- tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-update-responses][main] release: new version, 14.0.5
by Pier Angelo Vendrame (＠pierov) 04 Feb '25

04 Feb '25

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 86ac825e by Pier Angelo Vendrame at 2025-02-04T17:47:21+01:00 release: new version, 14.0.5 - - - - - 81 changed files: - update_3/release/.htaccess - − update_3/release/13.5.10-14.0.4+13.5.11-linux-i686-ALL.xml - − update_3/release/13.5.10-14.0.4+13.5.11-linux-x86_64-ALL.xml - − update_3/release/13.5.10-14.0.4+13.5.11-macos-ALL.xml - − update_3/release/13.5.10-14.0.4+13.5.11-windows-i686-ALL.xml - − update_3/release/13.5.10-14.0.4+13.5.11-windows-x86_64-ALL.xml - + update_3/release/13.5.10-14.0.5+13.5.12-linux-i686-ALL.xml - + update_3/release/13.5.10-14.0.5+13.5.12-linux-x86_64-ALL.xml - + update_3/release/13.5.10-14.0.5+13.5.12-macos-ALL.xml - + update_3/release/13.5.10-14.0.5+13.5.12-windows-i686-ALL.xml - + update_3/release/13.5.10-14.0.5+13.5.12-windows-x86_64-ALL.xml - + update_3/release/13.5.11-14.0.5+13.5.12-linux-i686-ALL.xml - + update_3/release/13.5.11-14.0.5+13.5.12-linux-x86_64-ALL.xml - + update_3/release/13.5.11-14.0.5+13.5.12-macos-ALL.xml - + update_3/release/13.5.11-14.0.5+13.5.12-windows-i686-ALL.xml - + update_3/release/13.5.11-14.0.5+13.5.12-windows-x86_64-ALL.xml - − update_3/release/13.5.7-14.0.4+13.5.11-linux-i686-ALL.xml - − update_3/release/13.5.7-14.0.4+13.5.11-linux-x86_64-ALL.xml - − update_3/release/13.5.7-14.0.4+13.5.11-macos-ALL.xml - − update_3/release/13.5.7-14.0.4+13.5.11-windows-i686-ALL.xml - − update_3/release/13.5.7-14.0.4+13.5.11-windows-x86_64-ALL.xml - − update_3/release/13.5.9-14.0.4+13.5.11-linux-i686-ALL.xml - − update_3/release/13.5.9-14.0.4+13.5.11-linux-x86_64-ALL.xml - − update_3/release/13.5.9-14.0.4+13.5.11-macos-ALL.xml - − update_3/release/13.5.9-14.0.4+13.5.11-windows-i686-ALL.xml - − update_3/release/13.5.9-14.0.4+13.5.11-windows-x86_64-ALL.xml - + update_3/release/13.5.9-14.0.5+13.5.12-linux-i686-ALL.xml - + update_3/release/13.5.9-14.0.5+13.5.12-linux-x86_64-ALL.xml - + update_3/release/13.5.9-14.0.5+13.5.12-macos-ALL.xml - + update_3/release/13.5.9-14.0.5+13.5.12-windows-i686-ALL.xml - + update_3/release/13.5.9-14.0.5+13.5.12-windows-x86_64-ALL.xml - − update_3/release/14.0.1-14.0.4+13.5.11-linux-i686-ALL.xml - − update_3/release/14.0.1-14.0.4+13.5.11-linux-x86_64-ALL.xml - − update_3/release/14.0.1-14.0.4+13.5.11-macos-ALL.xml - − update_3/release/14.0.1-14.0.4+13.5.11-windows-i686-ALL.xml - − update_3/release/14.0.1-14.0.4+13.5.11-windows-x86_64-ALL.xml - − update_3/release/14.0.2-14.0.4+13.5.11-linux-i686-ALL.xml - − update_3/release/14.0.2-14.0.4+13.5.11-linux-x86_64-ALL.xml - − update_3/release/14.0.2-14.0.4+13.5.11-macos-ALL.xml - − update_3/release/14.0.2-14.0.4+13.5.11-windows-i686-ALL.xml - − update_3/release/14.0.2-14.0.4+13.5.11-windows-x86_64-ALL.xml - + update_3/release/14.0.2-14.0.5+13.5.12-linux-i686-ALL.xml - + update_3/release/14.0.2-14.0.5+13.5.12-linux-x86_64-ALL.xml - + update_3/release/14.0.2-14.0.5+13.5.12-macos-ALL.xml - + update_3/release/14.0.2-14.0.5+13.5.12-windows-i686-ALL.xml - + update_3/release/14.0.2-14.0.5+13.5.12-windows-x86_64-ALL.xml - − update_3/release/14.0.3-14.0.4+13.5.11-linux-i686-ALL.xml - − update_3/release/14.0.3-14.0.4+13.5.11-linux-x86_64-ALL.xml - − update_3/release/14.0.3-14.0.4+13.5.11-macos-ALL.xml - − update_3/release/14.0.3-14.0.4+13.5.11-windows-i686-ALL.xml - − update_3/release/14.0.3-14.0.4+13.5.11-windows-x86_64-ALL.xml - + update_3/release/14.0.3-14.0.5+13.5.12-linux-i686-ALL.xml - + update_3/release/14.0.3-14.0.5+13.5.12-linux-x86_64-ALL.xml - + update_3/release/14.0.3-14.0.5+13.5.12-macos-ALL.xml - + update_3/release/14.0.3-14.0.5+13.5.12-windows-i686-ALL.xml - + update_3/release/14.0.3-14.0.5+13.5.12-windows-x86_64-ALL.xml - − update_3/release/14.0.4+13.5.11-linux-i686-ALL.xml - − update_3/release/14.0.4+13.5.11-linux-x86_64-ALL.xml - − update_3/release/14.0.4+13.5.11-macos-ALL.xml - − update_3/release/14.0.4+13.5.11-windows-i686-ALL.xml - − update_3/release/14.0.4+13.5.11-windows-x86_64-ALL.xml - + update_3/release/14.0.4-14.0.5+13.5.12-linux-i686-ALL.xml - + update_3/release/14.0.4-14.0.5+13.5.12-linux-x86_64-ALL.xml - + update_3/release/14.0.4-14.0.5+13.5.12-macos-ALL.xml - + update_3/release/14.0.4-14.0.5+13.5.12-windows-i686-ALL.xml - + update_3/release/14.0.4-14.0.5+13.5.12-windows-x86_64-ALL.xml - + update_3/release/14.0.5+13.5.12-linux-i686-ALL.xml - + update_3/release/14.0.5+13.5.12-linux-x86_64-ALL.xml - + update_3/release/14.0.5+13.5.12-macos-ALL.xml - + update_3/release/14.0.5+13.5.12-windows-i686-ALL.xml - + update_3/release/14.0.5+13.5.12-windows-x86_64-ALL.xml - update_3/release/download-android-aarch64.json - update_3/release/download-android-armv7.json - update_3/release/download-android-x86.json - update_3/release/download-android-x86_64.json - update_3/release/download-linux-i686.json - update_3/release/download-linux-x86_64.json - update_3/release/download-macos.json - update_3/release/download-windows-i686.json - update_3/release/download-windows-x86_64.json - update_3/release/downloads.json The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser-update-responses][main] release: new version, 14.0.5
by Pier Angelo Vendrame (＠pierov) 03 Feb '25

