- tbb-commits - lists.torproject.org

[tor-browser/tor-browser-38.1.0esr-5.0-1] Merge remote-tracking branch 'arthur/16572' into tor-browser-38.1.0esr-5.0-1
by mikeperry＠torproject.org 04 Aug '15

04 Aug '15

commit da7faed2de78d7a0a5c84a0d8c508b9499b7bf54 Merge: 522558c 7a73984 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Tue Aug 4 13:38:34 2015 -0700 Merge remote-tracking branch 'arthur/16572' into tor-browser-38.1.0esr-5.0-1 netwerk/test/browser/browser.ini | 2 ++ netwerk/test/browser/browser_cacheFirstParty.js | 2 +- netwerk/test/browser/thirdPartyChild.iframe.html | 1 + netwerk/test/browser/thirdPartyChild.worker.js | 3 +++ netwerk/test/browser/thirdPartyChild.worker.xhr.html | 8 ++++++++ 5 files changed, 15 insertions(+), 1 deletion(-)

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] fixup! Bug #13749.2: Regression tests for first-party isolation of cache
by mikeperry＠torproject.org 04 Aug '15

04 Aug '15

commit 7a73984f8e8f394417d850284578f2b97fed6120 Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Mon Jul 13 16:14:56 2015 -0700 fixup! Bug #13749.2: Regression tests for first-party isolation of cache --- netwerk/test/browser/browser.ini | 2 ++ netwerk/test/browser/browser_cacheFirstParty.js | 2 +- netwerk/test/browser/thirdPartyChild.iframe.html | 1 + netwerk/test/browser/thirdPartyChild.worker.js | 3 +++ netwerk/test/browser/thirdPartyChild.worker.xhr.html | 8 ++++++++ 5 files changed, 15 insertions(+), 1 deletion(-) diff --git a/netwerk/test/browser/browser.ini b/netwerk/test/browser/browser.ini index aaf0def..ca711b7 100644 --- a/netwerk/test/browser/browser.ini +++ b/netwerk/test/browser/browser.ini @@ -10,6 +10,8 @@ support-files = thirdPartyChild.embed.png thirdPartyChild.img.png thirdPartyChild.object.png + thirdPartyChild.worker.js + thirdPartyChild.worker.xhr.html thirdPartyChild.xhr.html thirdPartyChild.track.vtt diff --git a/netwerk/test/browser/browser_cacheFirstParty.js b/netwerk/test/browser/browser_cacheFirstParty.js index 9795539..c23f669 100644 --- a/netwerk/test/browser/browser_cacheFirstParty.js +++ b/netwerk/test/browser/browser_cacheFirstParty.js @@ -106,7 +106,7 @@ let privacyPref = "privacy.thirdparty.isolate", // We will check cache for example.net content from // iframe, link, script, img, object, embed, xhr, audio, video, track suffixes = ["iframe.html", "link.css", "script.js", "img.png", "object.png", - "embed.png", "xhr.html", "audio.ogg", "video.ogv", "track.vtt" ]; + "embed.png", "xhr.html", "worker.xhr.html", "audio.ogg", "video.ogv", "track.vtt" ]; // __checkCachePopulation(pref, numberOfDomains)__. // Check if the number of entries found in the cache for each diff --git a/netwerk/test/browser/thirdPartyChild.iframe.html b/netwerk/test/browser/thirdPartyChild.iframe.html index f7b7531..bbd6043 100644 --- a/netwerk/test/browser/thirdPartyChild.iframe.html +++ b/netwerk/test/browser/thirdPartyChild.iframe.html @@ -8,6 +8,7 @@ var xhr = new XMLHttpRequest(); xhr.open("GET", "http://example.net/browser/netwerk/test/browser/thirdPartyChild.xhr.html", true); xhr.send(); + var worker = new Worker("http://example.net/browser/netwerk/test/browser/thirdPartyChild.worker.js"); </script> </body> </html> diff --git a/netwerk/test/browser/thirdPartyChild.worker.js b/netwerk/test/browser/thirdPartyChild.worker.js new file mode 100644 index 0000000..49154b7 --- /dev/null +++ b/netwerk/test/browser/thirdPartyChild.worker.js @@ -0,0 +1,3 @@ +var xhr = new XMLHttpRequest(); +xhr.open("GET", "http://example.net/browser/netwerk/test/browser/thirdPartyChild.worker.xhr.…", true); +xhr.send(); diff --git a/netwerk/test/browser/thirdPartyChild.worker.xhr.html b/netwerk/test/browser/thirdPartyChild.worker.xhr.html new file mode 100644 index 0000000..1f18646 --- /dev/null +++ b/netwerk/test/browser/thirdPartyChild.worker.xhr.html @@ -0,0 +1,8 @@ +<!DOCTYPE html> +<html> +<meta content="text/html;charset=utf-8" http-equiv="Content-Type"> + +<body> +<div>thirdPartyChild.worker.xhr.html</div> +</body> +</html>

