- tbb-commits - lists.torproject.org

[Git][tpo/applications/fenix] Pushed new tag tor-browser-102.2.1-12.0-1-build1
by Pier Angelo Vendrame (＠pierov) 01 Aug '22

01 Aug '22

Pier Angelo Vendrame pushed new tag tor-browser-102.2.1-12.0-1-build1 at The Tor Project / Applications / fenix -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/tree/tor-browser-102… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/fenix][tor-browser-102.2.1-12.0-1] 10 commits: Bug 40002: Add GitLab CI
by Pier Angelo Vendrame (＠pierov) 01 Aug '22

01 Aug '22

Pier Angelo Vendrame pushed to branch tor-browser-102.2.1-12.0-1 at The Tor Project / Applications / fenix Commits: d07414ec by Matthew Finkel at 2022-07-15T18:22:38+02:00 Bug 40002: Add GitLab CI Pin CI builds to runners with 32GB of RAM to avoid OOM conditions. - - - - - fbd44564 by Matthew Finkel at 2022-07-15T18:30:05+02:00 Rename as Tor Browser Bug 40020: Change applicationId Bug 40020: Change app name Bug 40020: Change deeplink scheme Bug 40020: Change App icons Bug 40073: Use correct branding on About page Bug 40088: Use Tor Browser logo in migration screen - - - - - 9cb478b0 by Matthew Finkel at 2022-07-15T19:11:17+02:00 Disable features and functionality Bug 33594: Disable data collection by default (Glean) Bug 40019: Adjust is disabled on Release when data collection is disabled Bug 34338: Disable the crash reporter Bug 40014: Neuter Google Advertising ID Bug 40018: Disable Push service Bug 40034: Disable PWA onboading Bug 40072: Disable Tracking Protection Bug 40061: Do not show "Send to device" in sharing menu Bug 40109: Reduce requested permissions Exclude LOCATION and NETWORK_STATE - - - - - 41830df8 by Georg Koppen at 2022-07-15T19:11:17+02:00 Modify build system Bug 40083: Make locale ordering in BuildConfig deterministic Bug 40042: Add option do overwrite timestamp in extension version Bug 40059: Use MOZ_BUILD_DATE for versionCode At the same time we adapt MOZ_BUILD_DATE to our needs where it is actually used and not in tor-browser-build. This gives us more flexibility. See: tor-browser-build#40084. Bug 40067: Fix reproducibility issue in classes2.dex We make sure our MOZ_BUILD_DATE gets used as a source for showing date related information on the Fenix about page. Bug 40071: Show only supported locales Bug 40064: Use Gecko Beta for Nightly and Debug variants Bug 40123: Allow building the instrumented tests apks for variants other than debug This allows to specify the variant of the instrumented tests via a `testBuildType` gradle argument. It also applies a workaround for a R8 issue from https://issuetracker.google.com/issues/140851070. Bug 40143: Use deterministic date in Test apk The build config was using Date() when generating the Test apk's versionName. - - - - - 22a64477 by Matthew Finkel at 2022-07-25T22:14:07+02:00 Add Tor integration and UI Bug 40001: Start Tor as part of the Fenix initialization Bug 40028: Implement Tor Service controller Bug 40028: Integrate Tor Controller into HomeFragment Bug 40028: Implement Tor connect and logger screens Bug 40028: Implement Tor Onboarding Bug 40028: Implement new home screen Bug 40028: Define bootstrapping events and Quick Start Bug 40041: Implement Tor Network Settings Bug 40041: Integrate Tor Network Settings Bug 40179: Show Snowflake bridge option on Release Bug 40176: Re-render Home fragment on resume - - - - - 5fafd871 by Alex Catarineu at 2022-07-25T22:14:21+02:00 Modify UI/UX Bug 40015: Modify Home menu Bug 40016: Hide unwanted Settings Bug 40016: Modify Default toolbar menu Bug 40016: Add Donate settings button Bug 40016: Move Allow Screenshots under Advanced Bug 40016: Don't install WebCompat webext Bug 40016: Don't onboard Search Suggestions Bug 40094: Do not use MasterPasswordTipProvider in HomeFragment Bug 40095: Hide "Sign in to sync" in bookmarks Bug 40031: Hide Mozilla-specific items on About page Bug 40032: Set usesCleartextTraffic as false Bug 40063: Do not sort search engines alphabetically Bug 34378: Port external helper app prompting With the corresponding android-components patch, this allows all `startActivity` that may open external apps to be replaced by `TorUtils.startActivityPrompt`. Bug 34403: Disable Normal mode by default Bug 40087: Implement a switch for english locale spoofing Bug 40144: Hide Download Manager Bug 40141: Hide EME site permission Bug 40166: Hide "Normal" tab (again) and Sync tab in TabTray Bug 40167: Hide "Save to Collection" in menu Bug 40172: Find the Quit button Bug 40186: Hide Credit Cards in Settings Bug 40198: Spoof English toggle now overlaps with locale list - - - - - e350cd9e by Alex Catarineu at 2022-07-25T22:14:21+02:00 Modify Add-on support Bug 40030: Install HTTPS Everywhere and NoScript addons on startup HTTPS Everywhere is installed as a builtin extension and NoScript as a regular AMO addon. To avoid unnecessary I/O we only install NoScript the first time, and rely on the browser addon updating mechanism for keeping up with new versions. This is the same behaviour that was implemented in the Fennec-based Tor Browser, where it was installed as a "distribution addon", which also only occurred once. Bug 40062: HTTPS Everywhere is not shown as installed Also 40070: Consider storing the list of recommended addons This implements our own AddonsProvider, which loads the list of available addons from assets instead of fetching it from an endpoint. In this list, we replace https-everywhere by our https-everywhere-eff, so that the EFF one is shown as installed in the addons list and the AMO one is not displayed. Also, we hide the uninstall button for builtin addons. Bug 40058: Hide option for disallowing addon in private mode - - - - - dd134b49 by Matthew Finkel at 2022-07-25T22:14:21+02:00 Add Security Level UI Bug 40026: Implement Security Level settings Bug 40026: Integrate Security Level settings - - - - - fb5bd62e by HackerNCoder at 2022-07-25T22:14:21+02:00 Bug 40177: Hide Tor icons in settings - - - - - 60d93da5 by Matthew Finkel at 2022-07-25T22:22:03+02:00 Bug 40185: Use NimbusDisabled - - - - - 30 changed files: - + .gitlab-ci.yml - app/build.gradle - app/proguard-rules.pro - app/src/androidTest/java/org/mozilla/fenix/ui/robots/SettingsSubMenuAboutRobot.kt - − app/src/beta/res/drawable/ic_launcher_foreground.xml - app/src/beta/res/mipmap-hdpi/ic_launcher.png - app/src/beta/res/mipmap-mdpi/ic_launcher.png - app/src/beta/res/mipmap-xhdpi/ic_launcher.png - app/src/beta/res/mipmap-xxhdpi/ic_launcher.png - app/src/beta/res/mipmap-xxxhdpi/ic_launcher.png - app/src/beta/res/values/static_strings.xml - app/src/beta/res/xml/shortcuts.xml - − app/src/debug/res/drawable/ic_launcher_foreground.xml - app/src/debug/res/xml/shortcuts.xml - app/src/main/AndroidManifest.xml - + app/src/main/assets/allowed_addons.json - app/src/main/java/org/mozilla/fenix/FenixApplication.kt - app/src/main/java/org/mozilla/fenix/HomeActivity.kt - app/src/main/java/org/mozilla/fenix/addons/InstalledAddonDetailsFragment.kt - app/src/main/java/org/mozilla/fenix/browser/BaseBrowserFragment.kt - app/src/main/java/org/mozilla/fenix/components/Analytics.kt - app/src/main/java/org/mozilla/fenix/components/Components.kt - app/src/main/java/org/mozilla/fenix/components/Core.kt - + app/src/main/java/org/mozilla/fenix/components/TorAddonCollectionProvider.kt - + app/src/main/java/org/mozilla/fenix/components/TorBrowserFeatures.kt - app/src/main/java/org/mozilla/fenix/components/metrics/AdjustMetricsService.kt - app/src/main/java/org/mozilla/fenix/components/metrics/GleanMetricsService.kt - app/src/main/java/org/mozilla/fenix/components/metrics/MetricController.kt - app/src/main/java/org/mozilla/fenix/components/metrics/MetricsUtils.kt - app/src/main/java/org/mozilla/fenix/components/toolbar/DefaultToolbarMenu.kt The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/compare/10fdf130c4c8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/fenix/-/compare/10fdf130c4c8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor-browser] branch tor-browser-91.11.0esr-12.0-1 updated: fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection
by gitolite role 01 Aug '22

