- tbb-commits - lists.torproject.org

[Git][tpo/applications/mullvad-browser][mullvad-browser-115.3.1esr-13.0-1] 6 commits: fixup! Bug 41736: Customize toolbar for base-browser.
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch mullvad-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 1d2c3ecd by Henry Wilkes at 2023-10-05T22:40:06+02:00 fixup! Bug 41736: Customize toolbar for base-browser. Bug 41736: Stop placing the NoScript button in the palette, and let it go to the toolbar by default when shown. - - - - - e1a841b6 by Henry Wilkes at 2023-10-05T22:40:07+02:00 fixup! Bug 41598: Prevent NoScript from being removed/disabled. Bug 41736: Add a isNoScript property to Extension class. - - - - - 4fb23317 by Henry Wilkes at 2023-10-05T22:40:08+02:00 Bug 41736: Hide NoScript extension's toolbar button by default. This hides it from both the toolbar and the unified extensions panel. We also hide the unified-extension-button if the panel would be empty: not including the NoScript button when it is hidden. As a result, this will be hidden by default until a user installs another extension (or shows the NoScript button and unpins it). - - - - - d7477bb4 by Henry Wilkes at 2023-10-05T22:40:08+02:00 fixup! Firefox preference overrides. Bug 41736: Hide NoScript extension by default. We also hide the unified-extension-button if it would be empty. - - - - - 3c39c8a3 by Henry Wilkes at 2023-10-05T22:40:09+02:00 fixup! Bug 41736: Customize toolbar for base-browser. Bug 41581: Keep NoScript button in the toolbar (but hidden) by default. Also includes some migration. - - - - - 8fded311 by Henry Wilkes at 2023-10-05T22:40:09+02:00 fixup! Base Browser strings Bug 41581: Add strings for changing the visibility of the NoScript toolbar button. - - - - - 9 changed files: - browser/app/profile/001-base-profile.js - browser/base/content/browser-addons.js - browser/components/customizableui/CustomizableUI.sys.mjs - browser/components/extensions/parent/ext-browserAction.js - browser/locales/en-US/browser/base-browser.ftl - browser/themes/shared/addons/unified-extensions.css - toolkit/components/extensions/Extension.sys.mjs - toolkit/mozapps/extensions/content/aboutaddons.html - toolkit/mozapps/extensions/content/aboutaddons.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -220,6 +220,10 @@ pref("privacy.annotate_channels.strict_list.enabled", false); // Disable the Pocket extension (Bug #18886 and #31602) pref("extensions.pocket.enabled", false); +// Custom extensions preferences tor-browser#41581 +pref("extensions.hideNoScript", true); +pref("extensions.hideUnifiedWhenEmpty", true); + // Disable activity stream/"Recommended by Pocket" in about:home (Bug #41029) pref("browser.newtabpage.activity-stream.discoverystream.enabled", false); pref("browser.newtabpage.activity-stream.feeds.section.topstories", false); ===================================== browser/base/content/browser-addons.js ===================================== @@ -26,6 +26,9 @@ XPCOMUtils.defineLazyGetter(lazy, "l10n", function () { ); }); +const HIDE_NO_SCRIPT_PREF = "extensions.hideNoScript"; +const HIDE_UNIFIED_WHEN_EMPTY_PREF = "extensions.hideUnifiedWhenEmpty"; + /** * Mapping of error code -> [error-id, local-error-id] * @@ -1186,6 +1189,18 @@ var gUnifiedExtensions = { gNavToolbox.addEventListener("customizationstarting", this); CustomizableUI.addListener(this); + // Listen out for changes in extensions.hideNoScript and + // extension.hideUnifiedWhenEmpty, which can effect the visibility of the + // unified-extensions-button. + // See tor-browser#41581. + this._hideNoScriptObserver = () => this._updateVisibility(); + Services.prefs.addObserver(HIDE_NO_SCRIPT_PREF, this._hideNoScriptObserver); + Services.prefs.addObserver( + HIDE_UNIFIED_WHEN_EMPTY_PREF, + this._hideNoScriptObserver + ); + this._updateVisibility(); + this._initialized = true; }, @@ -1201,6 +1216,15 @@ var gUnifiedExtensions = { gNavToolbox.removeEventListener("customizationstarting", this); CustomizableUI.removeListener(this); + + Services.prefs.removeObserver( + HIDE_NO_SCRIPT_PREF, + this._hideNoScriptObserver + ); + Services.prefs.removeObserver( + HIDE_UNIFIED_WHEN_EMPTY_PREF, + this._hideNoScriptObserver + ); }, onLocationChange(browser, webProgress, _request, _uri, flags) { @@ -1278,6 +1302,15 @@ var gUnifiedExtensions = { return false; } + // When an extensions is about to be removed, it may still appear in + // getActiveExtensions. + // This is needed for hasExtensionsInPanel, when called through + // onWidgetDestroy when an extension is being removed. + // See tor-browser#41581. + if (extension.hasShutdown) { + return false; + } + // Ignore hidden and extensions that cannot access the current window // (because of PB mode when we are in a private window), since users // cannot do anything with those extensions anyway. @@ -1292,6 +1325,20 @@ var gUnifiedExtensions = { return policies; }, + /** + * Potentially hide the unified-extensions-button if it would be empty. + */ + // See tor-browser#41581. + // The behaviour overlaps with a proposal in mozilla Bug 1778684, which has + // not been implemented, or had much recent activity as of 5th October 2023. + _updateVisibility() { + this.button.classList.toggle( + "hide-empty", + Services.prefs.getBoolPref(HIDE_UNIFIED_WHEN_EMPTY_PREF, true) && + !this.hasExtensionsInPanel() + ); + }, + /** * Returns true when there are active extensions listed/shown in the unified * extensions panel, and false otherwise (e.g. when extensions are pinned in @@ -1300,7 +1347,13 @@ var gUnifiedExtensions = { * @returns {boolean} Whether there are extensions listed in the panel. */ hasExtensionsInPanel() { - const policies = this.getActivePolicies(); + let policies = this.getActivePolicies(); + // If the NoScript button is hidden, we won't count it towards the list of + // extensions in the panel. + // See tor-browser#41581. + if (Services.prefs.getBoolPref(HIDE_NO_SCRIPT_PREF, true)) { + policies = policies.filter(policy => !policy.extension?.isNoScript); + } return !!policies .map(policy => this.browserActionFor(policy)?.widget) @@ -1795,7 +1848,17 @@ var gUnifiedExtensions = { } }, + onWidgetRemoved() { + this._updateVisibility(); + }, + + onWidgetDestroyed() { + this._updateVisibility(); + }, + onWidgetAdded(aWidgetId, aArea, aPosition) { + this._updateVisibility(); + // When we pin a widget to the toolbar from a narrow window, the widget // will be overflowed directly. In this case, we do not want to change the // class name since it is going to be changed by `onWidgetOverflow()` @@ -1811,6 +1874,8 @@ var gUnifiedExtensions = { }, onWidgetOverflow(aNode, aContainer) { + this._updateVisibility(); + // We register a CUI listener for each window so we make sure that we // handle the event for the right window here. if (window !== aNode.ownerGlobal) { @@ -1821,6 +1886,8 @@ var gUnifiedExtensions = { }, onWidgetUnderflow(aNode, aContainer) { + this._updateVisibility(); + // We register a CUI listener for each window so we make sure that we // handle the event for the right window here. if (window !== aNode.ownerGlobal) { ===================================== browser/components/customizableui/CustomizableUI.sys.mjs ===================================== @@ -65,7 +65,8 @@ var kVersion = 19; /** * The current version for base browser. */ -var kVersionBaseBrowser = 1; +var kVersionBaseBrowser = 2; +const NoScriptId = "_73a6fe31-595d-460b-a920-fcc0f8843232_-browser-action"; /** * Buttons removed from built-ins by version they were removed. kVersion must be @@ -850,6 +851,57 @@ var CustomizableUIInternal = { delete gSavedState.placements["PanelUI-contents"]; delete gSavedState.placements["addon-bar"]; } + + if (currentVersion < 2) { + // Matches against kVersion 19, i.e. when the unified-extensions-button + // was introduced and extensions were moved from the palette to + // AREA_ADDONS. + // For base browser, we want the NoScript addon to be moved from the + // default palette to AREA_NAVBAR, so that if it becomes shown through the + // preference extensions.hideNoScript it will appear in the toolbar. + // If the NoScript addon is already in AREA_NAVBAR, we instead flip the + // extensions.hideNoScript preference so that it remains visible. + // See tor-browser#41581. + const navbarPlacements = + gSavedState.placements[CustomizableUI.AREA_NAVBAR]; + if (navbarPlacements) { + let noScriptVisible = false; + for (const [area, placements] of Object.entries( + gSavedState.placements + )) { + const index = placements.indexOf(NoScriptId); + if (index === -1) { + continue; + } + if (area === CustomizableUI.AREA_ADDONS) { + // Has been placed in the ADDONS area. + // Most likely, this is an alpha or nightly user who received the + // firefox update in a run before this one. In this case, we want to + // match the same behaviour as a stable user: hide the button and + // move it to the NAVBAR instead. + placements.splice(index, 1); + } else { + // It is in an area other than the ADDON (and not in the palette). + noScriptVisible = true; + } + } + if (noScriptVisible) { + // Keep the button where it is and make sure it is visible. + Services.prefs.setBoolPref("extensions.hideNoScript", false); + } else { + // Should appear just before unified-extensions-button, which is + // currently not part of the default placements. + const placeIndex = navbarPlacements.indexOf( + "unified-extensions-button" + ); + if (placeIndex === -1) { + navbarPlacements.push(NoScriptId); + } else { + navbarPlacements.splice(placeIndex, 0, NoScriptId); + } + } + } + } }, _placeNewDefaultWidgetsInArea(aArea) { @@ -3409,7 +3461,17 @@ var CustomizableUIInternal = { CustomizableUI.isWebExtensionWidget(widgetId) && !oldAddonPlacements.includes(widgetId) ) { - this.addWidgetToArea(widgetId, CustomizableUI.AREA_ADDONS); + // When resetting, NoScript goes to the toolbar instead. This matches + // its initial placement anyway. And since the button may be hidden by + // default by extensions.hideNoScript, we want to make sure that if it + // becomes unhidden it is shown rather than in the unified extensions + // panel. See tor-browser#41581. + this.addWidgetToArea( + widgetId, + widgetId === NoScriptId + ? CustomizableUI.AREA_NAVBAR + : CustomizableUI.AREA_ADDONS + ); } } }, ===================================== browser/components/extensions/parent/ext-browserAction.js ===================================== @@ -176,10 +176,6 @@ this.browserAction = class extends ExtensionAPIPersistent { } build() { - // The extension ID for NoScript (WebExtension) - const isNoScript = - this.extension.id === "{73a6fe31-595d-460b-a920-fcc0f8843232}"; - let { extension } = this; let widgetId = makeWidgetId(extension.id); let widget = CustomizableUI.createWidget({ @@ -190,11 +186,7 @@ this.browserAction = class extends ExtensionAPIPersistent { removable: true, label: this.action.getProperty(null, "title"), tooltiptext: this.action.getProperty(null, "title"), - // Do not want to add the NoScript extension to the toolbar by default. - // tor-browser#41736 - defaultArea: isNoScript - ? null - : browserAreas[this.action.getDefaultArea()], + defaultArea: browserAreas[this.action.getDefaultArea()], showInPrivateBrowsing: extension.privateBrowsingAllowed, disallowSubView: true, @@ -282,6 +274,22 @@ this.browserAction = class extends ExtensionAPIPersistent { node.append(button, menuButton); node.viewButton = button; + if (extension.isNoScript) { + // Hide NoScript by default. + // See tor-browser#41581. + const HIDE_NO_SCRIPT_PREF = "extensions.hideNoScript"; + const changeNoScriptVisibility = () => { + node.hidden = Services.prefs.getBoolPref(HIDE_NO_SCRIPT_PREF, true); + }; + // Since we expect the NoScript widget to only be destroyed on exit, + // we do not set up to remove the observer. + Services.prefs.addObserver( + HIDE_NO_SCRIPT_PREF, + changeNoScriptVisibility + ); + changeNoScriptVisibility(); + } + return node; }, ===================================== browser/locales/en-US/browser/base-browser.ftl ===================================== @@ -24,6 +24,11 @@ basebrowser-rfp-restore-window-size-button-ak = R basebrowser-addon-badge-recommended = Mozilla only recommends extensions that meet their standards for security and performance basebrowser-addon-badge-verified = Mozilla has reviewed this extension to meet their standards for security and performance +## Option to show or hide the NoScript extension button/item. +basebrowser-addon-noscript-visibility-label = Toolbar button +basebrowser-addon-noscript-visibility-show = Show +basebrowser-addon-noscript-visibility-hide = Hide + ## About dialog # "Mozilla Firefox" should be treated like a brand and it should be neither translated nor transliterated. ===================================== browser/themes/shared/addons/unified-extensions.css ===================================== @@ -238,3 +238,21 @@ unified-extensions-item > .subviewbutton { border-color: transparent; } } + +/* Extra rule for tor-browser. See tor-browser#41581. + * We want to hide the unified-extensions-button when it is empty. + * However, this button is needed as an anchor for addon notifications. E.g. + * when installing another addon and permissions pop up. + * If we simply marked it as "hidden" then it would not be used as an anchor, so + * the popup would fall back to using the identity button as an anchor instead. + * So instead, we use "visibility: collapse" whilst it is empty *and* it is not + * being used as an anchor (the open attribute is missing). */ +#unified-extensions-button.hide-empty:not([open]) { + visibility: collapse; + /* Ensure getBoundingClientRect().width returns 0. + * Even though this button is collapsed, and therefore should not take up any + * layout space, getBoundingClientRect will still measure the padding. + * If this was not zero, OverflowableToolbar#getOverflowInfo would + * over-measure the children width and would always overflow. */ + padding-inline: 0; +} ===================================== toolkit/components/extensions/Extension.sys.mjs ===================================== @@ -765,6 +765,15 @@ export class ExtensionData { this.eventPagesEnabled = lazy.eventPagesEnabled; } + /** + * Whether this is the NoScript extension. + * + * @type {boolean} + */ + get isNoScript() { + return this.id === "{73a6fe31-595d-460b-a920-fcc0f8843232}"; + } + /** * A factory function that allows the construction of ExtensionData, with * the isPrivileged flag computed asynchronously. @@ -3498,7 +3507,7 @@ export class Extension extends ExtensionData { } // Bug 40253: Explicitly allow NoScript in Private Browsing mode. - if (this.id === "{73a6fe31-595d-460b-a920-fcc0f8843232}") { + if (this.isNoScript) { lazy.ExtensionPermissions.add(this.id, { permissions: [PRIVATE_ALLOWED_PERMISSION], origins: [], ===================================== toolkit/mozapps/extensions/content/aboutaddons.html ===================================== @@ -508,6 +508,32 @@ <div class="addon-detail-sitepermissions"> <addon-sitepermissions-list></addon-sitepermissions-list> </div> +  + <div + class="addon-detail-row addon-detail-row-noscript-visibility" + role="radiogroup" + hidden="hidden" + > + <span + class="addon-noscript-visibility-label" + data-l10n-id="basebrowser-addon-noscript-visibility-label" + ></span> + <div class="addon-detail-actions"> + <label class="radio-container-with-text"> + <input type="radio" name="noscript-visibility" value="show" /> + <span + data-l10n-id="basebrowser-addon-noscript-visibility-show" + ></span> + </label> + <label class="radio-container-with-text"> + <input type="radio" name="noscript-visibility" value="hide" /> + <span + data-l10n-id="basebrowser-addon-noscript-visibility-hide" + ></span> + </label> + </div> + </div> <div class="addon-detail-row addon-detail-row-updates"> <label data-l10n-id="addon-detail-updates-label"></label> <div class="addon-detail-actions"> ===================================== toolkit/mozapps/extensions/content/aboutaddons.js ===================================== @@ -2063,6 +2063,8 @@ class AddonSitePermissionsList extends HTMLElement { } customElements.define("addon-sitepermissions-list", AddonSitePermissionsList); +const HIDE_NO_SCRIPT_PREF = "extensions.hideNoScript"; + class AddonDetails extends HTMLElement { connectedCallback() { if (!this.children.length) { @@ -2070,12 +2072,61 @@ class AddonDetails extends HTMLElement { } this.deck.addEventListener("view-changed", this); this.descriptionShowMoreButton.addEventListener("click", this); + + // If this is for the NoScript extension, we listen for changes in the + // visibility of its toolbar button. + // See tor-browser#41581. + // NOTE: The addon should be set before being connected, so isNoScript will + // return a correct value. + if (this.isNoScript && !this._noScriptVisibilityObserver) { + this._noScriptVisibilityObserver = () => this.updateNoScriptVisibility(); + Services.prefs.addObserver( + HIDE_NO_SCRIPT_PREF, + this._noScriptVisibilityObserver + ); + } } disconnectedCallback() { this.inlineOptions.destroyBrowser(); this.deck.removeEventListener("view-changed", this); this.descriptionShowMoreButton.removeEventListener("click", this); + + if (this._noScriptVisibilityObserver) { + Services.prefs.removeObserver( + HIDE_NO_SCRIPT_PREF, + this._noScriptVisibilityObserver + ); + // Clear in case this is called again, or if connectedCallback is called. + delete this._noScriptVisibilityObserver; + } + } + + /** + * Whether this is a description for the NoScript extension. + * + * @type {boolean} + */ + get isNoScript() { + return this.addon?.id === "{73a6fe31-595d-460b-a920-fcc0f8843232}"; + } + + /** + * Update the shown visibility value for the NoScript extension's toolbar + * button. + */ + updateNoScriptVisibility() { + if (!this.isNoScript) { + return; + } + const visibility = Services.prefs.getBoolPref(HIDE_NO_SCRIPT_PREF, true) + ? "hide" + : "show"; + for (const input of this.querySelectorAll( + ".addon-detail-row-noscript-visibility input" + )) { + input.checked = input.value === visibility; + } } handleEvent(e) { @@ -2271,6 +2322,27 @@ class AddonDetails extends HTMLElement { "upgrade" ); + // If this is the NoScript extension, we want to show an option to change + // the visibility of its toolbar button. + // See tor-browser#41581. + const visibilityRow = this.querySelector( + ".addon-detail-row-noscript-visibility" + ); + visibilityRow.hidden = !this.isNoScript; + if (this.isNoScript) { + // Set up the aria-label for the role="radiogroup". + const visibilityLabel = visibilityRow.querySelector( + ".addon-noscript-visibility-label" + ); + visibilityLabel.id = ExtensionCommon.makeWidgetId( + `${addon.id}-noscript-visibility-label` + ); + visibilityRow.setAttribute("aria-labelledby", visibilityLabel.id); + + // Set the initial displayed value. + this.updateNoScriptVisibility(); + } + if (addon.type != "extension") { // Don't show any private browsing related section for non-extension // addon types, because not relevant or they are either always allowed @@ -2662,6 +2734,11 @@ class AddonCard extends HTMLElement { // Update the card if the add-on isn't active. this.update(); } + } else if (name == "noscript-visibility") { + // Update the NoScript toolbar button visibility. + // See tor-browser#41581. + const hide = e.target.value !== "show"; + Services.prefs.setBoolPref(HIDE_NO_SCRIPT_PREF, hide); } } else if (e.type == "mousedown") { // Open panel on mousedown when the mouse is used. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/2a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/2a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-115.3.1esr-13.0-1] fixup! MB 39: Add home page about:mullvad-browser
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch mullvad-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 2aa3828e by Pier Angelo Vendrame at 2023-10-05T22:38:50+02:00 fixup! MB 39: Add home page about:mullvad-browser MB 243: Make sure about:mullvad-browser is treated as a new tab page - - - - - 1 changed file: - browser/base/content/browser-places.js Changes: ===================================== browser/base/content/browser-places.js ===================================== @@ -1431,7 +1431,7 @@ var BookmarkingUI = { if (newTabURL == "about:blank") { newTabURL = "about:newtab"; } - let newTabURLs = [newTabURL, "about:home"]; + let newTabURLs = [newTabURL, "about:home", "about:mullvad-browser"]; if (PrivateBrowsingUtils.isWindowPrivate(window)) { newTabURLs.push("about:privatebrowsing"); } View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/2aa… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/2aa… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-115.3.1esr-13.0-1] fixup! MB 1: Mullvad Browser branding
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch mullvad-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Mullvad Browser Commits: caf1a83b by Pier Angelo Vendrame at 2023-10-05T22:10:10+02:00 fixup! MB 1: Mullvad Browser branding MB 244: Fix the link to Mullvad Browser Support - - - - - 1 changed file: - toolkit/content/widgets/moz-support-link/moz-support-link.mjs Changes: ===================================== toolkit/content/widgets/moz-support-link/moz-support-link.mjs ===================================== @@ -103,6 +103,12 @@ export default class MozSupportLink extends HTMLAnchorElement { #setHref() { let supportPage = this.getAttribute("support-page") ?? ""; + // Customize the link in about:preferences. + // See mullvad-browser#244 and tor-browser#41910. + if (supportPage === "preferences") { + this.href = "https://mullvad.net/en/help/"; + return; + } let base = MozSupportLink.SUPPORT_URL + supportPage; this.href = this.hasAttribute("utm-content") ? formatUTMParams(this.getAttribute("utm-content"), base) View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/caf… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/caf… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.1esr-13.0-1] 6 commits: fixup! Bug 41736: Customize toolbar for base-browser.
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 197b6fdd by Henry Wilkes at 2023-10-05T20:20:02+01:00 fixup! Bug 41736: Customize toolbar for base-browser. Bug 41736: Stop placing the NoScript button in the palette, and let it go to the toolbar by default when shown. - - - - - 45b58e5a by Henry Wilkes at 2023-10-05T20:20:03+01:00 fixup! Bug 41598: Prevent NoScript from being removed/disabled. Bug 41736: Add a isNoScript property to Extension class. - - - - - ddd31383 by Henry Wilkes at 2023-10-05T20:20:03+01:00 Bug 41736: Hide NoScript extension's toolbar button by default. This hides it from both the toolbar and the unified extensions panel. We also hide the unified-extension-button if the panel would be empty: not including the NoScript button when it is hidden. As a result, this will be hidden by default until a user installs another extension (or shows the NoScript button and unpins it). - - - - - 96e80ac1 by Henry Wilkes at 2023-10-05T20:20:04+01:00 fixup! Firefox preference overrides. Bug 41736: Hide NoScript extension by default. We also hide the unified-extension-button if it would be empty. - - - - - db17a989 by Henry Wilkes at 2023-10-05T21:20:52+01:00 fixup! Bug 41736: Customize toolbar for base-browser. Bug 41581: Keep NoScript button in the toolbar (but hidden) by default. Also includes some migration. - - - - - 9db5d46d by Henry Wilkes at 2023-10-05T21:20:53+01:00 fixup! Base Browser strings Bug 41581: Add strings for changing the visibility of the NoScript toolbar button. - - - - - 9 changed files: - browser/app/profile/001-base-profile.js - browser/base/content/browser-addons.js - browser/components/customizableui/CustomizableUI.sys.mjs - browser/components/extensions/parent/ext-browserAction.js - browser/locales/en-US/browser/base-browser.ftl - browser/themes/shared/addons/unified-extensions.css - toolkit/components/extensions/Extension.sys.mjs - toolkit/mozapps/extensions/content/aboutaddons.html - toolkit/mozapps/extensions/content/aboutaddons.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -220,6 +220,10 @@ pref("privacy.annotate_channels.strict_list.enabled", false); // Disable the Pocket extension (Bug #18886 and #31602) pref("extensions.pocket.enabled", false); +// Custom extensions preferences tor-browser#41581 +pref("extensions.hideNoScript", true); +pref("extensions.hideUnifiedWhenEmpty", true); + // Disable activity stream/"Recommended by Pocket" in about:home (Bug #41029) pref("browser.newtabpage.activity-stream.discoverystream.enabled", false); pref("browser.newtabpage.activity-stream.feeds.section.topstories", false); ===================================== browser/base/content/browser-addons.js ===================================== @@ -26,6 +26,9 @@ XPCOMUtils.defineLazyGetter(lazy, "l10n", function () { ); }); +const HIDE_NO_SCRIPT_PREF = "extensions.hideNoScript"; +const HIDE_UNIFIED_WHEN_EMPTY_PREF = "extensions.hideUnifiedWhenEmpty"; + /** * Mapping of error code -> [error-id, local-error-id] * @@ -1186,6 +1189,18 @@ var gUnifiedExtensions = { gNavToolbox.addEventListener("customizationstarting", this); CustomizableUI.addListener(this); + // Listen out for changes in extensions.hideNoScript and + // extension.hideUnifiedWhenEmpty, which can effect the visibility of the + // unified-extensions-button. + // See tor-browser#41581. + this._hideNoScriptObserver = () => this._updateVisibility(); + Services.prefs.addObserver(HIDE_NO_SCRIPT_PREF, this._hideNoScriptObserver); + Services.prefs.addObserver( + HIDE_UNIFIED_WHEN_EMPTY_PREF, + this._hideNoScriptObserver + ); + this._updateVisibility(); + this._initialized = true; }, @@ -1201,6 +1216,15 @@ var gUnifiedExtensions = { gNavToolbox.removeEventListener("customizationstarting", this); CustomizableUI.removeListener(this); + + Services.prefs.removeObserver( + HIDE_NO_SCRIPT_PREF, + this._hideNoScriptObserver + ); + Services.prefs.removeObserver( + HIDE_UNIFIED_WHEN_EMPTY_PREF, + this._hideNoScriptObserver + ); }, onLocationChange(browser, webProgress, _request, _uri, flags) { @@ -1278,6 +1302,15 @@ var gUnifiedExtensions = { return false; } + // When an extensions is about to be removed, it may still appear in + // getActiveExtensions. + // This is needed for hasExtensionsInPanel, when called through + // onWidgetDestroy when an extension is being removed. + // See tor-browser#41581. + if (extension.hasShutdown) { + return false; + } + // Ignore hidden and extensions that cannot access the current window // (because of PB mode when we are in a private window), since users // cannot do anything with those extensions anyway. @@ -1292,6 +1325,20 @@ var gUnifiedExtensions = { return policies; }, + /** + * Potentially hide the unified-extensions-button if it would be empty. + */ + // See tor-browser#41581. + // The behaviour overlaps with a proposal in mozilla Bug 1778684, which has + // not been implemented, or had much recent activity as of 5th October 2023. + _updateVisibility() { + this.button.classList.toggle( + "hide-empty", + Services.prefs.getBoolPref(HIDE_UNIFIED_WHEN_EMPTY_PREF, true) && + !this.hasExtensionsInPanel() + ); + }, + /** * Returns true when there are active extensions listed/shown in the unified * extensions panel, and false otherwise (e.g. when extensions are pinned in @@ -1300,7 +1347,13 @@ var gUnifiedExtensions = { * @returns {boolean} Whether there are extensions listed in the panel. */ hasExtensionsInPanel() { - const policies = this.getActivePolicies(); + let policies = this.getActivePolicies(); + // If the NoScript button is hidden, we won't count it towards the list of + // extensions in the panel. + // See tor-browser#41581. + if (Services.prefs.getBoolPref(HIDE_NO_SCRIPT_PREF, true)) { + policies = policies.filter(policy => !policy.extension?.isNoScript); + } return !!policies .map(policy => this.browserActionFor(policy)?.widget) @@ -1795,7 +1848,17 @@ var gUnifiedExtensions = { } }, + onWidgetRemoved() { + this._updateVisibility(); + }, + + onWidgetDestroyed() { + this._updateVisibility(); + }, + onWidgetAdded(aWidgetId, aArea, aPosition) { + this._updateVisibility(); + // When we pin a widget to the toolbar from a narrow window, the widget // will be overflowed directly. In this case, we do not want to change the // class name since it is going to be changed by `onWidgetOverflow()` @@ -1811,6 +1874,8 @@ var gUnifiedExtensions = { }, onWidgetOverflow(aNode, aContainer) { + this._updateVisibility(); + // We register a CUI listener for each window so we make sure that we // handle the event for the right window here. if (window !== aNode.ownerGlobal) { @@ -1821,6 +1886,8 @@ var gUnifiedExtensions = { }, onWidgetUnderflow(aNode, aContainer) { + this._updateVisibility(); + // We register a CUI listener for each window so we make sure that we // handle the event for the right window here. if (window !== aNode.ownerGlobal) { ===================================== browser/components/customizableui/CustomizableUI.sys.mjs ===================================== @@ -65,7 +65,8 @@ var kVersion = 19; /** * The current version for base browser. */ -var kVersionBaseBrowser = 1; +var kVersionBaseBrowser = 2; +const NoScriptId = "_73a6fe31-595d-460b-a920-fcc0f8843232_-browser-action"; /** * The current version for tor browser. @@ -858,6 +859,57 @@ var CustomizableUIInternal = { delete gSavedState.placements["PanelUI-contents"]; delete gSavedState.placements["addon-bar"]; } + + if (currentVersion < 2) { + // Matches against kVersion 19, i.e. when the unified-extensions-button + // was introduced and extensions were moved from the palette to + // AREA_ADDONS. + // For base browser, we want the NoScript addon to be moved from the + // default palette to AREA_NAVBAR, so that if it becomes shown through the + // preference extensions.hideNoScript it will appear in the toolbar. + // If the NoScript addon is already in AREA_NAVBAR, we instead flip the + // extensions.hideNoScript preference so that it remains visible. + // See tor-browser#41581. + const navbarPlacements = + gSavedState.placements[CustomizableUI.AREA_NAVBAR]; + if (navbarPlacements) { + let noScriptVisible = false; + for (const [area, placements] of Object.entries( + gSavedState.placements + )) { + const index = placements.indexOf(NoScriptId); + if (index === -1) { + continue; + } + if (area === CustomizableUI.AREA_ADDONS) { + // Has been placed in the ADDONS area. + // Most likely, this is an alpha or nightly user who received the + // firefox update in a run before this one. In this case, we want to + // match the same behaviour as a stable user: hide the button and + // move it to the NAVBAR instead. + placements.splice(index, 1); + } else { + // It is in an area other than the ADDON (and not in the palette). + noScriptVisible = true; + } + } + if (noScriptVisible) { + // Keep the button where it is and make sure it is visible. + Services.prefs.setBoolPref("extensions.hideNoScript", false); + } else { + // Should appear just before unified-extensions-button, which is + // currently not part of the default placements. + const placeIndex = navbarPlacements.indexOf( + "unified-extensions-button" + ); + if (placeIndex === -1) { + navbarPlacements.push(NoScriptId); + } else { + navbarPlacements.splice(placeIndex, 0, NoScriptId); + } + } + } + } }, _updateForTorBrowser() { @@ -3441,7 +3493,17 @@ var CustomizableUIInternal = { CustomizableUI.isWebExtensionWidget(widgetId) && !oldAddonPlacements.includes(widgetId) ) { - this.addWidgetToArea(widgetId, CustomizableUI.AREA_ADDONS); + // When resetting, NoScript goes to the toolbar instead. This matches + // its initial placement anyway. And since the button may be hidden by + // default by extensions.hideNoScript, we want to make sure that if it + // becomes unhidden it is shown rather than in the unified extensions + // panel. See tor-browser#41581. + this.addWidgetToArea( + widgetId, + widgetId === NoScriptId + ? CustomizableUI.AREA_NAVBAR + : CustomizableUI.AREA_ADDONS + ); } } }, ===================================== browser/components/extensions/parent/ext-browserAction.js ===================================== @@ -176,10 +176,6 @@ this.browserAction = class extends ExtensionAPIPersistent { } build() { - // The extension ID for NoScript (WebExtension) - const isNoScript = - this.extension.id === "{73a6fe31-595d-460b-a920-fcc0f8843232}"; - let { extension } = this; let widgetId = makeWidgetId(extension.id); let widget = CustomizableUI.createWidget({ @@ -190,11 +186,7 @@ this.browserAction = class extends ExtensionAPIPersistent { removable: true, label: this.action.getProperty(null, "title"), tooltiptext: this.action.getProperty(null, "title"), - // Do not want to add the NoScript extension to the toolbar by default. - // tor-browser#41736 - defaultArea: isNoScript - ? null - : browserAreas[this.action.getDefaultArea()], + defaultArea: browserAreas[this.action.getDefaultArea()], showInPrivateBrowsing: extension.privateBrowsingAllowed, disallowSubView: true, @@ -282,6 +274,22 @@ this.browserAction = class extends ExtensionAPIPersistent { node.append(button, menuButton); node.viewButton = button; + if (extension.isNoScript) { + // Hide NoScript by default. + // See tor-browser#41581. + const HIDE_NO_SCRIPT_PREF = "extensions.hideNoScript"; + const changeNoScriptVisibility = () => { + node.hidden = Services.prefs.getBoolPref(HIDE_NO_SCRIPT_PREF, true); + }; + // Since we expect the NoScript widget to only be destroyed on exit, + // we do not set up to remove the observer. + Services.prefs.addObserver( + HIDE_NO_SCRIPT_PREF, + changeNoScriptVisibility + ); + changeNoScriptVisibility(); + } + return node; }, ===================================== browser/locales/en-US/browser/base-browser.ftl ===================================== @@ -24,6 +24,11 @@ basebrowser-rfp-restore-window-size-button-ak = R basebrowser-addon-badge-recommended = Mozilla only recommends extensions that meet their standards for security and performance basebrowser-addon-badge-verified = Mozilla has reviewed this extension to meet their standards for security and performance +## Option to show or hide the NoScript extension button/item. +basebrowser-addon-noscript-visibility-label = Toolbar button +basebrowser-addon-noscript-visibility-show = Show +basebrowser-addon-noscript-visibility-hide = Hide + ## About dialog # "Mozilla Firefox" should be treated like a brand and it should be neither translated nor transliterated. ===================================== browser/themes/shared/addons/unified-extensions.css ===================================== @@ -238,3 +238,21 @@ unified-extensions-item > .subviewbutton { border-color: transparent; } } + +/* Extra rule for tor-browser. See tor-browser#41581. + * We want to hide the unified-extensions-button when it is empty. + * However, this button is needed as an anchor for addon notifications. E.g. + * when installing another addon and permissions pop up. + * If we simply marked it as "hidden" then it would not be used as an anchor, so + * the popup would fall back to using the identity button as an anchor instead. + * So instead, we use "visibility: collapse" whilst it is empty *and* it is not + * being used as an anchor (the open attribute is missing). */ +#unified-extensions-button.hide-empty:not([open]) { + visibility: collapse; + /* Ensure getBoundingClientRect().width returns 0. + * Even though this button is collapsed, and therefore should not take up any + * layout space, getBoundingClientRect will still measure the padding. + * If this was not zero, OverflowableToolbar#getOverflowInfo would + * over-measure the children width and would always overflow. */ + padding-inline: 0; +} ===================================== toolkit/components/extensions/Extension.sys.mjs ===================================== @@ -765,6 +765,15 @@ export class ExtensionData { this.eventPagesEnabled = lazy.eventPagesEnabled; } + /** + * Whether this is the NoScript extension. + * + * @type {boolean} + */ + get isNoScript() { + return this.id === "{73a6fe31-595d-460b-a920-fcc0f8843232}"; + } + /** * A factory function that allows the construction of ExtensionData, with * the isPrivileged flag computed asynchronously. @@ -3498,7 +3507,7 @@ export class Extension extends ExtensionData { } // Bug 40253: Explicitly allow NoScript in Private Browsing mode. - if (this.id === "{73a6fe31-595d-460b-a920-fcc0f8843232}") { + if (this.isNoScript) { lazy.ExtensionPermissions.add(this.id, { permissions: [PRIVATE_ALLOWED_PERMISSION], origins: [], ===================================== toolkit/mozapps/extensions/content/aboutaddons.html ===================================== @@ -508,6 +508,32 @@ <div class="addon-detail-sitepermissions"> <addon-sitepermissions-list></addon-sitepermissions-list> </div> +  + <div + class="addon-detail-row addon-detail-row-noscript-visibility" + role="radiogroup" + hidden="hidden" + > + <span + class="addon-noscript-visibility-label" + data-l10n-id="basebrowser-addon-noscript-visibility-label" + ></span> + <div class="addon-detail-actions"> + <label class="radio-container-with-text"> + <input type="radio" name="noscript-visibility" value="show" /> + <span + data-l10n-id="basebrowser-addon-noscript-visibility-show" + ></span> + </label> + <label class="radio-container-with-text"> + <input type="radio" name="noscript-visibility" value="hide" /> + <span + data-l10n-id="basebrowser-addon-noscript-visibility-hide" + ></span> + </label> + </div> + </div> <div class="addon-detail-row addon-detail-row-updates"> <label data-l10n-id="addon-detail-updates-label"></label> <div class="addon-detail-actions"> ===================================== toolkit/mozapps/extensions/content/aboutaddons.js ===================================== @@ -2063,6 +2063,8 @@ class AddonSitePermissionsList extends HTMLElement { } customElements.define("addon-sitepermissions-list", AddonSitePermissionsList); +const HIDE_NO_SCRIPT_PREF = "extensions.hideNoScript"; + class AddonDetails extends HTMLElement { connectedCallback() { if (!this.children.length) { @@ -2070,12 +2072,61 @@ class AddonDetails extends HTMLElement { } this.deck.addEventListener("view-changed", this); this.descriptionShowMoreButton.addEventListener("click", this); + + // If this is for the NoScript extension, we listen for changes in the + // visibility of its toolbar button. + // See tor-browser#41581. + // NOTE: The addon should be set before being connected, so isNoScript will + // return a correct value. + if (this.isNoScript && !this._noScriptVisibilityObserver) { + this._noScriptVisibilityObserver = () => this.updateNoScriptVisibility(); + Services.prefs.addObserver( + HIDE_NO_SCRIPT_PREF, + this._noScriptVisibilityObserver + ); + } } disconnectedCallback() { this.inlineOptions.destroyBrowser(); this.deck.removeEventListener("view-changed", this); this.descriptionShowMoreButton.removeEventListener("click", this); + + if (this._noScriptVisibilityObserver) { + Services.prefs.removeObserver( + HIDE_NO_SCRIPT_PREF, + this._noScriptVisibilityObserver + ); + // Clear in case this is called again, or if connectedCallback is called. + delete this._noScriptVisibilityObserver; + } + } + + /** + * Whether this is a description for the NoScript extension. + * + * @type {boolean} + */ + get isNoScript() { + return this.addon?.id === "{73a6fe31-595d-460b-a920-fcc0f8843232}"; + } + + /** + * Update the shown visibility value for the NoScript extension's toolbar + * button. + */ + updateNoScriptVisibility() { + if (!this.isNoScript) { + return; + } + const visibility = Services.prefs.getBoolPref(HIDE_NO_SCRIPT_PREF, true) + ? "hide" + : "show"; + for (const input of this.querySelectorAll( + ".addon-detail-row-noscript-visibility input" + )) { + input.checked = input.value === visibility; + } } handleEvent(e) { @@ -2271,6 +2322,27 @@ class AddonDetails extends HTMLElement { "upgrade" ); + // If this is the NoScript extension, we want to show an option to change + // the visibility of its toolbar button. + // See tor-browser#41581. + const visibilityRow = this.querySelector( + ".addon-detail-row-noscript-visibility" + ); + visibilityRow.hidden = !this.isNoScript; + if (this.isNoScript) { + // Set up the aria-label for the role="radiogroup". + const visibilityLabel = visibilityRow.querySelector( + ".addon-noscript-visibility-label" + ); + visibilityLabel.id = ExtensionCommon.makeWidgetId( + `${addon.id}-noscript-visibility-label` + ); + visibilityRow.setAttribute("aria-labelledby", visibilityLabel.id); + + // Set the initial displayed value. + this.updateNoScriptVisibility(); + } + if (addon.type != "extension") { // Don't show any private browsing related section for non-extension // addon types, because not relevant or they are either always allowed @@ -2662,6 +2734,11 @@ class AddonCard extends HTMLElement { // Update the card if the add-on isn't active. this.update(); } + } else if (name == "noscript-visibility") { + // Update the NoScript toolbar button visibility. + // See tor-browser#41581. + const hide = e.target.value !== "show"; + Services.prefs.setBoolPref(HIDE_NO_SCRIPT_PREF, hide); } } else if (e.type == "mousedown") { // Open panel on mousedown when the mouse is used. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/8ec6aa… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/8ec6aa… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-115.3.1esr-13.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch base-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: e8fd5db4 by Pier Angelo Vendrame at 2023-10-05T21:57:51+02:00 fixup! Firefox preference overrides. Bug 41576: Make sure weather and addon suggestions stay off. Better to set them already for the next ESR. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -143,6 +143,12 @@ pref("browser.search.suggest.enabled.private", false); pref("browser.urlbar.suggest.searches", false); pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false); pref("browser.urlbar.suggest.quicksuggest.sponsored", false); +// tor-browser#41576: Do not suggest weather and addons. +pref("browser.urlbar.suggest.addons", false); +pref("browser.urlbar.addons.featureGate", false); +pref("browser.urlbar.suggest.weather", false); +pref("browser.urlbar.weather.featureGate", false); +// tor-browser#41691: Hide "Firefox Suggets" in the UI pref("browser.urlbar.groupLabels.enabled", false); pref("browser.safebrowsing.malware.enabled", false); pref("browser.safebrowsing.phishing.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/e8fd5db… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/e8fd5db… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-115.3.1esr-13.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch mullvad-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 3c403c7b by Pier Angelo Vendrame at 2023-10-05T21:56:05+02:00 fixup! Firefox preference overrides. Bug 41576: Make sure weather and addon suggestions stay off. Better to set them already for the next ESR. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -143,6 +143,12 @@ pref("browser.search.suggest.enabled.private", false); pref("browser.urlbar.suggest.searches", false); pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false); pref("browser.urlbar.suggest.quicksuggest.sponsored", false); +// tor-browser#41576: Do not suggest weather and addons. +pref("browser.urlbar.suggest.addons", false); +pref("browser.urlbar.addons.featureGate", false); +pref("browser.urlbar.suggest.weather", false); +pref("browser.urlbar.weather.featureGate", false); +// tor-browser#41691: Hide "Firefox Suggets" in the UI pref("browser.urlbar.groupLabels.enabled", false); pref("browser.safebrowsing.malware.enabled", false); pref("browser.safebrowsing.phishing.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/3c4… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/3c4… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-115.3.1esr-13.0-1] fixup! Bug 40926: Implemented the New Identity feature
by ma1 (＠ma1) 05 Oct '23

