- tbb-commits - lists.torproject.org

[torbutton/master] Bug 15927: Force update of the NoScript UI
by gk＠torproject.org 06 May '15

06 May '15

commit fecc621d6c3928918b4c62071f41ac2e4287e121 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Tue May 5 00:22:15 2015 -0700 Bug 15927: Force update of the NoScript UI --- src/chrome/content/torbutton.js | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js index 21e567e..c580c59 100644 --- a/src/chrome/content/torbutton.js +++ b/src/chrome/content/torbutton.js @@ -2378,6 +2378,22 @@ function torbutton_update_security_slider() { } break; } + /* Update the NoScript button to reflect any changes */ + try { + let wm = Components.classes["@mozilla.org/appshell/window-mediator;1"] + .getService(Components.interfaces.nsIWindowMediator); + let browserEnumerator = wm.getEnumerator("navigator:browser"); + + // Update every window's NoScript status... + while (browserEnumerator.hasMoreElements()) { + let win = browserEnumerator.getNext(); + win.noscriptOverlay._syncUINow(); + } + torbutton_log(3, 'Updated NoScript status for security slider'); + } catch(e) { + torbutton_log(4, 'Failed to update NoScript status for security slider: '+e); + } + torbutton_log(3, 'Security Slider Pref Update Complete'); m_tb_sliderUpdate = false; }

1 0

[torbutton/master] Bug 15915: Hide circuit display if it is disabled.
by gk＠torproject.org 04 May '15

04 May '15

commit fc05d63ab7f01fabf999960d31a9795349054a7b Author: anonym <anonym(a)riseup.net> Date: Mon May 4 11:04:29 2015 +0200 Bug 15915: Hide circuit display if it is disabled. If extensions.torbutton.display_circuit = false from the start, then myController will never be set, so when we call stop() we won't call syncDisplayWithSelectedTab(false) to hide the circuit display. --- src/chrome/content/tor-circuit-display.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/chrome/content/tor-circuit-display.js b/src/chrome/content/tor-circuit-display.js index 4197944..2da7f0a 100644 --- a/src/chrome/content/tor-circuit-display.js +++ b/src/chrome/content/tor-circuit-display.js @@ -315,8 +315,8 @@ let setupDisplay = function (host, port, password, enablePrefName) { let myController = null, stopCollectingIsolationData = null, stop = function() { + syncDisplayWithSelectedTab(false); if (myController) { - syncDisplayWithSelectedTab(false); if (stopCollectingIsolationData) { stopCollectingIsolationData(); }