01 Aug '22

This is an automated email from the git hooks/post-receive script. pierov pushed a commit to branch tor-browser-91.11.0esr-12.0-1 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-91.11.0esr-12.0-1 by this push: new 21e14ea19b4a5 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection 21e14ea19b4a5 is described below commit 21e14ea19b4a5f668300df23ee504487202b0396 Author: WofWca <wofwca(a)protonmail.com> AuthorDate: Tue Jul 26 16:35:18 2022 +0300 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection refactor: remove an unused function Co-authored-by: Pier Angelo Vendrame <pierov(a)torproject.org> --- browser/components/torpreferences/content/connectionPane.js | 7 ------- 1 file changed, 7 deletions(-) diff --git a/browser/components/torpreferences/content/connectionPane.js b/browser/components/torpreferences/content/connectionPane.js index dd15bca7bf13c..4ee13123ebc40 100644 --- a/browser/components/torpreferences/content/connectionPane.js +++ b/browser/components/torpreferences/content/connectionPane.js @@ -164,13 +164,6 @@ const gConnectionPane = (function() { _currentBridge: "", - // disables the provided list of elements - _setElementsDisabled(elements, disabled) { - for (const currentElement of elements) { - currentElement.disabled = disabled; - } - }, - // populate xul with strings and cache the relevant elements _populateXUL() { // saves tor settings to disk when navigate away from about:preferences -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[Git][tpo/applications/android-components][android-components-102.0.14-12.0-1] 12 commits: Bug 40005: Modify Default toolbar menu
by Pier Angelo Vendrame (＠pierov) 01 Aug '22

