September 2026 - tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser] Pushed new tag FIREFOX_140_16_0esr_BUILD1
by Pier Angelo Vendrame (＠pierov) 14 Sep '26

14 Sep '26

Pier Angelo Vendrame pushed new tag FIREFOX_140_16_0esr_BUILD1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/FIREFOX_1… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.2.0esr-16.0-1] 2 commits: TB 45621: Implement linter for Tor Browser-specific checks
by brizental (＠brizental) 10 Sep '26

10 Sep '26

brizental pushed to branch tor-browser-153.2.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 068fb46d by Beatriz Rizental at 2026-09-10T19:33:43+02:00 TB 45621: Implement linter for Tor Browser-specific checks - - - - - 52a46146 by Beatriz Rizental at 2026-09-10T19:33:43+02:00 fixup! [android] Disable features and functionality Bug 45621: Prevent other apps from opening Tor Browser - - - - - 8 changed files: - mobile/android/fenix/app/src/main/AndroidManifest.xml - mobile/android/fenix/app/src/nightly/AndroidManifest.xml - + tools/lint/test/files/tor-browser-checks/bad/AndroidManifest.xml - + tools/lint/test/files/tor-browser-checks/good/AndroidManifest.xml - tools/lint/test/python.toml - + tools/lint/test/test_tor_browser_checks.py - + tools/lint/tor-browser-checks.yml - + tools/lint/tor-browser-checks/__init__.py Changes: ===================================== mobile/android/fenix/app/src/main/AndroidManifest.xml ===================================== @@ -505,7 +505,7 @@ <activity android:name=".HomeActivity" android:theme="@style/SplashScreenThemeBase" - android:exported="true" + android:exported="false" android:configChanges="keyboard|keyboardHidden|mcc|mnc|orientation|screenSize|layoutDirection|smallestScreenSize|screenLayout" android:launchMode="singleTask" android:taskAffinity="" @@ -660,7 +660,7 @@ <service android:name=".customtabs.CustomTabsService" - android:exported="true" + android:exported="false" tools:ignore="ExportedService"> <intent-filter> <action android:name="android.support.customtabs.action.CustomTabsService" /> @@ -674,7 +674,7 @@ <receiver android:name="org.mozilla.gecko.search.SearchWidgetProvider" - android:exported="true"> + android:exported="false"> <intent-filter> <action android:name="android.appwidget.action.APPWIDGET_UPDATE" /> </intent-filter> @@ -684,7 +684,7 @@ </receiver> <receiver android:name=".onboarding.WidgetPinnedReceiver" - android:exported="true"> + android:exported="false"> <intent-filter> <action android:name="org.mozilla.fenix.onboarding.WidgetPinnedReceiver.widgetPinned"/> </intent-filter> @@ -790,7 +790,7 @@  + <activity-alias + android:name="org.mozilla.gecko.BrowserApp" + android:targetActivity=".IntentReceiverActivity" + android:exported="true"> + </activity-alias> + +  + <activity-alias + android:name="org.mozilla.gecko.PermissiveApp" + android:targetActivity=".IntentReceiverActivity" + android:exported="true"> + <intent-filter> + <action android:name="android.intent.action.VIEW" /> + <category android:name="android.intent.category.BROWSABLE" /> + <category android:name="android.intent.category.DEFAULT" /> + <data android:scheme="http" /> + <data android:scheme="https" /> + </intent-filter> + </activity-alias> + +  + <activity-alias + android:name="org.mozilla.gecko.LauncherCategoryOnlyApp" + android:targetActivity=".IntentReceiverActivity" + android:exported="true"> + <intent-filter> + <category android:name="android.intent.category.LAUNCHER" /> + </intent-filter> + </activity-alias> + +  + <receiver + android:name="com.example.evil.UnlistedReceiver" + android:exported="true"> + <intent-filter> + <action android:name="com.example.evil.SOME_ACTION" /> + </intent-filter> + </receiver> + </application> +</manifest> ===================================== tools/lint/test/files/tor-browser-checks/good/AndroidManifest.xml ===================================== @@ -0,0 +1,37 @@ +<?xml version="1.0" encoding="utf-8"?> +<manifest xmlns:android="http://schemas.android.com/apk/res/android"> + <application> + <activity + android:name=".IntentReceiverActivity" + android:exported="false"> + </activity> + + <activity-alias + android:name="org.mozilla.gecko.BrowserApp" + android:targetActivity=".IntentReceiverActivity" + android:exported="false"> + </activity-alias> + +  + <activity-alias + android:name="${applicationId}.App" + android:exported="true" + android:targetActivity="HomeActivity"> + <intent-filter> + <action android:name="android.intent.action.MAIN" /> + <category android:name="android.intent.category.LAUNCHER" /> + </intent-filter> + </activity-alias> + +  + <receiver + android:name="onboarding.WidgetPinnedReceiver" + android:exported="false"> + <intent-filter> + <action android:name="org.mozilla.fenix.onboarding.WidgetPinnedReceiver.widgetPinned" /> + </intent-filter> + </receiver> + </application> +</manifest> ===================================== tools/lint/test/python.toml ===================================== @@ -69,6 +69,10 @@ skip-if = ["os == 'win'"] ["test_shellcheck.py"] ["test_stylelint.py"] + +["test_tor_browser_checks.py"] +tags = "base-browser" + skip-if = ["os == 'win'"] # busts the tree for subsequent tasks on the same worker (bug 1708591) # Setup conflicts with eslint setup so this should run sequentially. sequential = true ===================================== tools/lint/test/test_tor_browser_checks.py ===================================== @@ -0,0 +1,29 @@ +import mozunit + +LINTER = "tor-browser-checks" + + +def test_flags_exported_non_launcher_components(lint, paths): + results = lint(paths("bad/AndroidManifest.xml")) + assert len(results) == 4 + + flagged_names = { + "org.mozilla.gecko.BrowserApp", + "org.mozilla.gecko.PermissiveApp", + "org.mozilla.gecko.LauncherCategoryOnlyApp", + "com.example.evil.UnlistedReceiver", + } + for expected_name in flagged_names: + assert any(expected_name in r.message for r in results) + + for r in results: + assert r.rule == "unnecessary-exported-component" + + +def test_allows_launcher_entries_and_unexported_components(lint, paths): + results = lint(paths("good/AndroidManifest.xml")) + assert len(results) == 0 + + +if __name__ == "__main__": + mozunit.main() ===================================== tools/lint/tor-browser-checks.yml ===================================== @@ -0,0 +1,16 @@ +--- +tor-browser-checks: + description: >- + Tor Browser specific static checks (one linter, several + independent checks -- see tools/lint/tor-browser-checks/__init__.py) + include: + - 'mobile/android/fenix/app/src/main/AndroidManifest.xml' + - 'mobile/android/fenix/app/src/debug/AndroidManifest.xml' + - 'mobile/android/fenix/app/src/beta/AndroidManifest.xml' + - 'mobile/android/fenix/app/src/release/AndroidManifest.xml' + - 'mobile/android/fenix/app/src/nightly/AndroidManifest.xml' + - 'mobile/android/fenix/app/src/benchmark/AndroidManifest.xml' + support-files: + - 'tools/lint/tor-browser-checks/**' + type: external + payload: tor-browser-checks:lint ===================================== tools/lint/tor-browser-checks/__init__.py ===================================== @@ -0,0 +1,124 @@ +# This Source Code Form is subject to the terms of the Mozilla Public +# License, v. 2.0. If a copy of the MPL was not distributed with this +# file, You can obtain one at http://mozilla.org/MPL/2.0/. + +import xml.etree.ElementTree as ET + +from mozlint import result + +ANDROID_NS = "{http://schemas.android.com/apk/res/android}" + +# Component types that can carry android:exported. +EXPORTABLE_TAGS = ("activity", "activity-alias", "service", "receiver", "provider") + +MAIN_ACTION = "android.intent.action.MAIN" +LAUNCHER_CATEGORY = "android.intent.category.LAUNCHER" + + +def _find_lineno(lines, name): + # ElementTree doesn't track source positions. This is a best-effort fallback + # instead: find the line where this element's own android:name is written + # out. Good enough to jump to the right spot, but not a guarantee if `name` + # shows up as some other attribute's value too. + needle = f'name="{name}"' + for lineno, line in enumerate(lines, start=1): + if needle in line: + return lineno + return 0 + + +def _has_launcher_intent_filter(el): + # A MAIN+LAUNCHER intent-filter is the one case Android itself makes + # exported="true" load-bearing: that's what lets the home screen (a + # separate app, from the OS's point of view) resolve and start this + # component when its icon is tapped. Nothing else needs to be exported + # for the app to function -- everything else is a deliberate choice to + # let other apps reach in, and should default to false. + for intent_filter in el.findall("intent-filter"): + actions = {a.get(ANDROID_NS + "name") for a in intent_filter.findall("action")} + categories = { + c.get(ANDROID_NS + "name") for c in intent_filter.findall("category") + } + if MAIN_ACTION in actions and LAUNCHER_CATEGORY in categories: + return True + return False + + +def _check_only_launcher_entries_are_exported(path, config): + """Flags any exported component in a fenix AndroidManifest.xml that + isn't a MAIN+LAUNCHER entry point. + + This enforces the rule directly: android:exported="true" is only ever + structurally required for a component that's meant to be launched from + the home screen. Anything else that's exported can be set to exported="false" + instead, even if that means turning off the feature that needed it. + + Not autofixable: turning exported="false" off may mean losing the + feature that needed it (e.g. PWA shortcut relaunching), which needs a + human to decide whether that tradeoff is acceptable case by case. + + Only looks at AndroidManifest.xml fragments; anything else is skipped. + """ + if not path.endswith("AndroidManifest.xml"): + return [] + + try: + # Manifest fragments (e.g. src/nightly/AndroidManifest.xml) can be a + # bare <manifest> with no <application> at all -- nothing to check. + app = ET.parse(path).getroot().find("application") + except ET.ParseError: + return [] + if app is None: + return [] + + with open(path, encoding="utf-8") as f: + lines = f.readlines() + + issues = [] + for tag in EXPORTABLE_TAGS: + for el in app.findall(tag): + if el.get(ANDROID_NS + "exported") != "true": + continue + if _has_launcher_intent_filter(el): + continue + + name = el.get(ANDROID_NS + "name") + + issues.append( + result.from_config( + config, + path=path, + lineno=_find_lineno(lines, name), + message=( + f'<{tag}> "{name}" is exported="true" but has no ' + "MAIN+LAUNCHER intent-filter, so Android doesn't " + 'require it to be exported -- set exported="false" ' + "(see tor-browser#45145)." + ), + level="error", + rule="unnecessary-exported-component", + ), + ) + + return issues + + +# Add new Tor Browser security checks here. Each one receives a file path +# and is responsible for deciding whether that path is relevant to it, so +# checks are free to target entirely different kinds of files. +# +# Note: Remember to extend the linter's `include`/`extensions` in +# tor-browser-checks.yml if a new check needs paths that aren't already covered. +CHECKS = [ + _check_only_launcher_entries_are_exported, +] + + +def lint(paths, config, **lintargs): + results = [] + + for path in paths: + for check in CHECKS: + results.extend(check(path, config)) + + return results View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/8412f4… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/8412f4… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.2.0esr-16.0-1] fixup! [android] Disable features and functionality
by Dan Ballard (＠dan) 10 Sep '26