1 0

[tor-browser-bundle/master] Update meek to 0.18.
by gk＠torproject.org 04 May '15

04 May '15

commit 0db1987644292794b35b0681c27ec175f372861b Author: David Fifield <david(a)bamsoftware.com> Date: Fri May 1 04:01:28 2015 +0000 Update meek to 0.18. This undoes a regression related to TOR_PT_EXIT_ON_STDIN_CLOSE that broke meek on Windows 7. --- gitian/versions | 2 +- gitian/versions.alpha | 2 +- gitian/versions.beta | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/gitian/versions b/gitian/versions index 26b116b..0645ff3 100755 --- a/gitian/versions +++ b/gitian/versions @@ -25,7 +25,7 @@ FTEPROXY_TAG=597f8378f6f4f3de570b8e1064c2e4cb8d67fbd0 # tag 0.2.19 LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014 TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0.2 GOPTLIB_TAG=0.2 -MEEK_TAG=0.17 +MEEK_TAG=0.18 FAKETIME_TAG=70aa6b394d9341522dffe8a5a5cf5929e82cc6b9 # unsigned v0.9.6 GOED25519_TAG=c4161f4c7483313562781c61b9a20aba73daf9de GOSIPHASH_TAG=42ba037e748c9062a75e0924705c43b893edefcd diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 86e163d..aa6257d 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -25,7 +25,7 @@ FTEPROXY_TAG=597f8378f6f4f3de570b8e1064c2e4cb8d67fbd0 # tag 0.2.19 LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014 TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0.2 GOPTLIB_TAG=0.2 -MEEK_TAG=0.17 +MEEK_TAG=0.18 FAKETIME_TAG=70aa6b394d9341522dffe8a5a5cf5929e82cc6b9 # unsigned v0.9.6 GOED25519_TAG=c4161f4c7483313562781c61b9a20aba73daf9de GOSIPHASH_TAG=42ba037e748c9062a75e0924705c43b893edefcd diff --git a/gitian/versions.beta b/gitian/versions.beta index 854e422..0341c4e 100755 --- a/gitian/versions.beta +++ b/gitian/versions.beta @@ -25,7 +25,7 @@ FTEPROXY_TAG=597f8378f6f4f3de570b8e1064c2e4cb8d67fbd0 # tag 0.2.19 LIBDMG_TAG=dfd5e5cc3dc1191e37d3c3a6118975afdd1d7014 TXSOCKSX_TAG=216eb0894a1755872f4789f9458aa6cf543b8433 # unsigned habnabit/1.13.0.2 GOPTLIB_TAG=0.2 -MEEK_TAG=0.17 +MEEK_TAG=0.18 GITIAN_TAG=tor-browser-builder-3.x-6

1 0

[tor-browser/tor-browser-31.6.0esr-4.5-1] fixup! Bug 12827: Create preference to disable SVG.
by mikeperry＠torproject.org 24 Apr '15

24 Apr '15

commit 3006aa548cefa2f9d0968c978786dcefa9309119 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Fri Apr 24 10:40:44 2015 -0400 fixup! Bug 12827: Create preference to disable SVG. During parsing, avoid dereferencing null pointers when script and style elements are created as generic elements (i.e., when svg.in-content.enabled=false). Fixes ticket #15794. --- parser/html/nsHtml5TreeOperation.cpp | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/parser/html/nsHtml5TreeOperation.cpp b/parser/html/nsHtml5TreeOperation.cpp index 7ad65247..b9f1768 100644 --- a/parser/html/nsHtml5TreeOperation.cpp +++ b/parser/html/nsHtml5TreeOperation.cpp @@ -607,8 +607,8 @@ void nsHtml5TreeOperation::PreventScriptExecution(nsIContent* aNode) { nsCOMPtr<nsIScriptElement> sele = do_QueryInterface(aNode); - MOZ_ASSERT(sele); - sele->PreventExecution(); + if (sele) + sele->PreventExecution(); } void @@ -827,14 +827,18 @@ nsHtml5TreeOperation::Perform(nsHtml5TreeOpExecutor* aBuilder, case eTreeOpSetStyleLineNumber: { nsIContent* node = *(mOne.node); nsCOMPtr<nsIStyleSheetLinkingElement> ssle = do_QueryInterface(node); - NS_ASSERTION(ssle, "Node didn't QI to style."); + if (!ssle) + return NS_ERROR_DOM_NOT_SUPPORTED_ERR; + ssle->SetLineNumber(mFour.integer); return NS_OK; } case eTreeOpSetScriptLineNumberAndFreeze: { nsIContent* node = *(mOne.node); nsCOMPtr<nsIScriptElement> sele = do_QueryInterface(node); - NS_ASSERTION(sele, "Node didn't QI to script."); + if (!sele) + return NS_ERROR_DOM_NOT_SUPPORTED_ERR; + sele->SetScriptLineNumber(mFour.integer); sele->FreezeUriAsyncDefer(); return NS_OK;

1 0

[tor-browser-bundle/master] Update changelog and versions
by gk＠torproject.org 24 Apr '15