03 Feb '25

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / mullvad-browser-update-responses Commits: f3ff86b5 by Pier Angelo Vendrame at 2025-02-03T19:45:51+01:00 release: new version, 14.0.5 - - - - - 29 changed files: - update_1/release/.htaccess - − update_1/release/13.5.9-14.0.4-linux-x86_64-ALL.xml - − update_1/release/13.5.9-14.0.4-macos-ALL.xml - − update_1/release/13.5.9-14.0.4-windows-x86_64-ALL.xml - − update_1/release/14.0-14.0.4-linux-x86_64-ALL.xml - − update_1/release/14.0-14.0.4-macos-ALL.xml - − update_1/release/14.0-14.0.4-windows-x86_64-ALL.xml - + update_1/release/14.0-14.0.5-linux-x86_64-ALL.xml - + update_1/release/14.0-14.0.5-macos-ALL.xml - + update_1/release/14.0-14.0.5-windows-x86_64-ALL.xml - − update_1/release/14.0.3-14.0.4-linux-x86_64-ALL.xml - − update_1/release/14.0.3-14.0.4-macos-ALL.xml - − update_1/release/14.0.3-14.0.4-windows-x86_64-ALL.xml - + update_1/release/14.0.3-14.0.5-linux-x86_64-ALL.xml - + update_1/release/14.0.3-14.0.5-macos-ALL.xml - + update_1/release/14.0.3-14.0.5-windows-x86_64-ALL.xml - + update_1/release/14.0.4-14.0.5-linux-x86_64-ALL.xml - + update_1/release/14.0.4-14.0.5-macos-ALL.xml - + update_1/release/14.0.4-14.0.5-windows-x86_64-ALL.xml - − update_1/release/14.0.4-linux-x86_64-ALL.xml - − update_1/release/14.0.4-macos-ALL.xml - − update_1/release/14.0.4-windows-x86_64-ALL.xml - + update_1/release/14.0.5-linux-x86_64-ALL.xml - + update_1/release/14.0.5-macos-ALL.xml - + update_1/release/14.0.5-windows-x86_64-ALL.xml - update_1/release/download-linux-x86_64.json - update_1/release/download-macos.json - update_1/release/download-windows-x86_64.json - update_1/release/downloads.json Changes: ===================================== update_1/release/.htaccess ===================================== @@ -1,22 +1,22 @@ RewriteEngine On -RewriteRule ^[^/]+/14.0.4/ no-update.xml [last] -RewriteRule ^Linux_x86_64-gcc3/13.5.9/ALL 13.5.9-14.0.4-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/14.0/ALL 14.0-14.0.4-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/14.0.3/ALL 14.0.3-14.0.4-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/[^/]+/ALL 14.0.4-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/ 14.0.4-linux-x86_64-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/13.5.9/ALL 13.5.9-14.0.4-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/14.0/ALL 14.0-14.0.4-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/14.0.3/ALL 14.0.3-14.0.4-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/[^/]+/ALL 14.0.4-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/ 14.0.4-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/13.5.9/ALL 13.5.9-14.0.4-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/14.0/ALL 14.0-14.0.4-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/14.0.3/ALL 14.0.3-14.0.4-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/[^/]+/ALL 14.0.4-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/ 14.0.4-macos-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/13.5.9/ALL 13.5.9-14.0.4-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/14.0/ALL 14.0-14.0.4-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/14.0.3/ALL 14.0.3-14.0.4-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/[^/]+/ALL 14.0.4-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/ 14.0.4-windows-x86_64-ALL.xml [last] +RewriteRule ^[^/]+/14.0.5/ no-update.xml [last] +RewriteRule ^Linux_x86_64-gcc3/14.0/ALL 14.0-14.0.5-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/14.0.3/ALL 14.0.3-14.0.5-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/14.0.4/ALL 14.0.4-14.0.5-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/[^/]+/ALL 14.0.5-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/ 14.0.5-linux-x86_64-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/14.0/ALL 14.0-14.0.5-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/14.0.3/ALL 14.0.3-14.0.5-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/14.0.4/ALL 14.0.4-14.0.5-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/[^/]+/ALL 14.0.5-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/ 14.0.5-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/14.0/ALL 14.0-14.0.5-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/14.0.3/ALL 14.0.3-14.0.5-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/14.0.4/ALL 14.0.4-14.0.5-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/[^/]+/ALL 14.0.5-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/ 14.0.5-macos-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/14.0/ALL 14.0-14.0.5-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/14.0.3/ALL 14.0.3-14.0.5-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/14.0.4/ALL 14.0.4-14.0.5-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/[^/]+/ALL 14.0.5-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/ 14.0.5-windows-x86_64-ALL.xml [last] ===================================== update_1/release/13.5.9-14.0.4-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64-14.0.4_…" size="114273089" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64--13.5.9…" size="57892666" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.9-14.0.4-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos-14.0.4_ALL.mar" size="129355556" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos--13.5.9-14.0.4…" size="93252259" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.9-14.0.4-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64-14.0.…" size="97707808" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64--13.5…" size="63659430" type="partial"></patch></update></updates> ===================================== update_1/release/14.0-14.0.4-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64-14.0.4_…" size="114273089" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64--14.0-1…" size="10929834" type="partial"></patch></update></updates> ===================================== update_1/release/14.0-14.0.4-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos-14.0.4_ALL.mar" size="129355556" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos--14.0-14.0.4_A…" size="15673487" type="partial"></patch></update></updates> ===================================== update_1/release/14.0-14.0.4-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64-14.0.…" size="97707808" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64--14.0…" size="11450163" type="partial"></patch></update></updates> ===================================== update_1/release/14.0-14.0.5-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64-14.0.5_…" size="114339861" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64--14.0-1…" size="11635275" type="partial"></patch></update></updates> ===================================== update_1/release/14.0-14.0.5-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos-14.0.5_ALL.mar" size="129434736" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos--14.0-14.0.5_A…" size="16862631" type="partial"></patch></update></updates> ===================================== update_1/release/14.0-14.0.5-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64-14.0.