email address in release prep templates
by ma1 (＠ma1) 15 Sep '26

15 Sep '26

ma1 pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 044afe82 by hackademix at 2026-09-15T10:09:53+02:00 Bug 41867: Update tails-dev email address in release prep templates - - - - - 2 changed files: - .gitlab/issue_templates/040 Release Prep - Tor Browser Alpha.md - .gitlab/issue_templates/041 Release Prep - Tor Browser Stable.md Changes: ===================================== .gitlab/issue_templates/040 Release Prep - Tor Browser Alpha.md ===================================== @@ -314,14 +314,14 @@ popd ### packagers - [ ] ***(Optional, only around build/packaging changes)*** Email packagers: - **Recipients** - - Tails dev mailing list: tails-dev(a)boum.org + - Tails dev mailing list: tails-dev(a)lists.torproject.org - Guardian Project: nathan(a)guardianproject.info - FreeBSD port: freebsd(a)sysctl.cz  - OpenBSD port: caspar(a)schutijser.com  - torbrowser-launcher: mail(a)asciiwolf.com  - Anti-Censorship: meskio(a)torproject.org  ``` - tails-dev(a)boum.org, nathan(a)guardianproject.info, freebsd(a)sysctl.cz, caspar(a)schutijser.com, mail(a)asciiwolf.com, meskio(a)torproject.org, + tails-dev(a)lists.torproject.org, nathan(a)guardianproject.info, freebsd(a)sysctl.cz, caspar(a)schutijser.com, mail(a)asciiwolf.com, meskio(a)torproject.org, ``` - **Subject** ``` ===================================== .gitlab/issue_templates/041 Release Prep - Tor Browser Stable.md ===================================== @@ -192,7 +192,7 @@ Tor Browser Stable is on the `maint-${TOR_BROWSER_MAJOR}.${TOR_BROWSER_MINOR}` b - [ ] Notify Tails - **Recipients** ``` - tails-dev(a)boum.org + tails-dev(a)lists.torproject.org ``` - **Subject** ``` View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser-update-responses][main] 4 commits: release: new version, 15.0.23 (linux-x86_64)
by ma1 (＠ma1) 15 Sep '26

15 Sep '26

ma1 pushed to branch main at The Tor Project / Applications / mullvad-browser-update-responses Commits: 4ca93890 by hackademix at 2026-09-15T08:54:35+02:00 release: new version, 15.0.23 (linux-x86_64) - - - - - fc51fde7 by hackademix at 2026-09-15T08:54:36+02:00 release: new version, 15.0.23 (macos) - - - - - d558e9b6 by hackademix at 2026-09-15T08:54:36+02:00 release: new version, 15.0.23 (windows-x86_64) - - - - - e85d7d49 by hackademix at 2026-09-15T08:54:37+02:00 release: new version, 15.0.23 - - - - - 31 changed files: - update_1/release/download-linux-x86_64.json - update_1/release/download-macos.json - update_1/release/download-windows-x86_64.json - update_1/release/downloads.json - update_1/release/linux-x86_64/.htaccess - − update_1/release/linux-x86_64/update-15.0.18-15.0.21-linux-x86_64.xml - − update_1/release/linux-x86_64/update-15.0.19-15.0.21-linux-x86_64.xml - + update_1/release/linux-x86_64/update-15.0.19-15.0.23-linux-x86_64.xml - − update_1/release/linux-x86_64/update-15.0.20-15.0.21-linux-x86_64.xml - + update_1/release/linux-x86_64/update-15.0.20-15.0.23-linux-x86_64.xml - + update_1/release/linux-x86_64/update-15.0.21-15.0.23-linux-x86_64.xml - − update_1/release/linux-x86_64/update-15.0.21-linux-x86_64.xml - + update_1/release/linux-x86_64/update-15.0.23-linux-x86_64.xml - update_1/release/macos/.htaccess - − update_1/release/macos/update-15.0.18-15.0.21-macos.xml - − update_1/release/macos/update-15.0.19-15.0.21-macos.xml - + update_1/release/macos/update-15.0.19-15.0.23-macos.xml - − update_1/release/macos/update-15.0.20-15.0.21-macos.xml - + update_1/release/macos/update-15.0.20-15.0.23-macos.xml - + update_1/release/macos/update-15.0.21-15.0.23-macos.xml - − update_1/release/macos/update-15.0.21-macos.xml - + update_1/release/macos/update-15.0.23-macos.xml - update_1/release/windows-x86_64/.htaccess - − update_1/release/windows-x86_64/update-15.0.18-15.0.21-windows-x86_64.xml - − update_1/release/windows-x86_64/update-15.0.19-15.0.21-windows-x86_64.xml - + update_1/release/windows-x86_64/update-15.0.19-15.0.23-windows-x86_64.xml - − update_1/release/windows-x86_64/update-15.0.20-15.0.21-windows-x86_64.xml - + update_1/release/windows-x86_64/update-15.0.20-15.0.23-windows-x86_64.xml - + update_1/release/windows-x86_64/update-15.0.21-15.0.23-windows-x86_64.xml - − update_1/release/windows-x86_64/update-15.0.21-windows-x86_64.xml - + update_1/release/windows-x86_64/update-15.0.23-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-15.0.23-build1
by Pier Angelo Vendrame (＠pierov) 14 Sep '26

