- tbb-commits - lists.torproject.org

[tor-browser-build/master] Update Changelog for 10.5a3
by gk＠torproject.org 10 Nov '20

10 Nov '20

commit 33dca21a594477569584055addd29bc176268d95 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Nov 10 08:09:53 2020 +0000 Update Changelog for 10.5a3 --- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 7febc0e..c24e353 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -8,8 +8,9 @@ Tor Browser 10.5a3 -- November 10 2020 * Bug 27002: (Mozilla 1673237) Always allow SVGs on about: pages * Bug 40021: Keep page shown after Tor Browser update purple [torbutton] * Bug 40137: Migrate https-everywhere storage to idb [tor-browser] - * Bug 40219: Backport Mozilla Bug 1675905 [tor-browser] + * Bug 40219: Backport fix for Mozilla's bug 1675905 [tor-browser] * Android + * Pick up fix for Mozilla's bug 1675905 * Bug 40106: EOY November Update - Matching [fenix] * Build System * All Platforms

1 0

[tor-browser-build/master] Release preparations for 10.5a3
by gk＠torproject.org 10 Nov '20

10 Nov '20

commit 78f0749ba93a41c5d485c2baf483b6ed3f7b3d46 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Mon Nov 9 14:57:05 2020 +0000 Release preparations for 10.5a3 Versions bump and Changelog update --- projects/firefox/config | 2 +- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 19 +++++++++++++++++++ projects/tor-browser/config | 4 ++-- rbm.conf | 6 +++--- 4 files changed, 25 insertions(+), 6 deletions(-) diff --git a/projects/firefox/config b/projects/firefox/config index f028be5..2daf0c3 100644 --- a/projects/firefox/config +++ b/projects/firefox/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'firefox-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build2' +git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build3' tag_gpg_id: 1 git_url: https://git.torproject.org/tor-browser.git git_submodule: 1 diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 7c3be93..7febc0e 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,22 @@ +Tor Browser 10.5a3 -- November 10 2020 + * All Platforms + * Update NoScript to 11.1.5 + * Bug 40022: EOY November Update - Matching [torbutton] + * Bug 40064: Bump libevent to 2.1.12 [tor-browser-build] + * Translations update + * Windows + OS X + Linux + * Bug 27002: (Mozilla 1673237) Always allow SVGs on about: pages + * Bug 40021: Keep page shown after Tor Browser update purple [torbutton] + * Bug 40137: Migrate https-everywhere storage to idb [tor-browser] + * Bug 40219: Backport Mozilla Bug 1675905 [tor-browser] + * Android + * Bug 40106: EOY November Update - Matching [fenix] + * Build System + * All Platforms + * Bug 40079: Bump Go to 1.15.4 [tor-browser-build] + * Windows + OS X + Linux + * Bug 40133: Bump Rust version for ESR 78 to 1.43.0 [tor-browser-build] + Tor Browser 10.0.3 -- November 2 2020 * Android * Update Fenix to 82.1.1 diff --git a/projects/tor-browser/config b/projects/tor-browser/config index 8b201f8..3d8e92d 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -77,9 +77,9 @@ input_files: enable: '[% c("var/snowflake") && ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… + - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… name: noscript - sha256sum: 08543e4a03e0becacd10c3cdbf5eaab1ff35a1648babe6f1522ae335e21de7d4 + sha256sum: 04ca69c90502f3b66cd18a4f832cb915b789b147ffd946b48f1dfb1215eb5398 - filename: 'RelativeLink/start-tor-browser.desktop' enable: '[% c("var/linux") %]' - filename: 'RelativeLink/execdesktop' diff --git a/rbm.conf b/rbm.conf index bc8c3ea..0fe45cd 100644 --- a/rbm.conf +++ b/rbm.conf @@ -24,10 +24,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '10.5a2' - torbrowser_build: 'build4' + torbrowser_version: '10.5a3' + torbrowser_build: 'build1' torbrowser_incremental_from: - - 10.5a1 + - 10.5a2 project_name: tor-browser multi_lingual: 0 build_mar: 1

1 0

[tor-browser-build/maint-10.0-android] Bump Fenix to -build3
by sysrqb＠torproject.org 09 Nov '20