05 Oct '23

ma1 pushed to branch mullvad-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 56b44ebf by hackademix at 2023-10-05T19:06:10+02:00 fixup! Bug 40926: Implemented the New Identity feature Bug 41765: Force about:privatebrowsing in new identity window. - - - - - 2 changed files: - browser/base/content/browser.js - browser/components/newidentity/content/newidentity.js Changes: ===================================== browser/base/content/browser.js ===================================== @@ -4523,7 +4523,7 @@ function OpenBrowserWindow(options) { var extraFeatures = ""; if (options && options.private && PrivateBrowsingUtils.enabled) { extraFeatures = ",private"; - if (!PrivateBrowsingUtils.permanentPrivateBrowsing) { + if (!PrivateBrowsingUtils.permanentPrivateBrowsing || options.private === "no-home") { // Force the new window to load about:privatebrowsing instead of the default home page defaultArgs = "about:privatebrowsing"; } ===================================== browser/components/newidentity/content/newidentity.js ===================================== @@ -433,11 +433,8 @@ XPCOMUtils.defineLazyGetter(this, "NewIdentityButton", () => { openNewWindow() { logger.info("Opening a new window"); return new Promise(resolve => { - // Open a new window with the default homepage - // We could pass {private: true} but we do not because we enforce - // browser.privatebrowsing.autostart = true. - // What about users that change settings? - const win = OpenBrowserWindow(); + // Open a new window forcing the about:privatebrowsing page (tor-browser#41765) + const win = OpenBrowserWindow({private: "no-home"}); // This mechanism to know when the new window is ready is used by // OpenBrowserWindow itself (see its definition in browser.js). win.addEventListener("MozAfterPaint", () => resolve(), { once: true }); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/56b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/56b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-115.3.1esr-13.0-1] fixup! Bug 40926: Implemented the New Identity feature
by ma1 (＠ma1) 05 Oct '23

05 Oct '23

ma1 pushed to branch base-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: b5574131 by hackademix at 2023-10-05T19:03:10+02:00 fixup! Bug 40926: Implemented the New Identity feature Bug 41765: Force about:privatebrowsing in new identity window. - - - - - 2 changed files: - browser/base/content/browser.js - browser/components/newidentity/content/newidentity.js Changes: ===================================== browser/base/content/browser.js ===================================== @@ -4521,7 +4521,7 @@ function OpenBrowserWindow(options) { var extraFeatures = ""; if (options && options.private && PrivateBrowsingUtils.enabled) { extraFeatures = ",private"; - if (!PrivateBrowsingUtils.permanentPrivateBrowsing) { + if (!PrivateBrowsingUtils.permanentPrivateBrowsing || options.private === "no-home") { // Force the new window to load about:privatebrowsing instead of the default home page defaultArgs = "about:privatebrowsing"; } ===================================== browser/components/newidentity/content/newidentity.js ===================================== @@ -433,11 +433,8 @@ XPCOMUtils.defineLazyGetter(this, "NewIdentityButton", () => { openNewWindow() { logger.info("Opening a new window"); return new Promise(resolve => { - // Open a new window with the default homepage - // We could pass {private: true} but we do not because we enforce - // browser.privatebrowsing.autostart = true. - // What about users that change settings? - const win = OpenBrowserWindow(); + // Open a new window forcing the about:privatebrowsing page (tor-browser#41765) + const win = OpenBrowserWindow({private: "no-home"}); // This mechanism to know when the new window is ready is used by // OpenBrowserWindow itself (see its definition in browser.js). win.addEventListener("MozAfterPaint", () => resolve(), { once: true }); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/b557413… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/b557413… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.1esr-13.0-1] 2 commits: fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in...
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 6fe8a2bf by Pier Angelo Vendrame at 2023-10-05T18:54:20+02:00 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection Bug 42155: Drop the unused code for the old bridge removal warning - - - - - 8ec6aad8 by Pier Angelo Vendrame at 2023-10-05T18:54:22+02:00 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection Bug 41974: Update the rule for de-emphasized text in bridge addresses - - - - - 2 changed files: - browser/components/torpreferences/content/connectionPane.js - browser/components/torpreferences/content/torPreferences.css Changes: ===================================== browser/components/torpreferences/content/connectionPane.js ===================================== @@ -125,13 +125,6 @@ const gConnectionPane = (function () { requestButton: "#torPreferences-addBridge-buttonRequestBridge", enterLabel: "#torPreferences-addBridge-labelEnterBridge", enterButton: "#torPreferences-addBridge-buttonEnterBridge", - removeOverlay: "#bridge-remove-overlay", - removeModal: "#bridge-remove-modal", - removeDismiss: "#bridge-remove-dismiss", - removeQuestion: "#bridge-remove-question", - removeWarning: "#bridge-remove-warning", - removeConfirm: "#bridge-remove-confirm", - removeCancel: "#bridge-remove-cancel", }, advanced: { header: "h1#torPreferences-advanced-header", ===================================== browser/components/torpreferences/content/torPreferences.css ===================================== @@ -332,7 +332,7 @@ input.torPreferences-bridgeCard-addr { width: 100%; - color: var(--in-content-deemphasized-text); + color: var(--text-color-deemphasized); } .torPreferences-bridgeCard-leranMoreBox { @@ -511,94 +511,3 @@ textarea#torPreferences-torDialog-textarea { /* 10 lines */ min-height: 20em; } - -/* Bridge remove overlay */ -#bridge-remove-overlay { - position: fixed; - display: flex; - align-items: center; - justify-content: center; - top: 0; - inset: 0; - width: 100%; - height: 100%; - z-index: 1; - background-color: rgba(0, 0, 0, 0.5); -} - -#bridge-remove-overlay.hidden { - display: none; -} - -#bridge-remove-modal { - position: relative; - min-width: 250px; - max-width: 500px; - min-height: 200px; - z-index: 2; - text-align: center; - background: var(--in-content-page-background); - box-shadow: var(--shadow-30); -} - -#bridge-remove-dismiss { - position: absolute; - top: 16px; - inset-inline-end: 16px; - width: 16px; - height: 16px; - fill: currentColor; - -moz-context-properties: fill; -} - -#bridge-remove-dismiss:hover { - background-color: var(--in-content-button-background-hover); - color: var(--in-content-button-text-color-hover); - border: 1px solid var(--in-content-button-border-color-hover); - border-radius: 4px; -} - -#bridge-remove-dismiss:hover:active { - background-color: var(--in-content-button-background-active); -} - -#bridge-remove-icon { - width: 40px; - height: 40px; - background-image: url("chrome://global/skin/icons/warning.svg"); - background-size: 40px; - margin: 16px auto; - fill: currentColor; - -moz-context-properties: fill; -} - -#bridge-remove-question { - font-size: 150%; -} - -#bridge-remove-warning { - color: var(--in-content-deemphasized-text); -} - -#bridge-remove-buttonbar { - padding: 16px 32px; -} - -#bridge-remove-buttonbar button { - min-width: 140px; -} - -#bridge-remove-confirm { - background: var(--in-content-danger-button-background); - color: var(--in-content-primary-button-text-color); -} - -#bridge-remove-confirm:hover { - background: var(--in-content-danger-button-background-hover); - color: var(--in-content-primary-button-text-color-hover); - border-color: var(--in-content-primary-button-border-hover); -} - -#bridge-remove-confirm:hover:active { - background: var(--in-content-danger-button-background-active); -} View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/c62d34… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/c62d34… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.1esr-13.0-1] fixup! Bug 40926: Implemented the New Identity feature
by ma1 (＠ma1) 05 Oct '23

05 Oct '23

ma1 pushed to branch tor-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: c62d3405 by hackademix at 2023-10-05T17:34:00+02:00 fixup! Bug 40926: Implemented the New Identity feature Bug 41765: Force about:privatebrowsing in new identity window. - - - - - 2 changed files: - browser/base/content/browser.js - browser/components/newidentity/content/newidentity.js Changes: ===================================== browser/base/content/browser.js ===================================== @@ -4585,7 +4585,7 @@ function OpenBrowserWindow(options) { var extraFeatures = ""; if (options && options.private && PrivateBrowsingUtils.enabled) { extraFeatures = ",private"; - if (!PrivateBrowsingUtils.permanentPrivateBrowsing) { + if (!PrivateBrowsingUtils.permanentPrivateBrowsing || options.private === "no-home") { // Force the new window to load about:privatebrowsing instead of the default home page defaultArgs = "about:privatebrowsing"; } ===================================== browser/components/newidentity/content/newidentity.js ===================================== @@ -433,11 +433,8 @@ XPCOMUtils.defineLazyGetter(this, "NewIdentityButton", () => { openNewWindow() { logger.info("Opening a new window"); return new Promise(resolve => { - // Open a new window with the default homepage - // We could pass {private: true} but we do not because we enforce - // browser.privatebrowsing.autostart = true. - // What about users that change settings? - const win = OpenBrowserWindow(); + // Open a new window forcing the about:privatebrowsing page (tor-browser#41765) + const win = OpenBrowserWindow({private: "no-home"}); // This mechanism to know when the new window is ready is used by // OpenBrowserWindow itself (see its definition in browser.js). win.addEventListener("MozAfterPaint", () => resolve(), { once: true }); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/c62d340… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/c62d340… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.1esr-13.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 251bec3a by Pier Angelo Vendrame at 2023-10-05T14:36:34+02:00 fixup! Firefox preference overrides. Bug 41576: Make sure weather and addon suggestions stay off. Better to set them already for the next ESR. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -143,6 +143,12 @@ pref("browser.search.suggest.enabled.private", false); pref("browser.urlbar.suggest.searches", false); pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false); pref("browser.urlbar.suggest.quicksuggest.sponsored", false); +// tor-browser#41576: Do not suggest weather and addons. +pref("browser.urlbar.suggest.addons", false); +pref("browser.urlbar.addons.featureGate", false); +pref("browser.urlbar.suggest.weather", false); +pref("browser.urlbar.weather.featureGate", false); +// tor-browser#41691: Hide "Firefox Suggets" in the UI pref("browser.urlbar.groupLabels.enabled", false); pref("browser.safebrowsing.malware.enabled", false); pref("browser.safebrowsing.phishing.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/251bec3… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/251bec3… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-13.0] Bug 40940: Change position of the `install|portable` in the windows filenames
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch maint-13.0 at The Tor Project / Applications / tor-browser-build Commits: b4f9a5fd by Nicolas Vigier at 2023-10-05T09:10:41+02:00 Bug 40940: Change position of the `install|portable` in the windows filenames This is also fixing the download-windows-*.json files, which were missing since the filename change (for now, we only includ the `portable` build). - - - - - 2 changed files: - projects/browser/build - tools/update-responses/update_responses Changes: ===================================== projects/browser/build ===================================== @@ -400,11 +400,11 @@ cd $distdir makensis browser-portable.nsi # Working around NSIS braindamage python3 $rootdir/pe_checksum_fix.py browser-install.exe - mv browser-install.exe $OUTDIR/[% c("var/project-name") %]-portable-[% c("var/osname") %]-[% c("var/torbrowser_version") %].exe + mv browser-install.exe $OUTDIR/[% c("var/project-name") %]-[% c("var/osname") %]-portable-[% c("var/torbrowser_version") %].exe [% IF c('var/mullvad-browser') -%] makensis browser-system.nsi python3 $rootdir/pe_checksum_fix.py browser-install.exe - mv browser-install.exe $OUTDIR/[% c("var/project-name") %]-install-[% c("var/osname") %]-[% c("var/torbrowser_version") %].exe + mv browser-install.exe $OUTDIR/[% c("var/project-name") %]-[% c("var/osname") %]-install-[% c("var/torbrowser_version") %].exe [% END -%] popd [% END %] ===================================== tools/update-responses/update_responses ===================================== @@ -138,9 +138,9 @@ sub get_version_downloads { $os = 'macos'; } elsif ($file =~ m/^$config->{appname_bundle}-(linux-i686|linux-x86_64)-${version}.tar.xz$/) { $os = $1; - } elsif ($file =~ m/^$config->{appname_bundle}-windows-x86_64-${version}.exe$/) { + } elsif ($file =~ m/^$config->{appname_bundle}-windows-x86_64-portable-${version}.exe$/) { $os = 'win64'; - } elsif ($file =~ m/^$config->{appname_bundle}-windows-i686-${version}.exe$/) { + } elsif ($file =~ m/^$config->{appname_bundle}-windows-i686-portable-${version}.exe$/) { $os = 'win32'; } else { next; @@ -167,7 +167,7 @@ sub get_perplatform_downloads { $os = 'macos'; } elsif ($file =~ m/^$config->{appname_bundle}-(linux-i686|linux-86_64)-${version}.tar.xz$/) { $os = $1; - } elsif ($file =~ m/^$config->{appname_bundle}-(windows-i686|windows-86_64)-${version}.exe$/) { + } elsif ($file =~ m/^$config->{appname_bundle}-(windows-i686|windows-86_64)-portable-${version}.exe$/) { $os = $1; } elsif ($file =~ m/^$config->{appname_bundle}-(android-armv7|android-x86|android-x86_64|android-aarch64)-${version}.apk$/) { $os = $1; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40940: Change position of the `install|portable` in the windows filenames
by boklm (＠boklm) 05 Oct '23

05 Oct '23

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: b4f9a5fd by Nicolas Vigier at 2023-10-05T09:10:41+02:00 Bug 40940: Change position of the `install|portable` in the windows filenames This is also fixing the download-windows-*.json files, which were missing since the filename change (for now, we only includ the `portable` build). - - - - - 2 changed files: - projects/browser/build - tools/update-responses/update_responses Changes: ===================================== projects/browser/build ===================================== @@ -400,11 +400,11 @@ cd $distdir makensis browser-portable.nsi # Working around NSIS braindamage python3 $rootdir/pe_checksum_fix.py browser-install.exe - mv browser-install.exe $OUTDIR/[% c("var/project-name") %]-portable-[% c("var/osname") %]-[% c("var/torbrowser_version") %].exe + mv browser-install.exe $OUTDIR/[% c("var/project-name") %]-[% c("var/osname") %]-portable-[% c("var/torbrowser_version") %].exe [% IF c('var/mullvad-browser') -%] makensis browser-system.nsi python3 $rootdir/pe_checksum_fix.py browser-install.exe - mv browser-install.exe $OUTDIR/[% c("var/project-name") %]-install-[% c("var/osname") %]-[% c("var/torbrowser_version") %].exe + mv browser-install.exe $OUTDIR/[% c("var/project-name") %]-[% c("var/osname") %]-install-[% c("var/torbrowser_version") %].exe [% END -%] popd [% END %] ===================================== tools/update-responses/update_responses ===================================== @@ -138,9 +138,9 @@ sub get_version_downloads { $os = 'macos'; } elsif ($file =~ m/^$config->{appname_bundle}-(linux-i686|linux-x86_64)-${version}.tar.xz$/) { $os = $1; - } elsif ($file =~ m/^$config->{appname_bundle}-windows-x86_64-${version}.exe$/) { + } elsif ($file =~ m/^$config->{appname_bundle}-windows-x86_64-portable-${version}.exe$/) { $os = 'win64'; - } elsif ($file =~ m/^$config->{appname_bundle}-windows-i686-${version}.exe$/) { + } elsif ($file =~ m/^$config->{appname_bundle}-windows-i686-portable-${version}.exe$/) { $os = 'win32'; } else { next; @@ -167,7 +167,7 @@ sub get_perplatform_downloads { $os = 'macos'; } elsif ($file =~ m/^$config->{appname_bundle}-(linux-i686|linux-86_64)-${version}.tar.xz$/) { $os = $1; - } elsif ($file =~ m/^$config->{appname_bundle}-(windows-i686|windows-86_64)-${version}.exe$/) { + } elsif ($file =~ m/^$config->{appname_bundle}-(windows-i686|windows-86_64)-portable-${version}.exe$/) { $os = $1; } elsif ($file =~ m/^$config->{appname_bundle}-(android-armv7|android-x86|android-x86_64|android-aarch64)-${version}.apk$/) { $os = $1; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-115.3.1esr-13.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch mullvad-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 191e2c63 by Pier Angelo Vendrame at 2023-10-05T08:55:16+02:00 fixup! Firefox preference overrides. Bug 41496 (part 2): Pref review for 115/13.0. Added a couple of prefs that were suggested in the issue and I initially missed. Bug 42147: Add browser.helperApps.deleteTempFileOnExit to our profile - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -60,6 +60,11 @@ pref("browser.download.useDownloadDir", false); pref("browser.download.always_ask_before_handling_new_types", true); pref("browser.download.manager.addToRecentDocs", false); pref("browser.download.start_downloads_in_tmp_dir", true); +// tor-browser#42147: Always delete temporary files, also on macOS (this pref is +// already true for other platforms). +// Also, this always happens in PBM. If not in PBM, requires +// browser.download.start_downloads_in_tmp_dir to be true too. +pref("browser.helperApps.deleteTempFileOnExit", true); // Prevent download stuffing / DOS (tor-browser#41764) pref("browser.download.enable_spam_prevention", true); @@ -74,7 +79,7 @@ pref("signon.autofillForms", false, locked); pref("browser.sessionstore.privacy_level", 2); // Use the in-memory media cache and increase its maximum size (#29120) pref("browser.privatebrowsing.forceMediaMemoryCache", true); -pref("media.memory_cache_max_size", 16384); +pref("media.memory_cache_max_size", 65536); // Disable restore in case of crash (tor-browser#41503) // This should not be needed in PBM, but we added it anyway like other options. pref("browser.sessionstore.resume_from_crash", false); @@ -182,6 +187,8 @@ pref("default-browser-agent.enabled", false); #endif // Disable sync by default pref("identity.fxaccounts.enabled", false); +// Blank the sync URL as a defense in depth (added with tor-browser#41496) +pref("identity.sync.tokenserver.uri", ""); // Never sync with other browsers pref("services.sync.engine.addons", false); pref("services.sync.engine.addresses", false); @@ -373,6 +380,9 @@ pref("dom.textMetrics.fontBoundingBox.enabled", false); pref("pdfjs.enableScripting", false); // Bug 40057: Ensure system colors are not used for CSS4 colors pref("browser.display.use_system_colors", false); +// Enforce non-native widget theme (true by default, defense in depth). +// Provides a uniform look and feel across platforms. Added with tor-browser#41496. +pref("widget.non-native-theme.enabled", true); // tor-browser#41943: lock and revisit after it gets flipped to true in stable Firefox pref("javascript.options.spectre.disable_for_isolated_content", false, locked); @@ -517,6 +527,12 @@ pref("network.process.enabled", false); // Extension support pref("extensions.autoDisableScopes", 0); +// Only load extensions from the application and user profile. +// Do not load from the user directory (AddonManager.SCOPE_USER=2, which is +// shared between profiles, e.g., %appdata%\Mozilla\Extensions\ on Windows, or +// ~/.mozilla/extensions on Linux for Firefox), and do not load from system +// directories/the Windows registry (AddonManager.SCOPE_SYSTEM=8). +// More information: https://archive.ph/DYjAM pref("extensions.enabledScopes", 5); // AddonManager.SCOPE_PROFILE=1 | AddonManager.SCOPE_APPLICATION=4 // We don't know what extensions Mozilla is advertising to our users and we // don't want to have some random Google Analytics script running either on the View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/191… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/191… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-115.3.1esr-13.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch base-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 6063cd9b by Pier Angelo Vendrame at 2023-10-05T08:54:46+02:00 fixup! Firefox preference overrides. Bug 41496 (part 2): Pref review for 115/13.0. Added a couple of prefs that were suggested in the issue and I initially missed. Bug 42147: Add browser.helperApps.deleteTempFileOnExit to our profile - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -60,6 +60,11 @@ pref("browser.download.useDownloadDir", false); pref("browser.download.always_ask_before_handling_new_types", true); pref("browser.download.manager.addToRecentDocs", false); pref("browser.download.start_downloads_in_tmp_dir", true); +// tor-browser#42147: Always delete temporary files, also on macOS (this pref is +// already true for other platforms). +// Also, this always happens in PBM. If not in PBM, requires +// browser.download.start_downloads_in_tmp_dir to be true too. +pref("browser.helperApps.deleteTempFileOnExit", true); // Prevent download stuffing / DOS (tor-browser#41764) pref("browser.download.enable_spam_prevention", true); @@ -74,7 +79,7 @@ pref("signon.autofillForms", false); pref("browser.sessionstore.privacy_level", 2); // Use the in-memory media cache and increase its maximum size (#29120) pref("browser.privatebrowsing.forceMediaMemoryCache", true); -pref("media.memory_cache_max_size", 16384); +pref("media.memory_cache_max_size", 65536); // Disable restore in case of crash (tor-browser#41503) // This should not be needed in PBM, but we added it anyway like other options. pref("browser.sessionstore.resume_from_crash", false); @@ -182,6 +187,8 @@ pref("default-browser-agent.enabled", false); #endif // Disable sync by default pref("identity.fxaccounts.enabled", false); +// Blank the sync URL as a defense in depth (added with tor-browser#41496) +pref("identity.sync.tokenserver.uri", ""); // Never sync with other browsers pref("services.sync.engine.addons", false); pref("services.sync.engine.addresses", false); @@ -374,6 +381,9 @@ pref("dom.textMetrics.fontBoundingBox.enabled", false); pref("pdfjs.enableScripting", false); // Bug 40057: Ensure system colors are not used for CSS4 colors pref("browser.display.use_system_colors", false); +// Enforce non-native widget theme (true by default, defense in depth). +// Provides a uniform look and feel across platforms. Added with tor-browser#41496. +pref("widget.non-native-theme.enabled", true); // tor-browser#41943: lock and revisit after it gets flipped to true in stable Firefox pref("javascript.options.spectre.disable_for_isolated_content", false, locked); @@ -519,6 +529,12 @@ pref("network.process.enabled", false); // Extension support pref("extensions.autoDisableScopes", 0); +// Only load extensions from the application and user profile. +// Do not load from the user directory (AddonManager.SCOPE_USER=2, which is +// shared between profiles, e.g., %appdata%\Mozilla\Extensions\ on Windows, or +// ~/.mozilla/extensions on Linux for Firefox), and do not load from system +// directories/the Windows registry (AddonManager.SCOPE_SYSTEM=8). +// More information: https://archive.ph/DYjAM pref("extensions.enabledScopes", 5); // AddonManager.SCOPE_PROFILE=1 | AddonManager.SCOPE_APPLICATION=4 // We don't know what extensions Mozilla is advertising to our users and we // don't want to have some random Google Analytics script running either on the View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6063cd9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6063cd9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.1esr-13.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 05 Oct '23