10 Sep '26

Dan Ballard pushed to branch tor-browser-153.2.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 8412f4a4 by Dan Ballard at 2026-09-10T09:47:13-07:00 fixup! [android] Disable features and functionality TB 45251: Disable and Remove remote improvements UI - - - - - 3 changed files: - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/utils/Settings.kt - mobile/android/fenix/app/src/main/res/xml/preferences.xml - mobile/android/fenix/app/src/main/res/xml/remote_improvements_preferences.xml Changes: ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/utils/Settings.kt ===================================== @@ -826,7 +826,7 @@ class Settings( */ var isRolloutsEnabled by booleanPreference( key = appContext.getPreferenceKey(R.string.pref_key_rollouts), - default = { appContext.components.nimbus.sdk.rolloutParticipation }, + default = false, ) /** ===================================== mobile/android/fenix/app/src/main/res/xml/preferences.xml ===================================== @@ -257,11 +257,6 @@ app:iconSpaceReserved="false" app:isPreferenceVisible="@bool/IS_DEBUG" /> - <androidx.preference.Preference - android:key="@string/pref_key_remote_improvements" - android:title="@string/preferences_remote_improvements" - app:iconSpaceReserved="false" /> - <androidx.preference.SwitchPreferenceCompat android:key="@string/pref_key_remote_debugging" android:title="@string/preferences_remote_debugging" ===================================== mobile/android/fenix/app/src/main/res/xml/remote_improvements_preferences.xml ===================================== @@ -6,7 +6,7 @@ xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto"> <SwitchPreferenceCompat - android:defaultValue="true" + android:defaultValue="false" android:key="@string/pref_key_rollouts" android:title="@string/remote_improvements_title" android:summary="@string/remote_improvements_description" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/8412f4a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/8412f4a… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.2.0esr-16.0-1] fixup! MB 1: Mullvad Browser branding
by morgan (＠morgan) 10 Sep '26