09 Nov '20

commit 81fd9f5ba31f02f44c111d924c0124c239e4e655 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Mon Nov 9 16:08:57 2020 +0000 Bump Fenix to -build3 --- projects/fenix/config | 2 +- rbm.conf | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/fenix/config b/projects/fenix/config index 8b688d9..c5cf037 100644 --- a/projects/fenix/config +++ b/projects/fenix/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'fenix-[% c("version") %]-[% c("var/build_id") %].tar.gz' -git_hash: 'tor-browser-[% c("var/fenix_version") %]-[% c("var/torbrowser_branch") %]-1-build2' +git_hash: 'tor-browser-[% c("var/fenix_version") %]-[% c("var/torbrowser_branch") %]-1-build3' git_url: https://gitlab.torproject.org/tpo/applications/fenix.git tag_gpg_id: 1 gpg_keyring: torbutton.gpg diff --git a/rbm.conf b/rbm.conf index 565b05d..07545fb 100644 --- a/rbm.conf +++ b/rbm.conf @@ -25,7 +25,7 @@ buildconf: var: torbrowser_version: '10.0.4' - torbrowser_build: 'build1' + torbrowser_build: 'build2' torbrowser_incremental_from: - 10.5a1 project_name: tor-browser

1 0

[tor-browser-build/master] Fold in stable mobile Changelog
by gk＠torproject.org 09 Nov '20