05 Oct '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: d7fc2de8 by Pier Angelo Vendrame at 2023-10-05T08:48:34+02:00 fixup! Firefox preference overrides. Bug 41496 (part 2): Pref review for 115/13.0. Added a couple of prefs that were suggested in the issue and I initially missed. Bug 42147: Add browser.helperApps.deleteTempFileOnExit to our profile - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -60,6 +60,11 @@ pref("browser.download.useDownloadDir", false); pref("browser.download.always_ask_before_handling_new_types", true); pref("browser.download.manager.addToRecentDocs", false); pref("browser.download.start_downloads_in_tmp_dir", true); +// tor-browser#42147: Always delete temporary files, also on macOS (this pref is +// already true for other platforms). +// Also, this always happens in PBM. If not in PBM, requires +// browser.download.start_downloads_in_tmp_dir to be true too. +pref("browser.helperApps.deleteTempFileOnExit", true); // Prevent download stuffing / DOS (tor-browser#41764) pref("browser.download.enable_spam_prevention", true); @@ -74,7 +79,7 @@ pref("signon.autofillForms", false); pref("browser.sessionstore.privacy_level", 2); // Use the in-memory media cache and increase its maximum size (#29120) pref("browser.privatebrowsing.forceMediaMemoryCache", true); -pref("media.memory_cache_max_size", 16384); +pref("media.memory_cache_max_size", 65536); // Disable restore in case of crash (tor-browser#41503) // This should not be needed in PBM, but we added it anyway like other options. pref("browser.sessionstore.resume_from_crash", false); @@ -182,6 +187,8 @@ pref("default-browser-agent.enabled", false); #endif // Disable sync by default pref("identity.fxaccounts.enabled", false); +// Blank the sync URL as a defense in depth (added with tor-browser#41496) +pref("identity.sync.tokenserver.uri", ""); // Never sync with other browsers pref("services.sync.engine.addons", false); pref("services.sync.engine.addresses", false); @@ -374,6 +381,9 @@ pref("dom.textMetrics.fontBoundingBox.enabled", false); pref("pdfjs.enableScripting", false); // Bug 40057: Ensure system colors are not used for CSS4 colors pref("browser.display.use_system_colors", false); +// Enforce non-native widget theme (true by default, defense in depth). +// Provides a uniform look and feel across platforms. Added with tor-browser#41496. +pref("widget.non-native-theme.enabled", true); // tor-browser#41943: lock and revisit after it gets flipped to true in stable Firefox pref("javascript.options.spectre.disable_for_isolated_content", false, locked); @@ -519,6 +529,12 @@ pref("network.process.enabled", false); // Extension support pref("extensions.autoDisableScopes", 0); +// Only load extensions from the application and user profile. +// Do not load from the user directory (AddonManager.SCOPE_USER=2, which is +// shared between profiles, e.g., %appdata%\Mozilla\Extensions\ on Windows, or +// ~/.mozilla/extensions on Linux for Firefox), and do not load from system +// directories/the Windows registry (AddonManager.SCOPE_SYSTEM=8). +// More information: https://archive.ph/DYjAM pref("extensions.enabledScopes", 5); // AddonManager.SCOPE_PROFILE=1 | AddonManager.SCOPE_APPLICATION=4 // We don't know what extensions Mozilla is advertising to our users and we // don't want to have some random Google Analytics script running either on the View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d7fc2de… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d7fc2de… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-115.3.1esr-13.0-1-build1
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed new tag mullvad-browser-115.3.1esr-13.0-1-build1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-115.3.1esr-13.0-1] 18 commits: MB 38: Mullvad Browser configuration
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed to branch mullvad-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Mullvad Browser Commits: ece2b918 by Pier Angelo Vendrame at 2023-10-04T18:29:55+02:00 MB 38: Mullvad Browser configuration - - - - - a8b6ec40 by Pier Angelo Vendrame at 2023-10-04T18:37:05+02:00 MB 1: Mullvad Browser branding See also: mullvad-browser#5: Product name and directory customization mullvad-browser#12: Create new branding directories and integrate Mullvad icons+branding mullvad-browser#14: Remove Default Built-in bookmarks mullvad-browser#35: Add custom PDF icons for Windows builds mullvad-browser#48: Replace Mozilla copyright and legal trademarks in mullvadbrowser.exe metadata mullvad-browser#51: Update trademark string mullvad-browser#104: Update shipped dll metadata copyright/licensing info mullvad-browser#107: Add alpha and nightly icons - - - - - 47816936 by Pier Angelo Vendrame at 2023-10-04T18:37:05+02:00 MB 20: Allow packaged-addons in PBM. We install a few addons from the distribution directory, but they are not automatically enabled for PBM mode. This commit modifies the code that installs them to also add the PBM permission to the known ones. - - - - - 02b8a002 by Pier Angelo Vendrame at 2023-10-04T18:37:06+02:00 MB 63: Customize some about pages for Mullvad Browser Also: mullvad-browser#57: Purge unneeded about: pages - - - - - b5593094 by Pier Angelo Vendrame at 2023-10-04T18:37:06+02:00 MB 37: Customization for the about dialog - - - - - 3c1ba1d5 by Henry Wilkes at 2023-10-04T18:37:06+02:00 MB 39: Add home page about:mullvad-browser - - - - - 9a69e396 by hackademix at 2023-10-04T18:37:07+02:00 MB 97: Remove UI cues to install new extensions. - - - - - b7a6741f by hackademix at 2023-10-04T18:37:07+02:00 MB 47: uBlock Origin customization - - - - - bd869eed by Pier Angelo Vendrame at 2023-10-04T18:37:07+02:00 MB 21: Disable the password manager This commit disables the about:login page and removes the "Login and Password" section of about:preferences. We do not do anything to the real password manager of Firefox, that is in toolkit: it contains C++ parts that make it difficult to actually prevent it from being built.. Finally, we modify the the function that opens about:login to report an error in the console so that we can quickly get a backtrace to the code that tries to use it. - - - - - 239efafc by Pier Angelo Vendrame at 2023-10-04T18:37:08+02:00 MB 87: Disable the default browser box on Windows and Linux Windows and Linux will be distributed only as portable apps at the beginning, so they should not be settable as default browsers. We will need to improve the logic once we decide to ship system-wide installers, too. - - - - - f5c7dc56 by Pier Angelo Vendrame at 2023-10-04T18:37:08+02:00 MB 112: Updater customization for Mullvad Browser MB 71: Set the updater base URL to Mullvad domain - - - - - 88ff95e6 by Nicolas Vigier at 2023-10-04T18:37:08+02:00 MB 79: Add Mullvad Browser MAR signing keys - - - - - 1d8ded0d by Pier Angelo Vendrame at 2023-10-04T18:37:09+02:00 MB 34: Hide unsafe and unwanted preferences UI about:preferences allow to override some of our defaults, that could be fingeprintable or have some other unwanted consequences. - - - - - 4283a523 by Pier Angelo Vendrame at 2023-10-04T18:37:09+02:00 MB 160: Disable the cookie exceptions button Besides disabling the "Delete on close checkbox", disable also the "Manage Exceptions" button when always using PBM. - - - - - 08892ed4 by hackademix at 2023-10-04T18:37:09+02:00 MB 163: prevent uBlock Origin from being uninstalled/disabled - - - - - cbd8295f by Richard Pospesel at 2023-10-04T18:37:10+02:00 MB 188: Customize Gitlab Issue and Merge templates - - - - - 62457533 by rui hildt at 2023-10-04T18:37:10+02:00 MB 213: Customize the search engines list - - - - - ebc08997 by hackademix at 2023-10-04T18:37:10+02:00 MB 214: Enable cross-tab identity leak protection in "quiet" mode - - - - - 30 changed files: - + .gitlab/issue_templates/Rebase Browser - Alpha.md - + .gitlab/issue_templates/Rebase Browser - Stable.md - .gitlab/merge_request_templates/default.md - browser/app/Makefile.in - browser/app/macbuild/Contents/Info.plist.in - browser/app/module.ver - browser/app/firefox.exe.manifest → browser/app/mullvadbrowser.exe.manifest - + browser/app/profile/000-mullvad-browser.js - browser/app/profile/001-base-profile.js - browser/base/content/aboutDialog.xhtml - browser/base/content/appmenu-viewcache.inc.xhtml - browser/base/content/browser-menubar.inc - browser/base/content/browser.js - browser/base/content/default-bookmarks.html - browser/base/content/nsContextMenu.js - browser/base/content/overrides/app-license.html - browser/base/content/pageinfo/pageInfo.xhtml - browser/base/content/utilityOverlay.js - browser/branding/branding-common.mozbuild - + browser/branding/mb-alpha/VisualElements_150.png - + browser/branding/mb-alpha/VisualElements_70.png - + browser/branding/mb-alpha/configure.sh - + browser/branding/mb-alpha/content/about-logo.png - + browser/branding/mb-alpha/content/about-logo.svg - + browser/branding/mb-alpha/content/about-logo(a)2x.png - + browser/branding/mb-alpha/content/about-wordmark.svg - + browser/branding/mb-alpha/content/about.png - + browser/branding/mb-alpha/content/aboutDialog.css - + browser/branding/mb-alpha/content/firefox-wordmark.svg - + browser/branding/mb-alpha/content/icon128.png The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/75… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/75… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new branch mullvad-browser-115.3.1esr-13.0-1
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed new branch mullvad-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-115.3.1esr-13.0-1-build1
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed new tag tor-browser-115.3.1esr-13.0-1-build1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag base-browser-115.3.1esr-13.0-1-build1
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed new tag base-browser-115.3.1esr-13.0-1-build1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/base-brow… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new branch base-browser-115.3.1esr-13.0-1
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed new branch base-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/base-brow… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.1esr-13.0-1] 136 commits: Bug 1819160 - Map Android ids to doc/accessible id pairs. r=Jamie
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 15dfdc00 by Eitan Isaacson at 2023-10-04T14:48:22+02:00 Bug 1819160 - Map Android ids to doc/accessible id pairs. r=Jamie Differential Revision: https://phabricator.services.mozilla.com/D179737 - - - - - 64380268 by Pier Angelo Vendrame at 2023-10-04T14:48:29+02:00 Bug 1832523 - Allow using NSS to sign and verify MAR signatures. r=application-update-reviewers,glandium,bytesized Allow using NSS for checking MAR signatures also in platforms where OS-native APIs are used by default, i.e., macOS and Windows. Differential Revision: https://phabricator.services.mozilla.com/D177743 - - - - - 0a16a673 by Pier Angelo Vendrame at 2023-10-04T14:48:29+02:00 Bug 1849129: Prevent exceptions caused by extensions from interrupting the SearchService initialization. r=search-reviewers,Standard8 Differential Revision: https://phabricator.services.mozilla.com/D186456 - - - - - 2f190d5c by Emilio Cobos Álvarez at 2023-10-04T14:48:30+02:00 Bug 1853731 - Use html:img for message-bar-icon. r=Gijs,dao,settings-reviewers,desktop-theme-reviewers,sfoster Differential Revision: https://phabricator.services.mozilla.com/D188521 - - - - - 60495da5 by Pier Angelo Vendrame at 2023-10-04T14:48:30+02:00 Bug 1854117 - Sort the DLL blocklist flags. r=mossop,win-reviewers,gstoll Differential Revision: https://phabricator.services.mozilla.com/D188716 - - - - - 6610ab72 by Henry Wilkes at 2023-10-04T14:48:30+02:00 Bug 41454: Move focus after calling openPreferences for a sub-category. Temporary fix until mozilla bug 1799153 gets a patch upstream. - - - - - 87c1571f by Henry Wilkes at 2023-10-04T14:48:31+02:00 Bug 41483: Remove the firefox override for appstrings.properties Remove this patch after upstream bugzilla bug 1790187 - - - - - 69367490 by Pier Angelo Vendrame at 2023-10-04T14:48:31+02:00 Bug 41116: Normalize system fonts. System fonts are an enormous fingerprinting vector. Even with font allow lists and with our custom configuration on Linux, which counter metrics measurements, getComputedStyle leaks several details. This patch counters both these kinds of attacks. - - - - - f4dfd374 by Marco Simonelli at 2023-10-04T14:48:31+02:00 Bug 41459: WebRTC fails to build under mingw (Part 1) - properly define NOMINMAX for just MSVC builds - - - - - 76828b79 by Marco Simonelli at 2023-10-04T14:48:32+02:00 Bug 41459: WebRTC fails to build under mingw (Part 2) - fixes required to build third_party/libwebrtc - - - - - 2dff8173 by Marco Simonelli at 2023-10-04T14:48:32+02:00 Bug 41459: WebRTC fails to build under mingw (Part 3) - fixes required to build third_party/sipcc - - - - - 038d4a61 by Marco Simonelli at 2023-10-04T14:48:32+02:00 Bug 41459: WebRTC fails to build under mingw (Part 4) - fixes requried to build netwerk/sctp - - - - - f2d3b564 by Marco Simonelli at 2023-10-04T14:48:33+02:00 Bug 41459: WebRTC fails to build under mingw (Part 5) - fixes required to build dom/media/webrtc - - - - - fc976ecf by Marco Simonelli at 2023-10-04T14:48:33+02:00 Bug 41459: WebRTC fails to build under mingw (Part 6) - fixes required to build dom/media/systemservices - - - - - 82e4cc9f by hackademix at 2023-10-04T14:48:33+02:00 Bug 41854: Allow overriding download spam protection. - - - - - fef42521 by Gaba at 2023-10-04T15:02:48+02:00 Adding issue and merge request templates - - - - - 4c20ae29 by Pier Angelo Vendrame at 2023-10-04T15:02:49+02:00 Base Browser's .mozconfigs. Bug 17858: Cannot create incremental MARs for hardened builds. Define HOST_CFLAGS, etc. to avoid compiling programs such as mbsdiff (which is part of mar-tools and is not distributed to end-users) with ASan. Bug 21849: Don't allow SSL key logging. Bug 25741 - TBA: Disable features at compile-time Define MOZ_ANDROID_NETWORK_STATE and MOZ_ANDROID_LOCATION Bug 27623 - Export MOZILLA_OFFICIAL during desktop builds This fixes a problem where some preferences had the wrong default value. Also see bug 27472 where we made a similar fix for Android. Bug 29859: Disable HLS support for now Bug 30463: Explicitly disable MOZ_TELEMETRY_REPORTING Bug 32493: Disable MOZ_SERVICES_HEALTHREPORT Bug 33734: Set MOZ_NORMANDY to False Bug 33851: Omit Parental Controls. Bug 40252: Add --enable-rust-simd to our tor-browser mozconfig files Bug 41584: Move some configuration options to base-browser level - - - - - 83e8b2fb by Pier Angelo Vendrame at 2023-10-04T15:02:49+02:00 Tweaks to the build system Bug 40857: Modified the fat .aar creation file This is a workaround to build fat .aars with the compiling enviornment disabled. Mozilla does not use a similar configuration, but either runs a Firefox build and discards its output, or uses artifacts build. We might switch to artifact builds too, and drop this patch, or write a better one to upstream. But until then we need this patch. See also https://bugzilla.mozilla.org/show_bug.cgi?id=1763770. Bug 41458: Prevent `mach package-multi-locale` from actually creating a package macOS builds need some files to be moved around with ./mach package-multi-locale to create multi-locale packages. The required command isn't exposed through any other mach command. So, we patch package-multi-locale both to prevent it from failing when doing official builds and to detect any future changes on it. - - - - - e7adcae6 by Pier Angelo Vendrame at 2023-10-04T15:02:50+02:00 Bug 41108: Remove privileged macOS installation from 102 - - - - - 985efe55 by Dan Ballard at 2023-10-04T15:02:50+02:00 Bug 41149: Re-enable DLL injection protection in all builds not just nightlies - - - - - 481461e9 by Matthew Finkel at 2023-10-04T15:02:50+02:00 Bug 24796: Comment out excess permissions from GeckoView The GeckoView AndroidManifest.xml is not preprocessed unlike Fennec's manifest, so we can't use the ifdef preprocessor guards around the permissions we do not want. Commenting the permissions is the next-best-thing. - - - - - c70f39ec by Matthew Finkel at 2023-10-04T15:02:51+02:00 Bug 28125: Prevent non-Necko network connections - - - - - 39714e3c by Mike Perry at 2023-10-04T15:02:51+02:00 Bug 12974: Disable NTLM and Negotiate HTTP Auth The Mozilla bugs: https://bugzilla.mozilla.org/show_bug.cgi?id=1046421, https://bugzilla.mozilla.org/show_bug.cgi?id=1261591, tor-browser#27602 - - - - - b730fb9e by Alex Catarineu at 2023-10-04T15:02:51+02:00 Bug 40166: Disable security.certerrors.mitm.auto_enable_enterprise_roots Bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1768899 - - - - - 5194f93b by Georg Koppen at 2023-10-04T15:02:52+02:00 Bug 16285: Exclude ClearKey system for now In the past the ClearKey system had not been compiled when specifying --disable-eme. But that changed and it is even bundled nowadays (see: Mozilla's bug 1300654). We don't want to ship it right now as the use case for it is not really visible while the code had security vulnerabilities in the past. - - - - - 65f911c1 by Kathy Brade at 2023-10-04T15:02:52+02:00 Bug 21431: Clean-up system extensions shipped in Firefox Only ship the pdfjs extension. - - - - - e98f9aa3 by Kathy Brade at 2023-10-04T15:02:52+02:00 Bug 33852: Clean up about:logins (LockWise) to avoid mentioning sync, etc. Hide elements on about:logins that mention sync, "Firefox LockWise", and Mozilla's LockWise mobile apps. Disable the "Create New Login" button when security.nocertdb is true. - - - - - 40b1d0f2 by Alex Catarineu at 2023-10-04T15:02:53+02:00 Bug 41457: Remove Mozilla permissions Bug 40025: Remove Mozilla add-on install permissions - - - - - 63167a37 by Kathy Brade at 2023-10-04T15:02:53+02:00 Bug 40002: Remove about:ion Firefox Ion (previously Firefox Pioneer) is an opt-in program in which people volunteer to participate in studies that collect detailed, sensitive data about how they use their browser. Bug 41662: Disable about:sync-logs Even though we disable sync by default with `identity.fxaccounts.enabled`, this about: page is still avilable. We could throw an exception on the constructor of the related component, but it would result only in an error in the console, without a visible "this address does not look right" error page. If we fix the issues with MOZ_SERVICES_SYNC, we can restore the component. - - - - - 0b4a8a7a by Arthur Edelstein at 2023-10-04T15:02:53+02:00 Bug 26353: Prevent speculative connect that violated FPI. Connections were observed in the catch-all circuit when the user entered an https or http URL in the URL bar, or typed a search term. - - - - - 3154c2df by Alex Catarineu at 2023-10-04T15:02:54+02:00 Bug 31740: Remove some unnecessary RemoteSettings instances More concretely, SearchService.jsm 'hijack-blocklists' and url-classifier-skip-urls. Avoid creating instance for 'anti-tracking-url-decoration'. If prefs are disabling their usage, avoid creating instances for 'cert-revocations' and 'intermediates'. Do not ship JSON dumps for collections we do not expect to need. For the ones in the 'main' bucket, this prevents them from being synced unnecessarily (the code in remote-settings does so for collections in the main bucket for which a dump or local data exists). For the collections in the other buckets, we just save some size by not shipping their dumps. We also clear the collections database on the v2 -> v3 migration. - - - - - 7029a7a9 by cypherpunks1 at 2023-10-04T15:02:54+02:00 Bug 41092: Add a RemoteSettings JSON dump for query-stripping - - - - - c6b6e40b by Pier Angelo Vendrame at 2023-10-04T15:02:55+02:00 Bug 41635: Disable the Normandy component Do not include Normandy at all whenever MOZ_NORMANDY is False. - - - - - 955b355c by Georg Koppen at 2023-10-04T15:02:55+02:00 Bug 30541: Disable WebGL readPixel() for web content Related Bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1428034 - - - - - 1b495a7e by Alex Catarineu at 2023-10-04T15:02:55+02:00 Bug 28369: Stop shipping pingsender executable - - - - - 06cfffd3 by cypherpunks1 at 2023-10-04T15:02:56+02:00 Bug 41568: Disable LaterRun - - - - - 50e8c89b by cypherpunks1 at 2023-10-04T15:02:56+02:00 Bug 40717: Hide Windows SSO in settings - - - - - 62437f51 by Pier Angelo Vendrame at 2023-10-04T15:02:56+02:00 Bug 41599: Always return an empty string as network ID Firefox computes an internal network ID used to detect network changes and act consequently (e.g., to improve WebSocket UX). However, there are a few ways to get this internal network ID, so we patch them out, to be sure any new code will not be able to use them and possibly link users. We also sent a patch to Mozilla to seed the internal network ID, to prevent any accidental leak in the future. Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=1817756 - - - - - d0968c78 by cypherpunks1 at 2023-10-04T15:02:57+02:00 Bug 40175: Add origin attributes to about:reader top-level requests - - - - - f4acf127 by Richard Pospesel at 2023-10-04T15:02:57+02:00 Bug 41327: Disable UrlbarProviderInterventions - - - - - 86137d7b by Richard Pospesel at 2023-10-04T15:02:57+02:00 Bug 42037: Disable about:firefoxview page - - - - - 5f46ac0a by Mike Perry at 2023-10-04T15:03:06+02:00 Firefox preference overrides. This hack directly includes our preference changes in omni.ja. Bug 18292: Staged updates fail on Windows Temporarily disable staged updates on Windows. Bug 18297: Use separate Noto JP,KR,SC,TC fonts Bug 23404: Add Noto Sans Buginese to the macOS whitelist Bug 23745: Set dom.indexedDB.enabled = true Bug 13575: Disable randomised Firefox HTTP cache decay user tests. (Fernando Fernandez Mancera <ffmancera(a)riseup.net>) Bug 17252: Enable session identifiers with FPI Session tickets and session identifiers were isolated by OriginAttributes, so we can re-enable them by allowing the default value (true) of "security.ssl.disable_session_identifiers". The pref "security.enable_tls_session_tickets" is obsolete (removed in https://bugzilla.mozilla.org/917049) Bug 14952: Enable http/2 and AltSvc In Firefox, SPDY/HTTP2 now uses Origin Attributes for isolation of connections, push streams, origin frames, etc. That means we get first-party isolation provided "privacy.firstparty.isolate" is true. So in this patch, we stop overriding "network.http.spdy.enabled" and "network.http.spdy.enabled.http2". Alternate Services also use Origin Attributes for isolation. So we stop overriding "network.http.altsvc.enabled" and "network.http.altsvc.oe" as well. (All 4 of the abovementioned "network.http.*" prefs adopt Firefox 60ESR's default value of true.) However, we want to disable HTTP/2 push for now, so we set "network.http.spdy.allow-push" to false. "network.http.spdy.enabled.http2draft" was removed in Bug 1132357. "network.http.sped.enabled.v2" was removed in Bug 912550. "network.http.sped.enabled.v3" was removed in Bug 1097944. "network.http.sped.enabled.v3-1" was removed in Bug 1248197. Bug 26114: addons.mozilla.org is not special * Don't expose navigator.mozAddonManager on any site * Don't block NoScript from modifying addons.mozilla.org or other sites Enable ReaderView mode again (#27281). Bug 29916: Make sure enterprise policies are disabled Bug 2874: Block Components.interfaces from content Bug 26146: Spoof HTTP User-Agent header for desktop platforms In Tor Browser 8.0, the OS was revealed in both the HTTP User-Agent header and to JavaScript code via navigator.userAgent. To avoid leaking the OS inside each HTTP request (which many web servers log), always use the Windows 7 OS value in the desktop User-Agent header. We continue to allow access to the actual OS via JavaScript, since doing so improves compatibility with web applications such as GitHub and Google Docs. Bug 12885: Windows Jump Lists fail for Tor Browser Jumplist entries are stored in a binary file in: %APPDATA%\\Microsoft\Windows\Recent\CustomDestinations\ and has a name in the form [a-f0-9]+.customDestinations-ms The hex at the front is unique per app, and is ultimately derived from something called the 'App User Model ID' (AUMID) via some unknown hashing method. The AUMID is provided as a key when programmatically creating, updating, and deleting a jumplist. The default behaviour in firefox is for the installer to define an AUMID for an app, and save it in the registry so that the jumplist data can be removed by the uninstaller. However, the Tor Browser does not set this (or any other) regkey during installation, so this codepath fails and the app's AUMID is left undefined. As a result the app's AUMID ends up being defined by windows, but unknowable by Tor Browser. This unknown AUMID is used to create and modify the jumplist, but the delete API requires that we provide the app's AUMID explicitly. Since we don't know what the AUMID is (since the expected regkey where it is normally stored does not exist) jumplist deletion will fail and we will leave behind a mostly empty customDestinations-ms file. The name of the file is derived from the binary path, so an enterprising person could reverse engineer how that hex name is calculated, and generate the name for Tor Browser's default Desktop installation path to determine whether a person had used Tor Browser in the past. The 'taskbar.grouping.useprofile' option that is enabled by this patch works around this AUMID problem by having firefox.exe create it's own AUMID based on the profile path (rather than looking for a regkey). This way, if a user goes in and enables and disables jumplist entries, the backing store is properly deleted. Unfortunately, all windows users currently have this file lurking in the above mentioned directory and this patch will not remove it since it was created with an unknown AUMID. However, another patch could be written which goes to that directory and deletes any item containing the 'Tor Browser' string. See bug 28996. Bug 30845: Make sure default themes and other internal extensions are enabled Bug 28896: Enable extensions in private browsing by default Bug 31065: Explicitly allow proxying localhost Bug 31598: Enable letterboxing Disable Presentation API everywhere Bug 21549 - Use Firefox's WASM default pref. It is disabled at safer security levels. Bug 32321: Disable Mozilla's MitM pings Bug 19890: Disable installation of system addons By setting the URL to "" we make sure that already installed system addons get deleted as well. Bug 22548: Firefox downgrades VP9 videos to VP8. On systems where H.264 is not available or no HWA, VP9 is preferred. But in Tor Browser 7.0 all youtube videos are degraded to VP8. This behaviour can be turned off by setting media.benchmark.vp9.threshold to 0. All clients will get better experience and lower traffic, beause TBB doesn't use "Use hardware acceleration when available". Bug 25741 - TBA: Add mobile-override of 000-tor-browser prefs Bug 16441: Suppress "Reset Tor Browser" prompt. Bug 29120: Use the in-memory media cache and increase its maximum size. Bug 33697: use old search config based on list.json Bug 33855: Ensure that site-specific browser mode is disabled. Bug 30682: Disable Intermediate CA Preloading. Bug 40061: Omit the Windows default browser agent from the build Bug 40322: Consider disabling network.connectivity-service.enabled Bug 40408: Disallow SVG Context Paint in all web content Bug 40308: Disable network partitioning until we evaluate dFPI Bug 40322: Consider disabling network.connectivity-service.enabled Bug 40383: Disable dom.enable_event_timing Bug 40423: Disable http/3 Bug 40177: Update prefs for Fx91esr Bug 40700: Disable addons and features recommendations Bug 40682: Disable network.proxy.allow_bypass Bug 40736: Disable third-party cookies in PBM Bug 19850: Enabled HTTPS-Only by default Bug 40912: Hide the screenshot menu Bug 41292: Disable moreFromMozilla in preferences page Bug 40057: Ensure the CSS4 system colors are not a fingerprinting vector Bug 24686: Set network.http.tailing.enabled to true Bug 40183: Disable TLS ciphersuites using SHA-1 Bug 40783: Review 000-tor-browser.js and 001-base-profile.js for 102 We reviewed all the preferences we set for 102, and remove a few old ones. See the description of that issue to see all the preferences we believed were still valid for 102, and some brief description for the reasons to keep them. - - - - - f4b0ecf2 by Richard Pospesel at 2023-10-04T15:03:06+02:00 fixup! Firefox preference overrides. Bug 42138: Disable apz.overscroll.enabled pref - - - - - 60cce711 by Richard Pospesel at 2023-10-04T15:03:06+02:00 Bug 41659: Add canonical color definitions to base-browser - - - - - 7c31b796 by Pier Angelo Vendrame at 2023-10-04T15:03:07+02:00 Bug 41043: Hardcode the UI font on Linux The mechanism to choose the UI font does not play well with our fontconfig configuration. As a result, the final criterion to choose the font for the UI was its version. Since we hardcode Arimo as a default sans-serif on preferences, we use it also for the UI. FontConfig will fall back to some other font for scripts Arimo does not cover as expected (we tested with Japanese). - - - - - 2acc8609 by Alex Catarineu at 2023-10-04T15:03:07+02:00 Bug 30605: Honor privacy.spoof_english in Android This checks `privacy.spoof_english` whenever `setLocales` is called from Fenix side and sets `intl.accept_languages` accordingly. Bug 40198: Expose privacy.spoof_english pref in GeckoView - - - - - e19a1fa4 by Alex Catarineu at 2023-10-04T15:03:07+02:00 Bug 40199: Avoid using system locale for intl.accept_languages in GeckoView - - - - - 30169088 by Alex Catarineu at 2023-10-04T15:03:08+02:00 Bug 40171: Make WebRequest and GeckoWebExecutor First-Party aware - - - - - 68b4f927 by Alex Catarineu at 2023-10-04T15:03:08+02:00 Bug 26345: Hide tracking protection UI - - - - - fa332ec3 by Pier Angelo Vendrame at 2023-10-04T15:03:08+02:00 Bug 9173: Change the default Firefox profile directory to be relative. This commit makes Firefox look for the default profile directory in a directory relative to the binary path. The directory can be specified through the --with-relative-data-dir. This is relative to the same directory as the firefox main binary for Linux and Windows. On macOS, we remove Contents/MacOS from it. Or, in other words, the directory is relative to the application bundle. This behavior can be overriden at runtime, by placing a file called system-install adjacent to the firefox main binary (also on macOS). - - - - - 7f356045 by Alex Catarineu at 2023-10-04T15:03:09+02:00 Bug 27604: Fix addon issues when moving the profile directory Bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1429838 - - - - - bee54c6e by Mike Perry at 2023-10-04T15:03:09+02:00 Bug 13028: Prevent potential proxy bypass cases. It looks like these cases should only be invoked in the NSS command line tools, and not the browser, but I decided to patch them anyway because there literally is a maze of network function pointers being passed around, and it's very hard to tell if some random code might not pass in the proper proxied versions of the networking code here by accident. Bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1433509 - - - - - 31982806 by Igor Oliveira at 2023-10-04T15:03:09+02:00 Bug 23104: Add a default line height compensation Many fonts have issues with their vertical metrics. they are used to influence the height of ascenders and depth of descenders. Gecko uses it to calculate the line height (font height + ascender + descender), however because of that idiosyncratic behavior across multiple operating systems, it can be used to identify the user's OS. The solution proposed in the patch uses a default factor to be multiplied with the font size, simulating the concept of ascender and descender. This way all operating systems will have the same line height. - - - - - 8232f76d by Pier Angelo Vendrame at 2023-10-04T15:03:10+02:00 Bug 40309: Avoid using regional OS locales Avoid regional OS locales if the pref `intl.regional_prefs.use_os_locales` is false but RFP is enabled. - - - - - aed56a2c by Matthew Finkel at 2023-10-04T15:03:10+02:00 Bug 40432: Prevent probing installed applications Bugzilla: https://bugzilla.mozilla.org/show_bug.cgi?id=1711084 - - - - - 39c9ad6e by cypherpunks1 at 2023-10-04T15:03:10+02:00 Bug 33955: When copying an image only copy the image contents to the clipboard - - - - - 7c1d30a8 by cypherpunks1 at 2023-10-04T15:03:11+02:00 Bug 41791: Omit the source URL when copying page contents to the clipboard - - - - - 01f1e922 by Pier Angelo Vendrame at 2023-10-04T15:03:11+02:00 Base Browser strings This commit adds all the strings needed by following Base Browser patches. - - - - - 2cab0e1a by hackademix at 2023-10-04T15:03:12+02:00 Bug 41434: Letterboxing, preemptively apply margins in a global CSS rule to mitigate race conditions on newly created windows and tabs. - - - - - 0dc58ced by hackademix at 2023-10-04T15:03:12+02:00 Bug 41434: Letterboxing, improve logging. - - - - - f5121193 by hackademix at 2023-10-04T15:03:12+02:00 Bug 31064: Letterboxing, exempt browser extensions. - - - - - c70ddd8d by hackademix at 2023-10-04T15:03:13+02:00 Bug 32411: Letterboxing, exempt view-source: URIs. - - - - - c78671b4 by hackademix at 2023-10-04T15:03:13+02:00 Bug 32308: use direct browser sizing for letterboxing. Bug 30556: align letterboxing with 200x100 new win width stepping - - - - - 85e237f6 by hackademix at 2023-10-04T15:03:13+02:00 Bug 41631: Prevent weird initial window dimensions caused by subpixel computations - - - - - c541818b by Pier Angelo Vendrame at 2023-10-04T15:03:14+02:00 Bug 41369: Improve Firefox language settings for multi-lingual packages Change the language selector to be sorted by language code, rather than name, and to display the language code to the user. Bug 41372: Handle Japanese as a special case in preferences on macOS Japanese is treated in a special way on macOS. However, seeing the Japanese language tag could be confusing for users, and moreover the language name is not localized correctly like other langs. Bug 41378: Tell users that they can change their language at the first start With multi-lingual builds, Tor Browser matches the user's system language, but some users might want to change it. So, we tell them that it is possible, but only once. - - - - - 9300d9e1 by p13dz at 2023-10-04T15:03:14+02:00 Bug 40283: Workaround for the file upload bug - - - - - cc07d227 by Arthur Edelstein at 2023-10-04T15:03:15+02:00 Bug 18905: Hide unwanted items from help menu Bug 25660: Remove the "New Private Window" option - - - - - 92ea6d6a by cypherpunks1 at 2023-10-04T15:03:15+02:00 Bug 41740: Change the RFP value of devicePixelRatio to 2 - - - - - 72b72c25 by Pier Angelo Vendrame at 2023-10-04T15:03:15+02:00 Bug 41739: Remove "Website appearance" from about:preferences. It is ignored because of RFP and it is confusing for users. - - - - - 725e6f40 by cypherpunks1 at 2023-10-04T15:03:16+02:00 Bug 41881: Don't persist custom network requests on private windows - - - - - db10be10 by hackademix at 2023-10-04T15:03:16+02:00 Bug 42019: Empty browser's clipboard on browser shutdown - - - - - 4f15d966 by hackademix at 2023-10-04T15:03:17+02:00 Bug 42084: Ensure English spoofing works even if preferences are set out of order. - - - - - a7d0a34b by Pier Angelo Vendrame at 2023-10-04T15:03:17+02:00 Bug 41603: Customize the creation of MOZ_SOURCE_URL MOZ_SOURCE_URL is created by combining MOZ_SOURCE_REPO and MOZ_SOURCE_CHANGESET. But the code takes for granted that it refers to a Hg instance, so it combines them as `$MOZ_SOURCE_REPO/rev/$MOZ_SOURCE_CHANGESET`. With this commit, we change this logic to combine them to create a URL that is valid for GitLab. $MOZ_SOURCE_CHANGESET needs to be a commit hash, not a branch or a tag. If that is needed, we could use /-/tree/, instead of /-/commit/. - - - - - 45262137 by Henry Wilkes at 2023-10-04T15:03:17+02:00 Bug 31575: Disable Firefox Home (Activity Stream) Treat about:blank as the default home page and new tab page. Avoid loading AboutNewTab in BrowserGlue.sys.mjs in order to avoid several network requests that we do not need. Bug 41624: Disable about:pocket-* pages. Bug 40144: Redirect about:privatebrowsing to the user's home - - - - - c2b9ea61 by Kathy Brade at 2023-10-04T15:03:19+02:00 Bug 4234: Use the Firefox Update Process for Base Browser. Windows: disable "runas" code path in updater (15201). Windows: avoid writing to the registry (16236). Also includes fixes for tickets 13047, 13301, 13356, 13594, 15406, 16014, 16909, 24476, and 25909. Also fix bug 27221: purge the startup cache if the Base Browser version changed (even if the Firefox version and build ID did not change), e.g., after a minor Base Browser update. Also fix 32616: Disable GetSecureOutputDirectoryPath() functionality. Bug 26048: potentially confusing "restart to update" message Within the update doorhanger, remove the misleading message that mentions that windows will be restored after an update is applied, and replace the "Restart and Restore" button label with an existing "Restart to update Tor Browser" string. Bug 28885: notify users that update is downloading Add a "Downloading Base Browser update" item which appears in the hamburger (app) menu while the update service is downloading a MAR file. Before this change, the browser did not indicate to the user that an update was in progress, which is especially confusing in Tor Browser because downloads often take some time. If the user clicks on the new menu item, the about dialog is opened to allow the user to see download progress. As part of this fix, the update service was changed to always show update-related messages in the hamburger menu, even if the update was started in the foreground via the about dialog or via the "Check for Tor Browser Update" toolbar menu item. This change is consistent with the Tor Browser goal of making sure users are informed about the update process. Removed #28885 parts of this patch which have been uplifted to Firefox. - - - - - 91bf4f3d by Pier Angelo Vendrame at 2023-10-04T15:03:19+02:00 Bug 42061: Create an alpha update channel. - - - - - 6627aeb8 by Nicolas Vigier at 2023-10-04T15:03:19+02:00 Bug 41682: Add base-browser nightly mar signing key - - - - - 04f5804f by hackademix at 2023-10-04T15:03:20+02:00 Bug 41695: Warn on window maximization without letterboxing in RFPHelper module - - - - - 21c80f0c by Pier Angelo Vendrame at 2023-10-04T15:03:22+02:00 Bug 41698: Reword the recommendation badges in about:addons Firefox strings use { -brand-product-name }. As a result, it seems that the fork is recommending extensions, whereas AMO curators are doing that. So, we replace the strings with custom ones that clarify that Mozilla is recommending them. We assign the strings with JS because our translation backend does not support Fluent attributes, yet, but once it does, we should switch to them, instead. Upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1825033 - - - - - c8d77bd2 by Alex Catarineu at 2023-10-04T15:03:22+02:00 Bug 40069: Add helpers for message passing with extensions - - - - - 22eab635 by Matthew Finkel at 2023-10-04T15:03:23+02:00 Bug 41598: Prevent NoScript from being removed/disabled. Bug 40253: Explicitly allow NoScript in Private Browsing mode. - - - - - 9dc6a2f4 by hackademix at 2023-10-04T15:03:23+02:00 Bug 41834: Hide "Can't Be Removed - learn more" menu line for uninstallable add-ons - - - - - 4c780887 by Pier Angelo Vendrame at 2023-10-04T15:03:24+02:00 Bug 40925: Implemented the Security Level component This component adds a new Security Level toolbar button which visually indicates the current global security level via icon (as defined by the extensions.torbutton.security_slider pref), a drop-down hanger with a short description of the current security level, and a new section in the about:preferences#privacy page where users can change their current security level. In addition, the hanger and the preferences page will show a visual warning when the user has modified prefs associated with the security level and provide a one-click 'Restore Defaults' button to get the user back on recommended settings. Bug 40125: Expose Security Level pref in GeckoView - - - - - 824abb0d by Pier Angelo Vendrame at 2023-10-04T15:03:24+02:00 Bug 40926: Implemented the New Identity feature - - - - - 39cbe446 by Henry Wilkes at 2023-10-04T15:03:24+02:00 Bug 41736: Customize toolbar for base-browser. - - - - - 75e7eab4 by Pier Angelo Vendrame at 2023-10-04T15:03:25+02:00 Bug 42027: Base Browser migration procedures. This commit implmenents the the Base Browser's version of _migrateUI. - - - - - a48ac84c by Richard Pospesel at 2023-10-04T15:03:25+02:00 Bug 41649: Create rebase and security backport gitlab issue templates - - - - - 5727922f by Richard Pospesel at 2023-10-04T15:03:26+02:00 Bug 41089: Add tor-browser build scripts + Makefile to tor-browser - - - - - 051e8359 by Henry Wilkes at 2023-10-04T15:03:27+02:00 Bug 41803: Add some developer tools for working on tor-browser. - - - - - 43efd07c by Kathy Brade at 2023-10-04T15:03:27+02:00 Bug 11641: Disable remoting by default. Unless the -osint command line flag is used, the browser now defaults to the equivalent of -no-remote. There is a new -allow-remote flag that may be used to restore the original (Firefox-like) default behavior. - - - - - 87177920 by Alex Catarineu at 2023-10-04T15:03:28+02:00 Add TorStrings module for localization - - - - - 12d72335 by Henry Wilkes at 2023-10-04T15:03:29+02:00 Tor Browser strings This commit adds all the strings needed for Tor Browser patches. - - - - - d576f376 by Henry Wilkes at 2023-10-04T15:03:29+02:00 fixup! Tor Browser strings Bug 32328: Add info box to let users know when Tor Browser does not control the Tor Network connection configuration. And provide a link to check.torproject.org - - - - - f1f23371 by Henry Wilkes at 2023-10-04T15:03:29+02:00 Tor Browser localization migration scripts. - - - - - ec500a20 by Mike Perry at 2023-10-04T15:03:33+02:00 Bug 2176: Rebrand Firefox to TorBrowser See also Bugs #5194, #7187, #8115, #8219. This patch does some basic renaming of Firefox to TorBrowser. The rest of the branding is done by images and icons. Also fix bug 27905. Bug 25702: Update Tor Browser icon to follow design guidelines - Updated all of the branding in /browser/branding/official with new 'stable' icon series. - Updated /extensions/onboarding/content/img/tor-watermark.png with new icon and add the source svg in the same directory - Copied /browser/branding/official over /browser/branding/nightly and the new /browser/branding/alpha directories. Replaced content with 'nightly' and 'alpha' icon series. Updated VisualElements_70.png and VisualElements_150.png with updated icons in each branding directory (fixes #22654) - Updated firefox.VisualElementsManfiest.xml with updated colors in each branding directory - Added firefox.svg to each branding directory from which all the other icons are derived (apart from document.icns and document.ico) - Added default256.png and default512.png icons - Updated aboutTBUpdate.css to point to branding-aware icon128.png and removed original icon - Use the Tor Browser icon within devtools/client/themes/images/. Bug 30631: Blurry Tor Browser icon on macOS app switcher It would seem the png2icns tool does not generate correct icns files and so on macOS the larger icons were missing resulting in blurry icons in the OS chrome. Regenerated the padded icons in a macOS VM using iconutil. Bug 28196: preparations for using torbutton tor-browser-brand.ftl A small change to Fluent FileSource class is required so that we can register a new source without its supported locales being counted as available locales for the browser. Bug 31803: Replaced about:debugging logo with flat version Bug 21724: Make Firefox and Tor Browser distinct macOS apps When macOS opens a document or selects a default browser, it sometimes uses the CFBundleSignature. Changing from the Firefox MOZB signature to a different signature TORB allows macOS to distinguish between Firefox and Tor Browser. Bug 32092: Fix Tor Browser Support link in preferences For bug 40562, we moved onionPattern* from bug 27476 to here, as about:tor needs these files but it is included earlier. Bug 41278: Create Tor Browser styled pdf logo similar to the vanilla Firefox one Bug 42088: New application icons (used in-app and on linux). Bug 42087: New application icons (windows). - - - - - c1589b9a by sanketh at 2023-10-04T15:03:49+02:00 Bug 40209: Implement Basic Crypto Safety Adds a CryptoSafety actor which detects when you've copied a crypto address from a HTTP webpage and shows a warning. Closes #40209. Bug 40428: Fix string attribute names - - - - - 2921a0f2 by Mike Perry at 2023-10-04T15:03:50+02:00 TB3: Tor Browser's official .mozconfigs. Also: Add an --enable-tor-browser-data-outside-app-dir configure option Add --with-tor-browser-version configure option Bug 31457: disable per-installation profiles The dedicated profiles (per-installation) feature does not interact well with our bundled profiles on Linux and Windows, and it also causes multiple profiles to be created on macOS under TorBrowser-Data. Bug 31935: Disable profile downgrade protection. Since Tor Browser does not support more than one profile, disable the prompt and associated code that offers to create one when a version downgrade situation is detected. Add --enable-tor-browser-update build option Bug 40793: moved Tor configuration options from old-configure.in to moz.configure Bug 41584: Move some configuration options to base-browser level - - - - - dfe006b5 by Henry Wilkes at 2023-10-04T15:03:50+02:00 Bug 41340: Enable TOR_BROWSER_NIGHTLY_BUILD features for dev and nightly builds tor-browser#41285: Enable fluent warnings. - - - - - 3ff30b1d by Pier Angelo Vendrame at 2023-10-04T15:03:52+02:00 Bug 40562: Added Tor Browser preferences to 000-tor-browser.js Before reordering patches, we used to keep the Tor-related patches (torbutton and tor-launcher) at the beginning. After that issue, we decided to move them towards the end. In addition to that, we have decided to move Tor Browser-only preferences there, too, to make Base Browser-only fixups easier to apply. - - - - - d49f87b6 by Pier Angelo Vendrame at 2023-10-04T15:03:52+02:00 Bug 13252: Customize profile management on macOS On macOS we allow both portable mode and system installation. However, in the latter case, we customize Firefox's directories to match the hierarchy we use for the portable mode. Also, display an informative error message if the TorBrowser-Data directory cannot be created due to an "access denied" or a "read only volume" error. - - - - - b33482c5 by Pier Angelo Vendrame at 2023-10-04T15:03:59+02:00 Bug 40933: Add tor-launcher functionality Bug 41926: Reimplement the control port - - - - - 486ec4a3 by Richard Pospesel at 2023-10-04T15:04:00+02:00 Bug 40597: Implement TorSettings module - migrated in-page settings read/write implementation from about:preferences#tor to the TorSettings module - TorSettings initially loads settings from the tor daemon, and saves them to firefox prefs - TorSettings notifies observers when a setting has changed; currently only QuickStart notification is implemented for parity with previous preference notify logic in about:torconnect and about:preferences#tor - about:preferences#tor, and about:torconnect now read and write settings thorugh the TorSettings module - all tor settings live in the torbrowser.settings.* preference branch - removed unused pref modify permission for about:torconnect content page from AsyncPrefs.jsm Bug 40645: Migrate Moat APIs to Moat.jsm module - - - - - 2f6903df by Arthur Edelstein at 2023-10-04T15:04:01+02:00 Bug 3455: Add DomainIsolator, for isolating circuit by domain. Add an XPCOM component that registers a ProtocolProxyChannelFilter which sets the username/password for each web request according to url bar domain. Bug 9442: Add New Circuit button Bug 13766: Set a 10 minute circuit dirty timeout for the catch-all circ. Bug 19206: Include a 128 bit random tag as part of the domain isolator nonce. Bug 19206: Clear out the domain isolator state on `New Identity`. Bug 21201.2: Isolate by firstPartyDomain from OriginAttributes Bug 21745: Fix handling of catch-all circuit Bug 41741: Refactor the domain isolator and new circuit - - - - - 1b54237b by Henry Wilkes at 2023-10-04T15:04:03+02:00 Bug 41600: Add a tor circuit display panel. - - - - - b8361a80 by hackademix at 2023-10-04T15:05:12+02:00 Bug 8324: Prevent DNS proxy bypasses caused by Drag&Drop Bug 41613: Skip Drang & Drop filtering for DNS-safe URLs - - - - - 17b9cdd2 by Amogh Pradeep at 2023-10-04T15:05:36+02:00 Orfox: Centralized proxy applied to AbstractCommunicator and BaseResources. See Bug 1357997 for partial uplift. Also: Bug 28051 - Use our Orbot for proxying our connections Bug 31144 - ESR68 Network Code Review - - - - - 31ce4bdb by Matthew Finkel at 2023-10-04T15:05:38+02:00 Bug 25741: TBA: Disable GeckoNetworkManager The browser should not need information related to the network interface or network state, tor should take care of that. - - - - - 35d38479 by Kathy Brade at 2023-10-04T15:05:38+02:00 Bug 14631: Improve profile access error messages. Instead of always reporting that the profile is locked, display specific messages for "access denied" and "read-only file system". To allow for localization, get profile-related error strings from Torbutton. Use app display name ("Tor Browser") in profile-related error alerts. - - - - - 447ba9ba by Pier Angelo Vendrame at 2023-10-04T15:05:39+02:00 Bug 40807: Added QRCode.js to toolkit/modules - - - - - a30c568b by Richard Pospesel at 2023-10-04T15:05:41+02:00 Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection This patch adds a new about:preferences#connection page which allows modifying bridge, proxy, and firewall settings from within Tor Browser. All of the functionality present in tor-launcher's Network Configuration panel is present: - Setting built-in bridges - Requesting bridges from BridgeDB via moat - Using user-provided bridges - Configuring SOCKS4, SOCKS5, and HTTP/HTTPS proxies - Setting firewall ports - Viewing and Copying Tor's logs - The Networking Settings in General preferences has been removed Bug 40774: Update about:preferences page to match new UI designs - - - - - badef3d6 by Richard Pospesel at 2023-10-04T15:05:43+02:00 Bug 27476: Implement about:torconnect captive portal within Tor Browser - implements new about:torconnect page as tor-launcher replacement - adds new torconnect component to browser - tor process management functionality remains implemented in tor-launcher through the TorProtocolService module - adds warning/error box to about:preferences#tor when not connected to tor Bug 40773: Update the about:torconnect frontend page to match additional UI flows. Bug 41608: Add a toolbar status button and a urlbar "Connect" button. - - - - - 5926379a by Henry Wilkes at 2023-10-04T15:05:45+02:00 Bug 7494: Create local home page for TBB. Bug 41333: Update about:tor to new design. Including: + make the favicon match the branding icon. + make the location bar show a search icon. - - - - - 585da35e by Henry Wilkes at 2023-10-04T15:05:45+02:00 fixup! Bug 7494: Create local home page for TBB. Bug 32328: Add info box to let users know when Tor Browser does not control the Tor Network connection configuration. And provide a link to check.torproject.org - - - - - 18f88e69 by Henry Wilkes at 2023-10-04T16:18:22+02:00 fixup! Bug 7494: Create local home page for TBB. Bug 41717: Show the bookmarks toolbar on "about:tor" pages as well. Also an implementation note to AboutNewTabService. - - - - - a3d5b9a2 by Arthur Edelstein at 2023-10-04T16:18:23+02:00 Bug 12620: TorBrowser regression tests Regression tests for Bug #2950: Make Permissions Manager memory-only Regression tests for TB4: Tor Browser's Firefox preference overrides. Note: many more functional tests could be made here Regression tests for #2874: Block Components.interfaces from content Bug 18923: Add a script to run all Tor Browser specific tests Regression tests for Bug #16441: Suppress "Reset Tor Browser" prompt. - - - - - c10eb721 by Pier Angelo Vendrame at 2023-10-04T16:18:24+02:00 Bug 41668: Tweaks to the Base Browser updater for Tor Browser This commit was once part of "Bug 4234: Use the Firefox Update Process for Tor Browser.". However, some parts of it were not needed for Base Browser and some derivative browsers. Therefore, we extracted from that commit the parts for Tor Browser legacy, and we add them back to the patch set with this commit. - - - - - 03743f6a by Kathy Brade at 2023-10-04T16:18:24+02:00 Bug 12647: Support symlinks in the updater. - - - - - fc8bfcf0 by Kathy Brade at 2023-10-04T16:18:25+02:00 Bug 19121: reinstate the update.xml hash check This is a partial revert of commit f1241db6986e4b54473a1ed870f7584c75d51122. Revert most changes from Mozilla Bug 862173 "don't verify mar file hash when using mar signing to verify the mar file (lessens main thread I/O)." We kept the addition to the AppConstants API in case other JS code references it in the future. - - - - - dd36d115 by Kathy Brade at 2023-10-04T16:18:25+02:00 Bug 16940: After update, load local change notes. Add an about:tbupdate page that displays the first section from TorBrowser/Docs/ChangeLog.txt and includes a link to the remote post-update page (typically our blog entry for the release). Always load about:tbupdate in a content process, but implement the code that reads the file system (changelog) in the chrome process for compatibility with future sandboxing efforts. Also fix bug 29440. Now about:tbupdate is styled as a fairly simple changelog page that is designed to be displayed via a link that is on about:tor. - - - - - e937a2e0 by Georg Koppen at 2023-10-04T16:18:25+02:00 Bug 32658: Create a new MAR signing key It's time for our rotation again: Move the backup key in the front position and add a new backup key. Bug 33803: Move our primary nightly MAR signing key to tor-browser Bug 33803: Add a secondary nightly MAR signing key - - - - - 9f9d27b2 by Mike Perry at 2023-10-04T16:18:26+02:00 Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove Amazon, eBay, bing eBay and Amazon don't treat Tor users very well. Accounts often get locked and payments reversed. Also: Bug 16322: Update DuckDuckGo search engine We are replacing the clearnet URL with an onion service one (thanks to a patch by a cypherpunk) and are removing the duplicated DDG search engine. Duplicating DDG happend due to bug 1061736 where Mozilla included DDG itself into Firefox. Interestingly, this caused breaking the DDG search if JavaScript is disabled as the Mozilla engine, which gets loaded earlier, does not use the html version of the search page. Moreover, the Mozilla engine tracked where the users were searching from by adding a respective parameter to the search query. We got rid of that feature as well. Also: This fixes bug 20809: the DuckDuckGo team has changed its server-side code in a way that lets users with JavaScript enabled use the default landing page while those without JavaScript available get redirected directly to the non-JS page. We adapt the search engine URLs accordingly. Also fixes bug 29798 by making sure we only specify the Google search engine we actually ship an .xml file for. Also regression tests. squash! Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove Amazon, eBay, bing Bug 40494: Update Startpage search provider squash! Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove Amazon, eBay, bing Bug 40438: Add Blockchair as a search engine Bug 33342: Avoid disconnect search addon error after removal. We removed the addon in #32767, but it was still being loaded from addonStartup.json.lz4 and throwing an error on startup because its resource: location is not available anymore. - - - - - 51f053db by Alex Catarineu at 2023-10-04T16:18:26+02:00 Bug 40073: Disable remote Public Suffix List fetching In https://bugzilla.mozilla.org/show_bug.cgi?id=1563246 Firefox implemented fetching the Public Suffix List via RemoteSettings and replacing the default one at runtime, which we do not want. - - - - - a3732b63 by Henry Wilkes at 2023-10-04T16:18:26+02:00 Bug 41906: Hide DNS over HTTPS preferences. - - - - - 00611290 by Richard Pospesel at 2023-10-04T16:18:27+02:00 Bug 23247: Communicating security expectations for .onion Encrypting pages hosted on Onion Services with SSL/TLS is redundant (in terms of hiding content) as all traffic within the Tor network is already fully encrypted. Therefore, serving HTTP pages from an Onion Service is more or less fine. Prior to this patch, Tor Browser would mostly treat pages delivered via Onion Services as well as pages delivered in the ordinary fashion over the internet in the same way. This created some inconsistencies in behaviour and misinformation presented to the user relating to the security of pages delivered via Onion Services: - HTTP Onion Service pages did not have any 'lock' icon indicating the site was secure - HTTP Onion Service pages would be marked as unencrypted in the Page Info screen - Mixed-mode content restrictions did not apply to HTTP Onion Service pages embedding Non-Onion HTTP content This patch fixes the above issues, and also adds several new 'Onion' icons to the mix to indicate all of the various permutations of Onion Services hosted HTTP or HTTPS pages with HTTP or HTTPS content. Strings for Onion Service Page Info page are pulled from Torbutton's localization strings. - - - - - 7dcca5a9 by Kathy Brade at 2023-10-04T16:18:27+02:00 Bug 30237: Add v3 onion services client authentication prompt When Tor informs the browser that client authentication is needed, temporarily load about:blank instead of about:neterror and prompt for the user's key. If a correctly formatted key is entered, use Tor's ONION_CLIENT_AUTH_ADD control port command to add the key (via Torbutton's control port module) and reload the page. If the user cancels the prompt, display the standard about:neterror "Unable to connect" page. This requires a small change to browser/actors/NetErrorChild.jsm to account for the fact that the docShell no longer has the failedChannel information. The failedChannel is used to extract TLS-related error info, which is not applicable in the case of a canceled .onion authentication prompt. Add a leaveOpen option to PopupNotifications.show so we can display error messages within the popup notification doorhanger without closing the prompt. Add support for onion services strings to the TorStrings module. Add support for Tor extended SOCKS errors (Tor proposal 304) to the socket transport and SOCKS layers. Improved display of all of these errors will be implemented as part of bug 30025. Also fixes bug 19757: Add a "Remember this key" checkbox to the client auth prompt. Add an "Onion Services Authentication" section within the about:preferences "Privacy & Security section" to allow viewing and removal of v3 onion client auth keys that have been stored on disk. Also fixes bug 19251: use enhanced error pages for onion service errors. - - - - - e83ec7e7 by Alex Catarineu at 2023-10-04T16:18:27+02:00 Bug 21952: Implement Onion-Location Whenever a valid Onion-Location HTTP header (or corresponding HTML <meta> http-equiv attribute) is found in a document load, we either redirect to it (if the user opted-in via preference) or notify the presence of an onionsite alternative with a badge in the urlbar. - - - - - 70a9808f by Pier Angelo Vendrame at 2023-10-04T16:18:28+02:00 Bug 40458: Implement .tor.onion aliases We have enabled HTTPS-Only mode, therefore we do not need HTTPS-Everywhere anymore. However, we want to keep supporting .tor.onion aliases (especially for securedrop). Therefore, in this patch we implemented the parsing of HTTPS-Everywhere rulesets, and the redirect of .tor.onion domains. Actually, Tor Browser believes they are actual domains. We change them on the fly on the SOCKS proxy requests to resolve the domain, and on the code that verifies HTTPS certificates. - - - - - fffd6c69 by Pier Angelo Vendrame at 2023-10-04T16:18:28+02:00 Bug 11698: Incorporate Tor Browser Manual pages into Tor Browser This patch associates the about:manual page to a translated page that must be injected to browser/omni.ja after the build. The content must be placed in chrome/browser/content/browser/manual/, so that is then available at chrome://browser/content/manual/. We preferred giving absolute freedom to the web team, rather than having to change the patch in case of changes on the documentation. - - - - - f0f23e91 by Pier Angelo Vendrame at 2023-10-04T16:18:28+02:00 Bug 41435: Add a Tor Browser migration function For now this function only deletes old language packs for which we are already packaging the strings with the application. - - - - - df60c13c by Henry Wilkes at 2023-10-04T16:18:29+02:00 Bug 42110: Add TorUIUtils module for common tor component methods. - - - - - 0807cf64 by Dan Ballard at 2023-10-04T16:18:29+02:00 Bug 40701: Add security warning when downloading a file Shown in the downloads panel, about:downloads and places.xhtml. - - - - - c52aab02 by Henry Wilkes at 2023-10-04T16:18:29+02:00 Bug 41736: Customize toolbar for tor-browser. - - - - - 76ca3bb2 by hackademix at 2023-10-04T16:18:30+02:00 Bug 41728: Pin bridges.torproject.org domains to Let's Encrypt's root cert public key - - - - - eed60a69 by Henry Wilkes at 2023-10-04T16:18:30+02:00 Customize moz-toggle for tor-browser. - - - - - e7b9c8e8 by Richard Pospesel at 2023-10-04T16:18:30+02:00 Bug 41822: Unconditionally disable default browser UX in about:preferences - - - - - f59fcb7b by Henry Wilkes at 2023-10-04T16:18:31+02:00 Bug 42072: 2023 year end campaign for about:tor. - - - - - 30 changed files: - .eslintignore - .gitignore - + .gitlab/issue_templates/Backport Android Security Fixes.md - + .gitlab/issue_templates/Rebase Browser - Alpha.md - + .gitlab/issue_templates/Rebase Browser - Stable.md - + .gitlab/issue_templates/bug.md - + .gitlab/merge_request_templates/default.md - accessible/android/SessionAccessibility.cpp - accessible/android/SessionAccessibility.h - accessible/ipc/DocAccessibleParent.cpp - accessible/ipc/DocAccessibleParent.h - accessible/ipc/moz.build - + browser/actors/AboutTBUpdateChild.jsm - + browser/actors/AboutTBUpdateParent.jsm - + browser/actors/CryptoSafetyChild.jsm - + browser/actors/CryptoSafetyParent.jsm - − browser/actors/RFPHelperChild.sys.mjs - − browser/actors/RFPHelperParent.sys.mjs - browser/actors/moz.build - browser/app/Makefile.in - browser/app/macbuild/Contents/Info.plist.in - browser/app/macbuild/Contents/MacOS-files.in - browser/app/moz.build - browser/app/permissions - + browser/app/profile/000-tor-browser.js - + browser/app/profile/001-base-profile.js - browser/app/profile/firefox.js - browser/base/content/aboutDialog-appUpdater.js - browser/base/content/aboutDialog.js - browser/base/content/aboutDialog.xhtml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/07ab3c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/07ab3c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] fixup! Bug 7494: Create local home page for TBB.
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 115d43a5 by Henry Wilkes at 2023-10-04T14:16:14+00:00 fixup! Bug 7494: Create local home page for TBB. Bug 41717: Show the bookmarks toolbar on "about:tor" pages as well. Also an implementation note to AboutNewTabService. - - - - - 2 changed files: - browser/base/content/browser-places.js - browser/components/newtab/AboutNewTabService.jsm Changes: ===================================== browser/base/content/browser-places.js ===================================== @@ -1419,6 +1419,14 @@ var BookmarkingUI = { }, isOnNewTabPage({ currentURI }) { + // If uri is "about:tor" then we return true. See tor-browser#41717. + // NOTE: "about:newtab", "about:welcome", "about:home" and + // "about:privatebrowsing" can also redirect to "about:tor". + // NOTE: We do not simply add "about:tor" to newTabURLs below because this + // would also match "about:torconnect". + if (currentURI?.scheme === "about" && currentURI?.filePath === "tor") { + return true; + } // Prevent loading AboutNewTab.jsm during startup path if it // is only the newTabURL getter we are interested in. let newTabURL = Cu.isModuleLoaded("resource:///modules/AboutNewTab.jsm") ===================================== browser/components/newtab/AboutNewTabService.jsm ===================================== @@ -430,6 +430,18 @@ class BaseAboutNewTabService { * the newtab page has no effect on the result of this function. */ get defaultURL() { + // NOTE: We return "about:tor" rather than the "chrome:" path + // "chrome://browser/content/abouttor/aboutTor.html" + // The result is that the channel created in NewChannel in + // browser/components/about/AboutRedirector.cpp will have its + // resultPrincipalURI set to "about:tor". + // What this means in practice is that the loaded document's documentURI and + // currentURI will be "about:tor" rather than "about:newtab", "about:home", + // "about:welcome" or "about:privatebrowsing". + // The disadvantage of this is that we often need to add "about:tor" to + // places where "about:newtab" or other URIs appear. + // The advantage is that we maintain more control against changes in + // mozilla-central. return "about:tor"; } View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/115d43a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/115d43a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-115.3.0esr-13.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed to branch mullvad-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 93572fbf by Richard Pospesel at 2023-10-04T15:40:41+02:00 fixup! Firefox preference overrides. Bug 42138: Disable apz.overscroll.enabled pref - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -335,6 +335,10 @@ pref("media.devices.enumerate.legacy.enabled", false); // Bug 10286: Always disable Touch API. // We might need to deepen this topic, see tor-browser#42069. pref("dom.w3c_touch_events.enabled", 0); +#ifndef ANDROID +// Bug 42138: Disable touch-based overscroll UX +pref("apz.overscroll.enabled", false); +#endif pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now pref("security.webauth.webauthn", false); // Bug 26614: Disable Web Authentication API for now // Disable SAB, no matter if the sites are cross-origin isolated. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/935… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/935… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-115.3.0esr-13.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed to branch base-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: d06e5487 by Richard Pospesel at 2023-10-04T15:31:17+02:00 fixup! Firefox preference overrides. Bug 42138: Disable apz.overscroll.enabled pref - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -336,6 +336,10 @@ pref("media.devices.enumerate.legacy.enabled", false); // Bug 10286: Always disable Touch API. // We might need to deepen this topic, see tor-browser#42069. pref("dom.w3c_touch_events.enabled", 0); +#ifndef ANDROID +// Bug 42138: Disable touch-based overscroll UX +pref("apz.overscroll.enabled", false); +#endif pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now pref("security.webauth.webauthn", false); // Bug 26614: Disable Web Authentication API for now // Disable SAB, no matter if the sites are cross-origin isolated. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d06e548… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d06e548… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new branch tor-browser-115.3.1esr-13.0-1
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed new branch tor-browser-115.3.1esr-13.0-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: cd9e363a by Richard Pospesel at 2023-10-04T12:26:17+00:00 fixup! Firefox preference overrides. Bug 42138: Disable apz.overscroll.enabled pref - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -336,6 +336,10 @@ pref("media.devices.enumerate.legacy.enabled", false); // Bug 10286: Always disable Touch API. // We might need to deepen this topic, see tor-browser#42069. pref("dom.w3c_touch_events.enabled", 0); +#ifndef ANDROID +// Bug 42138: Disable touch-based overscroll UX +pref("apz.overscroll.enabled", false); +#endif pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now pref("security.webauth.webauthn", false); // Bug 26614: Disable Web Authentication API for now // Disable SAB, no matter if the sites are cross-origin isolated. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/cd9e363… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/cd9e363… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/torbrowser-launcher][main] 8 commits: Fix path variables in AppArmor profile
by boklm (＠boklm) 04 Oct '23