1 0

[tor-browser-bundle/master] Update download URL
by gk＠torproject.org 02 Aug '15

02 Aug '15

commit 67811626aba4ac9f63194cb48bbfcd4319d5d40f Author: Georg Koppen <gk(a)torproject.org> Date: Sun Aug 2 10:50:09 2015 +0000 Update download URL --- tools/update-responses/config.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 1917187..5a4d965 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -26,7 +26,7 @@ versions: 5.0a4: platformVersion: 38.1.0 detailsURL: https://www.torproject.org/projects/torbrowser.html.en - download_url: https://www.torproject.org/dist/torbrowser/5.0a3 + download_url: https://www.torproject.org/dist/torbrowser/5.0a4 incremental_from: - 5.0a3 migrate_archs:

1 0

[tor-browser-bundle/master] Update update responses for 5.0a4.
by mikeperry＠torproject.org 30 Jul '15

30 Jul '15

commit 335c3eed9a919977275b6da29a203cbc3ca9d971 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jul 29 20:55:55 2015 -0700 Update update responses for 5.0a4. --- tools/update-responses/config.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 77d8e46..1917187 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -9,7 +9,7 @@ build_targets: osx32: Darwin_x86-gcc3 osx64: Darwin_x86_64-gcc3 channels: - alpha: 5.0a3 + alpha: 5.0a4 release: 4.5.2 versions: 4.5.2: @@ -23,12 +23,12 @@ versions: osx32: minSupportedOSVersion: 10.8 detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#upda… - 5.0a3: + 5.0a4: platformVersion: 38.1.0 detailsURL: https://www.torproject.org/projects/torbrowser.html.en download_url: https://www.torproject.org/dist/torbrowser/5.0a3 incremental_from: - - 5.0a2 + - 5.0a3 migrate_archs: osx32: osx64 osx32:

1 0

[tor-browser-bundle/master] Fix the tor version checks when applying backported patches.
by mikeperry＠torproject.org 29 Jul '15