09 Nov '20

commit f409657ae9390e95d249d20ab0477a7bfdf99a09 Author: Georg Koppen <gk(a)torproject.org> Date: Mon Nov 9 13:03:58 2020 +0000 Fold in stable mobile Changelog --- .../tor-browser/Bundle-Data/Docs/ChangeLog.txt | 191 +++++++++++++++++++++ 1 file changed, 191 insertions(+) diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 5f9e6ef..7c3be93 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,194 @@ +Tor Browser 10.0.3 -- November 2 2020 + * Android + * Update Fenix to 82.1.1 + * Update NoScript to 11.1.4 + * Update OpenSSL to 1.1.1h + * Update Tor to 0.4.4.5 + * Bug 10394: Let Tor Browser update HTTPS Everywhere + * Bug 11154: Disable TLS 1.0 (and 1.1) by default + * Bug 16931: Sanitize the add-on blocklist update URL + * Bug 17374: Disable 1024-DH Encryption by default + * Bug 21601: Remove unused media.webaudio.enabled pref + * Bug 30682: Disable Intermediate CA Preloading + * Bug 30812: Exempt about: pages from Resist Fingerprinting + * Bug 32886: Separate treatment of @media interaction features for desktop and android + * Bug 33534: Review FF release notes from FF69 to latest (FF78) + * Bug 33594: Disable telemetry collection (Glean) + * Bug 33851: Patch out Parental Controls detection and logging + * Bug 33856: Set browser.privatebrowsing.forceMediaMemoryCache to True + * Bug 33862: Fix usages of createTransport API + * Bug 33962: Uplift patch for bug 5741 (dns leak protection) + * Bug 34125: API change in protocolProxyService.registerChannelFilter + * Bug 34338: Disable the crash reporter + * Bug 34377: Port padlock states for .onion services + * Bug 34378: Port external helper app prompting + * Bug 34401: Re-design Connect screen on Android + * Bug 34402: Re-design Network Settings Screen on Android + * Bug 34403: UI changes for "Only Private Browsing Mode" on Android + * Bug 34405: Re-design about:tor on Android + * Bug 34406: Re-design onion indicators for Android + * Bug 34407: Review all Fenix menu items + * Bug 30605: Honor privacy.spoof_english + * Bug 40001: Start Tor as part of the Fenix initialization [fenix] + * Bug 40001: Generate tor-browser-brand.ftl when importing translations [torbutton] + * Bug 40002: Ensure system download manager is not used [android-components] + * Bug 40002: Fix generateNSGetFactory being moved to ComponentUtils [torbutton] + * Bug 40003: Adapt code for L10nRegistry API changes [torbutton] + * Bug 40003: Block starting Tor when setup is not complete [tor-android-service] + * Bug 40004: "Tor Browser" string is used instead of "Alpha"/"Nightly" for non en-US locales [tor-android-service] + * Bug 40004: Fix noscript message passing for Firefox 79 [torbutton] + * Bug 40005: Modify WebExtensions Menu [android-components] + * Bug 40006: "Only Private Browsing Mode" on Android [fenix] + * Bug 40006: Add Security Level plumbing [android-components] + * Bug 40007: Port external helper app prompting [android-components] + * Bug 40007: Move SecurityPrefs initialization to the StartupObserver component [torbutton] + * Bug 40008: Style fixes for 78 [torbutton] + * Bug 40009: Change the default search engines [android-components] + * Bug 40010: Verify Sentry is disabled [fenix] + * Bug 40011: Verify Leanplum is disabled [fenix] + * Bug 40011: Hide option for disallowing addons in private mode [android-components] + * Bug 40012: Verify Adjust is disabled [fenix] + * Bug 40013: Timestamp is embedded in extension manifest files [android-components] + * Bug 40013: Verify InstallReferrer is disabled [fenix] + * Bug 40014: Verify Google Ads ID is disabled [fenix] + * Bug 40014: Set correct default Security Level [android-components] + * Bug 40015: Modify Fenix Home Menu [fenix] + * Bug 40016: Modify Fenix Settings Menu [fenix] + * Bug 40016: Allow inheriting from AddonCollectionProvider [android-components] + * Bug 40017: Rebase android-components patches to 60 [android-components] + * Bug 40017: Audit Firefox 68-78 diff for proxy issues [tor-browser] + * Bug 40018: Disable Push functionality [fenix] + * Bug 40019: Ensure missing Adjust token does not throw an exception [fenix] + * Bug 40019: Expose spoofEnglish pref [android-components] + * Bug 40020: Disable third-party cookies [android-components] + * Bug 40021: Force telemetry=false in Fennec settings migration [android-components] + * Bug 40022: Migrate tor security settings [android-components] + * Bug 40023: Stop Private Notification Service [android-components] + * Bug 40023: Rebase Tor Browser esr78 patches onto 80 beta [tor-browser] + * Bug 40024: Disable tracking protection by default [android-components] + * Bug 40026: Implement Security Level settings [fenix] + * Bug 40028: Implement bootstrapping and about:tor [fenix] + * Bug 40029: Rebase Fenix patches to 81.1.0b1 [fenix] + * Bug 40030: Install https-everywhere and noscript addons [fenix] + * Bug 40031: Hide Mozilla-specific items on About page [fenix] + * Bug 40032: Disallow Cleartext Traffic [fenix] + * Bug 40034: Disable PWA [fenix] + * Bug 40035: Maybe hide Quick Start in release [fenix] + * Bug 40038: Review RemoteSettings for ESR 78 [tor-browser] + * Bug 40039: Implement Bridge configuration from Connect screen [fenix] + * Bug 40040: Investigate why bootstrapping fails [fenix] + * Bug 40041: Implement Network settings [fenix] + * Bug 40042: Timestamp is embedded in extension manifest files [fenix] + * Bug 40044: Fixup Connect, Onboarding, and Home screens [fenix] + * Bug 40048: Disable various ESR78 features via prefs [tor-browser] + * Bug 40050: Rebase Fenix patches to Fenix 82 [fenix] + * Bug 40053: Select your security settings panel on start page is confusing [fenix] + * Bug 40054: Search engines on mobile Tor Browser don't match the desktop ones [fenix] + * Bug 40058: Disabling/Enabling addon still shows option to disallow in private mode [fenix] + * Bug 40058: Hide option for disallowing addon in private mode [fenix] + * Bug 40061: Do not show "Send to device" in sharing menu [fenix] + * Bug 40062: HTTPS Everywhere is not shown as installed [fenix] + * Bug 40063: Do not sort search engines alphabetically [fenix] + * Bug 40064: Modify Nighty (and Debug) build variants [fenix] + * Bug 40066: Remove default bridge 37.218.240.34 [tor-browser-build] + * Bug 40066: Update existing prefs for ESR 78 [tor-browser] + * Bug 40067: Make date on Fenix about page reproducible [fenix] + * Bug 40068: Tor Service closes when changing theme [fenix] + * Bug 40069: Add helpers for message passing with extensions [tor-browser] + * Bug 