04 Oct '23

boklm pushed to branch main at The Tor Project / Applications / torbrowser-launcher Commits: 6ec48451 by Fei1Yang at 2023-09-21T08:40:50+00:00 Fix path variables in AppArmor profile - - - - - 629493a6 by anonym at 2023-09-28T15:06:51+02:00 AppArmor: allow executing glxtest This "Firefox OpenGL probe utility" was added in Tor Browser 13. - - - - - 41f20588 by anonym at 2023-09-28T15:07:16+02:00 AppArmor: allow reading/writing to /proc/PID/oom_score_adj Firefox adjusts the OOM scores of its processes so that if they are reaped they are killed in a sane order, e.g. the parent process last. Source: hal/linux/LinuxProcessPriority.cpp - - - - - b257da03 by anonym at 2023-09-28T15:08:01+02:00 AppArmor: give read access to proc info about which command the browser's threads use - - - - - 29e1fe41 by anonym at 2023-09-28T15:08:17+02:00 AppArmor: silence denial of sys_ptrace capability We already allow ptrace for its relevant subprocesses via ptrace rules, and I'm unsure if the full capability is really needed. I see lots of other profiles which have ptrace rules without the capability so I guess not. And I wonder if allowing the capability allows ptrace for arbitrary processes, which would be really bad. So let's assume it's not needed and we'll see what happens. - - - - - b80e0078 by anonym at 2023-09-28T15:08:58+02:00 AppArmor: silence denial to read /sys/class/input/ It is unclear to me what this is about. - - - - - 25ebbe67 by intrigeri at 2023-10-04T11:13:50+02:00 Merge pull request #702 from Fei1Yang/apparmor-path Fix path variables in AppArmor profile - - - - - 4652b442 by intrigeri at 2023-10-04T11:25:46+02:00 Merge pull request #709 from anonym/tor-browser-13.0 Adapt AppArmor profile for Tor browser 13.0 - - - - - 3 changed files: - apparmor/torbrowser.Browser.firefox - apparmor/torbrowser.Tor.tor - apparmor/tunables/torbrowser Changes: ===================================== apparmor/torbrowser.Browser.firefox ===================================== @@ -1,7 +1,7 @@ #include <tunables/global> #include <tunables/torbrowser> -@{torbrowser_firefox_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/firefox.real +@{torbrowser_firefox_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser/Browser/firefox.real profile torbrowser_firefox @{torbrowser_firefox_executable} { #include <abstractions/audio> @@ -12,6 +12,8 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} { #include <abstractions/opencl> #include if exists <abstractions/vulkan> + deny capability sys_ptrace, + # Uncomment the following lines if you want to give the Tor Browser read-write # access to most of your personal files. # #include <abstractions/user-download> @@ -46,10 +48,13 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} { owner @{PROC}/@{pid}/environ r, owner @{PROC}/@{pid}/fd/ r, owner @{PROC}/@{pid}/mountinfo r, + owner @{PROC}/@{pid}/oom_score_adj rw, owner @{PROC}/@{pid}/smaps r, owner @{PROC}/@{pid}/stat r, owner @{PROC}/@{pid}/statm r, owner @{PROC}/@{pid}/status r, + owner @{PROC}/@{pid}/task/ r, + owner @{PROC}/@{pid}/task/*/comm r, owner @{PROC}/@{pid}/task/*/stat r, @{PROC}/sys/kernel/random/uuid r, @@ -70,6 +75,7 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} { owner @{torbrowser_home_dir}/Downloads/ rwk, owner @{torbrowser_home_dir}/Downloads/** rwk, owner @{torbrowser_home_dir}/firefox rix, + owner @{torbrowser_home_dir}/glxtest ix, owner @{torbrowser_home_dir}/{,TorBrowser/UpdateInfo/}updates/[0-9]*/* rw, owner @{torbrowser_home_dir}/{,TorBrowser/UpdateInfo/}updates/[0-9]*/{,MozUpdater/bgupdate/}updater ix, owner @{torbrowser_home_dir}/updater ix, @@ -111,6 +117,7 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} { /sys/devices/system/node/ r, /sys/devices/system/node/node[0-9]*/meminfo r, /sys/fs/cgroup/cpu,cpuacct/{,user.slice/}cpu.cfs_quota_us r, + deny /sys/class/input/ r, deny /sys/devices/virtual/block/*/uevent r, # Should use abstractions/gstreamer instead once merged upstream ===================================== apparmor/torbrowser.Tor.tor ===================================== @@ -1,7 +1,7 @@ #include <tunables/global> #include <tunables/torbrowser> -@{torbrowser_tor_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_*/Browser/TorBrowser/Tor/tor +@{torbrowser_tor_executable} = /home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser/Browser/TorBrowser/Tor/tor profile torbrowser_tor @{torbrowser_tor_executable} { #include <abstractions/base> ===================================== apparmor/tunables/torbrowser ===================================== @@ -1,2 +1,2 @@ -@{torbrowser_installation_dir}=@{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser_* +@{torbrowser_installation_dir}=@{HOME}/.local/share/torbrowser/tbb/{i686,x86_64}/tor-browser @{torbrowser_home_dir}=@{torbrowser_installation_dir}/Browser View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/compar… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/compar… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag FIREFOX_115_3_1esr_RELEASE
by Pier Angelo Vendrame (＠pierov) 04 Oct '23