01 Aug '22

Pier Angelo Vendrame pushed to branch android-components-102.0.14-12.0-1 at The Tor Project / Applications / android-components Commits: 18a67d17 by Matthew Finkel at 2022-07-15T19:33:34+02:00 Bug 40005: Modify Default toolbar menu - - - - - f82e4d6d by Alex Catarineu at 2022-07-15T19:33:42+02:00 Bug 40007: Port external helper app prompting Together with the corresponding fenix patch, this allows all `startActivity` that may open external apps to be replaced by `TorUtils.startActivityPrompt`. - - - - - 0be581a6 by Alex Catarineu at 2022-07-15T19:37:41+02:00 Bug 40002: Ensure system download manager is not used Bug 40075: Support scoped storage to enable downloads on API < 29 - in android-components!7, we blocked all usage of Scoped Storage in an attempt to block usage of Android's DownloadManager, which is known to cause proxy bypasses - as of Android API 29, downloads will not work without Scoped Storage, causing all downlaods to fail (see: fenix##40192) - here, we enable usage of scoped storage for API >= 29, but block calls to DownloadManager on API < 29 - - - - - f6cfa27d by Alex Catarineu at 2022-07-15T19:37:57+02:00 Bug 40009: Change the default search engines This matches the search engines from desktop, that is: DDG as the default, then YouTube, Google, DDGOnion, Startpage, Twitter, Wikipedia and Yahoo. Bug 40062: Update DuckDuckGo onion search plugin - - - - - de7e5b7d by Alex Catarineu at 2022-07-15T19:37:57+02:00 Modify Addon support Bug 40011: Hide option for disallowing addons in private mode Bug 40016: Allow inheriting from AddonCollectionProvider This will allow implementing our own AddonsProvider in fenix. - - - - - 8326227b by Georg Koppen at 2022-07-15T19:37:57+02:00 Bug 40013: Add option do overwrite timestamp in extension version - - - - - d8f7eb88 by Alex Catarineu at 2022-07-15T19:37:57+02:00 Bug 40015: Port padlock states for .onion services - - - - - 8a918700 by Alex Catarineu at 2022-07-15T19:37:58+02:00 Bug 40021: Force telemetry=false in Fennec settings migration - - - - - b119eb53 by Alex Catarineu at 2022-07-15T19:37:58+02:00 Bug 40022: Migrate Tor security level from Fennec - - - - - 3feaec0c by Matthew Finkel at 2022-07-15T19:37:58+02:00 Modify Tracking Protection configuration Bug 40020: Disable third-party cookies Bug 40024: Disable tracking protection by default - - - - - 2cc8e840 by Matthew Finkel at 2022-07-15T19:37:58+02:00 Bug 40023: Stop PrivateNotificationService - - - - - 55327a42 by Matthew Finkel at 2022-07-15T19:37:58+02:00 Add support for new GeckoView interfaces Bug 40006: Expose Security Level interface Bug 40019: Expose spoofEnglish pref Bug 34439: Isolate Icon loader on Android - - - - - 30 changed files: - build.gradle - components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/GeckoEngine.kt - components/browser/engine-gecko/src/main/java/mozilla/components/browser/engine/gecko/fetch/GeckoViewFetchClient.kt - components/browser/icons/src/main/java/mozilla/components/browser/icons/loader/HttpIconLoader.kt - components/browser/menu/src/main/java/mozilla/components/browser/menu/WebExtensionBrowserMenuBuilder.kt - components/browser/toolbar/src/main/java/mozilla/components/browser/toolbar/display/DisplayToolbar.kt - components/browser/toolbar/src/main/java/mozilla/components/browser/toolbar/display/SiteSecurityIconView.kt - components/browser/toolbar/src/main/res/drawable/mozac_ic_site_security.xml - components/browser/toolbar/src/main/res/values/attrs_browser_toolbar.xml - components/concept/engine/src/main/java/mozilla/components/concept/engine/EngineSession.kt - components/concept/engine/src/main/java/mozilla/components/concept/engine/Settings.kt - components/concept/fetch/src/main/java/mozilla/components/concept/fetch/Request.kt - components/concept/toolbar/src/main/java/mozilla/components/concept/toolbar/Toolbar.kt - components/feature/addons/src/main/java/mozilla/components/feature/addons/amo/AddonCollectionProvider.kt - components/feature/addons/src/main/res/layout/mozac_feature_addons_fragment_dialog_addon_installed.xml - components/feature/app-links/build.gradle - components/feature/app-links/src/main/java/mozilla/components/feature/app/links/AppLinksFeature.kt - components/feature/app-links/src/main/java/mozilla/components/feature/app/links/AppLinksUseCases.kt - components/feature/contextmenu/src/main/java/mozilla/components/feature/contextmenu/ContextMenuCandidate.kt - components/feature/downloads/src/main/java/mozilla/components/feature/downloads/AbstractFetchDownloadService.kt - components/feature/downloads/src/main/java/mozilla/components/feature/downloads/DownloadsFeature.kt - components/feature/privatemode/src/main/java/mozilla/components/feature/privatemode/notification/PrivateNotificationFeature.kt - components/feature/search/src/main/assets/search/list.json - + components/feature/search/src/main/assets/searchplugins/ddg-onion.xml - components/feature/search/src/main/assets/searchplugins/ddg.xml - + components/feature/search/src/main/assets/searchplugins/startpage.xml - + components/feature/search/src/main/assets/searchplugins/yahoo.xml - components/feature/toolbar/src/main/java/mozilla/components/feature/toolbar/ToolbarPresenter.kt - components/support/ktx/src/main/java/mozilla/components/support/ktx/android/content/Context.kt - components/support/ktx/src/main/java/mozilla/components/support/ktx/kotlin/String.kt The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/android-components/-/compare… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/android-components/-/compare… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[tor-browser] branch tor-browser-91.11.0esr-12.0-1 updated: fixup! Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove Amazon, eBay, bing
by gitolite role 01 Aug '22