40071: Show only supported locales [fenix] + * Bug 40072: Bug 40072: Disable Tracking Protection [fenix] + * Bug 40073: Use correct branding on About page [fenix] + * Bug 40073: Repack omni.ja to include builtin HTTPS Everywhere [tor-browser-build] + * Bug 40073: Disable remote Public Suffix List fetching [tor-browser] + * Bug 40076: "Explore privately" not visible [fenix] + * Bug 40078: Crash at Android startup from background service [fenix] + * Bug 40082: Security level is reset when the app is killed [fenix] + * Bug 40082: Let JavaScript on safest setting handled by NoScript again [tor-browser] + * Bug 40083: Locale ordering in BuildConfig is non-deterministic [fenix] + * Bug 40087: Implement a switch for english locale spoofing [fenix] + * Bug 40088: Use Tor Browser logo in migration screen [fenix] + * Bug 40091: Load HTTPS Everywhere as a builtin addon [tor-browser] + * Bug 40093: Enable Quit menu button [fenix] + * Bug 40094: Do not use MasterPasswordTipProvider in HomeFragment [fenix] + * Bug 40095: Hide "Sign in to sync" in bookmarks [fenix] + * Bug 40095: Review Mozilla developer notes for 79-81 (including) [tor-browser] + * Bug 40096: Review closed Mozilla bugs between 79-81 (inclusive) for GeckoView [tor-browser] + * Bug 40097: Rebase browser patches to 81.0b1 [tor-browser] + * Bug 40097: Bump allowed_addons.json [fenix] + * Bug 40098: Implement EOY home screen [fenix] + * Bug 40100: Resolve startup crashes in debug build [fenix] + * Bug 40112: Check that caching stylesheets per document group adheres to FPI [tor-browser] + * Bug 40119: Update Fenix dependencies for 81.1.2 [fenix] + * Bug 40125: Geckoview: Expose security level interface [tor-browser] + * Bug 40133: Rebase tor-browser patches to 82.0b1 [tor-browser] + * Bug 40166: Disable security.certerrors.mitm.auto_enable_enterprise_roots [tor-browser] + * Bug 40172: Security UI not updated for non-https .onion pages in Fenix [tor-browser] + * Bug 40173: Initialize security_slider in GeckoView at 4 [tor-browser] + * Bug 40198: Expose privacy.spoof_english pref [tor-browser] + * Bug 40199: Avoid using system locale for intl.accept_languages [tor-browser] + * Translations update + * Build System + * Android + * Update Go to 1.14.10 + * Bug 33556: Add TBB project for android-components + * Bug 33557: Update Android toolchain for Fenix + * Bug 33558: Update tor-onion-proxy-library to use toolchain for Fenix + * Bug 33559: Update tor-android-service to use toolchain for Fenix + * Bug 33561: Update OpenSSL to use Android NDK 20 + * Bug 33563: Update Tor to use Android NDK 20 + * Bug 33564: Update ZSTD to use Android NDK 20 + * Bug 33626: Add project for GeckoView + * Bug 33670: Update rbm.conf to match NDK 20 + * Bug 33801: Update Go project to use new Android toolchain + * Bug 33833: Update Rust project to use Android NDK 20 + * Bug 33927: Add tor-browser-build project for fenix + * Bug 33935: Fenix's classes5.dex files are not reproducible + * Bug 33973: Create fat .aar for GeckoView + * Bug 34011: Bump clang to 9.0.1 + * Bug 34012: Bump cbindgen to 0.14.3 + * Bug 34013: Bump Node to 10.21.0 + * Bug 34014: Enable sqlite3 support in Python + * Bug 34101: Add tor-browser-build project for application-services + * Bug 34163: testbuild target is broken for Tor Browser 64 bit + * Bug 34187: Update zlib to use Android NDK 20 + * Bug 34360: Bump binutils version to 2.35.1 + * Bug 40010: Add nss project for application-services [tor-browser-build] + * Bug 40011: Add sqlcipher for application-services [tor-browser-build] + * Bug 40029: Clean-up all projects to remove fennec bits we don't need for fenix [tor-browser-build] + * Bug 40031: Add licenses for kcp-go and smux. [tor-browser-build] + * Bug 40039: Remove version_path in nss project [tor-browser-build] + * Bug 40040: Wire geckoview, application-services, android-components, and fenix together [tor-browser-build] + * Bug 40054: Adapt build.android script in tor-browser project for fenix [tor-browser-build] + * Bug 40055: Integrate building Glean in offline mode [tor-browser-build] + * Bug 40057: Include translations into build process in the fenix world [tor-browser-build] + * Bug 40058: Build Fenix with tor-android-service and tor-onion-proxy-library [tor-browser-build] + * Bug 40060: Set Fenix Version Name in build [tor-browser-build] + * Bug 40061: Remove Android SDK 28 [tor-browser-build] + * Bug 40065: Bump debootstrap-image ubuntu_version to 20.04.1 [tor-browser-build] + * Bug 40068: Bump versions for Fenix 81.1.0b1 dependencies [tor-browser-build] + * Bug 40072: Tor libraries are missing in final .apk after switch to 81.1.0b1 [tor-browser-build] + * Bug 40076: Use our android-components repo on GitLab [tor-browser-build] + * Bug 40078: Bump Gradle version for Fenix to 6.5.1 [tor-browser-build] + * Bug 40084: Generation of AndroidManifest.xml is not reproducible [tor-browser-build] + * Bug 40085+40086: classes.dex files are not reproducible in Fenix [tor-browser-build] + * Bug 40087: Deterministically add HTTPS Everywhere into omni.ja [tor-browser-build] + * Bug 40088+40117: Use MOZ_BUILD_DATE for extension manifest timestamps [tor-browser-build] + * Bug 40093: Ensure application-services libs do not include libc networking symbols [tor-browser-build] + * Bug 40094: Aarch64 fenix rust cross-compilation fails [tor-browser-build] + * Bug 40095: The pattern for the apk variable in build.android is matching too much [tor-browser-build] + * Bug 40097: Update toolchain for Fenix 82 [tor-browser-build] + * Bug 40101: Pick up Fenix 81.1.1 [tor-browser-build] + * Bug 40105: Enhance Gradle dependency script (sort deterministically and exclude .module files) [tor-browser-build] + * Bug 40106: Support using geckoview as well [tor-browser-build] + * Bug 40108: android-components does not bundle tooling-glean-gradle archive, only .pom file [tor-browser-build] + * Bug 40113: Nightly Android should use Nightly branding [tor-browser-build] + * Bug 40115: Update components for switch to mozilla82-based Fenix [tor-browser-build] + * Bug 40121: Use updated glean_parser for application-services as well [tor-browser-build] + * Bug 40124: Remove unused torbrowser-android-all (and related) targets [tor-browser-build] + * Bug 40125: Remove fenix-* projects [tor-browser-build] + * Bug 40129: application-services is missing rustc in PATH [tor-browser-build] + * Bug 40130: More mobile clean-up [tor-browser-build] + Tor Browser 10.0a9 -- October 26 2020 * Android * Update Fenix to 82.1.1