24 Apr '15

commit 3e6e3159c90cdfe33c38ed698d702ec97fcf49cc Author: Georg Koppen <gk(a)torproject.org> Date: Fri Apr 24 18:26:16 2015 +0000 Update changelog and versions --- Bundle-Data/Docs/ChangeLog.txt | 6 ++++-- gitian/versions | 6 +++--- gitian/versions.alpha | 6 +++--- 3 files changed, 10 insertions(+), 8 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index ee17952..ce63883 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -3,7 +3,7 @@ Tor Browser 4.5 -- Apr 28 2015 * Update Tor to 0.2.6.7 with additional patches: * Bug 15482: Reset timestamp_dirty each time a SOCKSAuth circuit is used * Update NoScript to 2.6.9.22 - * Update HTTPS-Everywhere to 5.0.2 + * Update HTTPS-Everywhere to 5.0.3 * Bug 15689: Resume building HTTPS-Everywhere from git tags * Update meek to 0.17 * Update obfs4proxy to 0.0.5 @@ -12,18 +12,20 @@ Tor Browser 4.5 -- Apr 28 2015 * Bug 11879: Stop bootstrap if Cancel or Open Settings is clicked * Bug 13576: Don't strip "bridge" from the middle of bridge lines * Bug 15657: Display the host:port of any connection faiures in bootstrap - * Update Torbutton to 1.9.2.1 + * Update Torbutton to 1.9.2.2 * Bug 15562: Bind SharedWorkers to thirdparty pref * Bug 15533: Restore default security level when restoring defaults * Bug 15510: Close Tor Circuit UI control port connections on New Identity * Bug 15472: Make node text black in circuit status UI * Bug 15502: Wipe blob URIs on New Identity + * Bug 15795: Some security slider prefs do not trigger custom checkbox * Bug 14429: Disable automatic window resizing for now * Bug 4100: Raise HTTP Keep-Alive back to 115 second default * Bug 13875: Spoof window.devicePixelRatio to avoid DPI fingerprinting * Bug 15411: Remove old (and unused) cacheDomain cache isolation mechanism * Bugs 14716+13254: Fix issues with HTTP Auth usage and TLS connection info display * Bug 15502: Isolate blob URI scope to URL domain; block WebWorker access + * Bug 15794: Crash on some pages with SVG images if SVG is disabled * Bug 15562: Disable Javascript SharedWorkers due to third party tracking * Bug 15757: Disable Mozilla video statistics API extensions * Bug 15758: Disable Device Sensor APIs diff --git a/gitian/versions b/gitian/versions index d490333..26b116b 100755 --- a/gitian/versions +++ b/gitian/versions @@ -8,11 +8,11 @@ FIREFOX_VERSION=31.6.0esr TORBROWSER_UPDATE_CHANNEL=release -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build2 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build3 TOR_TAG=tor-0.2.6.7 TORLAUNCHER_TAG=0.2.7.4 -TORBUTTON_TAG=1.9.2.1 -HTTPSE_TAG=5.0.2 +TORBUTTON_TAG=1.9.2.2 +HTTPSE_TAG=5.0.3 NSIS_TAG=v0.3 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.21-stable diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 7f323be..86e163d 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -8,11 +8,11 @@ FIREFOX_VERSION=31.6.0esr TORBROWSER_UPDATE_CHANNEL=alpha -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build2 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build3 TOR_TAG=tor-0.2.6.7 TORLAUNCHER_TAG=0.2.7.4 -TORBUTTON_TAG=1.9.2.1 -HTTPSE_TAG=5.0.2 +TORBUTTON_TAG=1.9.2.2 +HTTPSE_TAG=5.0.3 NSIS_TAG=v0.3 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.21-stable

1 0

[torbutton/master] Update changelog and bump version
by gk＠torproject.org 24 Apr '15