01 Aug '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-91.11.0esr-12.0-1 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-91.11.0esr-12.0-1 by this push: new b3465dd79f029 fixup! Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove Amazon, eBay, bing b3465dd79f029 is described below commit b3465dd79f029abff6dd04081c9ac17a02b21c59 Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Mon Aug 1 12:39:29 2022 +0200 fixup! Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove Amazon, eBay, bing Bug 41070: Remove all localizaed messages for Google, to make it appear again --- .../google/_locales/region-by/messages.json | 20 -------------------- .../google/_locales/region-kz/messages.json | 20 -------------------- .../google/_locales/region-ru/messages.json | 20 -------------------- .../google/_locales/region-tr/messages.json | 20 -------------------- 4 files changed, 80 deletions(-) diff --git a/browser/components/search/extensions/google/_locales/region-by/messages.json b/browser/components/search/extensions/google/_locales/region-by/messages.json deleted file mode 100644 index 60e5ed5eda07c..0000000000000 --- a/browser/components/search/extensions/google/_locales/region-by/messages.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "extensionName": { - "message": "Google" - }, - "extensionDescription": { - "message": "Google Search" - }, - "searchUrl": { - "message": "https://www.google.by/search" - }, - "searchForm": { - "message": "https://www.google.by/search?q={searchTerms}" - }, - "suggestUrl": { - "message": "https://www.google.by/complete/search?client=firefox&q={searchTerms}" - }, - "searchUrlGetParams": { - "message": "q={searchTerms}" - } -} diff --git a/browser/components/search/extensions/google/_locales/region-kz/messages.json b/browser/components/search/extensions/google/_locales/region-kz/messages.json deleted file mode 100644 index 8e64096bc1145..0000000000000 --- a/browser/components/search/extensions/google/_locales/region-kz/messages.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "extensionName": { - "message": "Google" - }, - "extensionDescription": { - "message": "Google Search" - }, - "searchUrl": { - "message": "https://www.google.kz/search" - }, - "searchForm": { - "message": "https://www.google.kz/search?q={searchTerms}" - }, - "suggestUrl": { - "message": "https://www.google.kz/complete/search?client=firefox&q={searchTerms}" - }, - "searchUrlGetParams": { - "message": "q={searchTerms}" - } -} diff --git a/browser/components/search/extensions/google/_locales/region-ru/messages.json b/browser/components/search/extensions/google/_locales/region-ru/messages.json deleted file mode 100644 index 8a78bb4e7f871..0000000000000 --- a/browser/components/search/extensions/google/_locales/region-ru/messages.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "extensionName": { - "message": "Google" - }, - "extensionDescription": { - "message": "Google Search" - }, - "searchUrl": { - "message": "https://www.google.ru/search" - }, - "searchForm": { - "message": "https://www.google.ru/search?q={searchTerms}" - }, - "suggestUrl": { - "message": "https://www.google.ru/complete/search?client=firefox&q={searchTerms}" - }, - "searchUrlGetParams": { - "message": "q={searchTerms}" - } -} diff --git a/browser/components/search/extensions/google/_locales/region-tr/messages.json b/browser/components/search/extensions/google/_locales/region-tr/messages.json deleted file mode 100644 index 8e373a4833b99..0000000000000 --- a/browser/components/search/extensions/google/_locales/region-tr/messages.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "extensionName": { - "message": "Google" - }, - "extensionDescription": { - "message": "Google Search" - }, - "searchUrl": { - "message": "https://www.google.com.tr/search" - }, - "searchForm": { - "message": "https://www.google.com.tr/search?q={searchTerms}" - }, - "suggestUrl": { - "message": "https://www.google.com.tr/complete/search?client=firefox&q={searchTerms}" - }, - "searchUrlGetParams": { - "message": "q={searchTerms}" - } -} -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-91.11.0esr-12.0-1 updated: fixup! Bug 10760: Integrate TorButton to TorBrowser core
by gitolite role 01 Aug '22

01 Aug '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-91.11.0esr-12.0-1 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-91.11.0esr-12.0-1 by this push: new aad16d3fef94e fixup! Bug 10760: Integrate TorButton to TorBrowser core aad16d3fef94e is described below commit aad16d3fef94eca7af3246c0e06805d60dcbe791 Author: Richard Pospesel <richard(a)torproject.org> AuthorDate: Mon Aug 1 10:23:45 2022 +0000 fixup! Bug 10760: Integrate TorButton to TorBrowser core --- toolkit/torproject/torbutton | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolkit/torproject/torbutton b/toolkit/torproject/torbutton index 6f84627dd470f..edda3682a4a87 160000 --- a/toolkit/torproject/torbutton +++ b/toolkit/torproject/torbutton @@ -1 +1 @@ -Subproject commit 6f84627dd470f0eade9e1ba51b81458687263c34 +Subproject commit edda3682a4a87f32d4c05ac84b6d0fa188a89c07 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[torbutton] branch main updated: Bug 40926: Moved New Identity to tor-browser.git
by gitolite role 01 Aug '22