1 0

[tor-browser-build/maint-10.0-android] Tor Browser 10.0.4 release preparations
by sysrqb＠torproject.org 08 Nov '20

08 Nov '20

commit 2f0eab871eef193fdb44d24020c47460afef03f8 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Sun Nov 8 15:15:26 2020 +0000 Tor Browser 10.0.4 release preparations Version bumps and Changelog update --- projects/geckoview/config | 2 +- projects/go/config | 4 ++-- projects/tba-translation/config | 2 +- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 12 ++++++++++++ projects/tor-browser/config | 4 ++-- rbm.conf | 2 +- 6 files changed, 19 insertions(+), 7 deletions(-) diff --git a/projects/geckoview/config b/projects/geckoview/config index 9b33603..67c8986 100644 --- a/projects/geckoview/config +++ b/projects/geckoview/config @@ -8,7 +8,7 @@ git_submodule: 1 gpg_keyring: torbutton.gpg var: - geckoview_version: 82.0 + geckoview_version: 82.0.3 torbrowser_branch: 10.0 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' deps: diff --git a/projects/go/config b/projects/go/config index 5a18dd8..124be1f 100644 --- a/projects/go/config +++ b/projects/go/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 1.14.10 +version: 1.14.11 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz' var: @@ -118,7 +118,7 @@ input_files: enable: '[% ! c("var/linux") %]' - URL: 'https://golang.org/dl/go[% c("version") %].src.tar.gz' name: go - sha256sum: b37699a7e3eab0f90412b3969a90fd072023ecf61e0b86369da532810a95d665 + sha256sum: 1871f3d29b0cf1ebb739c9b134c9bc559282bd3625856e5f12f5aea29ab70f16 - URL: 'https://golang.org/dl/go[% c("var/go14_version") %].src.tar.gz' name: go14 sha256sum: 9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959 diff --git a/projects/tba-translation/config b/projects/tba-translation/config index 352c1c9..b2def42 100644 --- a/projects/tba-translation/config +++ b/projects/tba-translation/config @@ -3,5 +3,5 @@ filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz' git_url: https://git.torproject.org/translation.git # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. -git_hash: f6d055376d53c41f729aff50c2960f479012b6dc +git_hash: 96c5386d045d7413c4e208337aed7465fb0a666d version: '[% c("abbrev") %]' diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 7c3be93..b630c03 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,15 @@ +Tor Browser 10.0.4 -- November 9 2020 + * Android + * Update NoScript to 11.1.5 + * Bug 40022: EOY November Update - Matching [torbutton] + * Bug 40106: EOY November Update - Matching [fenix] + * Bug 40219: Backport Mozilla Bug 1675905 [tor-browser] + * Translations update + * Build System + * Android + * Update Go to 1.14.11 + * Bug 40141: Include "android" in signed tag [tor-browser-build] + Tor Browser 10.0.3 -- November 2 2020 * Android * Update Fenix to 82.1.1 diff --git a/projects/tor-browser/config b/projects/tor-browser/config index 9b31dfc..3d8e92d 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -77,9 +77,9 @@ input_files: enable: '[% c("var/snowflake") && ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… + - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… name: noscript - sha256sum: 29738b77ecfa806679211e630c29ba1cff57ba22d713c35d4d7b5ed99f1f7d8c + sha256sum: 04ca69c90502f3b66cd18a4f832cb915b789b147ffd946b48f1dfb1215eb5398 - filename: 'RelativeLink/start-tor-browser.desktop' enable: '[% c("var/linux") %]' - filename: 'RelativeLink/execdesktop' diff --git a/rbm.conf b/rbm.conf index fb03a23..565b05d 100644 --- a/rbm.conf +++ b/rbm.conf @@ -24,7 +24,7 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '10.0.3' + torbrowser_version: '10.0.4' torbrowser_build: 'build1' torbrowser_incremental_from: - 10.5a1