04 Oct '23

Pier Angelo Vendrame pushed new tag FIREFOX_115_3_1esr_RELEASE at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/FIREFOX_1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android][firefox-android-115.2.1-13.0-1] fixup! Rename as Tor Browser
by Dan Ballard (＠dan) 03 Oct '23

03 Oct '23

Dan Ballard pushed to branch firefox-android-115.2.1-13.0-1 at The Tor Project / Applications / firefox-android Commits: 79cf5fc8 by clairehurst at 2023-10-03T19:29:10+00:00 fixup! Rename as Tor Browser - - - - - 30 changed files: - + fenix/app/src/beta/ic_launcher-playstore.png - + fenix/app/src/beta/ic_launcher_monochrome-playstore.png - + fenix/app/src/beta/res/drawable/ic_launcher_background.xml - + fenix/app/src/beta/res/drawable/ic_launcher_monochrome_foreground.xml - + fenix/app/src/beta/res/mipmap-anydpi-v26/ic_launcher.xml - + fenix/app/src/beta/res/mipmap-anydpi-v26/ic_launcher_monochrome.xml - + fenix/app/src/beta/res/mipmap-anydpi-v26/ic_launcher_monochrome_round.xml - + fenix/app/src/beta/res/mipmap-anydpi-v26/ic_launcher_round.xml - − fenix/app/src/beta/res/mipmap-hdpi/ic_launcher.png - + fenix/app/src/beta/res/mipmap-hdpi/ic_launcher.webp - + fenix/app/src/beta/res/mipmap-hdpi/ic_launcher_foreground.webp - + fenix/app/src/beta/res/mipmap-hdpi/ic_launcher_monochrome.webp - + fenix/app/src/beta/res/mipmap-hdpi/ic_launcher_monochrome_round.webp - − fenix/app/src/beta/res/mipmap-hdpi/ic_launcher_round.png - + fenix/app/src/beta/res/mipmap-hdpi/ic_launcher_round.webp - − fenix/app/src/beta/res/mipmap-mdpi/ic_launcher.png - + fenix/app/src/beta/res/mipmap-mdpi/ic_launcher.webp - + fenix/app/src/beta/res/mipmap-mdpi/ic_launcher_foreground.webp - + fenix/app/src/beta/res/mipmap-mdpi/ic_launcher_monochrome.webp - + fenix/app/src/beta/res/mipmap-mdpi/ic_launcher_monochrome_round.webp - − fenix/app/src/beta/res/mipmap-mdpi/ic_launcher_round.png - + fenix/app/src/beta/res/mipmap-mdpi/ic_launcher_round.webp - − fenix/app/src/beta/res/mipmap-xhdpi/ic_launcher.png - + fenix/app/src/beta/res/mipmap-xhdpi/ic_launcher.webp - + fenix/app/src/beta/res/mipmap-xhdpi/ic_launcher_foreground.webp - + fenix/app/src/beta/res/mipmap-xhdpi/ic_launcher_monochrome.webp - + fenix/app/src/beta/res/mipmap-xhdpi/ic_launcher_monochrome_round.webp - − fenix/app/src/beta/res/mipmap-xhdpi/ic_launcher_round.png - + fenix/app/src/beta/res/mipmap-xhdpi/ic_launcher_round.webp - − fenix/app/src/beta/res/mipmap-xxhdpi/ic_launcher.png The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/79c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/79c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-13.0] Bug 40972: Tweaks to the changelog script for MB and group projects
by Pier Angelo Vendrame (＠pierov) 03 Oct '23

03 Oct '23

Pier Angelo Vendrame pushed to branch maint-13.0 at The Tor Project / Applications / tor-browser-build Commits: d355fa8c by Pier Angelo Vendrame at 2023-10-03T19:48:02+02:00 Bug 40972: Tweaks to the changelog script for MB and group projects The changelog script works well also with Mullvad Browser, but there are a few changes we need to do every time we use it for MB instead of TBB. With this commit we automate them. In addition to that, we group items by project, as it makes reading the changelog easier. - - - - - 1 changed file: - tools/fetch-changelogs.py Changes: ===================================== tools/fetch-changelogs.py ===================================== @@ -2,6 +2,7 @@ from datetime import datetime import enum from pathlib import Path +import re import sys import requests @@ -11,6 +12,16 @@ GITLAB = "https://gitlab.torproject.org" API_URL = f"{GITLAB}/api/v4" PROJECT_ID = 473 +is_mb = False +project_order = { + "tor-browser-spec": 0, + # Leave 1 free, so we can redefine mullvad-browser when needed. + "tor-browser": 2, + "tor-browser-build": 3, + "mullvad-browser": 4, + "rbm": 5, +} + class Platform(enum.IntFlag): WINDOWS = 8 @@ -27,6 +38,7 @@ class Issue: self.project, self.number = ( j["references"]["full"].rsplit("/", 2)[-1].split("#") ) + self.number = int(self.number) self.platform = 0 self.num_platforms = 0 if "Desktop" in j["labels"]: @@ -43,9 +55,14 @@ class Issue: self.platform |= Platform.LINUX self.num_platforms += 1 if "Android" in j["labels"]: - self.platform |= Platform.ANDROID - self.num_platforms += 1 - if not self.platform: + if is_mb and self.num_platforms == 0: + raise Exception( + f"Android-only issue on Mullvad Browser: {j['references']['full']}!" + ) + elif not is_mb: + self.platform |= Platform.ANDROID + self.num_platforms += 1 + if not self.platform or (is_mb and self.platform == Platform.DESKTOP): self.platform = Platform.ALL_PLATFORMS self.num_platforms = 4 self.is_build = "Build System" in j["labels"] @@ -68,7 +85,9 @@ class Issue: return f"Bug {self.number}: {self.title} [{self.project}]" def __lt__(self, other): - return self.number < other.number + if self.project == other.project: + return self.number < other.number + return project_order[self.project] < project_order[other.project] def sorted_issues(issues): @@ -125,7 +144,7 @@ elif len(issues) > 1: sys.exit(4) else: iid = version - version = None + version = "CHANGEME!" if iid[0] == "#": iid = iid[1:] try: @@ -136,6 +155,9 @@ else: ) if r.ok and r.json(): issue = r.json()[0] + version_match = re.search(r"\b[0-9]+\.[.0-9a]+\b", issue["title"]) + if version_match: + version = version_match.group() except ValueError: pass if not issue: @@ -143,6 +165,9 @@ if not issue: "Release preparation issue not found. Please make sure it has ~Release Prep." ) sys.exit(5) +if "Sponsor 131" in issue["labels"]: + is_mb = True + project_order["mullvad-browser"] = 1 iid = issue["iid"] linked = {} @@ -159,8 +184,9 @@ for i in r.json(): linked = sorted_issues(linked) linked_build = sorted_issues(linked_build) +name = "Mullvad" if is_mb else "Tor" date = datetime.now().strftime("%B %d %Y") -print(f"Tor Browser {version} - {date}") +print(f"{name} Browser {version} - {date}") for issues in linked: print(f" * {issues[0].get_platforms()}") for i in issues: View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40972: Tweaks to the changelog script for MB and group projects
by Pier Angelo Vendrame (＠pierov) 03 Oct '23

03 Oct '23

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: d355fa8c by Pier Angelo Vendrame at 2023-10-03T19:48:02+02:00 Bug 40972: Tweaks to the changelog script for MB and group projects The changelog script works well also with Mullvad Browser, but there are a few changes we need to do every time we use it for MB instead of TBB. With this commit we automate them. In addition to that, we group items by project, as it makes reading the changelog easier. - - - - - 1 changed file: - tools/fetch-changelogs.py Changes: ===================================== tools/fetch-changelogs.py ===================================== @@ -2,6 +2,7 @@ from datetime import datetime import enum from pathlib import Path +import re import sys import requests @@ -11,6 +12,16 @@ GITLAB = "https://gitlab.torproject.org" API_URL = f"{GITLAB}/api/v4" PROJECT_ID = 473 +is_mb = False +project_order = { + "tor-browser-spec": 0, + # Leave 1 free, so we can redefine mullvad-browser when needed. + "tor-browser": 2, + "tor-browser-build": 3, + "mullvad-browser": 4, + "rbm": 5, +} + class Platform(enum.IntFlag): WINDOWS = 8 @@ -27,6 +38,7 @@ class Issue: self.project, self.number = ( j["references"]["full"].rsplit("/", 2)[-1].split("#") ) + self.number = int(self.number) self.platform = 0 self.num_platforms = 0 if "Desktop" in j["labels"]: @@ -43,9 +55,14 @@ class Issue: self.platform |= Platform.LINUX self.num_platforms += 1 if "Android" in j["labels"]: - self.platform |= Platform.ANDROID - self.num_platforms += 1 - if not self.platform: + if is_mb and self.num_platforms == 0: + raise Exception( + f"Android-only issue on Mullvad Browser: {j['references']['full']}!" + ) + elif not is_mb: + self.platform |= Platform.ANDROID + self.num_platforms += 1 + if not self.platform or (is_mb and self.platform == Platform.DESKTOP): self.platform = Platform.ALL_PLATFORMS self.num_platforms = 4 self.is_build = "Build System" in j["labels"] @@ -68,7 +85,9 @@ class Issue: return f"Bug {self.number}: {self.title} [{self.project}]" def __lt__(self, other): - return self.number < other.number + if self.project == other.project: + return self.number < other.number + return project_order[self.project] < project_order[other.project] def sorted_issues(issues): @@ -125,7 +144,7 @@ elif len(issues) > 1: sys.exit(4) else: iid = version - version = None + version = "CHANGEME!" if iid[0] == "#": iid = iid[1:] try: @@ -136,6 +155,9 @@ else: ) if r.ok and r.json(): issue = r.json()[0] + version_match = re.search(r"\b[0-9]+\.[.0-9a]+\b", issue["title"]) + if version_match: + version = version_match.group() except ValueError: pass if not issue: @@ -143,6 +165,9 @@ if not issue: "Release preparation issue not found. Please make sure it has ~Release Prep." ) sys.exit(5) +if "Sponsor 131" in issue["labels"]: + is_mb = True + project_order["mullvad-browser"] = 1 iid = issue["iid"] linked = {} @@ -159,8 +184,9 @@ for i in r.json(): linked = sorted_issues(linked) linked_build = sorted_issues(linked_build) +name = "Mullvad" if is_mb else "Tor" date = datetime.now().strftime("%B %d %Y") -print(f"Tor Browser {version} - {date}") +print(f"{name} Browser {version} - {date}") for issues in linked: print(f" * {issues[0].get_platforms()}") for i in issues: View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] 2 commits: fixup! Bug 7494: Create local home page for TBB.
by Pier Angelo Vendrame (＠pierov) 03 Oct '23

03 Oct '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 158d784f by Henry Wilkes at 2023-10-02T15:09:09+01:00 fixup! Bug 7494: Create local home page for TBB. Bug 32328: Add info box to let users know when Tor Browser does not control the Tor Network connection configuration. And provide a link to check.torproject.org - - - - - 76c3008e by Henry Wilkes at 2023-10-03T17:05:40+01:00 fixup! Tor Browser strings Bug 32328: Add info box to let users know when Tor Browser does not control the Tor Network connection configuration. And provide a link to check.torproject.org - - - - - 5 changed files: - browser/components/abouttor/AboutTorParent.sys.mjs - browser/components/abouttor/content/aboutTor.css - browser/components/abouttor/content/aboutTor.html - browser/components/abouttor/content/aboutTor.js - browser/locales/en-US/browser/tor-browser.ftl Changes: ===================================== browser/components/abouttor/AboutTorParent.sys.mjs ===================================== @@ -4,6 +4,7 @@ const lazy = {}; ChromeUtils.defineESModuleGetters(lazy, { AboutTorMessage: "resource:///modules/AboutTorMessage.sys.mjs", + TorConnect: "resource:///modules/TorConnect.sys.mjs", }); export class AboutTorParent extends JSWindowActorParent { @@ -12,6 +13,7 @@ export class AboutTorParent extends JSWindowActorParent { switch (message.name) { case "AboutTor:GetInitialData": return Promise.resolve({ + torConnectEnabled: lazy.TorConnect.enabled, messageData: lazy.AboutTorMessage.getNext(), isStable: AppConstants.MOZ_UPDATE_CHANNEL === "release", searchOnionize: Services.prefs.getBoolPref(onionizePref, false), ===================================== browser/components/abouttor/content/aboutTor.css ===================================== @@ -4,10 +4,12 @@ body { margin: 0; min-height: 100vh; display: grid; + --form-max-width: 600px; grid-template: /* Start space: unfilled. */ ". . ." 1fr "heading heading heading" auto + "tor-check tor-check tor-check" auto ". form ." min-content "message message message" auto /* End space: unfilled. @@ -16,8 +18,8 @@ body { * not shrink to zero, but will instead shrink to a minimum size of * 75px = (150px * 1fr / 2fr) */ ". . ." minmax(150px, 2fr) - /* NOTE: "form" will be given a maximum width of 600px. */ - / 1fr minmax(max-content, 600px) 1fr; + /* NOTE: "form" will be given a maximum width of --form-max-width. */ + / 1fr minmax(max-content, var(--form-max-width)) 1fr; justify-items: center; padding-inline: 20px; background: @@ -44,6 +46,32 @@ h1 { flex: 0 0 auto; } +#tor-check { + grid-area: tor-check; + max-width: var(--form-max-width); + box-sizing: border-box; + display: flex; + gap: 10px; + align-items: center; + padding-inline: 24px; + padding-block: 12px; + border-radius: 8px; + margin-block-start: 0; + margin-block-end: 30px; +} + +body:not(.show-tor-check) #tor-check { + display: none; +} + +#tor-check-icon { + flex: 0 0 auto; + width: 16px; + height: 16px; + -moz-context-properties: fill; + fill: currentColor; +} + .home-message:not(.shown-message) { display: none; } @@ -64,7 +92,10 @@ h1 { margin-inline-end: 0.3em; } -.home-message a { +:is( + .home-message, + #tor-check, +) a { /* Increase gap between the link and the rest of the text. */ margin-inline: 0.4em; } @@ -136,7 +167,11 @@ h1 { @media (prefers-contrast) { #search-form { - border-color: -moz-DialogText; + border-color: var(--in-content-box-border-color); + } + + #tor-check { + background-color: var(--in-content-box-info-background); } } @@ -150,6 +185,10 @@ h1 { --in-content-focus-outline: var(--focus-outline); } + #tor-check { + background-color: #1f0333; + } + body > :not(#search-form) { /* Same as --in-content-page-color when "prefers-color-scheme: dark" */ --in-content-page-color: #fbfbfe; ===================================== browser/components/abouttor/content/aboutTor.html ===================================== @@ -70,6 +70,20 @@ /> <span id="tor-browser-home-heading-text"></span> </h1> + <p id="tor-check"> + <img + id="tor-check-icon" + alt="" + src="chrome://global/skin/icons/info.svg" + /> + <span data-l10n-id="tor-browser-home-tor-check-warning"> + <a + data-l10n-name="tor-check-link" + href="https://check.torproject.org/" + target="_blank" + ></a> + </span> + </p> <form id="search-form" method="get" rel="noreferrer"> <img id="dax-logo" ===================================== browser/components/abouttor/content/aboutTor.js ===================================== @@ -97,6 +97,7 @@ const MessageArea = { _initialized: false, _messageData: null, _isStable: null, + _torConnectEnabled: null, /** * Initialize the message area and heading once elements are available. @@ -112,10 +113,13 @@ const MessageArea = { * @param {MessageData} messageData - The message data, indicating which * message to show. * @param {boolean} isStable - Whether this is the stable release version. + * @param {boolean} torConnectEnabled - Whether TorConnect is enabled, and + * therefore the Tor process was configured with about:torconnect. */ - setMessageData(messageData, isStable) { + setMessageData(messageData, isStable, torConnectEnabled) { this._messageData = messageData; this._isStable = isStable; + this._torConnectEnabled = torConnectEnabled; this._update(); }, @@ -140,6 +144,8 @@ const MessageArea = { : "tor-browser-home-heading-testing" ); + document.body.classList.toggle("show-tor-check", !this._torConnectEnabled); + const { updateVersion, updateURL, number } = this._messageData; if (updateVersion) { @@ -170,9 +176,10 @@ window.addEventListener("DOMContentLoaded", () => { }); window.addEventListener("InitialData", event => { - const { isStable, searchOnionize, messageData } = event.detail; + const { torConnectEnabled, isStable, searchOnionize, messageData } = + event.detail; SearchWidget.setOnionizeState(!!searchOnionize); - MessageArea.setMessageData(messageData, !!isStable); + MessageArea.setMessageData(messageData, !!isStable, !!torConnectEnabled); }); // YEC 2023 (year end campaign). ===================================== browser/locales/en-US/browser/tor-browser.ftl ===================================== @@ -14,6 +14,11 @@ appmenu-open-tor-manual = tor-browser-home-heading-stable = Explore. Privately. tor-browser-home-heading-testing = Test. Thoroughly. +# Only shown when underlying Tor process was not started by Tor Browser. +# "Tails" refers to the operating system, and should be translated as a brand name. +# <a data-l10n-name="tor-check-link"> should contain the link text and close with </a>. +tor-browser-home-tor-check-warning = Your connection to Tor is not being managed by Tor Browser. Some operating systems (like Tails) will manage this for you, or you could have set up a custom configuration. <a data-l10n-name="tor-check-link">Test your connection</a> + tor-browser-home-duck-duck-go-input = .placeholder = Search with DuckDuckGo # Toggle to switch from DuckDuckGo's plain ".com" domain to its ".onion" domain. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/1b1210… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/1b1210… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android][firefox-android-115.2.1-13.0-1] fixup! Modify UI/UX
by Dan Ballard (＠dan) 03 Oct '23

03 Oct '23

Dan Ballard pushed to branch firefox-android-115.2.1-13.0-1 at The Tor Project / Applications / firefox-android Commits: c48c9424 by clairehurst at 2023-10-03T16:00:40+00:00 fixup! Modify UI/UX - - - - - 5 changed files: - fenix/app/src/main/java/org/mozilla/fenix/browser/BrowserFragment.kt - fenix/app/src/main/java/org/mozilla/fenix/browser/OpenInAppOnboardingObserver.kt - fenix/app/src/main/java/org/mozilla/fenix/components/toolbar/DefaultToolbarMenu.kt - fenix/app/src/main/java/org/mozilla/fenix/customtabs/CustomTabToolbarMenu.kt - fenix/app/src/main/java/org/mozilla/fenix/downloads/DynamicDownloadDialog.kt Changes: ===================================== fenix/app/src/main/java/org/mozilla/fenix/browser/BrowserFragment.kt ===================================== @@ -164,7 +164,7 @@ class BrowserFragment : BaseBrowserFragment(), UserInteractionHandler { view = view, ) - if (context.settings().shouldShowOpenInAppCfr) { + if (false) { // context.settings().shouldShowOpenInAppCfr openInAppOnboardingObserver.set( feature = OpenInAppOnboardingObserver( context = context, ===================================== fenix/app/src/main/java/org/mozilla/fenix/browser/OpenInAppOnboardingObserver.kt ===================================== @@ -66,7 +66,7 @@ class OpenInAppOnboardingObserver( currentUrl = tab.content.url } else { // Loading state has changed - maybeShowOpenInAppBanner(tab.content.url, tab.content.loading) +// maybeShowOpenInAppBanner(tab.content.url, tab.content.loading) } } } ===================================== fenix/app/src/main/java/org/mozilla/fenix/components/toolbar/DefaultToolbarMenu.kt ===================================== @@ -373,7 +373,7 @@ open class DefaultToolbarMenu( findInPageItem, desktopSiteItem, customizeReaderView.apply { visible = ::shouldShowReaderViewCustomization }, - openInApp.apply { visible = ::shouldShowOpenInApp }, +// openInApp.apply { visible = ::shouldShowOpenInApp }, //reportSiteIssuePlaceholder, BrowserMenuDivider(), // addToHomeScreenItem.apply { visible = ::canAddToHomescreen }, ===================================== fenix/app/src/main/java/org/mozilla/fenix/customtabs/CustomTabToolbarMenu.kt ===================================== @@ -122,7 +122,7 @@ class CustomTabToolbarMenu( BrowserMenuDivider().apply { visible = { !isSandboxCustomTab } }, desktopMode, findInPage, - openInApp.apply { visible = ::shouldShowOpenInApp }, +// openInApp.apply { visible = ::shouldShowOpenInApp }, openInFenix.apply { visible = { !isSandboxCustomTab } }, BrowserMenuDivider(), menuToolbar, ===================================== fenix/app/src/main/java/org/mozilla/fenix/downloads/DynamicDownloadDialog.kt ===================================== @@ -70,6 +70,7 @@ class DynamicDownloadDialog( ) binding.downloadDialogActionButton.apply { + visibility = View.VISIBLE text = context.getString( mozilla.components.feature.downloads.R.string.mozac_feature_downloads_button_try_again, ) @@ -90,6 +91,7 @@ class DynamicDownloadDialog( ) binding.downloadDialogActionButton.apply { + visibility = View.GONE text = context.getString( mozilla.components.feature.downloads.R.string.mozac_feature_downloads_button_open, ) View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/c48… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/c48… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android][firefox-android-115.2.1-13.0-1] fixup! Modify UI/UX
by Dan Ballard (＠dan) 03 Oct '23

03 Oct '23

Dan Ballard pushed to branch firefox-android-115.2.1-13.0-1 at The Tor Project / Applications / firefox-android Commits: b62cfff5 by clairehurst at 2023-10-02T10:51:52-06:00 fixup! Modify UI/UX - - - - - 1 changed file: - fenix/app/src/main/java/org/mozilla/fenix/components/toolbar/BrowserToolbarCFRPresenter.kt Changes: ===================================== fenix/app/src/main/java/org/mozilla/fenix/components/toolbar/BrowserToolbarCFRPresenter.kt ===================================== @@ -70,7 +70,7 @@ class BrowserToolbarCFRPresenter( */ @Suppress("MagicNumber") fun start() { - if (shouldShowCFR()) { + if (false) { //shouldShowCFR() tcpCfrScope = browserStore.flowScoped { flow -> flow .mapNotNull { it.findCustomTabOrSelectedTab(sessionId)?.content?.progress } View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/b62… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/b62… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new branch maint-13.0
by Pier Angelo Vendrame (＠pierov) 03 Oct '23

03 Oct '23

Pier Angelo Vendrame pushed new branch maint-13.0 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mai… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40971: Do not ship Linux i686 debug symbols.
by Pier Angelo Vendrame (＠pierov) 03 Oct '23

03 Oct '23

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: bbea08af by Pier Angelo Vendrame at 2023-10-03T09:26:45+02:00 Bug 40971: Do not ship Linux i686 debug symbols. Debug symbols are not actually genereated because we used to have a linking problem when they were enabled. So, we have been shipping a tiny package only with generated headers in the last alphas. Hopefully, this is a temporary change, so I disabled only the final copy in projects/browser/build, but left the step in projects/firefox/build enabled. - - - - - 1 changed file: - projects/browser/build Changes: ===================================== projects/browser/build ===================================== @@ -414,9 +414,10 @@ SCRIPT_EOF [% IF c("var/updater_enabled") -%] cp $rootdir/[% c('input_files_by_name/firefox') %]/mar-tools-*.zip "$OUTDIR"/ [% END -%] -[% IF c("var/linux") -%] +[% IF c("var/linux-x86_64") -%] + # TODO: See if we can make symbols also for Linux i686, see tor-browser#42146. cp $rootdir/[% c('input_files_by_name/firefox') %]/browser-debug-symbols.tar.xz "$OUTDIR/[% c('var/project-name') %]-debug-symbols-[% c('var/mar_osname') %]-[% c('var/torbrowser_version') %].tar.xz" - [% IF c("var/linux-x86_64") && !c("var/asan") -%] + [% IF !c("var/asan") -%] cp $rootdir/[% c('input_files_by_name/firefox') %]/geckodriver.tar.xz "$OUTDIR/geckodriver-[% c('var/mar_osname') %]-[% c('var/torbrowser_version') %].tar.xz" [% END -%] [% ELSIF c("var/windows") -%] View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41955: update macos volume window background
by Pier Angelo Vendrame (＠pierov) 02 Oct '23

02 Oct '23

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: ff37a4e7 by Dan Ballard at 2023-10-02T09:31:02+00:00 Bug 41955: update macos volume window background - - - - - 3 changed files: - projects/browser/Bundle-Data/TorBrowser.dmg/.DS_Store - − projects/browser/Bundle-Data/TorBrowser.dmg/.background/background.tiff - + projects/browser/Bundle-Data/TorBrowser.dmg/.background/dmg-window_2x.png Changes: ===================================== projects/browser/Bundle-Data/TorBrowser.dmg/.DS_Store ===================================== Binary files a/projects/browser/Bundle-Data/TorBrowser.dmg/.DS_Store and b/projects/browser/Bundle-Data/TorBrowser.dmg/.DS_Store differ ===================================== projects/browser/Bundle-Data/TorBrowser.dmg/.background/background.tiff deleted ===================================== Binary files a/projects/browser/Bundle-Data/TorBrowser.dmg/.background/background.tiff and /dev/null differ ===================================== projects/browser/Bundle-Data/TorBrowser.dmg/.background/dmg-window_2x.png ===================================== Binary files /dev/null and b/projects/browser/Bundle-Data/TorBrowser.dmg/.background/dmg-window_2x.png differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] alpha: new version, 13.0a6
by richard (＠richard) 29 Sep '23

29 Sep '23

richard pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 1e31a2f2 by Richard Pospesel at 2023-09-29T20:54:43+00:00 alpha: new version, 13.0a6 - - - - - 30 changed files: - update_3/alpha/.htaccess - − update_3/alpha/13.0a1-13.0a5-linux-i686-ALL.xml - − update_3/alpha/13.0a1-13.0a5-linux-x86_64-ALL.xml - − update_3/alpha/13.0a1-13.0a5-macos-ALL.xml - − update_3/alpha/13.0a1-13.0a5-windows-i686-ALL.xml - − update_3/alpha/13.0a1-13.0a5-windows-x86_64-ALL.xml - − update_3/alpha/13.0a2-13.0a5-linux-i686-ALL.xml - − update_3/alpha/13.0a2-13.0a5-linux-x86_64-ALL.xml - − update_3/alpha/13.0a2-13.0a5-macos-ALL.xml - − update_3/alpha/13.0a2-13.0a5-windows-i686-ALL.xml - − update_3/alpha/13.0a2-13.0a5-windows-x86_64-ALL.xml - − update_3/alpha/13.0a3-13.0a5-linux-i686-ALL.xml - − update_3/alpha/13.0a3-13.0a5-linux-x86_64-ALL.xml - − update_3/alpha/13.0a3-13.0a5-macos-ALL.xml - − update_3/alpha/13.0a3-13.0a5-windows-i686-ALL.xml - − update_3/alpha/13.0a3-13.0a5-windows-x86_64-ALL.xml - + update_3/alpha/13.0a3-13.0a6-linux-i686-ALL.xml - + update_3/alpha/13.0a3-13.0a6-linux-x86_64-ALL.xml - + update_3/alpha/13.0a3-13.0a6-macos-ALL.xml - + update_3/alpha/13.0a3-13.0a6-windows-i686-ALL.xml - + update_3/alpha/13.0a3-13.0a6-windows-x86_64-ALL.xml - − update_3/alpha/13.0a4-13.0a5-linux-i686-ALL.xml - − update_3/alpha/13.0a4-13.0a5-linux-x86_64-ALL.xml - − update_3/alpha/13.0a4-13.0a5-macos-ALL.xml - − update_3/alpha/13.0a4-13.0a5-windows-i686-ALL.xml - − update_3/alpha/13.0a4-13.0a5-windows-x86_64-ALL.xml - + update_3/alpha/13.0a4-13.0a6-linux-i686-ALL.xml - + update_3/alpha/13.0a4-13.0a6-linux-x86_64-ALL.xml - + update_3/alpha/13.0a4-13.0a6-macos-ALL.xml - + update_3/alpha/13.0a4-13.0a6-windows-i686-ALL.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-spec][main] Bug 40059: FF112 Audit
by richard (＠richard) 29 Sep '23

29 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-spec Commits: 10d1b43e by Richard Pospesel at 2023-09-29T20:52:43+00:00 Bug 40059: FF112 Audit - - - - - 1 changed file: - + audits/FF112_AUDIT Changes: ===================================== audits/FF112_AUDIT ===================================== @@ -0,0 +1,79 @@ +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `431cede9cc9472bb648f5dfe24c54d0067c290e4` ( `FIREFOX_111_0_1_RELEASE` ) +- End: `8307d3d3e4bfbca09aaa17e444f106e1e1d91b65` ( `FIREFOX_112_0_2_RELEASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `9657aebb7450c5b58e8b9a88bec12bd5e9e0f700` ( `v97.2.0` ) +- End: `48916bbaf585f89fdff3404d181b260ed981a2d6` ( `v97.5.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Firefox Android: https://github.com/mozilla-mobile/firefox-android.git + +- Start: `6b0f9fdb3f603974914de82185cd184065b2ebee` +- End: `32bb398127bacccb268a272091d2e62b8d72d6b9` + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +#### Problematic Commits + +- Bug 1809305 - Allow user to copy an image to the clipboard (#948) + `fce0a9aa4f2ac60254dde989ee115252116fe1d7` + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42002 + - **RESOLUTION** nothing to do here, no linkability concern +- Bug 1819431 - Reimplement default browser notification with Nimbus Messaging equivalent (#1031) - `5989841d341f3ca867cdb2581dd06b6ce4d86156` + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42003 + - **RESOLUTION** nothing to do here, nimbus isn't initialised +- Bug 1818015 - Use custom tab to show privacy notice during onboarding `8661a63a378da6c76fede176824e8c8655d9d560` + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42004 + - **RESOLUTION** +- Bug 1816932 - Add Maps to app links common sub domains + `84227af1a8d6df8fa28f1f0c44966bf376b94337` + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42005 + - **RESOLUTION** nothing to do here, does not affect us as we don't use firefox's builtin onboarding +- Bug 1817726 - Add Recents url sharing - `c2586cba5091402723e4b4aaab7ac357a5e0b707` + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42006 + - **RESOLUTION** Disabled this feature in Tor Browser + +## Ticket Review ## + +Bugzilla Query: `https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=FIXED&target_milestone=112%20Branch&order=priority%2Cbug_severity&limit=0` + +Nothing of interest (manual inspection) + +### Problematic Tickets + +- **Give user a choice on how open in app works** https://bugzilla.mozilla.org/show_bug.cgi?id=1818085 + +## Export +- [x] Export Report and save to `tor-browser-spec/audits` \ No newline at end of file View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/10… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/10… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-spec][main] Bug 40053: FF106 Audit
by richard (＠richard) 29 Sep '23