10 Sep '26

morgan pushed to branch mullvad-browser-153.2.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: fe6c95cc by Pier Angelo Vendrame at 2026-09-10T14:58:30+00:00 fixup! MB 1: Mullvad Browser branding MB 575: Remove an unused customization. That block is removed from about:license in a BB commit. - - - - - 1 changed file: - browser/base/content/overrides/app-license.html Changes: ===================================== browser/base/content/overrides/app-license.html ===================================== @@ -3,7 +3,6 @@ - file, You can obtain one at http://mozilla.org/MPL/2.0/. --> Binaries of this product have been made available to you by the - <a href="https://www.torproject.org/">Tor Project</a> and - <a href="https://mullvad.net/">Mullvad VPN</a> under the Mozilla Public + <a href="http://www.mozilla.org/">Mozilla Project</a> under the Mozilla Public License 2.0 (MPL). <a href="about:rights">Know your rights</a>. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/fe6… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/fe6… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.2.0esr-16.0-1] 3 commits: fixup! TB 44806: Implement the tor integration in Rust.
by brizental (＠brizental) 09 Sep '26

09 Sep '26

brizental pushed to branch tor-browser-153.2.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 6752dfdd by Elena at 2026-09-09T22:34:24+02:00 fixup! TB 44806: Implement the tor integration in Rust. TB 44930: Implement the commands on the Rust control port Created TorController - - - - - 14c31b41 by Elena at 2026-09-09T22:34:24+02:00 fixup! TB 44806: Implement the tor integration in Rust. TB 44930: Implement the commands on the Rust control port Implemented the authenticate method. - - - - - 304b6706 by Elena at 2026-09-09T22:34:24+02:00 fixup! TB 44806: Implement the tor integration in Rust. TB 44930: Implement the commands on the Rust control port Implemented a few simple commands. - - - - - 23 changed files: - Cargo.lock - toolkit/components/tor-integration/tor_provider/Cargo.toml - toolkit/components/tor-integration/tor_provider/src/ctor/control_port/control_port.rs - toolkit/components/tor-integration/tor_provider/src/ctor/control_port/mod.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/authenticate.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/command.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/mod.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/reset_conf.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/save_conf.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/set_events.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/signal.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/take_ownership.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/controller.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/error.rs - toolkit/components/tor-integration/tor_provider/src/ctor/controller/mod.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/parsers/ack.rs - toolkit/components/tor-integration/tor_provider/src/ctor/controller/escape.rs → toolkit/components/tor-integration/tor_provider/src/ctor/controller/parsers/escape.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/parsers/mod.rs - + toolkit/components/tor-integration/tor_provider/src/ctor/controller/parsers/tests.rs - toolkit/components/tor-integration/tor_provider/src/ctor/controller/unescape.rs → toolkit/components/tor-integration/tor_provider/src/ctor/controller/parsers/unescape.rs - toolkit/components/tor-integration/tor_provider/src/ctor/mod.rs - toolkit/components/tor-integration/tor_provider/src/ctor/reply_parser/line.rs - toolkit/components/tor-integration/tor_service/src/control_port.rs Changes: ===================================== Cargo.lock ===================================== @@ -8122,6 +8122,7 @@ name = "tor_provider" version = "0.1.0" dependencies = [ "bytes", + "hex", "log", "memchr", "thiserror 2.0.12", ===================================== toolkit/components/tor-integration/tor_provider/Cargo.toml ===================================== @@ -6,6 +6,7 @@ edition = "2021" [dependencies] bytes = "1.4.0" +hex = "0.4.3" log = "0.4" memchr = "2.7.4" thiserror = "2" ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/control_port/control_port.rs ===================================== @@ -15,8 +15,20 @@ use super::{ error::ControlPortError, message_pump::{MessagePump, ReadAction}, }; + use crate::ctor::reply_parser::{Reply, ReplyDispatcher, ReplyError}; +pub trait ControlPortInterface { + fn send_command( + &self, + command: Bytes, + handler: Box<dyn FnOnce(Result<Reply, ControlPortError>)>, + ); + fn set_async_handler(&self, cb: Option<Box<dyn Fn(Reply)>>); + fn close(&self) -> Result<(), ControlSocketError>; + fn set_close_handler(&self, cb: Box<dyn FnOnce()>); +} + /// The lower-level part of the control port implementation. /// It contains the logic for actually sending the command, and it hides its /// reference-counted nature from actual consumers. @@ -172,6 +184,9 @@ impl Drop for ControlPortInner { } } +// Wrap the inner type to make it clearer that its ownership is not supposed to +// be shared even though it uses an Rc, but the use of the Rc is due to the +// callback structure. pub struct ControlPort(Rc<ControlPortInner>); impl ControlPort { @@ -179,11 +194,11 @@ impl ControlPort { pub fn new(socket: Box<dyn ControlSocket>) -> Result<Self, ControlSocketError> { Ok(Self(ControlPortInner::new(Rc::from(socket))?)) } +} - // TODO: Keep only the methods speicifc to commands and remove this one - // (tor-browser#44930). +impl ControlPortInterface for ControlPort { #[inline] - pub fn send_command( + fn send_command( &self, command: Bytes, handler: Box<dyn FnOnce(Result<Reply, ControlPortError>)>, @@ -192,17 +207,17 @@ impl ControlPort { } #[inline] - pub fn set_async_handler(&self, cb: Option<Box<dyn Fn(Reply)>>) { + fn set_async_handler(&self, cb: Option<Box<dyn Fn(Reply)>>) { self.0.set_async_handler(cb); } #[inline] - pub fn close(&self) -> Result<(), ControlSocketError> { + fn close(&self) -> Result<(), ControlSocketError> { self.0.close() } #[inline] - pub fn set_close_handler(&self, cb: Box<dyn FnOnce()>) { + fn set_close_handler(&self, cb: Box<dyn FnOnce()>) { self.0.set_close_handler(cb); } } ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/control_port/mod.rs ===================================== @@ -9,6 +9,6 @@ mod control_socket; mod error; mod message_pump; -pub use control_port::ControlPort; +pub use control_port::*; pub use control_socket::*; pub use error::ControlPortError; ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/authenticate.rs ===================================== @@ -0,0 +1,23 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use super::Command; +use crate::ctor::controller::{parsers::parse_ack, ControllerError}; + +pub fn authenticate(password: &[u8]) -> Result<Command<u16>, ControllerError> { + const COMMAND: &str = "AUTHENTICATE"; + let mut command = String::new(); + command.reserve(COMMAND.len() + 1 + password.len() * 2 + 2); + command.push_str(COMMAND); + if !password.is_empty() { + command.push(' '); + command.push_str(hex::encode(password).as_str()); + } + command.push_str("\r\n"); + Ok(Command { + command, + handler: Box::new(parse_ack), + }) +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/command.rs ===================================== @@ -0,0 +1,11 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use crate::ctor::{controller::ControllerError, reply_parser::Reply}; + +pub struct Command<T> { + pub command: String, + pub handler: Box<dyn Fn(Reply) -> Result<T, ControllerError>>, +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/mod.rs ===================================== @@ -0,0 +1,20 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +mod authenticate; +mod command; +mod reset_conf; +mod save_conf; +mod set_events; +mod signal; +mod take_ownership; + +pub use authenticate::authenticate; +pub use command::Command; +pub use reset_conf::reset_owning_controller_process; +pub use save_conf::save_conf; +pub use set_events::set_events; +pub use signal::signal_newnym; +pub use take_ownership::take_ownership; ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/reset_conf.rs ===================================== @@ -0,0 +1,14 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use super::Command; +use crate::ctor::controller::{parsers::parse_ack, ControllerError}; + +pub fn reset_owning_controller_process() -> Result<Command<u16>, ControllerError> { + Ok(Command { + command: String::from("RESETCONF __OwningControllerProcess\r\n"), + handler: Box::new(parse_ack), + }) +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/save_conf.rs ===================================== @@ -0,0 +1,14 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use super::Command; +use crate::ctor::controller::{parsers::parse_ack, ControllerError}; + +pub fn save_conf() -> Result<Command<u16>, ControllerError> { + Ok(Command { + command: String::from("SAVECONF\r\n"), + handler: Box::new(parse_ack), + }) +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/set_events.rs ===================================== @@ -0,0 +1,20 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use super::Command; +use crate::ctor::controller::{parsers::parse_ack, ControllerError}; + +pub fn set_events(events: &[&str]) -> Result<Command<u16>, ControllerError> { + let mut command = String::from("SETEVENTS"); + for e in events { + command.push(' '); + command.push_str(e); + } + command.push_str("\r\n"); + Ok(Command { + command, + handler: Box::new(parse_ack), + }) +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/signal.rs ===================================== @@ -0,0 +1,14 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use super::Command; +use crate::ctor::controller::{parsers::parse_ack, ControllerError}; + +pub fn signal_newnym() -> Result<Command<u16>, ControllerError> { + Ok(Command { + command: String::from("SIGNAL NEWNYM\r\n"), + handler: Box::new(parse_ack), + }) +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/commands/take_ownership.rs ===================================== @@ -0,0 +1,14 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use super::Command; +use crate::ctor::controller::{parsers::parse_ack, ControllerError}; + +pub fn take_ownership() -> Result<Command<u16>, ControllerError> { + Ok(Command { + command: String::from("TAKEOWNERSHIP\r\n"), + handler: Box::new(parse_ack), + }) +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/controller.rs ===================================== @@ -0,0 +1,143 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use bytes::Bytes; + +use super::{ + commands::{self, Command}, + error::ControllerError, +}; +use crate::ctor::{ + control_port::{ControlPortInterface, ControlSocketError}, + reply_parser::Reply, +}; + +/// A controller for a tor daemon. +/// +/// TorController wraps an implementation of a ControlPortInterface (the lower-level transport that +/// exposes a command-based interface) and exposes a set of async, callback-based methods. +/// Every method correspond to a control port command. +/// +/// Callers should authenticate before issuing any other command, even when authentication is +/// disabled on the server side, and close the connection when done with it. +/// The tor daemon can be configured so that this controller is its owner, so that when it closes +/// the connection, the remote daemon shuts down. +pub struct TorController<CP: ControlPortInterface>(CP); + +impl<CP: ControlPortInterface> TorController<CP> { + #[inline] + pub fn new(control_port: CP) -> Self { + Self(control_port) + } + + #[inline] + pub fn close(&self) -> Result<(), ControllerError> { + match self.0.close() { + Ok(()) => Ok(()), + Err(ControlSocketError::ConnectionClosed) => Ok(()), + Err(ControlSocketError::ImplementationError(rv)) => { + Err(ControllerError::ConnectionError(rv)) + } + } + } + + fn send_command<T>( + &self, + command: Result<Command<T>, ControllerError>, + handler: Box<dyn FnOnce(Result<T, ControllerError>)>, + ) where + T: 'static, + { + let Command { + command, + handler: command_handler, + } = match command { + Ok(c) => c, + Err(e) => { + handler(Err(e)); + return; + } + }; + self.0.send_command( + command.into(), + Box::new(move |r| match r { + Ok(reply) => handler(command_handler(reply)), + Err(e) => handler(Err(e.into())), + }), + ); + } + + // Setup + + /// Authenticate to the tor daemon. + /// Notice that a failure in the authentication makes the connection close. + pub fn authenticate( + &self, + password: &[u8], + handler: Box<dyn FnOnce(Result<u16, ControllerError>)>, + ) { + self.send_command(commands::authenticate(password), handler); + } + + pub fn take_ownership(&self, handler: Box<dyn FnOnce(Result<u16, ControllerError>)>) { + self.send_command(commands::take_ownership(), handler); + } + + pub fn reset_owning_controller_process( + &self, + handler: Box<dyn FnOnce(Result<u16, ControllerError>)>, + ) { + self.send_command(commands::reset_owning_controller_process(), handler); + } + + pub fn set_events( + &self, + events: &[&str], + handler: Box<dyn FnOnce(Result<u16, ControllerError>)>, + ) { + self.send_command(commands::set_events(events), handler); + } + + // Connection management + + pub fn