01 Aug '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository torbutton. The following commit(s) were added to refs/heads/main by this push: new edda3682 Bug 40926: Moved New Identity to tor-browser.git edda3682 is described below commit edda3682a4a87f32d4c05ac84b6d0fa188a89c07 Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Wed Jul 13 11:49:35 2022 +0200 Bug 40926: Moved New Identity to tor-browser.git --- chrome/content/torbutton.js | 558 ++++---------------------------------------- 1 file changed, 42 insertions(+), 516 deletions(-) diff --git a/chrome/content/torbutton.js b/chrome/content/torbutton.js index 3bfaa1f8..fde5e1fa 100644 --- a/chrome/content/torbutton.js +++ b/chrome/content/torbutton.js @@ -1,7 +1,6 @@ // window globals var torbutton_init; var torbutton_new_circuit; -var torbutton_new_identity; (() => { // Bug 1506 P1-P5: This is the main Torbutton overlay file. Much needs to be @@ -89,8 +88,7 @@ var torbutton_unique_pref_observer = // data: which pref has been changed (relative to subject) observe: function(subject, topic, data) { - if (topic != "nsPref:changed") return; - + if (topic !== "nsPref:changed") return; switch (data) { case "browser.privatebrowsing.autostart": torbutton_update_disk_prefs(); @@ -120,7 +118,7 @@ var torbutton_tor_check_observer = { observe: function(subject, topic, data) { - if (topic == k_tb_tor_check_failed_topic) { + if (topic === k_tb_tor_check_failed_topic) { // Update all open about:tor pages. torbutton_abouttor_message_handler.updateAllOpenPages(); @@ -144,6 +142,44 @@ var torbutton_tor_check_observer = { }, }; +var torbutton_new_identity_observers = { + register() { + Services.obs.addObserver(this, "new-identity-requested"); + }, + + observe(aSubject, aTopic, aData) { + if (aTopic !== "new-identity-requested") { + return; + } + + // Clear the domain isolation state. + torbutton_log(3, "Clearing domain isolator"); + const domainIsolator = Cc["@torproject.org/domain-isolator;1"].getService( + Ci.nsISupports + ).wrappedJSObject; + domainIsolator.clearIsolation(); + + torbutton_log(3, "New Identity: Sending NEWNYM"); + // We only support TBB for newnym. + if (!m_tb_control_pass || (!m_tb_control_ipc_file && !m_tb_control_port)) { + var warning = torbutton_get_property_string("torbutton.popup.no_newnym"); + torbutton_log(5, "Torbutton cannot safely newnym. It does not have access to the Tor Control Port."); + window.alert(warning); + } else { + var warning = torbutton_get_property_string("torbutton.popup.no_newnym"); + torbutton_send_ctrl_cmd("SIGNAL NEWNYM").then(res => { + if (!res) { + torbutton_log(5, "Torbutton was unable to request a new circuit from Tor"); + window.alert(warning); + } + }).catch(e => { + torbutton_log(5, "Torbutton was unable to request a new circuit from Tor " + e); + window.alert(warning); + }); + } + }, +} + function torbutton_is_mobile() { return Services.appinfo.OS === "Android"; } @@ -254,6 +290,8 @@ torbutton_init = function() { window.messageManager.loadFrameScript( "chrome://torbutton/content/aboutTor/aboutTor-content.js", true); + torbutton_new_identity_observers.register(); + torbutton_log(3, 'init completed'); } @@ -380,360 +418,6 @@ torbutton_new_circuit = function() { gBrowser.reloadWithFlags(Ci.nsIWebNavigation.LOAD_FLAGS_BYPASS_CACHE); } -let newIdentityInProgress = false; - -// Bug 1506 P4: Needed for New Identity. -torbutton_new_identity = async function() { - try { - // Ignore if there's a New Identity in progress to avoid race - // conditions leading to failures (see bug 11783 for an example). - if (newIdentityInProgress) { - return; - } - - newIdentityInProgress = true; - - let shouldConfirm = m_tb_prefs.getBoolPref("extensions.torbutton.confirm_newnym"); - - if (shouldConfirm) { - let prompts = Services.prompt; - - // Display two buttons, both with string titles. - let flags = prompts.STD_YES_NO_BUTTONS; - - let message = torbutton_get_property_string("torbutton.popup.confirm_newnym"); - let askAgainText = torbutton_get_property_string("torbutton.popup.never_ask_again"); - let askAgain = {value: false}; - - let confirmed = (prompts.confirmEx(null, "", message, flags, null, null, null, - askAgainText, askAgain) == 0); - - m_tb_prefs.setBoolPref("extensions.torbutton.confirm_newnym", !askAgain.value); - - if (confirmed) { - await torbutton_do_new_identity(); - } - } else { - await torbutton_do_new_identity(); - } - } catch(e) { - // If something went wrong make sure we have the New Identity button - // enabled (again). - // TODO: Remove the Torbutton menu entry again once we have done our - // security control redesign. - torbutton_log(5, "Unexpected error on new identity: " + e); - window.alert("Torbutton: Unexpected error on new identity: " + e); - } finally { - newIdentityInProgress = false; - } -} - -/* The "New Identity" implementation does the following: - * 1. Disables Javascript - * 2. Clears state: - * a. OCSP - * b. Cache + image cache - * c. Site-specific zoom - * d. Cookies+DOM Storage+safe browsing key - * e. google wifi geolocation token - * f. http auth - * g. SSL Session IDs - * h. last open location url - * i. clear content prefs - * j. permissions - * k. site security settings (e.g. HSTS) - * l. IndexedDB and other DOM storage - * m. media devices - * n. predictor network data - * 3. Sends tor the NEWNYM signal to get a new circuit - * 4. Opens a new window with the default homepage - * 5. Closes this window - * - * XXX: intermediate SSL certificates are not cleared. - */ -// Bug 1506 P4: Needed for New Identity. -async function torbutton_do_new_identity() { - var obsSvc = Services.obs; - torbutton_log(3, "New Identity: Disabling JS"); - torbutton_disable_all_js(); - - m_tb_prefs.setBoolPref("browser.zoom.siteSpecific", - !m_tb_prefs.getBoolPref("browser.zoom.siteSpecific")); - m_tb_prefs.setBoolPref("browser.zoom.siteSpecific", - !m_tb_prefs.getBoolPref("browser.zoom.siteSpecific")); - - try { - if(m_tb_prefs.prefHasUserValue("geo.wifi.access_token")) { - m_tb_prefs.clearUserPref("geo.wifi.access_token"); - } - } catch(e) { - torbutton_log(3, "Exception on wifi token clear: "+e); - } - - try { - if(m_tb_prefs.prefHasUserValue("general.open_location.last_url")) { - m_tb_prefs.clearUserPref("general.open_location.last_url"); - } - } catch(e) { - torbutton_log(3, "Exception on clearing last opened location: "+e); - } - - torbutton_log(3, "New Identity: Closing tabs and clearing searchbox"); - - torbutton_close_tabs_on_new_identity(); - - // Bug #10800: Trying to clear search/find can cause exceptions - // in unknown cases. Just log for now. - try { - var searchBar = window.document.getElementById("searchbar"); - if (searchBar) - searchBar.textbox.reset(); - } catch(e) { - torbutton_log(5, "New Identity: Exception on clearing search box: "+e); - } - - try { - if (gFindBarInitialized) { - var findbox = gFindBar.getElement("findbar-textbox"); - findbox.reset(); - gFindBar.close(); - } - } catch(e) { - torbutton_log(5, "New