24 Apr '15

commit 827995a19f49894cc0e49ed96d11ac716dd51e90 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Apr 24 18:02:13 2015 +0000 Update changelog and bump version --- src/CHANGELOG | 3 +++ src/install.rdf | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/src/CHANGELOG b/src/CHANGELOG index 4a3353d..9ec02ae 100644 --- a/src/CHANGELOG +++ b/src/CHANGELOG @@ -1,3 +1,6 @@ +1.9.2.2: + * Bug 15795: Some security slider prefs do not trigger custom checkbox + 1.9.2.1: * Bug 14429: Disable window resizing for now. diff --git a/src/install.rdf b/src/install.rdf index 6af4e9b..90d12b3 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ <em:name>Torbutton</em:name> <em:creator>Mike Perry</em:creator> <em:id>torbutton(a)torproject.org</em:id> - <em:version>1.9.2.0</em:version> + <em:version>1.9.2.2</em:version> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL> <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>

1 0

[torbutton/master] Bug 15795: Some security slider prefs do not trigger custom checkbox.
by gk＠torproject.org 24 Apr '15

24 Apr '15

commit cacd8c67be59359b2a9bdf8a2cf2a341401cc77e Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Fri Apr 24 11:34:54 2015 -0400 Bug 15795: Some security slider prefs do not trigger custom checkbox. Also monitor the following prefs. so that all manual changes cause the security slider's "custom" checkbox to be toggled: mathml.disabled network.jar.block-remote-files svg.in-content.enabled --- src/chrome/content/torbutton.js | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js index 7d229dd..21e567e 100644 --- a/src/chrome/content/torbutton.js +++ b/src/chrome/content/torbutton.js @@ -122,11 +122,14 @@ var torbutton_unique_pref_observer = this._branch.addObserver("extensions.torbutton", this, false); this._branch.addObserver("network.proxy", this, false); this._branch.addObserver("network.cookie", this, false); + this._branch.addObserver("network.jar", this, false); this._branch.addObserver("browser.privatebrowsing.autostart", this, false); this._branch.addObserver("javascript", this, false); this._branch.addObserver("gfx", this, false); this._branch.addObserver("noscript", this, false); this._branch.addObserver("media", this, false); + this._branch.addObserver("mathml", this, false); + this._branch.addObserver("svg", this, false); // We observe xpcom-category-entry-added for plugins w/ Gecko-Content-Viewers var observerService = Cc["@mozilla.org/observer-service;1"]. @@ -140,11 +143,14 @@ var torbutton_unique_pref_observer = this._branch.removeObserver("extensions.torbutton", this); this._branch.removeObserver("network.proxy", this); this._branch.removeObserver("network.cookie", this); + this._branch.removeObserver("network.jar", this); this._branch.removeObserver("browser.privatebrowsing.autostart", this); this._branch.removeObserver("javascript", this); this._branch.removeObserver("gfx", this); this._branch.removeObserver("noscript", this); this._branch.removeObserver("media", this); + this._branch.removeObserver("mathml", this); + this._branch.removeObserver("svg", this); var observerService = Cc["@mozilla.org/observer-service;1"]. getService(Ci.nsIObserverService); @@ -244,6 +250,7 @@ var torbutton_unique_pref_observer = case "gfx.font_rendering.graphite.enabled": case "noscript.globalHttpsWhitelist": case "noscript.global": + case "svg.in-content.enabled": // |m_tb_slider_update| is only set if the user updated a // preference under control of the security slider via the // slider on the Torbutton dialog. This in turn means we can

1 0

[tor-browser-bundle/master] Update the updater config file
by gk＠torproject.org 22 Apr '15

22 Apr '15

commit e3cc7044dbec5ff8fd834c06bf486da03c9dc311 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Apr 22 20:28:49 2015 +0000 Update the updater config file --- tools/update-responses/config.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 1475195..8c6110d 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -10,6 +10,7 @@ build_targets: osx64: Darwin_x86_64-gcc3 channels: alpha: 4.5 + release: 4.5 versions: 4.5: platformVersion: 31.6.0 @@ -17,6 +18,7 @@ versions: download_url: https://www.torproject.org/dist/torbrowser/4.5 incremental_from: - 4.5a5 + - 4.0.8 migrate_archs: osx32: osx64 osx32:

1 0

[tor-browser-bundle/master] Update Changelog
by gk＠torproject.org 22 Apr '15

22 Apr '15

commit 7f6d8de86e51dfff1fafa5bebc888496bf80a2f6 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Apr 22 08:17:04 2015 +0000 Update Changelog --- Bundle-Data/Docs/ChangeLog.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 5233f60..ee17952 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -12,7 +12,7 @@ Tor Browser 4.5 -- Apr 28 2015 * Bug 11879: Stop bootstrap if Cancel or Open Settings is clicked * Bug 13576: Don't strip "bridge" from the middle of bridge lines * Bug 15657: Display the host:port of any connection faiures in bootstrap - * Update Torbutton to 1.9.2.0 + * Update Torbutton to 1.9.2.1 * Bug 15562: Bind SharedWorkers to thirdparty pref * Bug 15533: Restore default security level when restoring defaults * Bug 15510: Close Tor Circuit UI control port connections on New Identity @@ -22,7 +22,7 @@ Tor Browser 4.5 -- Apr 28 2015 * Bug 4100: Raise HTTP Keep-Alive back to 115 second default * Bug 13875: Spoof window.devicePixelRatio to avoid DPI fingerprinting * Bug 15411: Remove old (and unused) cacheDomain cache isolation mechanism - * Bug 14716: Fix issues with HTTP Auth usage and TLS connection info display + * Bugs 14716+13254: Fix issues with HTTP Auth usage and TLS connection info display * Bug 15502: Isolate blob URI scope to URL domain; block WebWorker access * Bug 15562: Disable Javascript SharedWorkers due to third party tracking * Bug 15757: Disable Mozilla video statistics API extensions

1 0

[tor-browser-bundle/master] Update Torbutton to 1.9.2.1
by mikeperry＠torproject.org 22 Apr '15

22 Apr '15

commit fa486aff85025ed4a3022a39025ba1a10269126b Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Wed Apr 22 00:59:01 2015 -0700 Update Torbutton to 1.9.2.1 --- Bundle-Data/Docs/ChangeLog.txt | 1 + gitian/versions | 2 +- gitian/versions.alpha | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 7e4b01c..5233f60 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -18,6 +18,7 @@ Tor Browser 4.5 -- Apr 28 2015 * Bug 15510: Close Tor Circuit UI control port connections on New Identity * Bug 15472: Make node text black in circuit status UI * Bug 15502: Wipe blob URIs on New Identity + * Bug 14429: Disable automatic window resizing for now * Bug 4100: Raise HTTP Keep-Alive back to 115 second default * Bug 13875: Spoof window.devicePixelRatio to avoid DPI fingerprinting * Bug 15411: Remove old (and unused) cacheDomain cache isolation mechanism diff --git a/gitian/versions b/gitian/versions index 653b4b1..d490333 100755 --- a/gitian/versions +++ b/gitian/versions @@ -11,7 +11,7 @@ TORBROWSER_UPDATE_CHANNEL=release TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build2 TOR_TAG=tor-0.2.6.7 TORLAUNCHER_TAG=0.2.7.4 -TORBUTTON_TAG=1.9.2.0 +TORBUTTON_TAG=1.9.2.1 HTTPSE_TAG=5.0.2 NSIS_TAG=v0.3 ZLIB_TAG=v1.2.8 diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 6419111..7f323be 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -11,7 +11,7 @@ TORBROWSER_UPDATE_CHANNEL=alpha TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-4.5-1-build2 TOR_TAG=tor-0.2.6.7 TORLAUNCHER_TAG=0.2.7.4 -TORBUTTON_TAG=1.9.2.0 +TORBUTTON_TAG=1.9.2.1 HTTPSE_TAG=5.0.2 NSIS_TAG=v0.3 ZLIB_TAG=v1.2.8

1 0