save_conf(&self, handler: Box<dyn FnOnce(Result<u16, ControllerError>)>) { + self.send_command(commands::save_conf(), handler); + } + + // Circuit display + + // Onion authentication + + // Miscellaneous + + pub fn signal_newnym(&self, handler: Box<dyn FnOnce(Result<u16, ControllerError>)>) { + self.send_command(commands::signal_newnym(), handler); + } +} + +// TODO: Remove once we merge all parts of tor-browser#44930. +impl<CP: ControlPortInterface> TorController<CP> { + #[inline] + pub fn send_raw_command( + &self, + command: Bytes, + handler: Box<dyn FnOnce(Result<Reply, ControllerError>)>, + ) { + self.0.send_command( + command, + Box::new(|res| handler(res.map_err(|e| ControllerError::from(e)))), + ); + } + + #[inline] + pub fn set_async_handler(&self, cb: Option<Box<dyn Fn(Reply)>>) { + self.0.set_async_handler(cb); + } + + #[inline] + pub fn set_close_handler(&self, cb: Box<dyn FnOnce()>) { + self.0.set_close_handler(cb); + } +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/error.rs ===================================== @@ -0,0 +1,57 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use thiserror::Error; + +use crate::ctor::{ + control_port::ControlPortError, + reply_parser::{Reply, ReplyError}, +}; + +#[derive(Error, Debug, Clone, PartialEq, Eq)] +pub enum ControllerError { + #[error("connection error: {0:#x}")] + ConnectionError(u32), + #[error("protocol violation: {0}")] + ProtocolError(#[from] ReplyError), + #[error("unsuccessful command ({code}): {message}")] + TorError { + code: u16, + // Notice: tor does not dive any guarantee about charsets. + // However, we expect errors to be ASCII strings, and they are used only + // for logs, they will never be directly user-facing. + message: String, + }, + #[error("the reply contains lines with mixed codes")] + MixedCodes, + #[error("the reply does not match the expected format: {0}")] + WrongFormat(String), + #[error("the requested key {0} was not found")] + KeyNotFound(String), + #[error("malformed reply: {0}")] + MalformedReply(String), +} + +impl ControllerError { + pub(super) fn from_reply(reply: &Reply) -> Option<Self> { + if reply.end_line().is_error() { + Some(Self::TorError { + code: reply.end_line().code, + message: String::from_utf8_lossy(&reply.end_line().line).into_owned(), + }) + } else { + None + } + } +} + +impl From<ControlPortError> for ControllerError { + fn from(value: ControlPortError) -> Self { + match value { + ControlPortError::ConnectionError(rv) => ControllerError::ConnectionError(rv), + ControlPortError::ProtocolError(err) => ControllerError::ProtocolError(err), + } + } +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/mod.rs ===================================== @@ -3,47 +3,10 @@ // <http://opensource.org/licenses/MIT>, at your option. This file may not be // copied, modified, or distributed except according to those terms. -mod escape; -mod unescape; +mod commands; +mod controller; +mod error; +mod parsers; -use escape::*; -use unescape::*; - -#[cfg(test)] -mod tests { - use super::*; - - fn round_trip(buf: &[u8]) { - let mut escaped = String::new(); - tor_escape_into(buf, &mut escaped); - assert_eq!(&*tor_unescape(escaped.as_bytes()).unwrap(), buf); - } - - #[test] - fn round_trip_simple() { - round_trip(b"test"); - } - - #[test] - fn round_trip_empty() { - round_trip(b""); - } - - #[test] - fn round_trip_special_chars() { - round_trip(b"'\"\\\r\n\t"); - } - - #[test] - fn round_trip_non_utf8() { - round_trip(b"\xF5\xFF\xFE"); - } - - #[test] - fn round_trip_all_bytes() { - // Every possible byte value, escaped then unescaped, - // must come back unchanged. - let all_bytes: Vec<u8> = (0..=255).collect(); - round_trip(&all_bytes); - } -} +pub use controller::*; +pub use error::*; ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/parsers/ack.rs ===================================== @@ -0,0 +1,99 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use crate::ctor::{reply_parser::Reply, ControllerError}; + +/// Check whether a reply contains a successful reply code and return it. +/// To be used with commands we only want to check whether they were successful. +/// It can be used also for notifications (and it will return their code), but +/// it does not make much sense to do it. +pub fn parse_ack(reply: Reply) -> Result<u16, ControllerError> { + // Ignore any detail line on purpose to allow compatbility with future + // protocol/command versions. + match ControllerError::from_reply(&reply) { + Some(e) => Err(e), + None => Ok(reply.end_line().code), + } +} + +#[cfg(test)] +mod tests { + use super::*; + use crate::ctor::reply_parser::make_reply; + + #[test] + fn successful() { + assert_eq!(parse_ack(make_reply(b"250 OK\r\n")).unwrap(), 250); + assert_eq!( + parse_ack(make_reply(b"251 Also successful\r\n")).unwrap(), + 251, + ); + assert_eq!( + parse_ack(make_reply(b"399 Yet another one\r\n")).unwrap(), + 399, + ); + assert_eq!(parse_ack(make_reply(b"650 Notification\r\n")).unwrap(), 650); + } + + #[test] + fn error_code() { + assert_eq!( + parse_ack(make_reply(b"400 An error\r\n")).unwrap_err(), + ControllerError::TorError { + code: 400, + message: String::from("An error"), + }, + ); + assert_eq!( + parse_ack(make_reply(b"599 Last error\r\n")).unwrap_err(), + ControllerError::TorError { + code: 599, + message: String::from("Last error"), + }, + ); + } + + #[test] + fn invalid_unicode() { + assert_eq!(parse_ack(make_reply(b"250 \xFD\r\n")).unwrap(), 250); + assert_eq!( + parse_ack(make_reply(b"252-Line\r\n252 \xFD\r\n")).unwrap(), + 252 + ); + assert_eq!( + parse_ack(make_reply(b"500 Invalid \xFD codepoint\r\n")).unwrap_err(), + ControllerError::TorError { + code: 500, + message: String::from("Invalid \u{FFFD} codepoint"), + }, + ); + } + + #[test] + fn details_ignored() { + assert_eq!( + parse_ack(make_reply(b"250-Details\r\n250 OK\r\n")).unwrap(), + 250 + ); + assert_eq!( + parse_ack(make_reply( + b"255-Changing status code\r\n260 Does not impact\r\n" + )) + .unwrap(), + 260 + ); + assert_eq!( + parse_ack(make_reply(b"550-Details with error code\r\n250 OK\r\n")).unwrap(), + 250 + ); + assert_eq!