29 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-spec Commits: cd21c0e9 by Richard Pospesel at 2023-09-29T20:36:36+00:00 Bug 40053: FF106 Audit - - - - - 1 changed file: - + audits/FF106_AUDIT Changes: ===================================== audits/FF106_AUDIT ===================================== @@ -0,0 +1,79 @@ +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `2dd649f09f70ec5b9304d62daeb427a86bbc5a36` ( `FIREFOX_105_0_3_RELEASE` ) +- End: `ac898d40ded7de23ef22a6f336f2ab1f0bca0d3f` ( `FIREFOX_106_0_5_RELEASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `be8254df118b2fc2aae726e1d13ca4c982bec920` ( `v94.3.1` ) +- End: `f1276e45b7c284bc4435896b1d5d09b35f3b295b` ( `v95.0.1` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x ] rust + +Nothing of interest (using `code_audit.sh`) + +## Android Components: https://github.com/mozilla-mobile/android-components.git + +- Start: `5bf7550ec9d5686fae721ee045132866f88afca6` +- End: `5f06485fc33a26206ba4ef7996ba1ae83134e353` ( `v106.0.5` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Fenix: https://github.com/mozilla-mobile/fenix.git + +- Start: `74e6ce8103fe3d4525c0a91d8e0c0403d1fee44f` ( `v106.0b1` ) +- End: `71ca6c1f7a7a2f2045b82ed16be329acadc15084` ( `v106.1.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Ticket Review ## + +Bugzilla Query: `https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=FIXED&target_milestone=106%20Branch&order=priority%2Cbug_severity&limit=0` + +Nothing of interest (manual inspection) + +#### Problematic Issues + +- **Add the possibility to check that the clipboard contains some pdfjs stuff** https://bugzilla.mozilla.org/show_bug.cgi?id=1788668 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41950 + - **RESOLUTION** nothing to do here, verified no linkability concerns via testing +- **Enable seperatePrivateDefault by default** https://bugzilla.mozilla.org/show_bug.cgi?id=1790681 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41951 + - **RESOLUTION** nothing to do here, this is a tweak to a feature we have completley disabled + +## Export +- [x] Export Report and save to `tor-browser-spec/audits` \ No newline at end of file View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/cd… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/cd… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-spec][main] Bug 40051: FF104 Audit
by richard (＠richard) 29 Sep '23

29 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-spec Commits: eb9428b3 by Richard Pospesel at 2023-09-29T20:32:12+00:00 Bug 40051: FF104 Audit - - - - - 1 changed file: - + audits/FF104_AUDIT Changes: ===================================== audits/FF104_AUDIT ===================================== @@ -0,0 +1,86 @@ +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `1f1c56dc6bae6b3302471f097ed132ef44cded86` ( `FIREFOX_103_0_2_RELEASE` ) +- End: `a8c31da1c243a855de8c3b241a437dd1b65684d5` ( `FIREFOX_104_0_2_RELEASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +#### Problematic Commits + +- Bug 1780014: Add specific telemetry for conservative and first-try handshakes `7a55bf9c230b83c0a195929feaad1f5e77195412` + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41937 + - **RESOLUTION** nothing to do here, telemetry is gated in the usual fashoin +- Bug 1769994 - [remote] Resolve localhost to an IP before starting httpd.js. `c193147b7b622a9b69e768079553e0d27c05c993` + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41938 + - **RESOLUTION** nothing to do here, this is a debugger feature not a web content one +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `b70c54882fec606d10e77520b1dd2ae144768747` ( `v94.0.0` ) +- End: `78b165b798118e9b5fa62af07aa44d663f386492` ( `v94.1.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Android Components: https://github.com/mozilla-mobile/android-components.git + +- Start: `ae333f064744e005ef22ac86ab8518d9bf7d9820` +- End: `7b0499725d3016a0d9288c337fcde4ffff60acfe` ( `v104.0.10` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Fenix: https://github.com/mozilla-mobile/fenix.git + +- Start: `3f7ddd5d6ef4f8495092138149d36b42e08dbbdb` ( `v104.0b1 ) +- End: `0f9ad767addb7eeef1800ac5bb80e094e3e87f07` ( `v104.2.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Ticket Review ## + +Bugzilla Query: `https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=FIXED&target_milestone=104%20Branch&order=priority%2Cbug_severity&limit=0` + +#### Problematic Tickets + +- **Support fetching data from Remote Setting** https://bugzilla.mozilla.org/show_bug.cgi?id=1728871 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41939 + - **RESOLUTION** nothing to do here, only applies to safe-browsing which we disable +- **When a filetype is set to "always ask" and the user makes a save/open choice in the dialog, we should not also open the downloads panel** https://bugzilla.mozilla.org/show_bug.cgi?id=1739348 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41940 + - **RESOLUTION** was not a security or privacy issue, just needed to make sure it played nciely with our own custom downloads UX which it does +- **Improve Math.pow accuracy for large exponents** https://bugzilla.mozilla.org/show_bug.cgi?id=1775254 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41941 + - **RESOLUTION** tjr fortunately verified this doesn't break existing fingerprinting assumptions upstream + +## Export +- [ ] Export Report and save to `tor-browser-spec/audits` \ No newline at end of file View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/eb… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/eb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-13.0a6-build1
by richard (＠richard) 29 Sep '23

29 Sep '23

richard pushed new tag mb-13.0a6-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-13.0a6-build1
by richard (＠richard) 29 Sep '23

29 Sep '23

richard pushed new tag tbb-13.0a6-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40959, 40960: Prepare Tor+Mullvad Browser Alpha 13.0a6
by richard (＠richard) 29 Sep '23

29 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 9c0b562d by Richard Pospesel at 2023-09-28T21:08:42+00:00 Bug 40959, 40960: Prepare Tor+Mullvad Browser Alpha 13.0a6 - - - - - 10 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/allowed_addons.json - projects/browser/config - projects/firefox-android/config - projects/firefox/config - projects/geckoview/config - projects/tor/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,25 @@ +Mullvadd Browser 13.0a6 - September 29 2023 + * All Platforms + * Updated uBlock Origin to 1.52.2 + * Updated Translations + * Bug 42139: Backport security fixes from Firefox 115.3.1 to 115.3.0 [tor-browser] + * Build System + * All Platforms + * Bug 40957: Expired subkey warning on Tor Browser GPG verification [tor-browser-build] + +Mullvad Browser 12.5.6 - September 29 2023 + * All Platforms + * Bug 42135: Backport security fixes from Firefox 115.3.1 to 102.15.1 [tor-browser] + * Build System + * All Platforms + * Bug 40957: Update subkey expiration date for Tor Browser gpg key [tor-browser-build] + +Mullvad Browser 12.5.5 - September 25 2023 + * All Platforms + * Updated NoScript to 11.4.27 + * Updated uBlock Origin to 1.52.2 + * Bug 42123: Backport security fixes from Firefox 118 to ESR 102.15 / 115.3 - based Tor Browser [tor-browser] + Mullvad Browser 13.0a5 - September 21 2023 * All Platforms * Updated Translations ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,50 @@ +Tor Browser 13.0a6 - September 29 2023 + * All Platforms + * Updated tor to 0.4.8.7 + * Updated Translations + * Bug 42139: Backport security fixes from Firefox 115.3.1 to 115.3.0 [tor-browser] + * Windows + macOS + Linux + * Bug 40899: Fix all of our usage of `app.support.baseURL` [tor-browser] + * Bug 41165: Crash with debug assertions enabled [tor-browser] + * Bug 41910: Support link regression in 115.1.0esr [tor-browser] + * Bug 42100: Connect Assist dropdown text not centered [tor-browser] + * Bug 42129: Disable the Tor restart prompt if shouldStartAndOwnTor is false [tor-browser]s + * Bug 42131: Tor Browser 13.0a5 does not track circuits created before Tor Browser started [tor-browser] + * Bug 42132: The new control port handling in Tor Browser 13 breaks a Tails security feature [tor-browser] + * Windows + * Bug 40954: Implement Windows installer icons [tor-browser-build] + * Bug 42087: Implement Windows application icons [tor-browser] + * Android + * Bug 42023: TB13.0a2 android: remove FF what's new [tor-browser] + * Bug 42114: Disable Allow sharing current tab URL from Android's Recents screen in private browsing mode [tor-browser] + * Bug 42115: Enhanced Tracking Protection can still be enabled [tor-browser] + * Bug 42133: Remove "Total Cookie Protection" popup [tor-browser] + * Bug 42134: Remove Android icon shortcuts [tor-browser] + * Build System + * All Platforms + * Bug 40741: Update browser and tor-android-service projects to pull data from pt_config.json [tor-browser-build] + * Bug 40957: Expired subkey warning on Tor Browser GPG verification [tor-browser-build] + * Bug 42130: Add support for specifying the branch in `tb-dev rebase-on-default` [tor-browser] + * Android + * Bug 40963: Tor Browesr 13.0 torbrowser-testbuild-android* targets fail to build [tor-browser-build] + +Tor Browser 12.5.6 - September 29 2023 + * All Platforms + * Bug 42135: Backport security fixes from Firefox 115.3.1 to 102.15.1 [tor-browser] + * Build System + * All Platforms + * Bug 40957: Update subkey expiration date for Tor Browser gpg key [tor-browser-build] + +Tor Browser 12.5.5 - September 25 2023 + * All Platforms + * Updated tor to 0.4.7.15 + * Updated NoScript to 11.4.27 + * Updated Translations + * Bug 42120: Use foursquare as domain front for snowflake [tor-browser] + * Bug 42123: Backport security fixes from Firefox 118 to ESR 102.15 / 115.3 - based Tor Browser [tor-browser] + * Windows + macOS + Linux + * Bug 42126: moat and connect assist broken for people who can't reach domain front [tor-browser] + Tor Browser 13.0a5 - September 21 2023 * All Platforms * Updated Translations ===================================== projects/browser/allowed_addons.json ===================================== @@ -17,7 +17,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/34/9734/13299734/13299734.pn…" } ], - "average_daily_users": 1013576, + "average_daily_users": 1015730, "categories": { "android": [ "experimental", @@ -31,7 +31,7 @@ "contributions_url": "https://opencollective.com/darkreader?utm_content=product-page-contribute&u…", "created": "2017-09-19T07:03:00Z", "current_version": { - "id": 5607027, + "id": 5628331, "compatibility": { "firefox": { "min": "54.0", @@ -42,7 +42,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/darkreader/versions/56070…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/darkreader/versions/56283…", "is_strict_compatibility_enabled": false, "license": { "id": 22, @@ -53,22 +53,22 @@ "url": "http://www.opensource.org/license/mit" }, "release_notes": { - "en-US": "- Optimize inline style handling (fixes DuckDuckGo issue).\n- Added an option to enable/disable the extension for all websites by default.\n- Dynamic mode fixes.\n- Users' fixes for websites." + "en-US": "- UI improvements.\n- Users' fixes for websites." }, - "reviewed": "2023-08-14T10:45:12Z", - "version": "4.9.65", + "reviewed": "2023-09-27T06:58:45Z", + "version": "4.9.66", "files": [ { - "id": 4151368, - "created": "2023-08-10T20:54:06Z", - "hash": "sha256:964d7fdeec1dc90b5238a82db699de7a2bbf54e3e2bf18569befff451f35f89a", + "id": 4172671, + "created": "2023-09-25T18:47:59Z", + "hash": "sha256:20b53356c36b0c76df614e2cb84e7ff3e1ab75b4fe2fd2bbca039026d018813f", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 668520, + "size": 675035, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4151368/darkreader-4.9.65…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4172671/darkreader-4.9.66…", "permissions": [ "alarms", "contextMenus", @@ -146,7 +146,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-08-14T10:45:12Z", + "last_updated": "2023-09-27T06:58:45Z", "name": { "ar": "Dark Reader", "bn": "Dark Reader", @@ -221,10 +221,10 @@ "category": "recommended" }, "ratings": { - "average": 4.5535, - "bayesian_average": 4.552349724151479, - "count": 5162, - "text_count": 1627 + "average": 4.5529, + "bayesian_average": 4.551750086132407, + "count": 5167, + "text_count": 1630 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/reviews/", "requires_payment": false, @@ -321,7 +321,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/versions/", - "weekly_downloads": 26661 + "weekly_downloads": 26198 }, "notes": null }, @@ -337,7 +337,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/56/7656/6937656/6937656.png?…" } ], - "average_daily_users": 257278, + "average_daily_users": 257049, "categories": { "android": [ "security-privacy" @@ -553,10 +553,10 @@ "category": "recommended" }, "ratings": { - "average": 4.8126, - "bayesian_average": 4.807945503403016, - "count": 1361, - "text_count": 240 + "average": 4.8129, + "bayesian_average": 4.808245170153086, + "count": 1363, + "text_count": 241 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/reviews/", "requires_payment": false, @@ -641,7 +641,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions/", - "weekly_downloads": 3350 + "weekly_downloads": 3111 }, "notes": null }, @@ -657,7 +657,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?…" } ], - "average_daily_users": 1117495, + "average_daily_users": 1118348, "categories": { "android": [ "security-privacy" @@ -1182,7 +1182,7 @@ }, "ratings": { "average": 4.8005, - "bayesian_average": 4.797741146818847, + "bayesian_average": 4.797737875525005, "count": 2291, "text_count": 436 }, @@ -1208,7 +1208,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/versions/", - "weekly_downloads": 18744 + "weekly_downloads": 18647 }, "notes": null }, @@ -1224,7 +1224,7 @@ "picture_url": null } ], - "average_daily_users": 6579871, + "average_daily_users": 6595621, "categories": { "android": [ "security-privacy" @@ -1236,7 +1236,7 @@ "contributions_url": "", "created": "2015-04-25T07:26:22Z", "current_version": { - "id": 5620609, + "id": 5626680, "compatibility": { "firefox": { "min": "78.0", @@ -1247,7 +1247,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/ublock-origin/versions/56…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/ublock-origin/versions/56…", "is_strict_compatibility_enabled": false, "license": { "id": 6, @@ -1258,22 +1258,22 @@ "url": "http://www.gnu.org/licenses/gpl-3.0.html" }, "release_notes": { - "en-US": "See complete release notes for <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/ada021240195c344534ac7…" rel=\"nofollow\">1.52.0</a>.\n\n<b>Fixes / changes</b>\n\n<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/43660a0fdd02565af8dd50…" rel=\"nofollow\">Add <code>json-prune-xhr-response</code> and <code>trusted-replace-xhr-response</code> scriptlets</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/0b76481be89ff31b1df929…" rel=\"nofollow\">Use <code>globalThis</code> instead of <code>self</code> in scriptlet helper</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/a3b064883c9254c33ef4d8…" rel=\"nofollow\">Add <code>json-prune-fetch-response</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/c01c1c7149d235d50f8619…" rel=\"nofollow\">Position reload icon in logger as per feedback</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/b99b2ae5d56e8805a8735a…" rel=\"nofollow\">Re-factor extra args for <code>set-constant</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/250b16a29ba08fd699fe14…" rel=\"nofollow\">Use Unicode version of hostnames in element picker</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/46fc71548ab78a56ec5213…" rel=\"nofollow\">Disallow trailing CSS universal selector unless properly separated</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/caa2344764766fe37075d4…" rel=\"nofollow\">Fix/improve <code>xml-prune</code> scriptlet</a><ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/38c21a2f21288e4256e098…" rel=\"nofollow\">Improve <code>xml-prune</code> scriptlet</a></li></ul></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/fffabcc429722fe82dd694…" rel=\"nofollow\">Put uBO's icon in nav bar by default</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f33ff640227bef265ab6e8…" rel=\"nofollow\">Properly serialize CSS combinators according to position in selector</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/683a1ade8523c917879854…" rel=\"nofollow\">Improve <code>no-xhr-if</code> scriptlet</a><ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/ac6728961d33617c634909…" rel=\"nofollow\">Improve <code>no-xhr-if</code> scriptlet</a></li></ul></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/fb5ebf9191f45d506f1c93…" rel=\"nofollow\">Use non-normalized URL for reload/report operations</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/ff81090360f2c366f4ab55…" rel=\"nofollow\">Add commented keywords to <code>googlesyndication_adsbygoogle.js</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/1e07de6f8e77576d2eab3f…" rel=\"nofollow\">Improve <code>fingerprint2.js</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/c2dce58b5b071126b08b35…" rel=\"nofollow\">Nothing can come after action operator in procedural cosmetic filters</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/6a76648535af29c605ce7d…" rel=\"nofollow\">Add <code>trusted-replace-fetch-response</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e1fc743a71a2459b9ff369…" rel=\"nofollow\">Harden <code>spoof-css</code> scriptlet</a></li><li>...</li></ul>\n<a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/d0c70dac55ba032441d8ce…" rel=\"nofollow\">Commits history since last version</a>." + "en-US": "See complete release notes for <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e38b38b24e46f55b7c57f8…" rel=\"nofollow\">1.52.2</a>.\n\n<b>Fixes / changes</b>\n\n<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/c8600567c8c689e1622572…" rel=\"nofollow\">Fix XHR hook partial response handling</a> (fix by @ephemeralViolette)</li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/086a07ab99860699ff92c9…" rel=\"nofollow\">Fix regression in <code>:is()</code> operator</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/70ff1de4e99376d9ec6147…" rel=\"nofollow\">Do not assume set viewport for popup panel when using portrait mode in descktop</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/bbe0786f040f57b52d6ee7…" rel=\"nofollow\">Fix removal of <code>:scope</code> prefix in <code>:has()</code> operator</a></li></ul>\n<a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/3851922ac2114338a1a10a…" rel=\"nofollow\">Commits history since last version</a>." }, - "reviewed": "2023-09-13T15:18:10Z", - "version": "1.52.0", + "reviewed": "2023-09-25T15:47:17Z", + "version": "1.52.2", "files": [ { - "id": 4164949, - "created": "2023-09-08T13:45:36Z", - "hash": "sha256:3932506ce4df306e4da7527d93d60fe0421cf15045c2f4ea73589d9a0902266b", + "id": 4171020, + "created": "2023-09-21T17:09:35Z", + "hash": "sha256:e8ee3f9d597a6d42db9d73fe87c1d521de340755fd8bfdd69e41623edfe096d6", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 3576858, + "size": 3578876, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4164949/ublock_origin-1.5…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4171020/ublock_origin-1.5…", "permissions": [ "dns", "menus", @@ -1389,7 +1389,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-09-19T11:30:34Z", + "last_updated": "2023-09-25T15:47:17Z", "name": { "ar": "uBlock Origin", "bg": "uBlock Origin", @@ -1534,10 +1534,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7828, - "bayesian_average": 4.782407037314675, - "count": 16029, - "text_count": 4157 + "average": 4.783, + "bayesian_average": 4.782607382532181, + "count": 16057, + "text_count": 4165 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/reviews/", "requires_payment": false, @@ -1599,7 +1599,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions/", - "weekly_downloads": 144702 + "weekly_downloads": 144531 }, "notes": null }, @@ -1615,7 +1615,7 @@ "picture_url": null } ], - "average_daily_users": 171394, + "average_daily_users": 170729, "categories": { "android": [ "photos-media" @@ -1739,7 +1739,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/ve…", - "weekly_downloads": 332 + "weekly_downloads": 320 }, "notes": null }, @@ -1755,7 +1755,7 @@ "picture_url": null } ], - "average_daily_users": 86528, + "average_daily_users": 86942, "categories": { "android": [ "experimental", @@ -1776,11 +1776,11 @@ }, "android": { "min": "48.0", - "max": "*" + "max": "68.*" } }, "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-possum/versions/4…", - "is_strict_compatibility_enabled": false, + "is_strict_compatibility_enabled": true, "license": { "id": 6, "is_custom": false, @@ -1893,7 +1893,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions/", - "weekly_downloads": 2140 + "weekly_downloads": 2292 }, "notes": null }, @@ -1909,7 +1909,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/64/9064/12929064/12929064.pn…" } ], - "average_daily_users": 268136, + "average_daily_users": 268632, "categories": { "android": [ "photos-media", @@ -2128,10 +2128,10 @@ "category": "recommended" }, "ratings": { - "average": 4.653, - "bayesian_average": 4.648390512257286, - "count": 1320, - "text_count": 254 + "average": 4.6533, + "bayesian_average": 4.648688441384268, + "count": 1321, + "text_count": 255 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/reviews/", "requires_payment": false, @@ -2152,7 +2152,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/versions/", - "weekly_downloads": 4186 + "weekly_downloads": 4242 }, "notes": null }, @@ -2175,7 +2175,7 @@ "picture_url": null } ], - "average_daily_users": 112281, + "average_daily_users": 112240, "categories": { "android": [ "other" @@ -2458,10 +2458,10 @@ "category": "recommended" }, "ratings": { - "average": 4.3768, - "bayesian_average": 4.372306305313843, - "count": 1258, - "text_count": 350 + "average": 4.3746, + "bayesian_average": 4.370112364351098, + "count": 1260, + "text_count": 351 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/reviews/", "requires_payment": false, @@ -2481,7 +2481,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/versions/", - "weekly_downloads": 28 + "weekly_downloads": 60 }, "notes": null }, @@ -2497,7 +2497,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/43/0143/143/143.png?modified…" } ], - "average_daily_users": 307256, + "average_daily_users": 306445, "categories": { "android": [ "performance", @@ -2687,10 +2687,10 @@ "category": "recommended" }, "ratings": { - "average": 4.3961, - "bayesian_average": 4.393408956051146, - "count": 2113, - "text_count": 817 + "average": 4.3975, + "bayesian_average": 4.39481198926411, + "count": 2118, + "text_count": 819 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/reviews/", "requires_payment": false, @@ -2734,7 +2734,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/", - "weekly_downloads": 7459 + "weekly_downloads": 7499 }, "notes": null }, @@ -2750,7 +2750,7 @@ "picture_url": null } ], - "average_daily_users": 153972, + "average_daily_users": 153737, "categories": { "android": [ "performance", @@ -2862,10 +2862,10 @@ "category": "recommended" }, "ratings": { - "average": 3.9009, - "bayesian_average": 3.8966720604333664, - "count": 1161, - "text_count": 412 + "average": 3.8896, + "bayesian_average": 3.8854127838445747, + "count": 1169, + "text_count": 420 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/revi…", "requires_payment": false, @@ -2884,7 +2884,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/vers…", - "weekly_downloads": 1510 + "weekly_downloads": 1730 }, "notes": null } ===================================== projects/browser/config ===================================== @@ -91,9 +91,9 @@ input_files: - URL: https://addons.mozilla.org/firefox/downloads/file/4164985/noscript-11.4.27.… name: noscript sha256sum: 6b57d9afce663f801177b7492fe7f00967ee3e66b6351b2cf3ff2a6c3ca99637 - - URL: https://addons.mozilla.org/firefox/downloads/file/4164949/ublock_origin-1.5… + - URL: https://addons.mozilla.org/firefox/downloads/file/4171020/ublock_origin-1.5… name: ublock-origin - sha256sum: 3932506ce4df306e4da7527d93d60fe0421cf15045c2f4ea73589d9a0902266b + sha256sum: e8ee3f9d597a6d42db9d73fe87c1d521de340755fd8bfdd69e41623edfe096d6 enable: '[% c("var/mullvad-browser") %]' - URL: https://github.com/mullvad/browser-extension/releases/download/v0.8.3-firef… name: mullvad-extension ===================================== projects/firefox-android/config ===================================== @@ -16,7 +16,7 @@ container: var: fenix_version: 115.2.1 browser_branch: 13.0-1 - browser_build: 4 + browser_build: 5 variant: Beta # This should be updated when the list of gradle dependencies is changed. gradle_dependencies_version: 1 ===================================== projects/firefox/config ===================================== @@ -18,7 +18,7 @@ var: firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '13.0' browser_branch: '[% c("var/browser_series") %]-1' - browser_build: 2 + browser_build: 3 branding_directory_prefix: 'tb' copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' @@ -86,7 +86,7 @@ targets: mullvadbrowser: git_url: https://gitlab.torproject.org/tpo/applications/mullvad-browser.git var: - browser_build: 3 + browser_build: 4 branding_directory_prefix: 'mb' gitlab_project: https://gitlab.torproject.org/tpo/applications/mullvad-browser updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' ===================================== projects/geckoview/config ===================================== @@ -16,7 +16,7 @@ container: var: geckoview_version: 115.3.0esr browser_branch: 13.0-1 - browser_build: 2 + browser_build: 3 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse HEAD") %]' ===================================== projects/tor/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' -version: 0.4.8.6 +version: 0.4.8.7 git_hash: 'tor-[% c("version") %]' git_url: https://gitlab.torproject.org/tpo/core/tor.git git_submodule: 1 ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: b7a2b2cde8e814640554e14520b6b81693810bbd + git_hash: 066d24af02663ecfbf181541acd4ebd0988499ef targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: a899ebbc621f7fa7d8896248f5cb8a4866d0b2ae + git_hash: 99856dfcaf4538a76980bb2e4666658ef2040cb0 targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: d9587ecce92356c23dc491fdee45dcd72e03bbed + git_hash: 51045186952e0eab228e4c887914beceaff76583 compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -81,13 +81,12 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '13.0a5' + torbrowser_version: '13.0a6' torbrowser_build: 'build1' torbrowser_incremental_from: - - '13.0a1' - - '13.0a2' - '13.0a3' - '13.0a4' + - '13.0a5' updater_enabled: 1 build_mar: 1 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] release: new version, 12.5.6
by boklm (＠boklm) 29 Sep '23

29 Sep '23

boklm pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 24be3be0 by Nicolas Vigier at 2023-09-29T18:40:14+02:00 release: new version, 12.5.6 - - - - - 30 changed files: - update_3/release/.htaccess - − update_3/release/12.5.1-12.5.5-linux32-ALL.xml - − update_3/release/12.5.1-12.5.5-linux64-ALL.xml - − update_3/release/12.5.1-12.5.5-macos-ALL.xml - − update_3/release/12.5.1-12.5.5-win32-ALL.xml - − update_3/release/12.5.1-12.5.5-win64-ALL.xml - − update_3/release/12.5.2-12.5.5-linux32-ALL.xml - − update_3/release/12.5.2-12.5.5-linux64-ALL.xml - − update_3/release/12.5.2-12.5.5-macos-ALL.xml - − update_3/release/12.5.2-12.5.5-win32-ALL.xml - − update_3/release/12.5.2-12.5.5-win64-ALL.xml - − update_3/release/12.5.3-12.5.5-linux32-ALL.xml - − update_3/release/12.5.3-12.5.5-linux64-ALL.xml - − update_3/release/12.5.3-12.5.5-macos-ALL.xml - − update_3/release/12.5.3-12.5.5-win32-ALL.xml - − update_3/release/12.5.3-12.5.5-win64-ALL.xml - + update_3/release/12.5.3-12.5.6-linux32-ALL.xml - + update_3/release/12.5.3-12.5.6-linux64-ALL.xml - + update_3/release/12.5.3-12.5.6-macos-ALL.xml - + update_3/release/12.5.3-12.5.6-win32-ALL.xml - + update_3/release/12.5.3-12.5.6-win64-ALL.xml - − update_3/release/12.5.4-12.5.5-linux32-ALL.xml - − update_3/release/12.5.4-12.5.5-linux64-ALL.xml - − update_3/release/12.5.4-12.5.5-macos-ALL.xml - − update_3/release/12.5.4-12.5.5-win32-ALL.xml - − update_3/release/12.5.4-12.5.5-win64-ALL.xml - + update_3/release/12.5.4-12.5.6-linux32-ALL.xml - + update_3/release/12.5.4-12.5.6-linux64-ALL.xml - + update_3/release/12.5.4-12.5.6-macos-ALL.xml - + update_3/release/12.5.4-12.5.6-win32-ALL.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-12.5.6-build1
by Pier Angelo Vendrame (＠pierov) 29 Sep '23

29 Sep '23

Pier Angelo Vendrame pushed new tag mb-12.5.6-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-12.5.6-build1
by Pier Angelo Vendrame (＠pierov) 29 Sep '23

29 Sep '23

Pier Angelo Vendrame pushed new tag tbb-12.5.6-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-12.5] Bug 40967: Tor Browser and Mullvad Browser 12.5.6
by Pier Angelo Vendrame (＠pierov) 29 Sep '23