1 0

[tor-browser/tor-browser-82.0-10.0-1] fixup! Bug 10760: Integrate TorButton to TorBrowser core
by sysrqb＠torproject.org 08 Nov '20

08 Nov '20

commit ba81d4208b74c403d4b96c851e794cc86d1a3da1 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Sun Nov 8 20:37:30 2020 +0000 fixup! Bug 10760: Integrate TorButton to TorBrowser core --- toolkit/torproject/torbutton | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolkit/torproject/torbutton b/toolkit/torproject/torbutton index ad7c0b884586..968c2565ceb8 160000 --- a/toolkit/torproject/torbutton +++ b/toolkit/torproject/torbutton @@ -1 +1 @@ -Subproject commit ad7c0b884586f5d1f3cc8e9223ae806f77ca05af +Subproject commit 968c2565ceb8417ef026cf639cd5c2e80f6057a4

1 0

[tor-browser/tor-browser-82.0-10.0-1] Revert "Bug 40171: Make WebRequest and GeckoWebExecutor First-Party aware"
by sysrqb＠torproject.org 08 Nov '20

08 Nov '20

commit 26749388416ac42a196d60aef0f4f9597460938c Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Sun Nov 8 20:41:38 2020 +0000 Revert "Bug 40171: Make WebRequest and GeckoWebExecutor First-Party aware" This reverts commit 9d609e98a6ea20a3a4f01c86ee3a53a2a7f33f47. --- .../main/java/org/mozilla/geckoview/WebRequest.java | 18 ------------------ widget/android/WebExecutorSupport.cpp | 10 ---------- 2 files changed, 28 deletions(-) diff --git a/mobile/android/geckoview/src/main/java/org/mozilla/geckoview/WebRequest.java b/mobile/android/geckoview/src/main/java/org/mozilla/geckoview/WebRequest.java index 18f56abeec43..7e3aa285c5be 100644 --- a/mobile/android/geckoview/src/main/java/org/mozilla/geckoview/WebRequest.java +++ b/mobile/android/geckoview/src/main/java/org/mozilla/geckoview/WebRequest.java @@ -49,11 +49,6 @@ public class WebRequest extends WebMessage { */ public final @Nullable String referrer; - /** - * The value of the origin of this request. - */ - public final @Nullable String origin; - @Retention(RetentionPolicy.SOURCE) @IntDef({CACHE_MODE_DEFAULT, CACHE_MODE_NO_STORE, CACHE_MODE_RELOAD, CACHE_MODE_NO_CACHE, @@ -115,7 +110,6 @@ public class WebRequest extends WebMessage { method = builder.mMethod; cacheMode = builder.mCacheMode; referrer = builder.mReferrer; - origin = builder.mOrigin; if (builder.mBody != null) { body = builder.mBody.asReadOnlyBuffer(); @@ -132,7 +126,6 @@ public class WebRequest extends WebMessage { /* package */ String mMethod = "GET"; /* package */ int mCacheMode = CACHE_MODE_DEFAULT; /* package */ String mReferrer; - /* package */ String mOrigin; /** * Construct a Builder instance with the specified URI. @@ -212,17 +205,6 @@ public class WebRequest extends WebMessage { return this; } - /** - * Set the origin URI. - * - * @param origin A URI String - * @return This Builder instance. - */ - public @NonNull Builder origin(final @Nullable String origin) { - mOrigin = origin; - return this; - } - /** * @return A {@link WebRequest} constructed with the values from this Builder instance. */ diff --git a/widget/android/WebExecutorSupport.cpp b/widget/android/WebExecutorSupport.cpp index 60ab02c03354..dc428e34c10c 100644 --- a/widget/android/WebExecutorSupport.cpp +++ b/widget/android/WebExecutorSupport.cpp @@ -383,16 +383,6 @@ nsresult WebExecutorSupport::CreateStreamLoader( MOZ_ASSERT(cookieJarSettings); nsCOMPtr<nsILoadInfo> loadInfo = channel->LoadInfo(); - - RefPtr<nsIURI> originUri; - const auto origin = req->Origin(); - if (origin) { - rv = NS_NewURI(getter_AddRefs(originUri), origin->ToString()); - NS_ENSURE_SUCCESS(rv, NS_ERROR_MALFORMED_URI); - OriginAttributes attrs = loadInfo->GetOriginAttributes(); - attrs.SetFirstPartyDomain(true, originUri); - loadInfo->SetOriginAttributes(attrs); - } loadInfo->SetCookieJarSettings(cookieJarSettings); // setup http/https specific things