( + parse_ack(make_reply(b"250-Succesful details\r\n450 Error status\r\n")).unwrap_err(), + ControllerError::TorError { + code: 450, + message: String::from("Error status"), + }, + ); + } +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/escape.rs → toolkit/components/tor-integration/tor_provider/src/ctor/controller/parsers/escape.rs ===================================== ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/parsers/mod.rs ===================================== @@ -0,0 +1,15 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +mod ack; +mod escape; +mod unescape; + +#[cfg(test)] +mod tests; + +pub use ack::parse_ack; +pub use escape::tor_escape_into; +pub use unescape::tor_unescape; ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/parsers/tests.rs ===================================== @@ -0,0 +1,40 @@ +// Licensed under the Apache License, Version 2.0, +// <http://apache.org/licenses/LICENSE-2.0> or the MIT license +// <http://opensource.org/licenses/MIT>, at your option. This file may not be +// copied, modified, or distributed except according to those terms. + +use super::{tor_escape_into, tor_unescape}; + +fn round_trip(buf: &[u8]) { + let mut escaped = String::new(); + tor_escape_into(buf, &mut escaped); + assert_eq!(&*tor_unescape(escaped.as_bytes()).unwrap(), buf); +} + +#[test] +fn round_trip_simple() { + round_trip(b"test"); +} + +#[test] +fn round_trip_empty() { + round_trip(b""); +} + +#[test] +fn round_trip_special_chars() { + round_trip(b"'\"\\\r\n\t"); +} + +#[test] +fn round_trip_non_utf8() { + round_trip(b"\xF5\xFF\xFE"); +} + +#[test] +fn round_trip_all_bytes() { + // Every possible byte value, escaped then unescaped, + // must come back unchanged. + let all_bytes: Vec<u8> = (0..=255).collect(); + round_trip(&all_bytes); +} ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/controller/unescape.rs → toolkit/components/tor-integration/tor_provider/src/ctor/controller/parsers/unescape.rs ===================================== ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/mod.rs ===================================== @@ -7,5 +7,6 @@ mod control_port; mod controller; mod reply_parser; -pub use control_port::{ControlPort, ControlPortError, ControlSocket, ControlSocketError}; +pub use control_port::{ControlPort, ControlSocket, ControlSocketError}; +pub use controller::*; pub use reply_parser::{ReplyDispatcher, ReplyError}; ===================================== toolkit/components/tor-integration/tor_provider/src/ctor/reply_parser/line.rs ===================================== @@ -9,6 +9,7 @@ use std::{ ops::Deref, }; +pub const ERROR_START: u16 = 400; pub const ASYNC_START: u16 = 600; /// An enum to represent MidReplyLine and DataReplyLine form the control port @@ -110,6 +111,11 @@ pub struct EndReplyLine { } impl EndReplyLine { + /// Tells whether the line is an error. + pub fn is_error(&self) -> bool { + self.code >= ERROR_START && self.code < ASYNC_START + } + /// Tells whether the line is part of an async reply. pub fn is_async(&self) -> bool { self.code >= ASYNC_START @@ -146,29 +152,106 @@ mod tests { } #[test] - fn is_async() { + fn check_type() { { let r = EndReplyLine { code: 250, line: Bytes::from_static(b"OK"), }; + assert!(!r.is_error()); + assert!(!r.is_async()); + } + { + let r = EndReplyLine { + code: 399, + line: Bytes::from_static(b"Success"), + }; + assert!(!r.is_error()); assert!(!r.is_async()); } + { + let r = EndReplyLine { + code: 400, + line: Bytes::from_static(b"Temporary error"), + }; + assert!(r.is_error()); + assert!(!r.is_async()); + } + { + let r = EndReplyLine { + code: 500, + line: Bytes::from_static(b"Permanent error"), + }; + assert!(r.is_error()); + assert!(!r.is_async()); + } + { + let r = EndReplyLine { + code: 599, + line: Bytes::from_static(b"Yet another error"), + }; + assert!(r.is_error()); + assert!(!r.is_async()); + } + { + let r = EndReplyLine { + code: 600, + line: Bytes::from_static(b"Notification"), + }; + assert!(!r.is_error()); + assert!(r.is_async()); + } { let r = EndReplyLine { code: 650, line: Bytes::from_static(b"CIRC BUILT"), }; + assert!(!r.is_error()); assert!(r.is_async()); } { let r = DetailReplyLine::MidReplyLine { code: 250, - line: Bytes::from_static(b"key=value"), + line: Bytes::from_static(b"OK"), + }; + assert!(!r.is_async()); + } + { + let r = DetailReplyLine::MidReplyLine { + code: 399, + line: Bytes::from_static(b"Success"), + }; + assert!(!r.is_async()); + } + { + let r = DetailReplyLine::MidReplyLine { + code: 400, + line: Bytes::from_static(b"Temporary error"), + }; + assert!(!r.is_async()); + } + { + let r = DetailReplyLine::MidReplyLine { + code: 500, + line: Bytes::from_static(b"Permanent error"), }; assert!(!r.is_async()); } + { + let r = DetailReplyLine::MidReplyLine { + code: 599, + line: Bytes::from_static(b"Yet another error"), + }; + assert!(!r.is_async()); + } + { + let r = DetailReplyLine::MidReplyLine { + code: 600, + line: Bytes::from_static(b"Notification"), + }; + assert!(r.is_async()); + } { let r = DetailReplyLine::MidReplyLine { code: 650, ===================================== toolkit/components/tor-integration/tor_service/src/control_port.rs ===================================== @@ -3,9 +3,9 @@ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ use nserror::nsresult; -use nserror::{NS_ERROR_NOT_CONNECTED, NS_OK}; +use nserror::{NS_ERROR_NOT_CONNECTED, NS_ERROR_UNEXPECTED, NS_OK}; use nsstring::{nsACString, nsCString}; -use tor_provider::ctor::{ControlPort, ControlSocketError}; +use tor_provider::ctor::{ControlPort, ControlSocketError, ControllerError, TorController}; use xpcom::interfaces::{nsIFile, torITorControlPortReceiver, torITorMessageHandler}; use xpcom::RefPtr; @@ -17,7 +17,7 @@ use super::control_socket::ControlSocketXpcom; #[xpcom(implement(torITorControlPort), atomic)] pub struct ControlPortXpcom { - control_port: ControlPort, + control_port: TorController<ControlPort>, } impl ControlPortXpcom { @@ -30,7 +30,7 @@ impl ControlPortXpcom { } fn new(socket: Box<ControlSocketXpcom>) -> Result<RefPtr<Self>, nsresult> { - let control_port = ControlPort::new(socket).map_err(Self::map_err)?; + let control_port = TorController::new(ControlPort::new(socket).map_err(Self::map_err)?); Ok(Self::allocate(InitControlPortXpcom { control_port })) } @@ -78,7 +78,7 @@ impl ControlPortXpcom { command.extend_from_slice(b"\r\n"); } let handler = RefPtr::new(handler); - self.control_port.send_command( + self.control_port.send_raw_command( command.into(), Box::new(move |reply| { let mut buf = Vec::new(); @@ -110,7 +110,10 @@ impl ControlPortXpcom { xpcom_method!(close => Close()); pub fn close(&self) -> Result<(), nsresult> { - self.control_port.close().map_err(Self::map_err) + self.control_port.close().map_err(|e| match e { + ControllerError::ConnectionError(rv) => nsresult(rv), + _ => NS_ERROR_UNEXPECTED, + }) } fn map_err(e: ControlSocketError) -> nsresult { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/cba90d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/cba90d… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.2.0esr-16.0-1] fixup! TB 40562: Added Tor Browser preferences to 000-tor-browser.js
by brizental (＠brizental) 09 Sep '26