…" size="97771772" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64--14.0…" size="12155284" type="partial"></patch></update></updates> ===================================== update_1/release/14.0.3-14.0.4-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64-14.0.4_…" size="114273089" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64--14.0.3…" size="8193306" type="partial"></patch></update></updates> ===================================== update_1/release/14.0.3-14.0.4-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos-14.0.4_ALL.mar" size="129355556" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos--14.0.3-14.0.4…" size="12557723" type="partial"></patch></update></updates> ===================================== update_1/release/14.0.3-14.0.4-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64-14.0.…" size="97707808" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64--14.0…" size="8544311" type="partial"></patch></update></updates> ===================================== update_1/release/14.0.3-14.0.5-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64-14.0.5_…" size="114339861" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64--14.0.3…" size="9309067" type="partial"></patch></update></updates> ===================================== update_1/release/14.0.3-14.0.5-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos-14.0.5_ALL.mar" size="129434736" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos--14.0.3-14.0.5…" size="81031997" type="partial"></patch></update></updates> ===================================== update_1/release/14.0.3-14.0.5-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64-14.0.…" size="97771772" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64--14.0…" size="9890912" type="partial"></patch></update></updates> ===================================== update_1/release/14.0.4-14.0.5-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64-14.0.5_…" size="114339861" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64--14.0.4…" size="7962710" type="partial"></patch></update></updates> ===================================== update_1/release/14.0.4-14.0.5-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos-14.0.5_ALL.mar" size="129434736" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos--14.0.4-14.0.5…" size="79845313" type="partial"></patch></update></updates> ===================================== update_1/release/14.0.4-14.0.5-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64-14.0.…" size="97771772" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64--14.0…" size="8344967" type="partial"></patch></update></updates> ===================================== update_1/release/14.0.4-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64-14.0.4_…" size="114273089" type="complete"></patch></update></updates> ===================================== update_1/release/14.0.4-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos-14.0.4_ALL.mar" size="129355556" type="complete"></patch></update></updates> ===================================== update_1/release/14.0.4-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0.4" appVersion="14.0.4" platformVersion="128.6.0" buildID="20250106125732" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.4" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64-14.0.…" size="97707808" type="complete"></patch></update></updates> ===================================== update_1/release/14.0.5-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64-14.0.5_…" size="114339861" type="complete"></patch></update></updates> ===================================== update_1/release/14.0.5-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos-14.0.5_ALL.mar" size="129434736" type="complete"></patch></update></updates> ===================================== update_1/release/14.0.5-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.5" appVersion="14.0.5" platformVersion="128.7.0" buildID="20250203100000" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.5" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64-14.0.…" size="97771772" type="complete"></patch></update></updates> ===================================== update_1/release/download-linux-x86_64.json ===================================== @@ -1 +1 @@ -{"binary":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64-14.0.4.…","git_tag":"mb-14.0.4-build1","sig":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64-14.0.4.…","version":"14.0.4"} \ No newline at end of file +{"binary":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64-14.0.5.…","git_tag":"mb-14.0.5-build1","sig":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64-14.0.5.…","version":"14.0.5"} \ No newline at end of file ===================================== update_1/release/download-macos.json ===================================== @@ -1 +1 @@ -{"binary":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos-14.0.4.dmg","git_tag":"mb-14.0.4-build1","sig":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos-14.0.4.dmg.asc","version":"14.0.4"} \ No newline at end of file +{"binary":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos-14.0.5.dmg","git_tag":"mb-14.0.5-build1","sig":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos-14.0.5.dmg.asc","version":"14.0.5"} \ No newline at end of file ===================================== update_1/release/download-windows-x86_64.json ===================================== @@ -1 +1 @@ -{"binary":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64-14.0.…","git_tag":"mb-14.0.4-build1","sig":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64-14.0.…","version":"14.0.4"} \ No newline at end of file +{"binary":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64-14.0.…","git_tag":"mb-14.0.5-build1","sig":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64-14.0.…","version":"14.0.5"} \ No newline at end of file ===================================== update_1/release/downloads.json ===================================== @@ -1 +1 @@ -{"downloads":{"linux-x86_64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64-14.0.4.…","sig":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-linux-x86_64-14.0.4.…"}},"macos":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos-14.0.4.dmg","sig":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-macos-14.0.4.dmg.asc"}},"win64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64-14.0.…","sig":"https://cdn.mullvad.net/browser/14.0.4/mullvad-browser-windows-x86_64-14.0.…"}}},"tag":"mb-14.0.4-build1","version":"14.0.4"} \ No newline at end of file +{"downloads":{"linux-x86_64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64-14.0.5.…","sig":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-linux-x86_64-14.0.5.…"}},"macos":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos-14.0.5.dmg","sig":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-macos-14.0.5.dmg.asc"}},"win64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64-14.0.…","sig":"https://cdn.mullvad.net/browser/14.0.5/mullvad-browser-windows-x86_64-14.0.…"}}},"tag":"mb-14.0.5-build1","version":"14.0.5"} \ No newline at end of file View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag base-browser-128.7.0esr-14.5-1-build1
by Pier Angelo Vendrame (＠pierov) 03 Feb '25