14 Sep '26

Pier Angelo Vendrame pushed new tag mb-15.0.23-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-15.0.23-build1
by Pier Angelo Vendrame (＠pierov) 14 Sep '26

14 Sep '26

Pier Angelo Vendrame pushed new tag tbb-15.0.23-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][maint-15.0] Bug 41864&41865: Prepared Tor, Mullvad Browser 15.0.23
by Pier Angelo Vendrame (＠pierov) 14 Sep '26

14 Sep '26

Pier Angelo Vendrame pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build Commits: 0b8cdd78 by Pier Angelo Vendrame at 2026-09-14T18:07:38+02:00 Bug 41864&41865: Prepared Tor, Mullvad Browser 15.0.23 - - - - - 7 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,12 @@ +Mullvad Browser 15.0.23 - September 15 2026 + * All Platforms + * Updated Firefox to 140.16.0esr + * Updated NoScript to 13.6.33.1984 + * Bug 577: Rebase Mullvad Browser stable onto 140.16.0esr [mullvad-browser] + * Bug 45296: (H1) SharedWorker Identity Mismatch allows WebAssembly execution at Safer [tor-browser] + * Bug 45297: (H1) Missing setHTMLUnsafe hook leaves a permanent WebAssembly-capable child realm at Safer [tor-browser] + * Bug 45299: Backport Security Fixes from Firefox 156 [tor-browser] + Mullvad Browser 15.0.21 - September 01 2026 * All Platforms * Updated Firefox to 140.15.0esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,21 @@ +Tor Browser 15.0.23 - September 15 2026 + * All Platforms + * Updated NoScript to 13.6.33.1984 + * Bug 45296: (H1) SharedWorker Identity Mismatch allows WebAssembly execution at Safer [tor-browser] + * Bug 45297: (H1) Missing setHTMLUnsafe hook leaves a permanent WebAssembly-capable child realm at Safer [tor-browser] + * Bug 45299: Backport Security Fixes from Firefox 156 [tor-browser] + * Bug 45303: Rebase Tor Browser stable onto 140.16.0esr [tor-browser] + * Bug 41875: Update relprep.py for the new versions.ini URL [tor-browser-build] + * Windows + macOS + Linux + * Updated Firefox to 140.16.0esr + * Linux + * Bug 44996: Change the 32-bit linux message to the expired version for the final 15.0 release [tor-browser] + * Android + * Updated GeckoView to 140.16.0esr + * Build System + * All Platforms + * Bug 41871: Update downloads repository references in relprep templates [tor-browser-build] + Tor Browser 15.0.22 - September 09 2026 * All Platforms * Updated Tor to 0.4.9.12 ===================================== projects/browser/config ===================================== @@ -114,12 +114,12 @@ input_files: - filename: dmg-root enable: '[% ! c("var/android") %]' - name: fenix-nightly-apk - URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/09/2026-09-08-04-21-39-fenix… + URL: https://ftp.mozilla.org/pub/fenix/nightly/2026/09/2026-09-13-21-24-39-fenix… enable: '[% c("var/android") %]' - sha256sum: 