Identity: Exception on clearing find bar: "+e); - } - - torbutton_log(3, "New Identity: Emitting Private Browsing Session clear event"); - obsSvc.notifyObservers(null, "browser:purge-session-history", ""); - - torbutton_log(3, "New Identity: Clearing HTTP Auth"); - - if (m_tb_prefs.getBoolPref("extensions.torbutton.clear_http_auth")) { - var auth = Cc["@mozilla.org/network/http-auth-manager;1"]. - getService(Ci.nsIHttpAuthManager); - auth.clearAll(); - } - - torbutton_log(3, "New Identity: Clearing Crypto Tokens"); - - // Clear all crypto auth tokens. This includes calls to PK11_LogoutAll(), - // nsNSSComponent::LogoutAuthenticatedPK11() and clearing the SSL session - // cache. - let sdr = Cc["@mozilla.org/security/sdr;1"]. - getService(Ci.nsISecretDecoderRing); - sdr.logoutAndTeardown(); - - // This clears the OCSP cache. - // - // nsNSSComponent::Observe() watches security.OCSP.enabled, which calls - // setValidationOptions(), which in turn calls setNonPkixOcspEnabled() which, - // if security.OCSP.enabled is set to 0, calls CERT_DisableOCSPChecking(), - // which calls CERT_ClearOCSPCache(). - // See: https://mxr.mozilla.org/comm-esr24/source/mozilla/security/manager/ssl/src/… - var ocsp = m_tb_prefs.getIntPref("security.OCSP.enabled"); - m_tb_prefs.setIntPref("security.OCSP.enabled", 0); - m_tb_prefs.setIntPref("security.OCSP.enabled", ocsp); - - // This clears the site permissions on Tor Browser - // XXX: Tie to some kind of disk-ok pref? - try { - Services.perms.removeAll(); - } catch(e) { - // Actually, this catch does not appear to be needed. Leaving it in for - // safety though. - torbutton_log(3, "Can't clear permissions: Not Tor Browser: "+e); - } - - // Clear site security settings - let sss = Cc["@mozilla.org/ssservice;1"]. - getService(Ci.nsISiteSecurityService); - sss.clearAll(); - - // This clears the undo tab history. - var tabs = m_tb_prefs.getIntPref("browser.sessionstore.max_tabs_undo"); - m_tb_prefs.setIntPref("browser.sessionstore.max_tabs_undo", 0); - m_tb_prefs.setIntPref("browser.sessionstore.max_tabs_undo", tabs); - - torbutton_log(3, "New Identity: Clearing Image Cache"); - torbutton_clear_image_caches(); - - torbutton_log(3, "New Identity: Clearing Disk and Memory Caches"); - - try { - Services.cache2.clear(); - } catch(e) { - torbutton_log(5, "Exception on cache clearing: "+e); - window.alert("Torbutton: Unexpected error during cache clearing: "+e); - } - - torbutton_log(3, "New Identity: Clearing storage"); - torbutton_log(3, "New Identity: Clearing media devices"); - torbutton_log(3, "New Identity: Clearing predictor network data"); - - try { - await clearData( - Services.clearData.CLEAR_DOM_STORAGES | - Services.clearData.CLEAR_MEDIA_DEVICES | - Services.clearData.CLEAR_PREDICTOR_NETWORK_DATA - ); - } catch (e) { - torbutton_log(5, "Exception on storage clearing: " + e); - window.alert("Torbutton: Unexpected error during storage clearing: " + e); - } - - torbutton_log(3, "New Identity: Clearing Cookies and DOM Storage"); - - torbutton_clear_cookies(); - - torbutton_log(3, "New Identity: Closing open connections"); - - // Clear keep-alive - obsSvc.notifyObservers(this, "net:prune-all-connections", null); - - torbutton_log(3, "New Identity: Clearing Content Preferences"); - - // XXX: This may not clear zoom site-specific - // browser.content.full-zoom - ChromeUtils.defineModuleGetter(this, "PrivateBrowsingUtils", - "resource://gre/modules/PrivateBrowsingUtils.jsm"); - var pbCtxt = PrivateBrowsingUtils.privacyContextFromWindow(window); - var cps = Cc["@mozilla.org/content-pref/service;1"] - .getService(Ci.nsIContentPrefService2); - cps.removeAllDomains(pbCtxt); - - torbutton_log(3, "New Identity: Syncing prefs"); - - // Force prefs to be synced to disk - Services.prefs.savePrefFile(null); - - torbutton_log(3, "New Identity: Clearing permissions"); - - let pm = Services.perms; - pm.removeAll(); - - // Clear the domain isolation state. - torbutton_log(3, "New Identity: Clearing domain isolator"); - - let domainIsolator = Cc["@torproject.org/domain-isolator;1"] - .getService(Ci.nsISupports).wrappedJSObject; - domainIsolator.clearIsolation(); - - torbutton_log(3, "New Identity: Sending NEWNYM"); - - // We only support TBB for newnym. - if (!m_tb_control_pass || (!m_tb_control_ipc_file && !m_tb_control_port)) { - var warning = torbutton_get_property_string("torbutton.popup.no_newnym"); - torbutton_log(5, "Torbutton cannot safely newnym. It does not have access to the Tor Control Port."); - window.alert(warning); - } else { - if (!await torbutton_send_ctrl_cmd("SIGNAL NEWNYM")) { - var warning = torbutton_get_property_string("torbutton.popup.no_newnym"); - torbutton_log(5, "Torbutton was unable to request a new circuit from Tor"); - window.alert(warning); - } - } - - torbutton_log(3, "Ending any remaining private browsing sessions."); - obsSvc.notifyObservers(null, "last-pb-context-exited", ""); - - torbutton_log(3, "New Identity: Opening a new browser window"); - - // Open a new window with the TBB check homepage - // In Firefox >=19, can pass {private: true} but we do not need it because - // we have browser.privatebrowsing.autostart = true - OpenBrowserWindow(); - - torbutton_log(3, "New identity successful"); - - // Run garbage collection and cycle collection after window is gone. - // This ensures that blob URIs are forgotten. - window.addEventListener("unload", function (event) { - torbutton_log(3, "Initiating New Identity GC pass"); - // Clear out potential pending sInterSliceGCTimer: - m_tb_domWindowUtils.runNextCollectorTimer(); - - // Clear out potential pending sICCTimer: - m_tb_domWindowUtils.runNextCollectorTimer(); - - // Schedule a garbage collection in 4000-1000ms... - m_tb_domWindowUtils.garbageCollect(); - - // To ensure the GC runs immediately instead of 4-10s from now, we need - // to poke it at least 11 times. - // We need 5 pokes for GC, 1 poke for the interSliceGC, and 5 pokes for CC. - // See nsJSContext::RunNextCollectorTimer() in - // https://mxr.mozilla.org/mozilla-central/source/dom/base/nsJSEnvironment.cpp…. - // XXX: We might want to make our own method for immediate full GC... - for (let poke = 0; poke < 11; poke++) { - m_tb_domWindowUtils.runNextCollectorTimer(); - } - - // And now, since the GC probably actually ran *after* the CC last time, - // run the whole thing again. - m_tb_domWindowUtils.garbageCollect(); - for (let poke = 0; poke < 11; poke++) { - m_tb_domWindowUtils.runNextCollectorTimer(); - } - - torbutton_log(3, "Completed New Identity GC pass"); - }); - - // Close the current window for added safety - window.close(); -} - -function torbutton_clear_image_caches() -{ - try { - let imgCache; - let imgTools = Cc["@mozilla.org/image/tools;1"].getService(Ci.imgITools); - if (!