29 Jul '15

commit abb0ef2e192c4268980a2e670fdfac6c3715c4c5 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jul 29 09:11:11 2015 -0700 Fix the tor version checks when applying backported patches. --- gitian/descriptors/linux/gitian-tor.yml | 7 +++---- gitian/descriptors/mac/gitian-tor.yml | 7 +++---- gitian/descriptors/windows/gitian-tor.yml | 7 +++---- 3 files changed, 9 insertions(+), 12 deletions(-) diff --git a/gitian/descriptors/linux/gitian-tor.yml b/gitian/descriptors/linux/gitian-tor.yml index bfd0e18..906077b 100644 --- a/gitian/descriptors/linux/gitian-tor.yml +++ b/gitian/descriptors/linux/gitian-tor.yml @@ -79,14 +79,13 @@ script: | export GIT_COMMITTER_NAME="nobody" export GIT_COMMITTER_EMAIL="nobody@localhost" export GIT_COMMITTER_DATE="$REFERENCE_DATETIME" - if [ ${TOR_TAG::9} == "tor-0.2.5" ]; + if [ ${TOR_TAG::9} == "tor-0.2.6" ]; then - git am ~/build/bug8405.patch - git am ~/build/bug8402-master.patch - else git am ~/build/bug15482.patch git am ~/build/bug16430.patch git am ~/build/bug16674.patch + else + git am ~/build/bug15482.patch fi mkdir -p $OUTDIR/src #git archive HEAD | tar -x -C $OUTDIR/src diff --git a/gitian/descriptors/mac/gitian-tor.yml b/gitian/descriptors/mac/gitian-tor.yml index c755851..8e64922 100644 --- a/gitian/descriptors/mac/gitian-tor.yml +++ b/gitian/descriptors/mac/gitian-tor.yml @@ -57,14 +57,13 @@ script: | export GIT_COMMITTER_NAME="nobody" export GIT_COMMITTER_EMAIL="nobody@localhost" export GIT_COMMITTER_DATE="$REFERENCE_DATETIME" - if [ ${TOR_TAG::9} == "tor-0.2.5" ]; + if [ ${TOR_TAG::9} == "tor-0.2.6" ]; then - git am ~/build/bug8405.patch - git am ~/build/bug8402-master.patch - else git am ~/build/bug15482.patch git am ~/build/bug16430.patch git am ~/build/bug16674.patch + else + git am ~/build/bug15482.patch fi mkdir -p $OUTDIR/src #git archive HEAD | tar -x -C $OUTDIR/src diff --git a/gitian/descriptors/windows/gitian-tor.yml b/gitian/descriptors/windows/gitian-tor.yml index a6be6b4..7320a65 100644 --- a/gitian/descriptors/windows/gitian-tor.yml +++ b/gitian/descriptors/windows/gitian-tor.yml @@ -57,14 +57,13 @@ script: | export GIT_COMMITTER_NAME="nobody" export GIT_COMMITTER_EMAIL="nobody@localhost" export GIT_COMMITTER_DATE="$REFERENCE_DATETIME" - if [ ${TOR_TAG::9} == "tor-0.2.5" ]; + if [ ${TOR_TAG::9} == "tor-0.2.6" ]; then - git am ~/build/bug8405.patch - git am ~/build/bug8402-master.patch - else git am ~/build/bug15482.patch git am ~/build/bug16430.patch git am ~/build/bug16674.patch + else + git am ~/build/bug15482.patch fi mkdir -p $OUTDIR/src #git archive HEAD | tar -x -C $OUTDIR/src

1 0

[tor-browser-bundle/master] Update 5.0a4 changelog wrt backported patches.
by mikeperry＠torproject.org 29 Jul '15

29 Jul '15

commit cf409e6812da564f57880150303933f4ccc8a078 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Jul 29 09:12:16 2015 -0700 Update 5.0a4 changelog wrt backported patches. --- Bundle-Data/Docs/ChangeLog.txt | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 8a563cf..fd6d158 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,8 +1,7 @@ Tor Browser 5.0a4 -- August 3 2015 * All Platforms - * Update Tor to 0.2.7.2-alpha with backported patches: - * Bug 16674: Allow trailing '.' in FQDNs - * Bug 16430: Allow DNS names with _ characters in them (fixes nytimes.com) + * Update Tor to 0.2.7.2-alpha with patches: + * Bug 15482: Don't allow circuits to change while a site is in use * Update OpenSSL to 1.0.1p * Update HTTPS-Everywhere to 5.0.7 * Update NoScript to 2.6.9.31

1 0

[tor-browser-bundle/master] Changelog clarifications
by mikeperry＠torproject.org 28 Jul '15