09 Sep '26

brizental pushed to branch tor-browser-153.2.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: cba90d60 by Beatriz Rizental at 2026-09-09T13:59:16-03:00 fixup! TB 40562: Added Tor Browser preferences to 000-tor-browser.js Bug 45237: Disable multiple profiles feature - - - - - 1 changed file: - browser/app/profile/000-tor-browser.js Changes: ===================================== browser/app/profile/000-tor-browser.js ===================================== @@ -135,6 +135,9 @@ pref("extensions.torlauncher.tordatadir_path", ""); pref("extensions.torlauncher.bridgedb_targets", "https://1723079976.rsc.cdn77.org|cdn.zk.mk+www.cdn77.com"); pref("extensions.torlauncher.moat_service", "https://bridges.torproject.org/moat"); +// tor-browser#45237: Disable multiple profiles feature +pref("browser.profiles.enable", false); + // Log levels pref("browser.new_identity.log_level", "Info"); pref("browser.tor_provider.log_level", "Warn"); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/cba90d6… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/cba90d6… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41871: Update downloads repository references in relprep templates
by ma1 (＠ma1) 09 Sep '26

09 Sep '26

ma1 pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 0e95f65d by hackademix at 2026-09-09T14:24:49+02:00 Bug 41871: Update downloads repository references in relprep templates - - - - - 2 changed files: - .gitlab/issue_templates/040 Release Prep - Tor Browser Alpha.md - .gitlab/issue_templates/041 Release Prep - Tor Browser Stable.md Changes: ===================================== .gitlab/issue_templates/040 Release Prep - Tor Browser Alpha.md ===================================== @@ -154,12 +154,11 @@ Tor Browser Alpha (and Nightly) are on the `main` branch <details> <summary>Website</summary> - ### downloads: https://gitlab.torproject.org/tpo/web/tpo.git + ### downloads: https://gitlab.torproject.org/tpo/web/marble/download.git - [ ] `databags/versions.ini`: Update the downloads versions - - `torbrowser-stable/version`: catch-all for latest stable version - - `torbrowser-alpha/version`: catch-all for latest alpha version - - `torbrowser-*-stable/version`: platform-specific stable versions - - `torbrowser-*-alpha/version`: platform-specific alpha versions + - `[tor-browser]`: stable version numbers for each platform (`windows`, `macos`, `linux`, `android`) and for the bundled `tor` + - `[tor-browser-alpha]`: alpha versions for each platform (`windows`, `macos`, `linux`, `android`) and for the bundled `tor` + - `[tor]`: set by tor devs, **do not touch!** - [ ] Push to origin as new branch and create MR - [ ] Review - [ ] Merge ===================================== .gitlab/issue_templates/041 Release Prep - Tor Browser Stable.md ===================================== @@ -151,12 +151,11 @@ Tor Browser Stable is on the `maint-${TOR_BROWSER_MAJOR}.${TOR_BROWSER_MINOR}` b <details> <summary>Website</summary> - ### downloads: https://gitlab.torproject.org/tpo/web/tpo.git + ### downloads: https://gitlab.torproject.org/tpo/web/marble/download.git - [ ] `databags/versions.ini`: Update the downloads versions - - `torbrowser-stable/version`: catch-all for latest stable version - - `torbrowser-alpha/version`: catch-all for latest alpha version - - `torbrowser-*-stable/version`: platform-specific stable versions - - `torbrowser-*-alpha/version`: platform-specific alpha versions + - `[tor-browser]`: stable version numbers for each platform (`windows`, `macos`, `linux`, `android`) and for the bundled `tor` + - `[tor-browser-alpha]`: alpha versions for each platform (`windows`, `macos`, `linux`, `android`) and for the bundled `tor` + - `[tor]`: set by tor devs, **do not touch!** - [ ] Push to origin as new branch and create MR - [ ] Review - [ ] Merge View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-update-responses][main] 6 commits: release: new version, 15.0.22 (linux-i686)
by ma1 (＠ma1) 08 Sep '26