("getImgCacheForDocument" in imgTools)) { - // In Firefox 17 and older, there is one global image cache. Clear it. - imgCache = Cc["@mozilla.org/image/cache;1"].getService(Ci.imgICache); - imgCache.clearCache(false); // evict all but chrome cache - } else { - // In Firefox 18 and newer, there are two image caches: one that is - // used for regular browsing and one that is used for private browsing. - - // Clear the non-private browsing image cache. - imgCache = imgTools.getImgCacheForDocument(null); - imgCache.clearCache(false); // evict all but chrome cache - - // Try to clear the private browsing cache. To do so, we must locate - // a content document that is contained within a private browsing window. - let didClearPBCache = false; - let wm = Services.wm; - let enumerator = wm.getEnumerator("navigator:browser"); - while (!didClearPBCache && enumerator.hasMoreElements()) { - let win = enumerator.getNext(); - let browserDoc = win.document.documentElement; - if (!browserDoc.hasAttribute("privatebrowsingmode")) - continue; - - let tabbrowser = win.gBrowser; - if (!tabbrowser) - continue; - - var tabCount = tabbrowser.browsers.length; - for (var i = 0; i < tabCount; i++) { - let doc = tabbrowser.browsers[i].contentDocument; - if (doc) { - imgCache = imgTools.getImgCacheForDocument(doc); - imgCache.clearCache(false); // evict all but chrome cache - didClearPBCache = true; - break; - } - } - } - } - } catch(e) { - // FIXME: This can happen in some rare cases involving XULish image data - // in combination with our image cache isolation patch. Sure isn't - // a good thing, but it's not really a super-cookie vector either. - // We should fix it eventually. - torbutton_log(4, "Exception on image cache clearing: "+e); - } -} - /* Called when we switch the use_nontor_proxy pref in either direction. * * Enables/disables domain isolation and then does new identity @@ -749,10 +433,6 @@ function torbutton_use_nontor_proxy() } else { domainIsolator.enableIsolation(); } - - // Always reset our identity if the proxy has changed from tor - // to non-tor. - torbutton_do_new_identity(); } async function torbutton_do_tor_check() @@ -978,160 +658,6 @@ function torbutton_update_fingerprinting_prefs() { Services.prefs.savePrefFile(null); } -// This function closes all XUL browser windows except this one. For this -// window, it closes all existing tabs and creates one about:blank tab. -function torbutton_close_tabs_on_new_identity() { - if (!m_tb_prefs.getBoolPref("extensions.torbutton.close_newnym")) { - torbutton_log(3, "Not closing tabs"); - return; - } - - // TODO: muck around with browser.tabs.warnOnClose.. maybe.. - torbutton_log(3, "Closing tabs..."); - let wm = Services.wm; - let enumerator = wm.getEnumerator("navigator:browser"); - let windowsToClose = []; - while (enumerator.hasMoreElements()) { - let win = enumerator.getNext(); - let browser = win.gBrowser; - if (!browser) { - torbutton_log(5, "No browser for possible closed window"); - continue; - } - - let tabCount = browser.browsers.length; - torbutton_log(3, "Tab count for window: " + tabCount); - let tabsToRemove = []; - for (let i = 0; i < tabCount; i++) { - let tab = browser.getTabForBrowser(browser.browsers[i]); - if (!tab) { - torbutton_log(5, "No tab for browser"); - } else { - tabsToRemove.push(tab); - } - } - - if (win == window) { - browser.addWebTab("about:blank"); - } else { - // It is a bad idea to alter the window list while iterating - // over it, so add this window to an array and close it later. - windowsToClose.push(win); - } - - // Close each tab except the new blank one that we created. - tabsToRemove.forEach(aTab => browser.removeTab(aTab)); - } - - // Close all XUL windows except this one. - torbutton_log(2, "Closing windows..."); - windowsToClose.forEach(aWin => aWin.close()); - - torbutton_log(3, "Closed all tabs"); -} - -// -------------- HISTORY & COOKIES --------------------- - -// Bug 1506 P4: Used by New Identity if cookie protections are -// not in use. -function torbutton_clear_cookies() { - torbutton_log(2, "called torbutton_clear_cookies"); - var cm = Services.cookies; - - cm.removeAll(); -} - -// -------------- JS HANDLING CODE --------------------- -// Bug 1506 P3: Defense in depth. Disables JS and events for New Identity. -function torbutton_disable_browser_js(browser) { - var eventSuppressor = null; - - /* Solution from: https://bugzilla.mozilla.org/show_bug.cgi?id=409737 */ - // XXX: This kills the entire window. We need to redirect - // focus and inform the user via a lightbox. - try { - if (!browser.contentWindow) - torbutton_log(3, "No content window to disable JS events."); - else - eventSuppressor = browser.contentWindow.windowUtils; - } catch(e) { - torbutton_log(4, "Failed to disable JS events: "+e) - } - - let { browsingContext } = browser; - - if (browsingContext) { - browsingContext.allowJavascript = false; - } - - try { - // My estimation is that this does not get the inner iframe windows, - // but that does not matter, because iframes should be destroyed - // on the next load. - browser.contentWindow.name = null; - browser.contentWindow.window.name = null; - } catch(e) { - torbutton_log(4, "Failed to reset window.name: "+e) - } - - if (eventSuppressor) - eventSuppressor.suppressEventHandling(true); -} - -// Bug 1506 P3: The JS-killing bits of this are used by -// New Identity as a defense-in-depth measure. -function torbutton_disable_window_js(win) { - var browser = win.gBrowser; - if (!browser) { - // TODO is this still needed? - torbutton_log(5, "No browser for plugin window..."); - return; - } - var browsers = browser.browsers; - torbutton_log(1, "Toggle window plugins"); - - for (var i = 0; i < browsers.length; ++i) { - var b = browser.browsers[i]; - if (b && !b.docShell) { - try { - if (b.currentURI) - torbutton_log(5, "DocShell is null for: "+b.currentURI.spec); - else - torbutton_log(5, "DocShell is null for unknown URL"); - } catch(e) { - torbutton_log(5, "DocShell is null for unparsable URL: "+e); - } - } - if (b && b.docShell) { - torbutton_disable_browser_js(b); - - // kill meta-refresh and existing page loading - // XXX: Despite having JUST checked b.docShell, it can - // actually end up NULL here in some cases? - try { - if (b.docShell && b.webNavigation) - b.webNavigation.stop(b.webNavigation.STOP_ALL); - } catch(e) { - torbutton_log(4, "DocShell error: "+e); - } - } - } -} - -// Bug 1506 P3: The JS-killing bits of this are used by -// New Identity as a defense-in-depth measure. -// -// This is an ugly beast.. But unfortunately it has to be so.. -// Looping over all tabs twice is not somethign we wanna do.. -function torbutton_disable_all_js() { - var wm = Services.wm; - var enumerator = wm.getEnumerator("navigator:browser"); - while(enumerator.hasMoreElements()) { - var win = enumerator.getNext(); - torbutton_disable_window_js(win); - } -} - // Bug 1506 P1: This function just cleans up prefs that got set badly in previous releases function torbutton_fixup_old_prefs() { -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-91.11.0esr-12.0-1 updated (ef0f0ae9f0e56 -> c0426df7f7b37)
by gitolite role 27 Jul '22