03 Feb '25

Pier Angelo Vendrame pushed new tag base-browser-128.7.0esr-14.5-1-build1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/base-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-128.7.0esr-14.5-1] fixup! [android] Implement Android-native Connection Assist UI
by Dan Ballard (＠dan) 03 Feb '25

03 Feb '25

Dan Ballard pushed to branch tor-browser-128.7.0esr-14.5-1 at The Tor Project / Applications / Tor Browser Commits: 7d350cf7 by clairehurst at 2025-02-03T17:50:52+00:00 fixup! [android] Implement Android-native Connection Assist UI tor-browser#43199 - - - - - 2 changed files: - mobile/android/fenix/app/src/main/res/drawable/progress_gradient.xml - mobile/android/fenix/app/src/main/res/values/colors.xml Changes: ===================================== mobile/android/fenix/app/src/main/res/drawable/progress_gradient.xml ===================================== @@ -5,7 +5,7 @@ <layer-list xmlns:android="http://schemas.android.com/apk/res/android"> <item android:id="@android:id/background"> <shape> - <solid android:color="?attr/layer2" /> + <solid android:color="@color/progress_background_tint" /> </shape> </item> @@ -15,7 +15,10 @@ <gradient android:angle="0" android:endColor="#00DBDE" - android:startColor="#FC00FF"/> + android:startColor="#FC00FF" /> + <corners + android:bottomRightRadius="3dp" + android:topRightRadius="3dp" /> </shape> </scale> </item> ===================================== mobile/android/fenix/app/src/main/res/values/colors.xml ===================================== @@ -382,4 +382,5 @@ <color name="connect_button_purple">#9059FF</color> <color name="configure_connection_button_white">#E1E0E7</color> <color name="warning_yellow">#FFA436</color> + <color name="progress_background_tint">#55148C</color> </resources> View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7d350cf… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7d350cf… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.7.0esr-14.5-1] fixup! BB 42716: Disable unwanted about: pages
by ma1 (＠ma1) 03 Feb '25

03 Feb '25

ma1 pushed to branch mullvad-browser-128.7.0esr-14.5-1 at The Tor Project / Applications / Mullvad Browser Commits: 27ef9572 by Henry Wilkes at 2025-02-03T17:59:01+01:00 fixup! BB 42716: Disable unwanted about: pages TB 43308: Remove about:logo which exposes a branding asset. - - - - - 1 changed file: - docshell/base/nsAboutRedirector.cpp Changes: ===================================== docshell/base/nsAboutRedirector.cpp ===================================== @@ -123,10 +123,9 @@ static const RedirEntry kRedirMap[] = { nsIAboutModule::IS_SECURE_CHROME_UI}, {"logging", "chrome://global/content/aboutLogging.html", nsIAboutModule::ALLOW_SCRIPT}, - {"logo", "chrome://branding/content/about.png", - nsIAboutModule::URI_SAFE_FOR_UNTRUSTED_CONTENT | - // Linkable for testing reasons. - nsIAboutModule::MAKE_LINKABLE}, + // Do not allow web pages to link to about:logo, which varies between + // channels. See tor-browser#43308. + // Moreover, it exposes firefox-specific branding. {"memory", "chrome://global/content/aboutMemory.xhtml", nsIAboutModule::ALLOW_SCRIPT}, {"certificate", "chrome://global/content/certviewer/certviewer.html", View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/27e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/27e… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-128.7.0esr-14.5-1] fixup! BB 42716: Disable unwanted about: pages
by ma1 (＠ma1) 03 Feb '25