1 0

[tor-browser-build/maint-10.0-desktop] Tor Browser 10.0.4 release preparations
by gk＠torproject.org 08 Nov '20

08 Nov '20

commit 7ccd34212b0d18078a90a665ce47a6f5df58964a Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Sun Nov 8 15:15:26 2020 +0000 Tor Browser 10.0.4 release preparations Version bumps and Changelog update --- projects/firefox/config | 2 +- projects/go/config | 4 ++-- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 12 ++++++++++++ projects/tor-browser/config | 4 ++-- rbm.conf | 7 +++---- 5 files changed, 20 insertions(+), 9 deletions(-) diff --git a/projects/firefox/config b/projects/firefox/config index 2633653..af0d742 100644 --- a/projects/firefox/config +++ b/projects/firefox/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'firefox-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-2-build2' +git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-2-build3' tag_gpg_id: 1 git_url: https://git.torproject.org/tor-browser.git git_submodule: 1 diff --git a/projects/go/config b/projects/go/config index 5a18dd8..124be1f 100644 --- a/projects/go/config +++ b/projects/go/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 1.14.10 +version: 1.14.11 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz' var: @@ -118,7 +118,7 @@ input_files: enable: '[% ! c("var/linux") %]' - URL: 'https://golang.org/dl/go[% c("version") %].src.tar.gz' name: go - sha256sum: b37699a7e3eab0f90412b3969a90fd072023ecf61e0b86369da532810a95d665 + sha256sum: 1871f3d29b0cf1ebb739c9b134c9bc559282bd3625856e5f12f5aea29ab70f16 - URL: 'https://golang.org/dl/go[% c("var/go14_version") %].src.tar.gz' name: go14 sha256sum: 9947fc705b0b841b5938c48b22dc33e9647ec0752bae66e50278df4f23f64959 diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 99e54bb..526db49 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,15 @@ +Tor Browser 10.0.4 -- November 9 2020 + * Windows + OS X + Linux + * Update NoScript to 11.1.5 + * Bug 40021: Keep page shown after Tor Browser update purple [torbutton] + * Bug 40022: EOY November Update - Matching [torbutton] + * Bug 40219: Backport Mozilla Bug 1675905 [tor-browser] + * Translations update + * Build System + * Windows + OS X + Linux + * Update Go to 1.14.11 + * Bug 40141: Include "desktop" in signed tag [tor-browser-build] + Tor Browser 10.0.2 -- October 20 2020 * Windows + OS X + Linux * Update Firefox to 78.4.0esr diff --git a/projects/tor-browser/config b/projects/tor-browser/config index 8b201f8..3d8e92d 100644 --- a/projects/tor-browser/config +++ b/projects/tor-browser/config @@ -77,9 +77,9 @@ input_files: enable: '[% c("var/snowflake") && ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… + - URL: https://addons.cdn.mozilla.net/user-media/addons/722/noscript_security_suit… name: noscript - sha256sum: 08543e4a03e0becacd10c3cdbf5eaab1ff35a1648babe6f1522ae335e21de7d4 + sha256sum: 04ca69c90502f3b66cd18a4f832cb915b789b147ffd946b48f1dfb1215eb5398 - filename: 'RelativeLink/start-tor-browser.desktop' enable: '[% c("var/linux") %]' - filename: 'RelativeLink/execdesktop' diff --git a/rbm.conf b/rbm.conf index e097cd7..ad6d5f7 100644 --- a/rbm.conf +++ b/rbm.conf @@ -24,11 +24,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '10.0.2' - torbrowser_build: 'build2' + torbrowser_version: '10.0.4' + torbrowser_build: 'build1' torbrowser_incremental_from: - - 10.0 - - 10.0.1 + - 10.0.2 project_name: tor-browser multi_lingual: 0 build_mar: 1