28 Jul '15

commit d4fd73c796feb6db0091f0f38af32959e46997f6 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Tue Jul 28 16:39:01 2015 -0700 Changelog clarifications --- Bundle-Data/Docs/ChangeLog.txt | 23 +++++++++++------------ 1 file changed, 11 insertions(+), 12 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 0e38362..8a563cf 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,32 +1,31 @@ Tor Browser 5.0a4 -- August 3 2015 * All Platforms - * Update Tor to 0.2.7.2 + * Update Tor to 0.2.7.2-alpha with backported patches: + * Bug 16674: Allow trailing '.' in FQDNs + * Bug 16430: Allow DNS names with _ characters in them (fixes nytimes.com) * Update OpenSSL to 1.0.1p * Update HTTPS-Everywhere to 5.0.7 * Update NoScript to 2.6.9.31 - * Tor patch backport - * Bug 16674: Allow trailing '.' in FQDNs - * Bug 16430: Allow DNS names with _ characters in them (fixes nytimes.com) * Update Torbutton to 1.9.3.1 * Bug 16268: Show Tor Browser logo on About page * Bug 16639: Check for Updates menu item can cause update download failure * Bug 15781: Remove the sessionstore filter * Bug 15656: Sync privacy.resistFingerprinting with Torbutton pref * Translation updates - * Bug 16884: Prefer IPv6 if available in Tor Browser - * Bug 16488: Remove "Sign in to Sync" from the menu - * Bug 13313: Enable bundle fonts + * Bug 16884: Prefer IPv6 when supported by the current Tor exit + * Bug 16488: Remove "Sign in to Sync" from the browser menu + * Bug 13313: Bundle a fixed set of fonts to defend against fingerprinting * Bug 16662: Enable network.http.spdy.* prefs in meek-http-helper * Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent (fixup) * Bug 15703: Isolate mediasource URIs and media streams to first party * Bug 16429+16416: Isolate blob URIs to first party - * Bug 16632: Turn on the background updater - * Bug 16528: Prevent indexedDB Modernizr breakage - * Bug 16523: Chrome JavaScript debugger is broken + * Bug 16632: Turn on the background updater and restart prompting + * Bug 16528: Prevent indexedDB Modernizr site breakage on Twitter and elsewhere + * Bug 16523: Fix in-browser JavaScript debugger * Bug 16236: Windows updater: avoid writing to the registry * Bug 16005: Restrict WebGL minimal mode a bit (fixup) - * Bug 16625: Fully disable network prediction - * Bug 16495: Tor Browser 5.0a3 crashes with security level set to "High" + * Bug 16625: Fully disable network connection prediction + * Bug 16495: Fix SVG crash when security level is set to "High" * Build System * Bug 15864: rename sha256sums.txt to sha256sums-unsigned-build.txt

1 0

[tor-browser-bundle/master] Changelog fixes
by gk＠torproject.org 28 Jul '15

28 Jul '15

commit 24d59c66d99b194015722b12e70cb51dd7a948c9 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jul 28 23:31:19 2015 +0000 Changelog fixes --- Bundle-Data/Docs/ChangeLog.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 887f4a0..0e38362 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -6,9 +6,10 @@ Tor Browser 5.0a4 -- August 3 2015 * Update NoScript to 2.6.9.31 * Tor patch backport * Bug 16674: Allow trailing '.' in FQDNs + * Bug 16430: Allow DNS names with _ characters in them (fixes nytimes.com) * Update Torbutton to 1.9.3.1 * Bug 16268: Show Tor Browser logo on About page - * Bug 16639: Check for Updates menu item can cause update failure + * Bug 16639: Check for Updates menu item can cause update download failure * Bug 15781: Remove the sessionstore filter * Bug 15656: Sync privacy.resistFingerprinting with Torbutton pref * Translation updates

1 0

[tor-browser-bundle/master] Fixed typo in verify-tags.sh
by gk＠torproject.org 28 Jul '15

28 Jul '15

commit 5aa2590903abee0cc1dd01690fde3d4e3316cf3a Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jul 28 23:19:47 2015 +0000 Fixed typo in verify-tags.sh --- gitian/verify-tags.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/verify-tags.sh b/gitian/verify-tags.sh index f801b32..b8fc0e0 100755 --- a/gitian/verify-tags.sh +++ b/gitian/verify-tags.sh @@ -118,7 +118,7 @@ ed25519 $GOED25519_TAG siphash $GOSIPHASH_TAG goxcrypto $GO_X_CRYPTO_TAG goxnet $GO_X_NET_TAG -noto-fonts $NOTO_FONTS_TAG +noto-fonts $NOTOFONTS_TAG EOF # Verify signatures on signed packages

1 0

[tor-browser-bundle/master] Adding gk's new subkey to torbutton.gpg
by gk＠torproject.org 28 Jul '15

28 Jul '15

commit 3cf76e656decc3e7c327335b426113cd57e01bea Author: Georg Koppen <gk(a)torproject.org> Date: Tue Jul 28 23:13:52 2015 +0000 Adding gk's new subkey to torbutton.gpg --- gitian/gpg/torbutton.gpg | Bin 44645 -> 49582 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/gitian/gpg/torbutton.gpg b/gitian/gpg/torbutton.gpg index ebc37d7..b60a95e 100644 Binary files a/gitian/gpg/torbutton.gpg and b/gitian/gpg/torbutton.gpg differ

1 0