86af54073920df74060f57f892384f523295ddee4c762054b692449b19f047c6 - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.32.1984.xpi + sha256sum: fdb4e2eceee55a0410f6ec1cf9fee0487b6fc44abe5f00ccde4a4def1ceb5bbc + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.33.1984.xpi name: noscript - sha256sum: 05713eb71e43bee5a78c16c4a1e5c750b755a637c01ef1810e71f518d38fdb25 + sha256sum: 1e4e7a1a45b2b2826688c072a35d366610312237778835ce07c8b5179a4cb7e4 - URL: https://addons.mozilla.org/firefox/downloads/file/4981431/ublock_origin-1.7… name: ublock-origin sha256sum: 175756d74468c9ba45863f7fc333d3be670f82d5b066314e915814dd547d1652 ===================================== projects/firefox/config ===================================== @@ -18,7 +18,7 @@ container: use_container: 1 var: - firefox_platform_version: '140.15.0' + firefox_platform_version: '140.16.0' firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 ===================================== projects/geckoview/config ===================================== @@ -20,7 +20,7 @@ container: build_apk: 1 var: - firefox_platform_version: '140.15.0' + firefox_platform_version: '140.16.0' geckoview_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 ===================================== projects/translation/config ===================================== @@ -12,19 +12,19 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 530070e3a5fbe2dce823b5ac4d7b937e887b5c8b + git_hash: 42c240fa39334d44b52a082ece7ea992ce4ff03c targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: cfeef0986124ecc811f607c207f22e0f285a8c0e + git_hash: b43f67013b014d128543404f8e159dd51250da8f targets: nightly: git_hash: 'tor-browser' mullvad-browser: mullvad-browser: '[% INCLUDE build %]' - git_hash: 4bf1989120841478aa114b1bf4efefe78cdaf8ee + git_hash: 7ccb76bc67daa5d88da4a1e3ae0021b19bc55c4b targets: nightly: git_hash: 'mullvad-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 8163f5d46d50c48c63513ed86e3db0df721520e6 + git_hash: 086dbaa310f8aa50530f28d68c937d378208a1ad compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -74,11 +74,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '15.0.22' + torbrowser_version: '15.0.23' torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2026/09/08 15:30:00' + browser_release_date: '2026/09/14 10:00:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: release browser_platforms: @@ -128,9 +128,10 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - '[% IF c("var/tor-browser") %]15.0.22[% END %]' - 15.0.21 - 15.0.20 - - 15.0.19 + - '[% IF c("var/mullvad-browser") %]15.0.19[% END %]' mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.16.0esr-15.0-1] 10 commits: Bug 2027336 - Always call forget. a=dmeehan
by ma1 (＠ma1) 14 Sep '26