29 Sep '23

Pier Angelo Vendrame pushed to branch maint-12.5 at The Tor Project / Applications / tor-browser-build Commits: 35ce1e78 by Pier Angelo Vendrame at 2023-09-28T17:06:09+02:00 Bug 40967: Tor Browser and Mullvad Browser 12.5.6 - - - - - 7 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/allowed_addons.json - projects/firefox/config - projects/geckoview/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,4 +1,11 @@ -Mullvad Browse 12.5.5 - September 25 2023 +Mullvad Browser 12.5.6 - September 29 2023 + * All Platforms + * Bug 42135: Backport security fixes from Firefox 115.3.1 to 102.15.1 [tor-browser] + * Build System + * All Platforms + * Bug 40957: Update subkey expiration date for Tor Browser gpg key [tor-browser-build] + +Mullvad Browser 12.5.5 - September 25 2023 * All Platforms * Updated NoScript to 11.4.27 * Upated uBlock Origin to 1.52.2 ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,10 @@ +Tor Browser 12.5.6 - September 29 2023 + * All Platforms + * Bug 42135: Backport security fixes from Firefox 115.3.1 to 102.15.1 [tor-browser] + * Build System + * All Platforms + * Bug 40957: Update subkey expiration date for Tor Browser gpg key [tor-browser-build] + Tor Browser 12.5.5 - September 25 2023 * All Platforms * Updated tor to 0.4.7.15 ===================================== projects/browser/allowed_addons.json ===================================== @@ -17,7 +17,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/34/9734/13299734/13299734.pn…" } ], - "average_daily_users": 1014444, + "average_daily_users": 1019027, "categories": { "android": [ "experimental", @@ -31,7 +31,7 @@ "contributions_url": "https://opencollective.com/darkreader?utm_content=product-page-contribute&u…", "created": "2017-09-19T07:03:00Z", "current_version": { - "id": 5607027, + "id": 5628331, "compatibility": { "firefox": { "min": "54.0", @@ -42,7 +42,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/darkreader/versions/56070…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/darkreader/versions/56283…", "is_strict_compatibility_enabled": false, "license": { "id": 22, @@ -53,22 +53,22 @@ "url": "http://www.opensource.org/license/mit" }, "release_notes": { - "en-US": "- Optimize inline style handling (fixes DuckDuckGo issue).\n- Added an option to enable/disable the extension for all websites by default.\n- Dynamic mode fixes.\n- Users' fixes for websites." + "en-US": "- UI improvements.\n- Users' fixes for websites." }, - "reviewed": "2023-08-14T10:45:12Z", - "version": "4.9.65", + "reviewed": "2023-09-27T06:58:45Z", + "version": "4.9.66", "files": [ { - "id": 4151368, - "created": "2023-08-10T20:54:06Z", - "hash": "sha256:964d7fdeec1dc90b5238a82db699de7a2bbf54e3e2bf18569befff451f35f89a", + "id": 4172671, + "created": "2023-09-25T18:47:59Z", + "hash": "sha256:20b53356c36b0c76df614e2cb84e7ff3e1ab75b4fe2fd2bbca039026d018813f", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 668520, + "size": 675035, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4151368/darkreader-4.9.65…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4172671/darkreader-4.9.66…", "permissions": [ "alarms", "contextMenus", @@ -146,7 +146,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-08-14T10:45:12Z", + "last_updated": "2023-09-27T06:58:45Z", "name": { "ar": "Dark Reader", "bn": "Dark Reader", @@ -221,10 +221,10 @@ "category": "recommended" }, "ratings": { - "average": 4.5534, - "bayesian_average": 4.55225009063314, - "count": 5166, - "text_count": 1629 + "average": 4.5529, + "bayesian_average": 4.551750086132407, + "count": 5167, + "text_count": 1630 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/reviews/", "requires_payment": false, @@ -321,7 +321,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/versions/", - "weekly_downloads": 26444 + "weekly_downloads": 25995 }, "notes": null }, @@ -337,7 +337,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/56/7656/6937656/6937656.png?…" } ], - "average_daily_users": 256930, + "average_daily_users": 257580, "categories": { "android": [ "security-privacy" @@ -553,10 +553,10 @@ "category": "recommended" }, "ratings": { - "average": 4.8128, - "bayesian_average": 4.80814342064221, - "count": 1362, - "text_count": 240 + "average": 4.8129, + "bayesian_average": 4.808245170153086, + "count": 1363, + "text_count": 241 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/reviews/", "requires_payment": false, @@ -641,7 +641,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions/", - "weekly_downloads": 3097 + "weekly_downloads": 3112 }, "notes": null }, @@ -657,7 +657,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?…" } ], - "average_daily_users": 1117012, + "average_daily_users": 1121267, "categories": { "android": [ "security-privacy" @@ -1182,7 +1182,7 @@ }, "ratings": { "average": 4.8005, - "bayesian_average": 4.797738794107263, + "bayesian_average": 4.797737875525005, "count": 2291, "text_count": 436 }, @@ -1208,7 +1208,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/versions/", - "weekly_downloads": 18666 + "weekly_downloads": 18633 }, "notes": null }, @@ -1224,7 +1224,7 @@ "picture_url": null } ], - "average_daily_users": 6583619, + "average_daily_users": 6616238, "categories": { "android": [ "security-privacy" @@ -1389,7 +1389,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-09-25T15:47:17Z", + "last_updated": "2023-09-28T14:15:40Z", "name": { "ar": "uBlock Origin", "bg": "uBlock Origin", @@ -1534,10 +1534,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7829, - "bayesian_average": 4.782507229381479, - "count": 16045, - "text_count": 4163 + "average": 4.7831, + "bayesian_average": 4.782707258784582, + "count": 16060, + "text_count": 4167 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/reviews/", "requires_payment": false, @@ -1599,7 +1599,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions/", - "weekly_downloads": 146003 + "weekly_downloads": 145039 }, "notes": null }, @@ -1615,7 +1615,7 @@ "picture_url": null } ], - "average_daily_users": 170996, + "average_daily_users": 170596, "categories": { "android": [ "photos-media" @@ -1739,7 +1739,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/ve…", - "weekly_downloads": 305 + "weekly_downloads": 329 }, "notes": null }, @@ -1755,7 +1755,7 @@ "picture_url": null } ], - "average_daily_users": 86760, + "average_daily_users": 87196, "categories": { "android": [ "experimental", @@ -1893,7 +1893,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions/", - "weekly_downloads": 2439 + "weekly_downloads": 2327 }, "notes": null }, @@ -1909,7 +1909,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/64/9064/12929064/12929064.pn…" } ], - "average_daily_users": 268258, + "average_daily_users": 269273, "categories": { "android": [ "photos-media", @@ -2129,7 +2129,7 @@ }, "ratings": { "average": 4.6533, - "bayesian_average": 4.648688441384268, + "bayesian_average": 4.6486869167138405, "count": 1321, "text_count": 255 }, @@ -2152,7 +2152,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/versions/", - "weekly_downloads": 4288 + "weekly_downloads": 4295 }, "notes": null }, @@ -2175,7 +2175,7 @@ "picture_url": null } ], - "average_daily_users": 112323, + "average_daily_users": 112195, "categories": { "android": [ "other" @@ -2458,10 +2458,10 @@ "category": "recommended" }, "ratings": { - "average": 4.3746, - "bayesian_average": 4.370112364351098, - "count": 1260, - "text_count": 351 + "average": 4.3719, + "bayesian_average": 4.367415693761399, + "count": 1261, + "text_count": 352 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/reviews/", "requires_payment": false, @@ -2481,7 +2481,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/versions/", - "weekly_downloads": 59 + "weekly_downloads": 68 }, "notes": null }, @@ -2497,7 +2497,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/43/0143/143/143.png?modified…" } ], - "average_daily_users": 306943, + "average_daily_users": 306985, "categories": { "android": [ "performance", @@ -2734,7 +2734,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/", - "weekly_downloads": 7384 + "weekly_downloads": 7494 }, "notes": null }, @@ -2750,7 +2750,7 @@ "picture_url": null } ], - "average_daily_users": 153921, + "average_daily_users": 153839, "categories": { "android": [ "performance", @@ -2862,10 +2862,10 @@ "category": "recommended" }, "ratings": { - "average": 3.897, - "bayesian_average": 3.8927898014617073, - "count": 1165, - "text_count": 416 + "average": 3.8896, + "bayesian_average": 3.8854127838445747, + "count": 1169, + "text_count": 420 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/revi…", "requires_payment": false, @@ -2884,7 +2884,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/vers…", - "weekly_downloads": 1686 + "weekly_downloads": 1772 }, "notes": null } ===================================== projects/firefox/config ===================================== @@ -18,7 +18,7 @@ var: firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '12.5' browser_branch: '[% c("var/browser_series") %]-1' - browser_build: 2 + browser_build: 3 branding_directory_prefix: 'tb' copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' ===================================== projects/geckoview/config ===================================== @@ -16,7 +16,7 @@ container: var: geckoview_version: 102.15.1esr browser_branch: 12.5-1 - browser_build: 2 + browser_build: 3 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse HEAD") %]' ===================================== projects/translation/config ===================================== @@ -6,7 +6,7 @@ version: '[% c("abbrev") %]' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: b7a2b2cde8e814640554e14520b6b81693810bbd + git_hash: 066d24af02663ecfbf181541acd4ebd0988499ef targets: nightly: git_hash: 'base-browser' @@ -18,7 +18,7 @@ steps: git_hash: 'basebrowser-newidentityftl' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 00be2129bd017415db63a5da5e18ce54375b7dde + git_hash: 7fb3fda1132392cc45c3c147757d95c14278f400 targets: nightly: git_hash: 'tor-browser' @@ -26,7 +26,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: fca8abec22d042536973c482af21683edd98f1b1 + git_hash: 51045186952e0eab228e4c887914beceaff76583 targets: nightly: git_hash: 'fenix-torbrowserstringsxml' ===================================== rbm.conf ===================================== @@ -94,13 +94,12 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '12.5.5' + torbrowser_version: '12.5.6' torbrowser_build: 'build1' torbrowser_incremental_from: + - 12.5.5 - 12.5.4 - 12.5.3 - - 12.5.2 - - 12.5.1 updater_enabled: 1 build_mar: 1 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/3… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android] Pushed new tag firefox-android-115.2.1-13.0-1-build5
by richard (＠richard) 28 Sep '23

28 Sep '23

richard pushed new tag firefox-android-115.2.1-13.0-1-build5 at The Tor Project / Applications / firefox-android -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/tree/firef… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-115.3.0esr-13.0-1-build4
by richard (＠richard) 28 Sep '23

28 Sep '23

richard pushed new tag mullvad-browser-115.3.0esr-13.0-1-build4 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-115.3.0esr-13.0-1-build3
by richard (＠richard) 28 Sep '23

28 Sep '23

richard pushed new tag tor-browser-115.3.0esr-13.0-1-build3 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40741: Update browser, and tor-android-service projects to populate PT...
by richard (＠richard) 28 Sep '23

28 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 995029fd by Richard Pospesel at 2023-09-28T18:51:26+00:00 Bug 40741: Update browser, and tor-android-service projects to populate PT settings from pt_config.json - - - - - 13 changed files: - − projects/browser/Bundle-Data/PTConfigs/bridge_prefs.js - − projects/browser/Bundle-Data/PTConfigs/linux/torrc-defaults-appendix - − projects/browser/Bundle-Data/PTConfigs/mac/torrc-defaults-appendix - − projects/browser/Bundle-Data/PTConfigs/windows/torrc-defaults-appendix - projects/browser/build - projects/browser/config - − projects/common/bridges_list.meek-azure.txt - − projects/common/bridges_list.obfs4.txt - − projects/common/bridges_list.snowflake.txt - projects/tor-android-service/build - projects/tor-android-service/config - projects/tor-expert-bundle/build - projects/tor-expert-bundle/config Changes: ===================================== projects/browser/Bundle-Data/PTConfigs/bridge_prefs.js deleted ===================================== @@ -1,2 +0,0 @@ -# Tor Launcher preferences (default bridges): -pref("extensions.torlauncher.default_bridge_recommended_type", "obfs4"); ===================================== projects/browser/Bundle-Data/PTConfigs/linux/torrc-defaults-appendix deleted ===================================== @@ -1,11 +0,0 @@ -## lyrebird configuration -ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec ./TorBrowser/Tor/PluggableTransports/lyrebird - -## snowflake configuration -ClientTransportPlugin snowflake exec ./TorBrowser/Tor/PluggableTransports/snowflake-client - -## webtunnel configuration -ClientTransportPlugin webtunnel exec ./TorBrowser/Tor/PluggableTransports/webtunnel-client - -## conjure configuration -ClientTransportPlugin conjure exec ./TorBrowser/Tor/PluggableTransports/conjure-client -registerURL https://registration.refraction.network/api ===================================== projects/browser/Bundle-Data/PTConfigs/mac/torrc-defaults-appendix deleted ===================================== @@ -1,11 +0,0 @@ -## lyrebird configuration -ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec PluggableTransports/lyrebird - -## snowflake configuration -ClientTransportPlugin snowflake exec PluggableTransports/snowflake-client - -## webtunnel configuration -ClientTransportPlugin webtunnel exec PluggableTransports/webtunnel-client - -## conjure configuration -ClientTransportPlugin conjure exec PluggableTransports/conjure-client -registerURL https://registration.refraction.network/api ===================================== projects/browser/Bundle-Data/PTConfigs/windows/torrc-defaults-appendix deleted ===================================== @@ -1,11 +0,0 @@ -## lyrebird configuration -ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec TorBrowser\Tor\PluggableTransports\lyrebird.exe - -## snowflake configuration -ClientTransportPlugin snowflake exec TorBrowser\Tor\PluggableTransports\snowflake-client.exe - -## webtunnel configuration -ClientTransportPlugin webtunnel exec TorBrowser\Tor\PluggableTransports\webtunnel-client.exe - -## conjure configuration -ClientTransportPlugin conjure exec TorBrowser\Tor\PluggableTransports\conjure-client.exe -registerURL https://registration.refraction.network/api ===================================== projects/browser/build ===================================== @@ -15,7 +15,7 @@ mkdir -p $OUTDIR # directory named tor-browser (instead of tor-browser_en-US). Therefore we # stage everything under tor-browser-stage to avoid a conflict. TB_STAGE_DIR=$distdir/tor-browser-stage -GENERATEDPREFSPATH=$rootdir/Bundle-Data/PTConfigs/generated-prefs.js +GENERATEDPREFSPATH=$rootdir/Bundle-Data/generated-prefs.js # Create initially empty prefs file where we can dump our conditionally included/genetered prefs touch "$GENERATEDPREFSPATH" @@ -100,10 +100,10 @@ mv [% c('input_files_by_name/noscript') %] "$TBDIR/$EXTSPATH/{73a6fe31-595d-460b mkdir -p "$TBDIR/$TORCONFIGPATH" [% IF c("var/macos_universal") %]"$TBDIR_AARCH64/$TORCONFIGPATH"[% END %] mv_tbdir data/{geoip,geoip6} "$TORCONFIGPATH" - # Bridge lists will be consumed later in `bridges_conf` - mv tor/pluggable_transports/bridges_list.*.txt tor/pluggable_transports/pt_config.json $rootdir + # pt_config.json will be consumed later in `bridges_conf` + mv tor/pluggable_transports/pt_config.json $rootdir [% IF c("var/macos_universal") %] - rm -f aarch64/tor/pluggable_transports/bridges_list.*.txt aarch64/tor/pluggable_transports/pt_config.json + rm -f aarch64/tor/pluggable_transports/pt_config.json [% END -%] # Move READMEs from tor-expert-bundle to the doc dir @@ -246,24 +246,37 @@ do done [% IF c("var/tor-browser") -%] + PT_CONFIG="$rootdir/pt_config.json" + + # Write our ClientTransportPlugin lines to torrc-defults for tbdir in "${TBDIRS[@]}" do - cat Bundle-Data/PTConfigs/[% bundledata_osname %]/torrc-defaults-appendix >> "$tbdir/$TORCONFIGPATH/torrc-defaults" + PT_PATH='[% c("var/pt_path") %]' + TORRC_DEFAULTS="$tbdir/$TORCONFIGPATH/torrc-defaults" + jq --raw-output .pluggableTransports[] "${PT_CONFIG}" | while read -r line; do + echo "${line/\$\{pt_path\}/${PT_PATH}}" >> "$TORRC_DEFAULTS" + done done - cat Bundle-Data/PTConfigs/bridge_prefs.js >> "$GENERATEDPREFSPATH" + # Write Default Bridge Prefs + echo "# Tor Launcher preferences (default bridges):" >> "$GENERATEDPREFSPATH" + RECOMMMENDED_DEFAULT=$(jq -r .recommendedDefault "${PT_CONFIG}") + echo "pref(\"extensions.torlauncher.default_bridge_recommended_type\", \"${RECOMMMENDED_DEFAULT}\");" >> "$GENERATEDPREFSPATH" + + # Writes bridge-line prefs for a given bridge type function bridges_conf { - local pt="$1" + local bridge_type="$1" local i=1 - while read -r line - do - echo "pref(\"extensions.torlauncher.default_bridge.$pt.$i\", \"$line\");" >> "$GENERATEDPREFSPATH" + jq -r ".bridges.\"$bridge_type\" | .[]" "${PT_CONFIG}" | while read -r line; do + echo "pref(\"extensions.torlauncher.default_bridge.$bridge_type.$i\", \"$line\");" >> "$GENERATEDPREFSPATH" i=$((i + 1)) - done < "$rootdir/bridges_list.$pt.txt" + done } - bridges_conf obfs4 - bridges_conf meek-azure - bridges_conf snowflake + + # Iterate over our bridge types and write default bridgelines for each + for bridge_type in $(jq -r ".bridges | keys[]" "${PT_CONFIG}"); do + bridges_conf $bridge_type + done [% END -%] [% IF c("var/linux") && c("var/tor-browser") %] ===================================== projects/browser/config ===================================== @@ -11,6 +11,7 @@ var: - libparallel-forkmanager-perl - libfile-slurp-perl - bzip2 + - jq mar_osname: '[% c("var/osname") %]' targets: @@ -21,6 +22,7 @@ targets: # builds (bug 29812). We don't need it in x86_64 builds, but we # share the container to reduce space used. - libc6-i386 + pt_path: ./TorBrowser/Tor/PluggableTransports/ macos: var: arch_deps: @@ -29,6 +31,7 @@ targets: - python3-pip - python3-distutils-extra - python3-psutil + pt_path: PluggableTransports/ macos-universal: var: mar_osname: macos @@ -36,6 +39,7 @@ targets: var: arch_deps: - python3-pefile + pt_path: TorBrowser\Tor\PluggableTransports\ android: build: '[% INCLUDE build.android %]' var: ===================================== projects/common/bridges_list.meek-azure.txt deleted ===================================== @@ -1 +0,0 @@ -meek_lite 192.0.2.18:80 BE776A53492E1E044A26F17306E1BC46A55A1625 url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com ===================================== projects/common/bridges_list.obfs4.txt deleted ===================================== @@ -1,11 +0,0 @@ -obfs4 192.95.36.142:443 CDF2E852BF539B82BD10E27E9115A31734E378C2 cert=qUVQ0srL1JI/vO6V6m/24anYXiJD3QP2HgzUKQtQ7GRqqUvs7P+tG43RtAqdhLOALP7DJQ iat-mode=1 -obfs4 37.218.245.14:38224 D9A82D2F9C2F65A18407B1D2B764F130847F8B5D cert=bjRaMrr1BRiAW8IE9U5z27fQaYgOhX1UCmOpg2pFpoMvo6ZgQMzLsaTzzQNTlm7hNcb+Sg iat-mode=0 -obfs4 85.31.186.98:443 011F2599C0E9B27EE74B353155E244813763C3E5 cert=ayq0XzCwhpdysn5o0EyDUbmSOx3X/oTEbzDMvczHOdBJKlvIdHHLJGkZARtT4dcBFArPPg iat-mode=0 -obfs4 85.31.186.26:443 91A6354697E6B02A386312F68D82CF86824D3606 cert=PBwr+S8JTVZo6MPdHnkTwXJPILWADLqfMGoVvhZClMq/Urndyd42BwX9YFJHZnBB3H0XCw iat-mode=0 -obfs4 193.11.166.194:27015 2D82C2E354D531A68469ADF7F878FA6060C6BACA cert=4TLQPJrTSaDffMK7Nbao6LC7G9OW/NHkUwIdjLSS3KYf0Nv4/nQiiI8dY2TcsQx01NniOg iat-mode=0 -obfs4 193.11.166.194:27020 86AC7B8D430DAC4117E9F42C9EAED18133863AAF cert=0LDeJH4JzMDtkJJrFphJCiPqKx7loozKN7VNfuukMGfHO0Z8OGdzHVkhVAOfo1mUdv9cMg iat-mode=0 -obfs4 193.11.166.194:27025 1AE2C08904527FEA90C4C4F8C1083EA59FBC6FAF cert=ItvYZzW5tn6v3G4UnQa6Qz04Npro6e81AP70YujmK/KXwDFPTs3aHXcHp4n8Vt6w/bv8cA iat-mode=0 -obfs4 209.148.46.65:443 74FAD13168806246602538555B5521A0383A1875 cert=ssH+9rP8dG2NLDN2XuFw63hIO/9MNNinLmxQDpVa+7kTOa9/m+tGWT1SmSYpQ9uTBGa6Hw iat-mode=0 -obfs4 146.57.248.225:22 10A6CD36A537FCE513A322361547444B393989F0 cert=K1gDtDAIcUfeLqbstggjIw2rtgIKqdIhUlHp82XRqNSq/mtAjp1BIC9vHKJ2FAEpGssTPw iat-mode=0 -obfs4 45.145.95.6:27015 C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C cert=TD7PbUO0/0k6xYHMPW3vJxICfkMZNdkRrb63Zhl5j9dW3iRGiCx0A7mPhe5T2EDzQ35+Zw iat-mode=0 -obfs4 51.222.13.177:80 5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 cert=2uplIpLQ0q9+0qMFrK5pkaYRDOe460LL9WHBvatgkuRr/SL31wBOEupaMMJ6koRE6Ld0ew iat-mode=0 ===================================== projects/common/bridges_list.snowflake.txt deleted ===================================== @@ -1,2 +0,0 @@ -snowflake 192.0.2.3:80 2B280B23E1107BB62ABFC40DDCC8824814F80A72 fingerprint=2B280B23E1107BB62ABFC40DDCC8824814F80A72 url=https://snowflake-broker.torproject.net.global.prod.fastly.net/ front=foursquare.com ice=stun:stun.l.google.com:19302,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 utls-imitate=hellorandomizedalpn -snowflake 192.0.2.4:80 8838024498816A039FCBBAB14E6F40A0843051FA fingerprint=8838024498816A039FCBBAB14E6F40A0843051FA url=https://snowflake-broker.torproject.net.global.prod.fastly.net/ front=foursquare.com ice=stun:stun.l.google.com:19302,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.net:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478 utls-imitate=hellorandomizedalpn ===================================== projects/tor-android-service/build ===================================== @@ -57,9 +57,22 @@ rm -fR service/src/main/jniLibs/* mv $tebdir/data/{geoip,geoip6} service/src/main/assets/common # Update bridges list - ptdir=$tebdir/tor/pluggable_transports - cat $ptdir/bridges_list.obfs4.txt $ptdir/bridges_list.meek-azure.txt \ - $ptdir/bridges_list.snowflake.txt > service/src/main/assets/common/bridges.txt + PT_CONFIG="$tebdir/tor/pluggable_transports/pt_config.json" + + # Writes bridge-line prefs for a given bridge type + BRIDGES_TXT="service/src/main/assets/common/bridges.txt" + echo -n "" > "${BRIDGES_TXT}" + function bridges_conf { + local bridge_type="$1" + jq -r ".bridges.\"$bridge_type\" | .[]" "${PT_CONFIG}" | while read -r line; do + echo $line >> "${BRIDGES_TXT}" + done + } + + # Iterate over our bridge types and write default bridgelines for each + for bridge_type in $(jq -r ".bridges | keys[]" "${PT_CONFIG}"); do + bridges_conf $bridge_type + done [% END -%] [% END -%] ===================================== projects/tor-android-service/config ===================================== @@ -11,6 +11,8 @@ var: # this should be updated when the list of gradle dependencies is changed gradle_dependencies_version: 5 gradle_version: 5.6.4 + arch_deps: + - jq input_files: - project: container-image ===================================== projects/tor-expert-bundle/build ===================================== @@ -14,11 +14,6 @@ tar -xkf $rootdir/[% c('input_files_by_name/snowflake') %] tar -xkf $rootdir/[% c('input_files_by_name/webtunnel') %] tar -xkf $rootdir/[% c('input_files_by_name/conjure') %] -# copy in bridge lines for each pluggable transport -mv $rootdir/bridges_list.obfs4.txt . -mv $rootdir/bridges_list.meek-azure.txt . -mv $rootdir/bridges_list.snowflake.txt . - # add per-platform pt extension awk '{gsub(/\$\{pt_extension\}/, "[% c("var/pt_extension") %]"); print}' $rootdir/pt_config.json > pt_config.json ===================================== projects/tor-expert-bundle/config ===================================== @@ -23,6 +23,3 @@ input_files: - name: conjure project: conjure - filename: pt_config.json - - filename: bridges_list.obfs4.txt - - filename: bridges_list.meek-azure.txt - - filename: bridges_list.snowflake.txt View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] 3 commits: fixup! Bug 7494: Create local home page for TBB.
by richard (＠richard) 28 Sep '23