03 Feb '25

ma1 pushed to branch base-browser-128.7.0esr-14.5-1 at The Tor Project / Applications / Tor Browser Commits: d2b1cdb2 by Henry Wilkes at 2025-02-03T17:58:41+01:00 fixup! BB 42716: Disable unwanted about: pages TB 43308: Remove about:logo which exposes a branding asset. - - - - - 1 changed file: - docshell/base/nsAboutRedirector.cpp Changes: ===================================== docshell/base/nsAboutRedirector.cpp ===================================== @@ -123,10 +123,9 @@ static const RedirEntry kRedirMap[] = { nsIAboutModule::IS_SECURE_CHROME_UI}, {"logging", "chrome://global/content/aboutLogging.html", nsIAboutModule::ALLOW_SCRIPT}, - {"logo", "chrome://branding/content/about.png", - nsIAboutModule::URI_SAFE_FOR_UNTRUSTED_CONTENT | - // Linkable for testing reasons. - nsIAboutModule::MAKE_LINKABLE}, + // Do not allow web pages to link to about:logo, which varies between + // channels. See tor-browser#43308. + // Moreover, it exposes firefox-specific branding. {"memory", "chrome://global/content/aboutMemory.xhtml", nsIAboutModule::ALLOW_SCRIPT}, {"certificate", "chrome://global/content/certviewer/certviewer.html", View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d2b1cdb… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d2b1cdb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.7.0esr-14.5-1] BB 29745: Limit remote access to content accessible resources
by ma1 (＠ma1) 03 Feb '25

03 Feb '25

ma1 pushed to branch mullvad-browser-128.7.0esr-14.5-1 at The Tor Project / Applications / Mullvad Browser Commits: 911dbf28 by Henry Wilkes at 2025-02-03T17:56:38+01:00 BB 29745: Limit remote access to content accessible resources - - - - - 1 changed file: - caps/nsScriptSecurityManager.cpp Changes: ===================================== caps/nsScriptSecurityManager.cpp ===================================== @@ -1044,6 +1044,48 @@ nsresult nsScriptSecurityManager::CheckLoadURIFlags( } } + // Only allow some "about:" pages to have access to contentaccessible + // "chrome://branding/" assets. Otherwise web pages could easily and + // consistently detect the differences between channels when their + // branding differs. See tor-browser#43308 and tor-browser#42319. + // NOTE: The same assets under the alternative URI + // "resource:///chrome/browser/content/branding/" should already be + // inaccessible to web content, so we only add a condition for the chrome + // path. + if (targetScheme.EqualsLiteral("chrome")) { + nsAutoCString targetHost; + rv = aTargetBaseURI->GetHost(targetHost); + NS_ENSURE_SUCCESS(rv, rv); + if (targetHost.EqualsLiteral("branding")) { + // Disallow any Principal whose scheme is not "about", or is a + // contentaccessible "about" URI ("about:blank" or "about:srcdoc"). + // NOTE: "about:blank" and "about:srcdoc" would be unexpected here + // since such a document spawned by a web document should inherit the + // same Principal URI. I.e. they would be "http:" or "https:" schemes. + // But we add this condition for extra assurances. + // NOTE: Documents with null Principals, like "about:blank" typed by + // the user, would also be excluded since the Principal URI would be + // "moz-nullprincipal:". + if (!aSourceBaseURI->SchemeIs("about") || + NS_IsContentAccessibleAboutURI(aSourceBaseURI)) { + return NS_ERROR_DOM_BAD_URI; + } + // Also exclude "about:reader" from accessing branding assets. I.e. if + // a web page includes `<img src="chrome://branding/..." />` we do not + // want it to render within "about:reader" either. + // Though it is unknown whether the information within "about:reader" + // would be exploitable by a web page, we also want to exclude + // "about:reader" for consistency: if it does not display in the + // original web page, it should not display in "about:reader" either. + nsAutoCString sourcePath; + rv = aSourceBaseURI->GetFilePath(sourcePath); + NS_ENSURE_SUCCESS(rv, rv); + if (sourcePath.EqualsLiteral("reader")) { + return NS_ERROR_DOM_BAD_URI; + } + } + } + if (targetScheme.EqualsLiteral("resource")) { if (StaticPrefs::security_all_resource_uri_content_accessible()) { return NS_OK; View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/911… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/911… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-128.7.0esr-14.5-1] BB 29745: Limit remote access to content accessible resources
by ma1 (＠ma1) 03 Feb '25