14 Sep '26

ma1 pushed to branch mullvad-browser-140.16.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 516c0254 by Makoto Kato at 2026-09-14T17:46:03+02:00 Bug 2027336 - Always call forget. a=dmeehan Original Revision: https://phabricator.services.mozilla.com/D322230 Differential Revision: https://phabricator.services.mozilla.com/D322280 - - - - - 05d8b591 by Andreas Farre at 2026-09-14T17:46:08+02:00 Bug 2029482 - Don't make ORB exemptions for DevTools. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D319804 Differential Revision: https://phabricator.services.mozilla.com/D322302 - - - - - d1aaab4a by Chun-Min Chang at 2026-09-14T17:46:12+02:00 [ESR 153] Bug 2050150 - Require an NV12 destination stride that can hold a chroma row. a=dmeehan DONTBUILD Differential Revision: https://phabricator.services.mozilla.com/D320550 - - - - - 2eafe752 by David Parks at 2026-09-14T17:46:17+02:00 Bug 2058018 - Check the payload length in DragEnter before using r=win-reviewers,gstoll Differential Revision: https://phabricator.services.mozilla.com/D318224 - - - - - 42739b72 by Alexandre Poirot at 2026-09-14T17:46:22+02:00 Bug 2062551 - Allow heapsnapshot records when DevTools are active. a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D318392 Differential Revision: https://phabricator.services.mozilla.com/D321173 - - - - - 3af06f5c by Maurice Dauer at 2026-09-14T17:46:26+02:00 Bug 2063539 - Always resolve special target names, a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D318844 Differential Revision: https://phabricator.services.mozilla.com/D319952 - - - - - 391cac95 by Valentin Gosu at 2026-09-14T17:46:31+02:00 Bug 2063814 - Handle \ correctly in SplitMimetype a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D319097 Differential Revision: https://phabricator.services.mozilla.com/D320017 - - - - - 9b43e8c3 by Valentin Gosu at 2026-09-14T17:46:36+02:00 Bug 2064026 - Check if iterator has reached the end of the string a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D319073 Differential Revision: https://phabricator.services.mozilla.com/D320016 - - - - - 3e99055f by Dominik Bay at 2026-09-14T17:46:40+02:00 Bug 2066736 - Validate filter array lengths in FilePickerParent::RecvOpen. a=dmeehan The loop in RecvOpen counts with aFilters.Length() but reads aFilterNames[i]. If a content process sends the message with more filters than filterNames, the read goes out of bounds and the parent process crashes. So I added a check that both arrays have the same length. Original Revision: https://phabricator.services.mozilla.com/D321511 Differential Revision: https://phabricator.services.mozilla.com/D321697 - - - - - 6c69f642 by Sotaro Ikeda at 2026-09-14T17:46:45+02:00 Bug 2068438 a=dmeehan DONTBUILD Original Revision: https://phabricator.services.mozilla.com/D323156 Differential Revision: https://phabricator.services.mozilla.com/D323435 - - - - - 13 changed files: - devtools/shared/heapsnapshot/HeapSnapshotTempFileHelperParent.cpp - devtools/shared/heapsnapshot/tests/xpcshell/test_saveHeapSnapshot_e10s_01.js - dom/base/MimeType.cpp - dom/base/nsGlobalWindowOuter.cpp - dom/ipc/FilePickerParent.cpp - dom/media/ImageConversion.cpp - dom/media/ImageConversion.h - gfx/layers/ImageContainer.cpp - gfx/layers/client/TextureClient.cpp - gfx/layers/client/TextureClient.h - intl/components/src/RelativeTimeFormat.cpp - netwerk/protocol/http/HttpBaseChannel.cpp - widget/windows/nsNativeDragTarget.cpp Changes: ===================================== devtools/shared/heapsnapshot/HeapSnapshotTempFileHelperParent.cpp ===================================== @@ -6,6 +6,7 @@ #include "mozilla/devtools/HeapSnapshot.h" #include "mozilla/devtools/HeapSnapshotTempFileHelperParent.h" +#include "mozilla/dom/ChromeUtils.h" #include "mozilla/ErrorResult.h" #include "private/pprio.h" @@ -23,6 +24,9 @@ static bool openFileFailure(ErrorResult& rv, mozilla::ipc::IPCResult HeapSnapshotTempFileHelperParent::RecvOpenHeapSnapshotTempFile( OpenHeapSnapshotTempFileResponse* outResponse) { + if (!dom::ChromeUtils::IsDevToolsOpened()) { + return IPC_FAIL_NO_REASON(this); + } auto start = TimeStamp::Now(); ErrorResult rv; nsAutoString filePath; ===================================== devtools/shared/heapsnapshot/tests/xpcshell/test_saveHeapSnapshot_e10s_01.js ===================================== @@ -5,5 +5,6 @@ // Test saving a heap snapshot in the sandboxed e10s child process. function run_test() { + ChromeUtils.notifyDevToolsOpened(); run_test_in_child("test_SaveHeapSnapshot.js"); } ===================================== dom/base/MimeType.cpp ===================================== @@ -111,8 +111,10 @@ template <typename char_type> ++pos; } - // Might as well check for base64 now - if (*pos != '=') { + // Might as well check for base64 now. Note that the loop above may have + // stopped because it reached the end of the input, in which case there is + // no code point to look at. + if (pos == end || *pos != '=') { // trim leading and trailing spaces while (namePos < pos && NS_IsHTTPWhitespace(*namePos)) { ++namePos; @@ -253,7 +255,13 @@ TMimeType<char_type>::SplitMimetype(const nsTSubstring<char_type>& aMimeType) { for (size_t i = 0; i < aMimeType.Length(); i++) { char_type c = aMimeType[i]; - if (c == '\"' && (i == 0 || aMimeType[i - 1] != '\\')) { + // https://fetch.spec.whatwg.org/#collect-an-http-quoted-string : a + // backslash only escapes inside a quoted string, and it consumes the code + // point that follows it, so an escaped backslash does not escape the next + // character. + if (inQuotes && c == '\\') { + ++i; + } else if (c == '"') { inQuotes = !inQuotes; } else if (c == ',' && !inQuotes) { mimeTypeParts.AppendElement(Substring(aMimeType, start, i - start)); ===================================== dom/base/nsGlobalWindowOuter.cpp ===================================== @@ -3841,10 +3841,8 @@ bool nsGlobalWindowOuter::WindowExists(const nsAString& aName, bool aLookForCallerOnJSStack) { MOZ_ASSERT(mDocShell, "Must have docshell"); - if (aForceNoOpener) { - return aName.LowerCaseEqualsLiteral("_self") || - aName.LowerCaseEqualsLiteral("_top") || - aName.LowerCaseEqualsLiteral("_parent"); + if (aForceNoOpener && !nsContentUtils::IsSpecialName(aName)) { + return false; } if (WindowGlobalChild* wgc = mInnerWindow->GetWindowGlobalChild()) { ===================================== dom/ipc/FilePickerParent.cpp ===================================== @@ -282,6 +282,10 @@ mozilla::ipc::IPCResult FilePickerParent::RecvOpen( return IPC_OK(); } + if (aFilters.Length() != aFilterNames.Length()) { + return IPC_FAIL(this, "PFilePicker::Open filter arrays lengths mismatch"); + } + mFilePicker->SetAddToRecentDocs(aAddToRecentDocs); for (uint32_t i = 0; i < aFilters.Length(); ++i) { ===================================== dom/media/ImageConversion.cpp ===================================== @@ -486,6 +486,13 @@ nsresult ConvertToNV12(layers::Image* aImage, uint8_t* aDestY, int aDestStrideY, return NS_ERROR_INVALID_ARG; } + // An interleaved chroma row is 2 * ceil(width / 2) bytes wide. + if (aDestStrideY < aDestSize.width || + aDestStrideUV < 2 * CeilingOfHalf(aDestSize.width)) { + NS_WARNING("ConvertToNV12: destination strides too small for NV12"); + return NS_ERROR_INVALID_ARG; + } + if (const PlanarYCbCrData* data = GetPlanarYCbCrData(aImage)) { const ImageUtils imageUtils(aImage); Maybe<dom::ImageBitmapFormat> format = imageUtils.GetFormat(); ===================================== dom/media/ImageConversion.h ===================================== @@ -45,6 +45,9 @@ nsresult ConvertToI420(layers::Image* aImage, uint8_t* aDestY, int aDestStrideY, /** * Converts aImage to an NV12 image and writes it to the given buffers. + * + * aDestStrideUV must be at least 2 * ceil(aDestSize.width / 2), since U and V + * are interleaved. Returns NS_ERROR_INVALID_ARG if either stride is too small. */ nsresult ConvertToNV12(layers::Image* aImage, uint8_t* aDestY, int aDestStrideY, uint8_t* aDestUV, int aDestStrideUV, ===================================== gfx/layers/ImageContainer.cpp ===================================== @@ -254,10 +254,8 @@ Maybe<SurfaceDescriptor> Image::GetDescFromTexClient( return {}; } - const auto& tcd = tc->GetInternalData(); - SurfaceDescriptor ret; - if (!tcd->Serialize(ret)) { + if (!tc->ToSurfaceDescriptor(ret)) { return {}; } return Some(ret); ===================================== gfx/layers/client/TextureClient.cpp ===================================== @@ -558,8 +558,12 @@ void TextureClient::Destroy() { actor = nullptr; } - TextureData* data = mData; - mData = nullptr; + TextureData* data; + { + MutexAutoLock lock(mMutex); + data = mData; + mData = nullptr; + } if (data || actor || readLock) { TextureDeallocParams params; @@ -1050,8 +1054,7 @@ bool TextureClient::BorrowMappedYCbCrData(MappedYCbCrTextureData& aMap) { } bool TextureClient::ToSurfaceDescriptor(SurfaceDescriptor& aOutDescriptor) { - MOZ_ASSERT(IsValid()); - + MutexAutoLock lock(mMutex); return mData ? mData->Serialize(aOutDescriptor) : false; } ===================================== gfx/layers/client/TextureClient.h ===================================== @@ -621,6 +621,13 @@ class TextureClient : public AtomicRefCountedWithFinalize<TextureClient> { TextureData* GetInternalData() { return mData; } const TextureData* GetInternalData() const { return mData; } + /** + * Serializes the underlying TextureData into aDescriptor. Returns false if + * the TextureData has already been destroyed. Safe to call from any thread + * concurrently with Destroy(). + */ + bool ToSurfaceDescriptor(SurfaceDescriptor& aDescriptor); + uint64_t GetSerial() const { return mSerial; } void GetSurfaceDescriptorRemoteDecoder( SurfaceDescriptorRemoteDecoder* aOutDesc); @@ -719,16 +726,6 @@ class TextureClient : public AtomicRefCountedWithFinalize<TextureClient> { friend class AtomicRefCountedWithFinalize<TextureClient>; protected: - /** - * Should only be called *once* per texture, in TextureClient::InitIPDLActor. - * Some texture implementations rely on the fact that the descriptor will be - * deserialized. - * Calling ToSurfaceDescriptor again after it has already returned true, - * or never constructing a TextureHost with aDescriptor may result in a memory - * leak (see TextureClientD3D9 for example). - */ - bool ToSurfaceDescriptor(SurfaceDescriptor& aDescriptor); - void LockActor() const; void UnlockActor() const; ===================================== intl/components/src/RelativeTimeFormat.cpp ===================================== @@ -57,13 +57,13 @@ RelativeTimeFormat::TryCreate(const char* aLocale, ureldatefmt_open(IcuLocale(aLocale), nf, relDateTimeStyle, UDISPCTX_CAPITALIZATION_FOR_STANDALONE, &status); + // Ownership was transferred to mFormatter. + closeNumberFormatter.forget(); + if (U_FAILURE(status)) { return Err(ToICUError(status)); } - // Ownership was transferred to mFormatter. - closeNumberFormatter.forget(); - UniquePtr<RelativeTimeFormat> rtf = MakeUnique<RelativeTimeFormat>( aOptions.numeric, formatter, formattedRelativeDateTime); ===================================== netwerk/protocol/http/HttpBaseChannel.cpp ===================================== @@ -3316,13 +3316,6 @@ bool HttpBaseChannel::ShouldBlockOpaqueResponse() const { return false; } - bool isInDevToolsContext; - mLoadInfo->GetIsInDevToolsContext(&isInDevToolsContext); - if (isInDevToolsContext) { - LOGORB("No block: Request created by devtools"); - return false; - } - return true; } ===================================== widget/windows/nsNativeDragTarget.cpp ===================================== @@ -258,13 +258,13 @@ nsNativeDragTarget::DragEnter(LPDATAOBJECT pIDataSource, DWORD grfKeyState, nsresult loadResult = nsClipboard::GetNativeDataOffClipboard( pIDataSource, 0, ::RegisterClipboardFormat(CFSTR_PREFERREDDROPEFFECT), nullptr, &tempOutData, &tempDataLen); - if (NS_SUCCEEDED(loadResult) && tempOutData) { + if (NS_SUCCEEDED(loadResult) && tempOutData && tempDataLen >= sizeof(DWORD)) { mEffectsPreferred = *((DWORD*)tempOutData); - free(tempOutData); } else { // We have no preference if we can't obtain it mEffectsPreferred = DROPEFFECT_NONE; } + free(tempOutData); // Set the native data object into drag session session->SetIDataObject(pIDataSource); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/a6… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/a6… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-140.16.0esr-15.0-1-build2
by ma1 (＠ma1) 14 Sep '26

14 Sep '26

ma1 pushed new tag mullvad-browser-140.16.0esr-15.0-1-build2 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-140.16.0esr-15.0-1-build2
by ma1 (＠ma1) 14 Sep '26

14 Sep '26

ma1 pushed new tag tor-browser-140.16.0esr-15.0-1-build2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0