1 0

[tor-browser/tor-browser-78.4.0esr-10.5-1] Bug 1675905 - Simplify IonBuilder::createThisScripted. r=jandem, iain a=RyanVM
by sysrqb＠torproject.org 08 Nov '20

08 Nov '20

commit bdaa7f394393c740ab0d85443b9815121431249c Author: Ted Campbell <tcampbell(a)mozilla.com> Date: Sat Nov 7 05:36:31 2020 +0000 Bug 1675905 - Simplify IonBuilder::createThisScripted. r=jandem,iain a=RyanVM Differential Revision: https://phabricator.services.mozilla.com/D96309 --- js/src/jit/IonBuilder.cpp | 29 ++++++++--------------------- js/src/jit/IonIC.cpp | 9 +++++++++ 2 files changed, 17 insertions(+), 21 deletions(-) diff --git a/js/src/jit/IonBuilder.cpp b/js/src/jit/IonBuilder.cpp index 545c1b06d995..04796e620692 100644 --- a/js/src/jit/IonBuilder.cpp +++ b/js/src/jit/IonBuilder.cpp @@ -5210,31 +5210,18 @@ MDefinition* IonBuilder::createThisScripted(MDefinition* callee, // explicit operation in the bytecode, we cannot use resumeAfter(). // Getters may not override |prototype| fetching, so this operation is // indeed idempotent. - // - First try an idempotent property cache. - // - Upon failing idempotent property cache, we can't use a non-idempotent - // cache, therefore we fallback to CallGetProperty // - // Note: both CallGetProperty and GetPropertyCache can trigger a GC, - // and thus invalidation. - MInstruction* getProto; - if (!invalidatedIdempotentCache()) { - MConstant* id = constant(StringValue(names().prototype)); - MGetPropertyCache* getPropCache = - MGetPropertyCache::New(alloc(), newTarget, id, - /* monitored = */ false); - getPropCache->setIdempotent(); - getProto = getPropCache; - } else { - MCallGetProperty* callGetProp = - MCallGetProperty::New(alloc(), newTarget, names().prototype); - callGetProp->setIdempotent(); - getProto = callGetProp; - } - current->add(getProto); + // Note: GetPropertyCache can trigger a GC, and thus invalidation. + MConstant* id = constant(StringValue(names().prototype)); + MGetPropertyCache* getPropCache = + MGetPropertyCache::New(alloc(), newTarget, id, + /* monitored = */ false); + getPropCache->setIdempotent(); + current->add(getPropCache); // Create this from prototype MCreateThisWithProto* createThis = - MCreateThisWithProto::New(alloc(), callee, newTarget, getProto); + MCreateThisWithProto::New(alloc(), callee, newTarget, getPropCache); current->add(createThis); return createThis; diff --git a/js/src/jit/IonIC.cpp b/js/src/jit/IonIC.cpp index 1d5591d0dbf7..a0e4bd2acd6c 100644 --- a/js/src/jit/IonIC.cpp +++ b/js/src/jit/IonIC.cpp @@ -215,6 +215,15 @@ bool IonGetPropertyIC::update(JSContext* cx, HandleScript outerScript, Invalidate(cx, outerScript); } + // IonBuilder::createScriptedThis does not use InvalidedIdempotentCache + // flag so prevent bailout-loop by disabling Ion for the script. + MOZ_ASSERT(ic->kind() == CacheKind::GetProp); + if (idVal.toString()->asAtom().asPropertyName() == cx->names().prototype) { + if (val.isObject() && val.toObject().is<JSFunction>()) { + outerScript->disableIon(); + } + } + // We will redo the potentially effectful lookup in Baseline. return true; }

1 0

[tor-browser/tor-browser-78.4.0esr-10.5-1] fixup! Bug 10760: Integrate TorButton to TorBrowser core
by sysrqb＠torproject.org 08 Nov '20

08 Nov '20

commit e9db74b867cbacaaf4688e4a8ded537592f0c0d7 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Sun Nov 8 19:37:41 2020 +0000 fixup! Bug 10760: Integrate TorButton to TorBrowser core --- toolkit/torproject/torbutton | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolkit/torproject/torbutton b/toolkit/torproject/torbutton index 65b6f322d5cf..968c2565ceb8 160000 --- a/toolkit/torproject/torbutton +++ b/toolkit/torproject/torbutton @@ -1 +1 @@ -Subproject commit 65b6f322d5cf0b0bce51228ee0af8ee48384d5cc +Subproject commit 968c2565ceb8417ef026cf639cd5c2e80f6057a4

1 0