03 Feb '25

ma1 pushed to branch base-browser-128.7.0esr-14.5-1 at The Tor Project / Applications / Tor Browser Commits: 41490079 by Henry Wilkes at 2025-02-03T17:56:16+01:00 BB 29745: Limit remote access to content accessible resources - - - - - 1 changed file: - caps/nsScriptSecurityManager.cpp Changes: ===================================== caps/nsScriptSecurityManager.cpp ===================================== @@ -1044,6 +1044,48 @@ nsresult nsScriptSecurityManager::CheckLoadURIFlags( } } + // Only allow some "about:" pages to have access to contentaccessible + // "chrome://branding/" assets. Otherwise web pages could easily and + // consistently detect the differences between channels when their + // branding differs. See tor-browser#43308 and tor-browser#42319. + // NOTE: The same assets under the alternative URI + // "resource:///chrome/browser/content/branding/" should already be + // inaccessible to web content, so we only add a condition for the chrome + // path. + if (targetScheme.EqualsLiteral("chrome")) { + nsAutoCString targetHost; + rv = aTargetBaseURI->GetHost(targetHost); + NS_ENSURE_SUCCESS(rv, rv); + if (targetHost.EqualsLiteral("branding")) { + // Disallow any Principal whose scheme is not "about", or is a + // contentaccessible "about" URI ("about:blank" or "about:srcdoc"). + // NOTE: "about:blank" and "about:srcdoc" would be unexpected here + // since such a document spawned by a web document should inherit the + // same Principal URI. I.e. they would be "http:" or "https:" schemes. + // But we add this condition for extra assurances. + // NOTE: Documents with null Principals, like "about:blank" typed by + // the user, would also be excluded since the Principal URI would be + // "moz-nullprincipal:". + if (!aSourceBaseURI->SchemeIs("about") || + NS_IsContentAccessibleAboutURI(aSourceBaseURI)) { + return NS_ERROR_DOM_BAD_URI; + } + // Also exclude "about:reader" from accessing branding assets. I.e. if + // a web page includes `<img src="chrome://branding/..." />` we do not + // want it to render within "about:reader" either. + // Though it is unknown whether the information within "about:reader" + // would be exploitable by a web page, we also want to exclude + // "about:reader" for consistency: if it does not display in the + // original web page, it should not display in "about:reader" either. + nsAutoCString sourcePath; + rv = aSourceBaseURI->GetFilePath(sourcePath); + NS_ENSURE_SUCCESS(rv, rv); + if (sourcePath.EqualsLiteral("reader")) { + return NS_ERROR_DOM_BAD_URI; + } + } + } + if (targetScheme.EqualsLiteral("resource")) { if (StaticPrefs::security_all_resource_uri_content_accessible()) { return NS_OK; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/4149007… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/4149007… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.7.0esr-14.0-1] fixup! Add CI for Base Browser
by Pier Angelo Vendrame (＠pierov) 03 Feb '25