08 Sep '26

ma1 pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 9f56ee32 by hackademix at 2026-09-09T02:27:46+02:00 release: new version, 15.0.22 (linux-i686) - - - - - c502ab77 by hackademix at 2026-09-09T02:27:48+02:00 release: new version, 15.0.22 (linux-x86_64) - - - - - fd71d2e9 by hackademix at 2026-09-09T02:27:50+02:00 release: new version, 15.0.22 (macos) - - - - - 60f9e0cd by hackademix at 2026-09-09T02:27:51+02:00 release: new version, 15.0.22 (windows-i686) - - - - - 5391e464 by hackademix at 2026-09-09T02:27:53+02:00 release: new version, 15.0.22 (windows-x86_64) - - - - - 3408d285 by hackademix at 2026-09-09T02:27:56+02:00 release: new version, 15.0.22 - - - - - 36 changed files: - update_3/release/download-android-aarch64.json - update_3/release/download-android-armv7.json - update_3/release/download-android-x86.json - update_3/release/download-android-x86_64.json - update_3/release/download-linux-i686.json - update_3/release/download-linux-x86_64.json - update_3/release/download-macos.json - update_3/release/download-windows-i686.json - update_3/release/download-windows-x86_64.json - update_3/release/downloads.json - update_3/release/linux-i686/.htaccess - update_3/release/linux-i686/update-15.0.18-15.0.21-linux-i686.xml → update_3/release/linux-i686/update-15.0.19-15.0.22-linux-i686.xml - update_3/release/linux-i686/update-15.0.20-15.0.21-linux-i686.xml → update_3/release/linux-i686/update-15.0.20-15.0.22-linux-i686.xml - update_3/release/linux-i686/update-15.0.19-15.0.21-linux-i686.xml → update_3/release/linux-i686/update-15.0.21-15.0.22-linux-i686.xml - update_3/release/linux-i686/update-15.0.21-linux-i686.xml → update_3/release/linux-i686/update-15.0.22-linux-i686.xml - update_3/release/linux-x86_64/.htaccess - update_3/release/linux-x86_64/update-15.0.18-15.0.21-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.19-15.0.22-linux-x86_64.xml - − update_3/release/linux-x86_64/update-15.0.20-15.0.21-linux-x86_64.xml - update_3/release/linux-x86_64/update-15.0.19-15.0.21-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.20-15.0.22-linux-x86_64.xml - + update_3/release/linux-x86_64/update-15.0.21-15.0.22-linux-x86_64.xml - update_3/release/linux-x86_64/update-15.0.21-linux-x86_64.xml → update_3/release/linux-x86_64/update-15.0.22-linux-x86_64.xml - update_3/release/macos/.htaccess - update_3/release/macos/update-15.0.20-15.0.21-macos.xml → update_3/release/macos/update-15.0.19-15.0.22-macos.xml - update_3/release/macos/update-15.0.18-15.0.21-macos.xml → update_3/release/macos/update-15.0.20-15.0.22-macos.xml - update_3/release/macos/update-15.0.19-15.0.21-macos.xml → update_3/release/macos/update-15.0.21-15.0.22-macos.xml - update_3/release/macos/update-15.0.21-macos.xml → update_3/release/macos/update-15.0.22-macos.xml - update_3/release/windows-i686/.htaccess - update_3/release/windows-i686/update-15.0.18-15.0.21-windows-i686.xml → update_3/release/windows-i686/update-15.0.19-15.0.22-windows-i686.xml - update_3/release/windows-i686/update-15.0.20-15.0.21-windows-i686.xml → update_3/release/windows-i686/update-15.0.20-15.0.22-windows-i686.xml - update_3/release/windows-i686/update-15.0.19-15.0.21-windows-i686.xml → update_3/release/windows-i686/update-15.0.21-15.0.22-windows-i686.xml - update_3/release/windows-i686/update-15.0.21-windows-i686.xml → update_3/release/windows-i686/update-15.0.22-windows-i686.xml - update_3/release/windows-x86_64/.htaccess - update_3/release/windows-x86_64/update-15.0.18-15.0.21-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.19-15.0.22-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.20-15.0.21-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.20-15.0.22-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.19-15.0.21-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.21-15.0.22-windows-x86_64.xml - update_3/release/windows-x86_64/update-15.0.21-windows-x86_64.xml → update_3/release/windows-x86_64/update-15.0.22-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.2.0esr-16.0-1] fixup! Mullvad Browser strings
by Pier Angelo Vendrame (＠pierov) 08 Sep '26

08 Sep '26

Pier Angelo Vendrame pushed to branch mullvad-browser-153.2.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 0bcf91c6 by Morgan at 2026-09-08T18:51:49+00:00 fixup! Mullvad Browser strings No issue: fix typo - - - - - 1 changed file: - toolkit/locales/en-US/toolkit/global/mullvad-browser.ftl Changes: ===================================== toolkit/locales/en-US/toolkit/global/mullvad-browser.ftl ===================================== @@ -52,6 +52,6 @@ mullvad-preferences-doh-radio-off = # The first sentence should be wrapped in '' and ''. # "Mullvad" is an organization name. -mullvad-doh-notification-body = You default DNS Over HTTPS settings have been changed. Mullvad secure DNS service is being discontinued. +mullvad-doh-notification-body = Your default DNS Over HTTPS settings have been changed. Mullvad secure DNS service is being discontinued. mullvad-doh-notification-settings-button = .label = Review settings View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/0bc… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/0bc… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.2.0esr-16.0-1] fixup! [android] Disable features and functionality
by Dan Ballard (＠dan) 08 Sep '26

08 Sep '26

Dan Ballard pushed to branch tor-browser-153.2.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: ae7439cc by clairehurst at 2026-09-08T11:44:29-07:00 fixup! [android] Disable features and functionality TB 45252: Remove the change wallpaper menu item - - - - - 1 changed file: - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/components/menu/compose/MainMenu.kt Changes: ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/components/menu/compose/MainMenu.kt ===================================== @@ -314,11 +314,6 @@ fun MainMenu( MenuGroup { if (accessPoint == MenuAccessPoint.Home) { - MenuItem( - label = stringResource(id = R.string.browser_menu_change_wallpaper), - beforeIconPainter = painterResource(id = iconsR.drawable.mozac_ic_wallpaper_24), - onClick = onWallpaperButtonClick, - ) } MenuItem( View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ae7439c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ae7439c… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0