27 Jul '22

This is an automated email from the git hooks/post-receive script. richard pushed a change to branch tor-browser-91.11.0esr-12.0-1 in repository tor-browser. from ef0f0ae9f0e56 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection new 0b894b41ed680 fixup! Bug 25658: Replace security slider with security level UI new c0426df7f7b37 Bug 40926: Implemented the New Identity feature The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: browser/base/content/appmenu-viewcache.inc.xhtml | 12 +- browser/base/content/browser-menubar.inc | 5 +- browser/base/content/browser-sets.inc | 2 +- browser/base/content/browser.js | 10 + browser/base/content/browser.xhtml | 1 - browser/base/content/navigator-toolbox.inc.xhtml | 5 +- browser/components/moz.build | 1 + .../components/newidentity/content/newidentity.js | 566 +++++++++++++++++++++ browser/components/newidentity/jar.mn | 13 + .../locale/en-US/newIdentity.properties | 8 + .../{torpreferences => newidentity}/moz.build | 0 browser/components/preferences/preferences.xhtml | 1 - .../securitylevel/content/securityLevel.js | 146 +++++- .../content/securityLevelPanel.inc.xhtml | 7 +- .../content/securityLevelPreferences.inc.xhtml | 42 +- browser/components/securitylevel/jar.mn | 5 + .../locale/en-US/securityLevel.properties | 30 ++ browser/installer/package-manifest.in | 9 +- .../en-US/browser/base-browser/securityLevel.ftl | 66 --- 19 files changed, 797 insertions(+), 132 deletions(-) create mode 100644 browser/components/newidentity/content/newidentity.js create mode 100644 browser/components/newidentity/jar.mn create mode 100644 browser/components/newidentity/locale/en-US/newIdentity.properties copy browser/components/{torpreferences => newidentity}/moz.build (100%) create mode 100644 browser/components/securitylevel/locale/en-US/securityLevel.properties delete mode 100644 browser/locales/en-US/browser/base-browser/securityLevel.ftl -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 2

[tor-browser] branch tor-browser-91.11.0esr-12.0-1 updated (4ff5808811ac9 -> ef0f0ae9f0e56)
by gitolite role 26 Jul '22

26 Jul '22

This is an automated email from the git hooks/post-receive script. pierov pushed a change to branch tor-browser-91.11.0esr-12.0-1 in repository tor-browser. from 4ff5808811ac9 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection new 16a1af2604d74 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection new 55991a59b5c28 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection new a1c57b4b4a76d fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection new ef0f0ae9f0e56 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: .../torpreferences/content/builtinBridgeDialog.jsm | 17 ++----- .../torpreferences/content/connectionPane.js | 57 ++++++++++++---------- .../torpreferences/content/provideBridgeDialog.jsm | 15 ++---- .../torpreferences/content/requestBridgeDialog.jsm | 13 ++--- 4 files changed, 44 insertions(+), 58 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 4

[Git][tpo/applications/android-components] Pushed new branch android-components-102.0.14-12.0-1
by Pier Angelo Vendrame (＠pierov) 26 Jul '22

26 Jul '22

Pier Angelo Vendrame pushed new branch android-components-102.0.14-12.0-1 at The Tor Project / Applications / android-components -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/android-components/-/tree/an… You're receiving this email because of your account on gitlab.torproject.org.

1 0