03 Feb '25

Pier Angelo Vendrame pushed to branch mullvad-browser-128.7.0esr-14.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 8b25ea05 by Beatriz Rizental at 2025-02-03T16:00:38+01:00 fixup! Add CI for Base Browser - - - - - 1 changed file: - .gitlab/ci/mixins.yml Changes: ===================================== .gitlab/ci/mixins.yml ===================================== @@ -4,7 +4,21 @@ before_script: - git init - git remote add local "$LOCAL_REPO_PATH" - - git fetch --depth 500 local + - | + # Determine the reference of the target branch in the local repository copy. + # + # 1. List all references in the local repository + # 2. Filter the references to the target branch + # 3. Remove tags + # 4. Keep a single line, in case there are too many matches + # 5. Clean up the output + # 6. Remove everything before the last two slashes, because the output is like `refs/heads/...` or `refs/remotes/...` + TARGET_BRANCH=$(git ls-remote local | grep ${CI_COMMIT_BRANCH:-$CI_MERGE_REQUEST_TARGET_BRANCH_NAME} | grep -v 'refs/tags/' | awk '{print $2}' | tail -1 | sed 's|[^/]*/[^/]*/||') + if [ -z "$TARGET_BRANCH" ]; then + echo "Target branch $TARGET_BRANCH is not yet in local repository. Stopping the pipeline." + exit 1 + fi + - git fetch --depth 500 local $TARGET_BRANCH - git remote add origin "$CI_REPOSITORY_URL" - | if [ -z "${CI_COMMIT_BRANCH:-$CI_MERGE_REQUEST_SOURCE_BRANCH_NAME}" ]; then @@ -26,7 +40,16 @@ before_script: - git init - git remote add local $env:LOCAL_REPO_PATH - - git fetch --depth 500 local + - | + $branchName = $env:CI_COMMIT_BRANCH + if ([string]::IsNullOrEmpty($branchName)) { + $branchName = $env:CI_MERGE_REQUEST_TARGET_BRANCH_NAME + } + $TARGET_BRANCH = git ls-remote local | Select-String -Pattern $branchName | Select-String -Pattern -NotMatch 'refs/tags/' | Select-Object -Last 1 | ForEach-Object { $_.ToString().Split()[1] -replace '^[^/]*/[^/]*/', '' } + if ([string]::IsNullOrEmpty($TARGET_BRANCH)) { + Write-Output "Target branch $TARGET_BRANCH is not yet in local repository. Stopping the pipeline." + exit 1 + } - git remote add origin $env:CI_REPOSITORY_URL - | $branchName = $env:CI_COMMIT_BRANCH View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/8b2… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/8b2… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-128.7.0esr-14.0-1] fixup! Add CI for Base Browser
by Pier Angelo Vendrame (＠pierov) 03 Feb '25

03 Feb '25

Pier Angelo Vendrame pushed to branch base-browser-128.7.0esr-14.0-1 at The Tor Project / Applications / Tor Browser Commits: 2db79da2 by Beatriz Rizental at 2025-02-03T16:00:19+01:00 fixup! Add CI for Base Browser - - - - - 1 changed file: - .gitlab/ci/mixins.yml Changes: ===================================== .gitlab/ci/mixins.yml ===================================== @@ -4,7 +4,21 @@ before_script: - git init - git remote add local "$LOCAL_REPO_PATH" - - git fetch --depth 500 local + - | + # Determine the reference of the target branch in the local repository copy. + # + # 1. List all references in the local repository + # 2. Filter the references to the target branch + # 3. Remove tags + # 4. Keep a single line, in case there are too many matches + # 5. Clean up the output + # 6. Remove everything before the last two slashes, because the output is like `refs/heads/...` or `refs/remotes/...` + TARGET_BRANCH=$(git ls-remote local | grep ${CI_COMMIT_BRANCH:-$CI_MERGE_REQUEST_TARGET_BRANCH_NAME} | grep -v 'refs/tags/' | awk '{print $2}' | tail -1 | sed 's|[^/]*/[^/]*/||') + if [ -z "$TARGET_BRANCH" ]; then + echo "Target branch $TARGET_BRANCH is not yet in local repository. Stopping the pipeline." + exit 1 + fi + - git fetch --depth 500 local $TARGET_BRANCH - git remote add origin "$CI_REPOSITORY_URL" - | if [ -z "${CI_COMMIT_BRANCH:-$CI_MERGE_REQUEST_SOURCE_BRANCH_NAME}" ]; then @@ -26,7 +40,16 @@ before_script: - git init - git remote add local $env:LOCAL_REPO_PATH - - git fetch --depth 500 local + - | + $branchName = $env:CI_COMMIT_BRANCH + if ([string]::IsNullOrEmpty($branchName)) { + $branchName = $env:CI_MERGE_REQUEST_TARGET_BRANCH_NAME + } + $TARGET_BRANCH = git ls-remote local | Select-String -Pattern $branchName | Select-String -Pattern -NotMatch 'refs/tags/' | Select-Object -Last 1 | ForEach-Object { $_.ToString().Split()[1] -replace '^[^/]*/[^/]*/', '' } + if ([string]::IsNullOrEmpty($TARGET_BRANCH)) { + Write-Output "Target branch $TARGET_BRANCH is not yet in local repository. Stopping the pipeline." + exit 1 + } - git remote add origin $env:CI_REPOSITORY_URL - | $branchName = $env:CI_COMMIT_BRANCH View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/2db79da… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/2db79da… You're receiving this email because of your account on gitlab.torproject.org.

1 0