28 Sep '23

richard pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 68e353d0 by Henry Wilkes at 2023-09-28T20:10:07+00:00 fixup! Bug 7494: Create local home page for TBB. Bug 41898: Change the dark background text rules to apply to all body children that are not #search-form. Extend the focus outline color rule changes. - - - - - efe5fb38 by Henry Wilkes at 2023-09-28T20:10:07+00:00 fixup! Bug 7494: Create local home page for TBB. Bug 42072: Pass whether the browser is the stable version to the about:tor window. This is to be used by the year end campaign, but we also use it outside of the campaign as well. Moreover, we can avoid the preprocessor, and this makes it easier to test what the about:tor page would look like in the release, alpha or nightly build using just the dev build. - - - - - 1b121028 by Henry Wilkes at 2023-09-28T20:10:07+00:00 fixup! Bug 42072: 2023 year end campaign for about:tor. Bug 42072: Implement initial page. - - - - - 8 changed files: - browser/components/abouttor/AboutTorChild.sys.mjs - browser/components/abouttor/AboutTorParent.sys.mjs - browser/components/abouttor/content/aboutTor.css - browser/components/abouttor/content/aboutTor.html - browser/components/abouttor/content/aboutTor.js - + browser/components/abouttor/content/yec-2023-heart.svg - + browser/components/abouttor/content/yec-2023-image.svg - browser/components/abouttor/jar.mn Changes: ===================================== browser/components/abouttor/AboutTorChild.sys.mjs ===================================== @@ -15,24 +15,12 @@ export class AboutTorChild extends JSWindowActorChild { handleEvent(event) { switch (event.type) { case "DOMContentLoaded": - this.sendQuery("AboutTor:GetSearchOnionize").then(searchOnionize => { - const onionizeEvent = new this.contentWindow.CustomEvent( - "InitialSearchOnionize", - { - detail: Cu.cloneInto(searchOnionize, this.contentWindow), - } + this.sendQuery("AboutTor:GetInitialData").then(data => { + const initialDataEvent = new this.contentWindow.CustomEvent( + "InitialData", + { detail: Cu.cloneInto(data, this.contentWindow) } ); - this.contentWindow.dispatchEvent(onionizeEvent); - }); - - this.sendQuery("AboutTor:GetMessage").then(messageData => { - const messageEvent = new this.contentWindow.CustomEvent( - "MessageData", - { - detail: Cu.cloneInto(messageData, this.contentWindow), - } - ); - this.contentWindow.dispatchEvent(messageEvent); + this.contentWindow.dispatchEvent(initialDataEvent); }); break; case "SubmitSearchOnionize": ===================================== browser/components/abouttor/AboutTorParent.sys.mjs ===================================== @@ -1,3 +1,5 @@ +import { AppConstants } from "resource://gre/modules/AppConstants.sys.mjs"; + const lazy = {}; ChromeUtils.defineESModuleGetters(lazy, { @@ -8,10 +10,17 @@ export class AboutTorParent extends JSWindowActorParent { receiveMessage(message) { const onionizePref = "torbrowser.homepage.search.onionize"; switch (message.name) { - case "AboutTor:GetMessage": - return Promise.resolve(lazy.AboutTorMessage.getNext()); - case "AboutTor:GetSearchOnionize": - return Promise.resolve(Services.prefs.getBoolPref(onionizePref, false)); + case "AboutTor:GetInitialData": + return Promise.resolve({ + messageData: lazy.AboutTorMessage.getNext(), + isStable: AppConstants.MOZ_UPDATE_CHANNEL === "release", + searchOnionize: Services.prefs.getBoolPref(onionizePref, false), + // Locale for YEC 2023. See tor-browser#42072. + appLocale: + Services.locale.appLocaleAsBCP47 === "ja-JP-macos" + ? "ja" + : Services.locale.appLocaleAsBCP47, + }); case "AboutTor:SetSearchOnionize": Services.prefs.setBoolPref(onionizePref, message.data); break; ===================================== browser/components/abouttor/content/aboutTor.css ===================================== @@ -144,11 +144,13 @@ h1 { /* On dark background */ :root { background-color: #2C0449; - --focus-outline: var(--focus-outline-width) solid var(--purple-30); + --focus-outline-color: var(--purple-30); + --focus-outline: var(--focus-outline-width) solid var(--focus-outline-color); + --in-content-focus-outline-color: var(--focus-outline-color); --in-content-focus-outline: var(--focus-outline); } - h1, .home-message { + body > :not(#search-form) { /* Same as --in-content-page-color when "prefers-color-scheme: dark" */ --in-content-page-color: #fbfbfe; --in-content-text-color: #fbfbfe; @@ -177,7 +179,9 @@ h1 { /* Light background. */ #search-form > * { - --focus-outline: var(--focus-outline-width) solid var(--purple-60); + --focus-outline-color: var(--purple-60); + --focus-outline: var(--focus-outline-width) solid var(--focus-outline-color); + --in-content-focus-outline-color: var(--focus-outline-color); --in-content-focus-outline: var(--focus-outline); /* Variables used for --toggle- variables. */ --color-accent-primary: var(--purple-60); @@ -189,3 +193,210 @@ h1 { color: var(--purple-60); } } + +/* YEC 2023. + * See tor-browser#42072 */ +body:not(.yec-2023-is-shown) #yec-2023-banner { + display: none; +} + +body.yec-2023-is-shown h1 { + /* Text of heading is still available to screen readers, but it does not + * contribute visually to the page or the body grid layout. */ + position: absolute; + clip-path: inset(50%); +} + +#yec-2023-banner { + grid-area: heading; + border-radius: 8px; + border-width: 1px; + border-style: solid; + display: grid; + grid-template: + "yec-image yec-matching" auto + "yec-image yec-heading" auto + "yec-image yec-body" auto + "yec-image yec-donate" min-content + / min-content 1fr; + --yec-image-background: #1f0333; + gap: 16px 32px; + /* Remove 1px from padding for border. */ + padding-block: 39px 47px; + padding-inline: 31px 55px; + box-sizing: border-box; + max-width: 860px; + margin-block-end: 40px; + /* Position for the close button. */ + position: relative; +} + +#yec-2023-banner > * { + margin: 0; +} + +#yec-2023-image { + grid-area: yec-image; + align-self: center; + /* Center horizontally for small width layout. */ + justify-self: center; + /* background color and border radius only stands out when using a high + * contrast theme. */ + background: var(--yec-image-background); + border-radius: 8px; + border: 1px solid transparent; + /* Remove border from layout size. */ + margin: -1px; +} + +#yec-2023-matching { + grid-area: yec-matching; + font-weight: 600; + line-height: 1.3; +} + +body:not(.yec-2023-is-donation-matching) #yec-2023-matching { + display: none; +} + +#yec-2023-heading { + grid-area: yec-heading; + font-size: 1.7em; + font-weight: 700; + line-height: 1.3; +} + +#yec-2023-body { + grid-area: yec-body; + line-height: 1.5; + margin-block-end: 8px; +} + +#yec-2023-body .yec-2023-attention { + font-weight: 600; +} + +#yec-2023-donate-link { + grid-area: yec-donate; + justify-self: start; + font-weight: 700; + /* Style like a button. */ + color: var(--in-content-button-text-color); + border: 1px solid var(--in-content-button-border-color); + border-radius: 4px; + background-color: var(--in-content-button-background); + line-height: 1.2; + padding-block: 12px; + padding-inline: 16px; + text-decoration: none; + display: flex; + align-items: center; + gap: 10px; +} + +#yec-2023-donate-link > * { + flex: 0 0 auto; +} + +#yec-2023-donate-link:hover { + background-color: var(--in-content-button-background-hover); + color: var(--in-content-button-text-color-hover); + border-color: var(--in-content-button-border-color-hover); +} + +#yec-2023-donate-link:hover:active { + background-color: var(--in-content-button-background-active); + color: var(--in-content-button-text-color-active); + border-color: var(--in-content-button-border-color-active); +} + +#yec-2023-close { + position: absolute; + inset-block-start: 12px; + inset-inline-end: 12px; + padding: 8px; + min-width: auto; + min-height: auto; + width: 16px; + height: 16px; + box-sizing: content-box; + /* Transparent background when neither hover nor active. */ + background-color: transparent; + border-color: transparent; +} + +#yec-2023-close:hover { + background-color: var(--in-content-button-background-hover); + border-color: var(--in-content-button-border-color-hover); +} + +#yec-2023-close:hover:active { + background-color: var(--in-content-button-background-active); + border-color: var(--in-content-button-border-color-active); +} + +.yec-2023-icon { + -moz-context-properties: fill; + fill: currentColor; +} + +@media (max-width: 750px) { + /* Small width layout. */ + #yec-2023-banner { + grid-template: + "yec-image" min-content + "yec-matching" auto + "yec-heading" auto + "yec-body" auto + "yec-donate" min-content + / 1fr; + padding-inline: 32px; + /* Match max-width of the form. */ + max-width: 600px; + } + + #yec-2023-donate-link { + justify-self: center; + } +} + +@media (prefers-contrast) { + #yec-2023-banner { + border-color: -moz-DialogText; + } + + @media (prefers-color-scheme: dark) { + #yec-2023-image { + /* Give the dark image a border to separate from background. */ + border-color: -moz-DialogText; + } + } +} + +@media not (prefers-contrast) { + #yec-2023-banner { + background-color: var(--yec-image-background); + border-color: transparent; + --acorn-yellow-40: #ffbd4f; + --acorn-yellow-50: #ffa436; + --acorn-yellow-60: #e27f2e; + --acorn-dark-grey-80: #1c1b22; + /* Rules for #yec-2023-close */ + --in-content-button-text-color: var(--in-content-text-color); + --in-content-button-text-color-hover: var(--in-content-text-color); + --in-content-button-text-color-active: var(--in-content-text-color); + } + + #yec-2023-matching { + color: var(--acorn-yellow-40); + } + + #yec-2023-donate-link { + --in-content-button-text-color: var(--acorn-dark-grey-80); + --in-content-button-text-color-hover: var(--acorn-dark-grey-80); + --in-content-button-text-color-active: var(--acorn-dark-grey-80); + --in-content-button-background: var(--acorn-yellow-40); + --in-content-button-background-hover: var(--acorn-yellow-50); + --in-content-button-background-active: var(--acorn-yellow-60); + } +} ===================================== browser/components/abouttor/content/aboutTor.html ===================================== @@ -29,17 +29,46 @@ <script src="chrome://browser/content/abouttor/aboutTor.js"></script> </head> <body> +  + <article id="yec-2023-banner"> + <img + id="yec-2023-image" + alt="" + src="chrome://browser/content/abouttor/yec-2023-image.svg" + /> +  + <p + id="yec-2023-matching" + data-l10n-id="yec-2023-matched-donation" + data-l10n-args='{ "amount": 0 }' + ></p> + <h2 id="yec-2023-heading" data-l10n-id="yec-2023-introduction"></h2> + <p id="yec-2023-body" data-l10n-id="yec-2023-please-donate"> + <span class="yec-2023-attention" data-l10n-name="attention"></span> + </p> + <a id="yec-2023-donate-link"> + <span data-l10n-id="yec-2023-donate-button"></span> + <img + class="yec-2023-icon" + alt="" + src="chrome://browser/content/abouttor/yec-2023-heart.svg" + /> + </a> + <button id="yec-2023-close" data-l10n-id="yec-2023-close-button"> + <img + class="yec-2023-icon" + alt="" + src="chrome://global/skin/icons/close.svg" + /> + </button> + </article> <h1> <img id="tor-browser-logo" alt="" src="chrome://branding/content/tor-browser-logo.svg" /> - #if MOZ_UPDATE_CHANNEL == release - <span data-l10n-id="tor-browser-home-heading-stable"></span> - #else - <span data-l10n-id="tor-browser-home-heading-testing"></span> - #endif + <span id="tor-browser-home-heading-text"></span> </h1> <form id="search-form" method="get" rel="noreferrer"> <img @@ -70,11 +99,10 @@ <a data-l10n-name="update-link" target="_blank"></a> </span> </p> - #if MOZ_UPDATE_CHANNEL == release - <p class="home-message home-message-rotating"> + <p class="home-message home-message-rotating-stable"> <span data-l10n-id="tor-browser-home-message-introduction"></span> </p> - <p class="home-message home-message-rotating"> + <p class="home-message home-message-rotating-stable"> <img class="message-emoji" alt="" @@ -88,7 +116,7 @@ ></a> </span> </p> - <p class="home-message home-message-rotating"> + <p class="home-message home-message-rotating-stable"> <img class="message-emoji" alt="" @@ -102,8 +130,7 @@ ></a> </span> </p> - #else - <p class="home-message home-message-rotating"> + <p class="home-message home-message-rotating-testing"> <img class="message-emoji" alt="" @@ -117,6 +144,5 @@ ></a> </span> </p> - #endif </body> </html> ===================================== browser/components/abouttor/content/aboutTor.js ===================================== @@ -4,6 +4,9 @@ const SearchWidget = { _initialized: false, _initialOnionize: false, + /** + * Initialize the search form elements. + */ init() { this._initialized = true; @@ -74,6 +77,12 @@ const SearchWidget = { ); }, + /** + * Set what the "Onionize" toggle state. + * + * @param {boolean} state - Whether the "Onionize" toggle should be switched + * on. + */ setOnionizeState(state) { if (!this._initialized) { this._initialOnionize = state; @@ -84,32 +93,201 @@ const SearchWidget = { }, }; +const MessageArea = { + _initialized: false, + _messageData: null, + _isStable: null, + + /** + * Initialize the message area and heading once elements are available. + */ + init() { + this._initialized = true; + this._update(); + }, + + /** + * Set the message data and stable release flag. + * + * @param {MessageData} messageData - The message data, indicating which + * message to show. + * @param {boolean} isStable - Whether this is the stable release version. + */ + setMessageData(messageData, isStable) { + this._messageData = messageData; + this._isStable = isStable; + this._update(); + }, + + _update() { + if (!this._initialized) { + return; + } + + document + .querySelector(".home-message.shown-message") + ?.classList.remove("shown-message"); + + if (!this._messageData) { + return; + } + + // Set heading. + document.l10n.setAttributes( + document.getElementById("tor-browser-home-heading-text"), + this._isStable + ? "tor-browser-home-heading-stable" + : "tor-browser-home-heading-testing" + ); + + const { updateVersion, updateURL, number } = this._messageData; + + if (updateVersion) { + const updatedElement = document.getElementById("home-message-updated"); + updatedElement.querySelector("a").href = updateURL; + document.l10n.setAttributes( + updatedElement.querySelector("span"), + "tor-browser-home-message-updated", + { version: updateVersion } + ); + updatedElement.classList.add("shown-message"); + } else { + const messageElements = document.querySelectorAll( + this._isStable + ? ".home-message-rotating-stable" + : ".home-message-rotating-testing" + ); + messageElements[number % messageElements.length].classList.add( + "shown-message" + ); + } + }, +}; + window.addEventListener("DOMContentLoaded", () => { SearchWidget.init(); + MessageArea.init(); }); -window.addEventListener("InitialSearchOnionize", event => { - SearchWidget.setOnionizeState(!!event.detail); +window.addEventListener("InitialData", event => { + const { isStable, searchOnionize, messageData } = event.detail; + SearchWidget.setOnionizeState(!!searchOnionize); + MessageArea.setMessageData(messageData, !!isStable); }); -window.addEventListener("MessageData", event => { - const updatedElement = document.getElementById("home-message-updated"); - const { updateVersion, updateURL, number } = event.detail; - document - .querySelector(".home-message.shown-message") - ?.classList.remove("shown-message"); - if (updateVersion) { - updatedElement.querySelector("a").href = updateURL; - document.l10n.setAttributes( - updatedElement.querySelector("span"), - "tor-browser-home-message-updated", - { version: updateVersion } - ); - updatedElement.classList.add("shown-message"); - } else { - const messageElements = document.querySelectorAll(".home-message-rotating"); - messageElements[number % messageElements.length].classList.add( - "shown-message" +// YEC 2023 (year end campaign). +// See tor-browser#42072 +const YecWidget = { + _initialized: false, + _locale: null, + + /** + * Initialize the widget. + */ + init() { + this._initialized = true; + + const now = Date.now(); + const yecStart = Date.UTC(2023, 9, 16); // October 16th + const yecEnd = Date.UTC(2024); // 2024 January 1st + + this.isActive = now >= yecStart && now < yecEnd; + document.getElementById("yec-2023-close").addEventListener("click", () => { + this.isOpen = false; + }); + + // TODO: Uncomment once we have a final donation matching amount. + //const donateMatchStart = Date.UTC(2023, 10, 13); // November 13th + //document.body.classList.toggle( + // "yec-2023-is-donation-matching", + // now >= donateMatchStart + //); + + this._updateDonateLocale(); + }, + + _isStable: false, + _isActive: false, + _isOpen: true, + + /** + * Whether this is a stable release. + * + * @type {boolean} + */ + get isStable() { + return this._isStable; + }, + + set isStable(isStable) { + this._isStable = isStable; + this._updateShown(); + }, + + /** + * Whether the year end campaign is active. + * + * @type {boolean} + */ + get isActive() { + return this._isActive; + }, + + set isActive(isActive) { + this._isActive = isActive; + this._updateShown(); + }, + + /** + * Whether the banner is open or has been closed by the user. + * + * @type {boolean} + */ + get isOpen() { + return this._isOpen; + }, + + set isOpen(isOpen) { + this._isOpen = isOpen; + this._updateShown(); + }, + + _updateShown() { + if (!this._initialized) { + return; + } + document.body.classList.toggle( + "yec-2023-is-shown", + this.isActive && this.isOpen && this.isStable ); - } + }, + + _updateDonateLocale() { + if (!this._initialized) { + return; + } + const donateLink = document.getElementById("yec-2023-donate-link"); + const base = "https://www.torproject.org/donate"; + donateLink.href = this._locale ? `${base}/2023yec-${this._locale}` : base; + }, + + /** + * Set the locale to use for the donation link. + * + * @param {string} locale - The new locale, as BCP47. + */ + setDonateLocale(locale) { + this._locale = locale; + this._updateDonateLocale(); + }, +}; + +window.addEventListener("DOMContentLoaded", () => { + YecWidget.init(); +}); + +window.addEventListener("InitialData", event => { + const { appLocale, isStable } = event.detail; + YecWidget.setDonateLocale(appLocale); + YecWidget.isStable = isStable; }); ===================================== browser/components/abouttor/content/yec-2023-heart.svg ===================================== @@ -0,0 +1,4 @@ +<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"> +<path d="M8 6C8 6 8 2 11.5 2C15 2 15 5 15 6C15 10.5 8 15 8 15V6Z" fill="context-fill"/> +<path d="M8 6C8 6 8 2 4.5 2C1 2 1 5 1 6C1 10.5 8 15 8 15L9 9L8 6Z" fill="context-fill"/> +</svg> ===================================== browser/components/abouttor/content/yec-2023-image.svg ===================================== @@ -0,0 +1,78 @@ +<svg width="278" height="248" viewBox="0 0 278 248" fill="none" xmlns="http://www.w3.org/2000/svg"> +<path fill-rule="evenodd" clip-rule="evenodd" d="M211.349 154.041L210.689 115.194L217.909 115.071L218.573 154.126H220.261C220.438 148.413 225.126 143.836 230.882 143.836H253.317C259.185 143.836 263.943 148.593 263.943 154.462V166.311C263.943 172.144 259.215 176.872 253.382 176.872C247.55 176.872 242.821 172.144 242.821 166.311V164.752C242.821 162.871 241.297 161.347 239.417 161.347H218.695L218.837 169.651H219.92C225.789 169.651 230.546 174.408 230.546 180.277V188.27C230.546 194.139 225.789 198.896 219.92 198.896H219.334L219.773 224.736C219.875 230.712 214.995 235.542 209.093 235.542C203.261 235.542 198.413 230.822 198.413 224.917V202.301C198.413 196.432 203.17 191.675 209.038 191.675H211.989L211.737 176.872H201.276C195.407 176.872 190.65 172.115 190.65 166.246V146.905C190.65 141.92 194.691 137.879 199.676 137.879C204.661 137.879 208.702 141.92 208.702 146.905V150.721C208.702 152.341 209.834 153.697 211.349 154.041ZM211.473 161.328C205.9 161 201.481 156.377 201.481 150.721V146.905C201.481 145.908 200.673 145.1 199.676 145.1C198.679 145.1 197.871 145.908 197.871 146.905V166.246C197.871 168.127 199.395 169.651 201.276 169.651H211.615L211.473 161.328ZM218.959 176.872L219.211 191.675H219.92C221.801 191.675 223.325 190.151 223.325 188.27V180.277C223.325 178.396 221.801 176.872 219.92 176.872H218.959ZM212.112 198.896H209.038C207.158 198.896 205.633 200.42 205.633 202.301V224.917C205.633 226.76 207.176 228.321 209.093 228.321C211.034 228.321 212.585 226.724 212.553 224.859L212.112 198.896ZM227.493 154.126H239.417C245.285 154.126 250.042 158.883 250.042 164.752V166.311C250.042 168.156 251.538 169.651 253.382 169.651C255.227 169.651 256.722 168.156 256.722 166.311V154.462C256.722 152.581 255.197 151.057 253.317 151.057H230.882C229.115 151.057 227.662 152.403 227.493 154.126Z" fill="#F5F5F5" stroke="#F5F5F5" stroke-width="1.11925"/> +<path fill-rule="evenodd" clip-rule="evenodd" d="M214.548 153.98L213.887 115.133L221.107 115.01L221.771 154.065H223.46C223.637 148.352 228.324 143.775 234.08 143.775H256.515C262.384 143.775 267.141 148.532 267.141 154.4V166.25C267.141 172.082 262.413 176.811 256.58 176.811C250.748 176.811 246.02 172.082 246.02 166.25V164.69C246.02 162.81 244.495 161.286 242.615 161.286H221.894L222.035 169.59H223.119C228.987 169.59 233.744 174.347 233.744 180.215V188.209C233.744 194.077 228.987 198.835 223.119 198.835H222.532L222.971 224.675C223.073 230.65 218.193 235.481 212.291 235.481C206.46 235.481 201.611 230.76 201.611 224.855V202.239C201.611 196.371 206.368 191.614 212.237 191.614H215.187L214.936 176.811H204.474C198.606 176.811 193.848 172.053 193.848 166.185V146.844C193.848 141.859 197.89 137.817 202.875 137.817C207.86 137.817 211.901 141.859 211.901 146.844V150.66C211.901 152.28 213.032 153.635 214.548 153.98ZM214.671 161.267C209.098 160.939 204.68 156.315 204.68 150.66V146.844C204.68 145.847 203.872 145.038 202.875 145.038C201.878 145.038 201.069 145.847 201.069 146.844V166.185C201.069 168.065 202.594 169.59 204.474 169.59H214.813L214.671 161.267ZM222.158 176.811L222.409 191.614H223.119C224.999 191.614 226.523 190.089 226.523 188.209V180.215C226.523 178.335 224.999 176.811 223.119 176.811H222.158ZM215.31 198.835H212.237C210.356 198.835 208.832 200.359 208.832 202.239V224.855C208.832 226.699 210.374 228.26 212.291 228.26C214.232 228.26 215.783 226.663 215.752 224.797L215.31 198.835ZM230.692 154.065H242.615C248.484 154.065 253.241 158.822 253.241 164.69V166.25C253.241 168.094 254.736 169.59 256.58 169.59C258.425 169.59 259.92 168.094 259.92 166.25V154.4C259.92 152.52 258.396 150.996 256.515 150.996H234.08C232.313 150.996 230.86 152.342 230.692 154.065Z" fill="#1F0333" stroke="#F5F5F5" stroke-width="1.11925"/> +<path d="M157.343 169.737H156.784V170.297V173.514C156.784 175.682 158.542 177.44 160.71 177.44H167.855C173.434 177.44 177.956 181.962 177.956 187.541V198.489C177.956 204.068 173.434 208.59 167.855 208.59H158.708C157.246 208.59 156.062 209.775 156.062 211.237C156.062 212.698 157.246 213.883 158.708 213.883H167.855C173.434 213.883 177.956 218.405 177.956 223.984V224.825C177.956 230.404 173.434 234.926 167.855 234.926H105.831C100.252 234.926 95.7296 230.404 95.7296 224.825V219.25C95.7296 213.671 100.252 209.149 105.831 209.149H108.592C110.761 209.149 112.518 207.391 112.518 205.223V204.065C112.518 201.897 110.761 200.139 108.592 200.139H105.831C100.252 200.139 95.7296 195.617 95.7296 190.038V186.091C95.7296 180.513 100.252 175.99 105.831 175.99H117.331C119.5 175.99 121.258 174.233 121.258 172.064V170.297V169.737H120.698H115.398C109.82 169.737 105.297 165.215 105.297 159.636V156.445C105.297 150.866 109.82 146.344 115.398 146.344H117.331C122.91 146.344 127.432 150.866 127.432 156.445V163.002V163.562H127.992H150.049H150.609V163.002V153.078V152.519H150.049H145.877C140.298 152.519 135.776 147.996 135.776 142.418V116.5H141.95V142.418C141.95 144.586 143.708 146.344 145.877 146.344H164.064C169.643 146.344 174.165 150.866 174.165 156.445V159.636C174.165 165.215 169.643 169.737 164.064 169.737H157.343ZM156.784 163.002V163.562H157.343H164.064C166.232 163.562 167.99 161.804 167.99 159.636V156.445C167.99 154.276 166.232 152.519 164.064 152.519H157.343H156.784V153.078V163.002ZM127.992 169.737H127.432V170.297V172.064C127.432 177.643 122.91 182.165 117.331 182.165H105.831C103.662 182.165 101.904 183.923 101.904 186.091V190.038C101.904 192.206 103.662 193.964 105.831 193.964H108.592C114.171 193.964 118.693 198.487 118.693 204.065V205.223C118.693 210.801 114.171 215.324 108.592 215.324H105.831C103.662 215.324 101.904 217.081 101.904 219.25V224.825C101.904 226.994 103.662 228.752 105.831 228.752H167.855C170.023 228.752 171.781 226.994 171.781 224.825V223.984C171.781 221.815 170.023 220.058 167.855 220.058H158.708C153.836 220.058 149.887 216.108 149.887 211.237C149.887 206.365 153.836 202.416 158.708 202.416H167.855C170.023 202.416 171.781 200.658 171.781 198.489V187.541C171.781 185.373 170.023 183.615 167.855 183.615H160.71C155.131 183.615 150.609 179.092 150.609 173.514V170.297V169.737H150.049H127.992ZM120.698 163.562H121.258V163.002V156.445C121.258 154.276 119.5 152.519 117.331 152.519H115.398C113.23 152.519 111.472 154.276 111.472 156.445V159.636C111.472 161.804 113.23 163.562 115.398 163.562H120.698Z" fill="#F5F5F5" stroke="#F5F5F5" stroke-width="1.11925"/> +<path d="M160.542 169.737H159.982V170.297V173.514C159.982 175.682 161.74 177.44 163.908 177.44H171.053C176.632 177.44 181.154 181.962 181.154 187.541V198.489C181.154 204.068 176.632 208.59 171.053 208.59H161.906C160.445 208.59 159.26 209.775 159.26 211.237C159.26 212.698 160.445 213.883 161.906 213.883H171.053C176.632 213.883 181.154 218.405 181.154 223.984V224.825C181.154 230.404 176.632 234.926 171.053 234.926H109.029C103.45 234.926 98.928 230.404 98.928 224.825V219.25C98.928 213.671 103.45 209.149 109.029 209.149H111.791C113.959 209.149 115.717 207.391 115.717 205.223V204.065C115.717 201.897 113.959 200.139 111.791 200.139H109.029C103.45 200.139 98.928 195.617 98.928 190.038V186.091C98.928 180.513 103.45 175.99 109.029 175.99H120.53C122.698 175.99 124.456 174.233 124.456 172.064V170.297V169.737H123.896H118.597C113.018 169.737 108.496 165.215 108.496 159.636V156.445C108.496 150.866 113.018 146.344 118.597 146.344H120.53C126.108 146.344 130.631 150.866 130.631 156.445V163.002V163.562H131.19H153.248H153.807V163.002V153.078V152.519H153.248H149.075C143.496 152.519 138.974 147.996 138.974 142.418V116.5H145.149V142.418C145.149 144.586 146.907 146.344 149.075 146.344H167.262C172.841 146.344 177.363 150.866 177.363 156.445V159.636C177.363 165.215 172.841 169.737 167.262 169.737H160.542ZM159.982 163.002V163.562H160.542H167.262C169.431 163.562 171.189 161.804 171.189 159.636V156.445C171.189 154.276 169.431 152.519 167.262 152.519H160.542H159.982V153.078V163.002ZM131.19 169.737H130.631V170.297V172.064C130.631 177.643 126.108 182.165 120.53 182.165H109.029C106.861 182.165 105.103 183.923 105.103 186.091V190.038C105.103 192.206 106.861 193.964 109.029 193.964H111.791C117.369 193.964 121.892 198.487 121.892 204.065V205.223C121.892 210.801 117.369 215.324 111.791 215.324H109.029C106.861 215.324 105.103 217.081 105.103 219.25V224.825C105.103 226.994 106.861 228.752 109.029 228.752H171.053C173.222 228.752 174.98 226.994 174.98 224.825V223.984C174.98 221.815 173.222 220.058 171.053 220.058H161.906C157.035 220.058 153.085 216.108 153.085 211.237C153.085 206.365 157.035 202.416 161.906 202.416H171.053C173.222 202.416 174.98 200.658 174.98 198.489V187.541C174.98 185.373 173.222 183.615 171.053 183.615H163.908C158.33 183.615 153.807 179.092 153.807 173.514V170.297V169.737H153.248H131.19ZM123.896 163.562H124.456V163.002V156.445C124.456 154.276 122.698 152.519 120.53 152.519H118.597C116.428 152.519 114.671 154.276 114.671 156.445V159.636C114.671 161.804 116.428 163.562 118.597 163.562H123.896Z" fill="#1F0333" stroke="#F5F5F5" stroke-width="1.11925"/> +<path fill-rule="evenodd" clip-rule="evenodd" d="M57.8858 130.584V118.885H65.1799V130.584C65.1799 136.472 60.407 141.245 54.5193 141.245H26.7806C24.9332 141.245 23.4141 142.758 23.4141 144.629C23.4141 146.5 24.9332 148.013 26.7806 148.013H67.5996V144.612C67.5996 138.724 72.3726 133.951 78.2603 133.951H87.5532C93.4528 133.951 98.2139 138.753 98.2139 144.629C98.2139 150.505 93.4528 155.307 87.5532 155.307H74.8937V173.525C74.8937 176.021 73.2587 178.135 71.0012 178.855V181.538C71.0012 186.903 66.6522 191.252 61.2874 191.252H52.5555V199.984H60.3406C66.2283 199.984 71.0012 204.757 71.0012 210.644V224.707C71.0012 230.594 66.2283 235.367 60.3406 235.367H55.922C50.0343 235.367 45.2614 230.594 45.2614 224.707V207.278H45.1941C39.3064 207.278 34.5334 202.505 34.5334 196.617V194.618C34.5334 188.731 39.3064 183.958 45.1941 183.958H45.2614V171.789C45.2614 165.901 50.0343 161.128 55.922 161.128H67.5996V155.307H26.7806C20.8811 155.307 16.12 150.505 16.12 144.629C16.12 138.753 20.8811 133.951 26.7806 133.951H54.5193C56.3786 133.951 57.8858 132.444 57.8858 130.584ZM67.5996 168.423H55.922C54.0628 168.423 52.5555 169.93 52.5555 171.789V183.958H61.2874C62.6238 183.958 63.7071 182.874 63.7071 181.538V177.417C63.7071 174.921 65.3421 172.807 67.5996 172.087V168.423ZM45.2614 191.252H45.1941C43.3348 191.252 41.8276 192.759 41.8276 194.618V196.617C41.8276 198.476 43.3348 199.984 45.1941 199.984H45.2614V191.252ZM52.5555 207.278V224.707C52.5555 226.566 54.0627 228.073 55.922 228.073H60.3406C62.1999 228.073 63.7071 226.566 63.7071 224.707V210.644C63.7071 208.785 62.1999 207.278 60.3406 207.278H52.5555ZM74.8937 148.013H87.5532C89.4007 148.013 90.9198 146.5 90.9198 144.629C90.9198 142.758 89.4007 141.245 87.5532 141.245H78.2603C76.401 141.245 74.8937 142.752 74.8937 144.612V148.013Z" fill="#F5F5F5" stroke="#F5F5F5" stroke-width="1.11925"/> +<path fill-rule="evenodd" clip-rule="evenodd" d="M61.0842 130.765V119.195H68.3783V130.765C68.3783 136.653 63.6054 141.426 57.7177 141.426H29.979C28.1316 141.426 26.6125 142.938 26.6125 144.81C26.6125 146.681 28.1316 148.194 29.979 148.194H70.798V144.792C70.798 138.904 75.571 134.131 81.4587 134.131H90.7516C96.6512 134.131 101.412 138.934 101.412 144.81C101.412 150.685 96.6512 155.488 90.7516 155.488H78.0921V173.705C78.0921 176.202 76.4571 178.316 74.1996 179.036V181.718C74.1996 187.083 69.8506 191.432 64.4858 191.432H55.7539V200.164H63.539C69.4267 200.164 74.1996 204.937 74.1996 210.825V224.887C74.1996 230.775 69.4267 235.548 63.539 235.548H59.1204C53.2327 235.548 48.4598 230.775 48.4598 224.887V207.458H48.3925C42.5048 207.458 37.7318 202.685 37.7318 196.798V194.799C37.7318 188.911 42.5048 184.138 48.3925 184.138H48.4598V171.97C48.4598 166.082 53.2327 161.309 59.1204 161.309H70.798V155.488H29.979C24.0795 155.488 19.3184 150.685 19.3184 144.81C19.3184 138.934 24.0795 134.131 29.979 134.131H57.7177C59.577 134.131 61.0842 132.624 61.0842 130.765ZM70.798 168.603H59.1204C57.2611 168.603 55.7539 170.11 55.7539 171.97V184.138H64.4858C65.8222 184.138 66.9055 183.055 66.9055 181.718V177.598C66.9055 175.102 68.5405 172.988 70.798 172.268V168.603ZM48.4598 191.432H48.3925C46.5332 191.432 45.026 192.94 45.026 194.799V196.798C45.026 198.657 46.5332 200.164 48.3925 200.164H48.4598V191.432ZM55.7539 207.458V224.887C55.7539 226.746 57.2611 228.254 59.1204 228.254H63.539C65.3982 228.254 66.9055 226.746 66.9055 224.887V210.825C66.9055 208.966 65.3982 207.458 63.539 207.458H55.7539ZM78.0921 148.194H90.7516C92.5991 148.194 94.1181 146.681 94.1181 144.81C94.1181 142.938 92.5991 141.426 90.7516 141.426H81.4587C79.5994 141.426 78.0921 142.933 78.0921 144.792V148.194Z" fill="#1F0333" stroke="#F5F5F5" stroke-width="1.11925"/> +<path d="M244.741 32.2523C244.741 32.7217 245.122 33.1021 245.591 33.1021C246.06 33.1021 246.441 32.7217 246.441 32.2523V24.0536L248.877 21.6172C248.935 21.5594 248.985 21.4969 249.028 21.4309H257.262C257.732 21.4309 258.112 21.0504 258.112 20.5811C258.112 20.1117 257.732 19.7312 257.262 19.7312H248.594L246.441 17.5783V8.90984C246.441 8.44049 246.06 8.06 245.591 8.06C245.122 8.06 244.741 8.44049 244.741 8.90984V17.5783L242.588 19.7312H233.92C233.45 19.7312 233.07 20.1117 233.07 20.5811C233.07 21.0504 233.45 21.4309 233.92 21.4309H242.154C242.197 21.4969 242.247 21.5594 242.305 21.6172L244.741 24.0536V32.2523Z" fill="#F9F9F9"/> +<path d="M244.741 32.2523C244.741 32.7217 245.122 33.1021 245.591 33.1021C246.06 33.1021 246.441 32.7217 246.441 32.2523V24.0536L248.877 21.6172C248.935 21.5594 248.985 21.4969 249.028 21.4309H257.262C257.732 21.4309 258.112 21.0504 258.112 20.5811C258.112 20.1117 257.732 19.7312 257.262 19.7312H248.594L246.441 17.5783V8.90984C246.441 8.44049 246.06 8.06 245.591 8.06C245.122 8.06 244.741 8.44049 244.741 8.90984V17.5783L242.588 19.7312H233.92C233.45 19.7312 233.07 20.1117 233.07 20.5811C233.07 21.0504 233.45 21.4309 233.92 21.4309H242.154C242.197 21.4969 242.247 21.5594 242.305 21.6172L244.741 24.0536V32.2523Z" stroke="#F9F9F9"/> +<path d="M243.216 9.21374L245.15 8.19577L245.354 9.89239L243.216 9.21374Z" fill="#F9F9F9"/> +<path d="M256.876 22.8922L256.194 20.8158L258.008 20.9883L256.876 22.8922Z" fill="#F9F9F9"/> +<path d="M245.203 34.5616L244.521 32.4851L246.335 32.6576L245.203 34.5616Z" fill="#F9F9F9"/> +<path d="M231.611 20.8525L233.579 19.8006L233.783 21.4973L231.611 20.8525Z" fill="#F9F9F9"/> +<path fill-rule="evenodd" clip-rule="evenodd" d="M243.462 35.7746C242.655 35.7746 242.001 35.1207 242.001 34.314V26.3683L239.744 24.1108C239.744 24.1108 239.744 24.1108 239.744 24.1108C239.741 24.1083 239.739 24.1059 239.736 24.1034H231.791C230.984 24.1034 230.33 23.4495 230.33 22.6428C230.33 21.8361 230.984 21.1822 231.791 21.1822H240.206L242.001 19.387V10.9716C242.001 10.1649 242.655 9.51093 243.462 9.51093C244.269 9.51093 244.922 10.1649 244.922 10.9716V19.387L246.718 21.1822H255.133C255.94 21.1822 256.594 21.8361 256.594 22.6428C256.594 23.4495 255.94 24.1034 255.133 24.1034H247.187C247.185 24.1059 247.182 24.1083 247.18 24.1108C247.18 24.1108 247.18 24.1108 247.18 24.1108L244.922 26.3683V34.314C244.922 35.1207 244.269 35.7746 243.462 35.7746ZM244.312 26.1153L246.748 23.6789C246.806 23.6211 246.856 23.5586 246.899 23.4926H255.133C255.602 23.4926 255.983 23.1121 255.983 22.6428C255.983 22.1734 255.602 21.7929 255.133 21.7929H246.465L244.312 19.64V10.9716C244.312 10.5022 243.931 10.1217 243.462 10.1217C242.992 10.1217 242.612 10.5022 242.612 10.9716V19.64L240.459 21.7929H231.791C231.321 21.7929 230.941 22.1734 230.941 22.6428C230.941 23.1121 231.321 23.4926 231.791 23.4926H240.025C240.068 23.5586 240.118 23.6211 240.176 23.6789L242.612 26.1153V34.314C242.612 34.7834 242.992 35.1639 243.462 35.1639C243.931 35.1639 244.312 34.7834 244.312 34.314V26.1153Z" fill="#F9F9F9"/> +<path d="M242.053 34.314C242.053 35.092 242.684 35.7227 243.462 35.7227C244.24 35.7227 244.87 35.092 244.87 34.314V26.3468L247.143 24.0741C247.143 24.0741 247.143 24.0741 247.143 24.074C247.151 24.0666 247.158 24.059 247.165 24.0514H255.133C255.911 24.0514 256.542 23.4208 256.542 22.6428C256.542 21.8649 255.911 21.2342 255.133 21.2342H246.696L244.87 19.4086V10.9716C244.87 10.1936 244.24 9.56297 243.462 9.56297C242.684 9.56297 242.053 10.1936 242.053 10.9716V19.4086L240.227 21.2342H231.79C231.013 21.2342 230.382 21.8649 230.382 22.6428C230.382 23.4208 231.013 24.0514 231.79 24.0514H239.758C239.765 24.059 239.773 24.0666 239.78 24.074C239.78 24.0741 239.78 24.0741 239.78 24.0741L242.053 26.3468V34.314Z" fill="#FBBE22" stroke="#1F0333" stroke-width="1.11753"/> +<path d="M258.088 50.6007C258.088 51.0097 258.42 51.3413 258.829 51.3413C259.238 51.3413 259.57 51.0097 259.57 50.6007V43.4553L261.693 41.332C261.744 41.2816 261.787 41.2271 261.825 41.1696H269.001C269.41 41.1696 269.741 40.838 269.741 40.4289C269.741 40.0199 269.41 39.6883 269.001 39.6883H261.446L259.57 37.812V30.2572C259.57 29.8482 259.238 29.5166 258.829 29.5166C258.42 29.5166 258.088 29.8482 258.088 30.2572V37.812L256.212 39.6883H248.657C248.248 39.6883 247.917 40.0199 247.917 40.4289C247.917 40.838 248.248 41.1696 248.657 41.1696H255.834C255.871 41.2271 255.915 41.2816 255.965 41.332L258.088 43.4553V50.6007Z" fill="#F9F9F9"/> +<path d="M258.088 50.6007C258.088 51.0097 258.42 51.3413 258.829 51.3413C259.238 51.3413 259.57 51.0097 259.57 50.6007V43.4553L261.693 41.332C261.744 41.2816 261.787 41.2271 261.825 41.1696H269.001C269.41 41.1696 269.741 40.838 269.741 40.4289C269.741 40.0199 269.41 39.6883 269.001 39.6883H261.446L259.57 37.812V30.2572C259.57 29.8482 259.238 29.5166 258.829 29.5166C258.42 29.5166 258.088 29.8482 258.088 30.2572V37.812L256.212 39.6883H248.657C248.248 39.6883 247.917 40.0199 247.917 40.4289C247.917 40.838 248.248 41.1696 248.657 41.1696H255.834C255.871 41.2271 255.915 41.2816 255.965 41.332L258.088 43.4553V50.6007Z" stroke="#F9F9F9"/> +<path d="M256.759 30.5221L258.444 29.6349L258.622 31.1136L256.759 30.5221Z" fill="#F9F9F9"/> +<path d="M268.664 42.4432L268.069 40.6335L269.65 40.7839L268.664 42.4432Z" fill="#F9F9F9"/> +<path d="M258.491 52.6133L257.897 50.8036L259.477 50.954L258.491 52.6133Z" fill="#F9F9F9"/> +<path d="M246.645 40.6655L248.36 39.7488L248.537 41.2274L246.645 40.6655Z" fill="#F9F9F9"/> +<path fill-rule="evenodd" clip-rule="evenodd" d="M256.973 53.6705C256.27 53.6705 255.7 53.1006 255.7 52.3975V45.4727L253.732 43.5053C253.732 43.5053 253.732 43.5052 253.732 43.5052C253.73 43.5031 253.728 43.5009 253.726 43.4988H246.801C246.098 43.4988 245.528 42.9289 245.528 42.2258C245.528 41.5228 246.098 40.9528 246.801 40.9528H254.135L255.7 39.3883V32.0541C255.7 31.3511 256.27 30.7811 256.973 30.7811C257.676 30.7811 258.246 31.3511 258.246 32.0541V39.3883L259.81 40.9528H267.145C267.848 40.9528 268.418 41.5228 268.418 42.2258C268.418 42.9289 267.848 43.4988 267.145 43.4988H260.22C260.218 43.5009 260.215 43.5031 260.213 43.5052C260.213 43.5052 260.213 43.5053 260.213 43.5053L258.246 45.4727V52.3975C258.246 53.1006 257.676 53.6705 256.973 53.6705ZM257.713 45.2522L259.837 43.1288C259.887 43.0784 259.931 43.024 259.968 42.9665H267.145C267.554 42.9665 267.885 42.6349 267.885 42.2258C267.885 41.8168 267.554 41.4852 267.145 41.4852H259.59L257.713 39.6088V32.0541C257.713 31.645 257.382 31.3134 256.973 31.3134C256.564 31.3134 256.232 31.645 256.232 32.0541V39.6088L254.356 41.4852H246.801C246.392 41.4852 246.06 41.8168 246.06 42.2258C246.06 42.6349 246.392 42.9665 246.801 42.9665H253.977C254.015 43.024 254.058 43.0784 254.109 43.1288L256.232 45.2522V52.3975C256.232 52.8066 256.564 53.1382 256.973 53.1382C257.382 53.1382 257.713 52.8066 257.713 52.3975V45.2522Z" fill="#F9F9F9"/> +<path d="M255.674 52.3975C255.674 53.1152 256.255 53.697 256.973 53.697C257.691 53.697 258.272 53.1152 258.272 52.3975V45.4837L260.231 43.5252H267.145C267.862 43.5252 268.444 42.9435 268.444 42.2258C268.444 41.5082 267.862 40.9264 267.145 40.9264H259.821L258.272 39.3774V32.0541C258.272 31.3365 257.691 30.7547 256.973 30.7547C256.255 30.7547 255.674 31.3365 255.674 32.0541V39.3774L254.125 40.9264H246.801C246.084 40.9264 245.502 41.5082 245.502 42.2258C245.502 42.9435 246.084 43.5252 246.801 43.5252H253.715L255.674 45.4837V52.3975Z" fill="#FBBE22" stroke="#1F0333" stroke-width="1.11753"/> +<path d="M19.7131 81.8441C19.7131 82.2532 19.3815 82.5848 18.9724 82.5848C18.5634 82.5848 18.2318 82.2532 18.2318 81.8441V74.6988L16.1084 72.5754C16.058 72.525 16.0142 72.4705 15.977 72.413H8.80071C8.39166 72.413 8.06005 72.0814 8.06005 71.6724C8.06005 71.2633 8.39166 70.9317 8.80071 70.9317H16.3554L18.2318 69.0554V61.5007C18.2318 61.0916 18.5634 60.76 18.9724 60.76C19.3815 60.76 19.7131 61.0916 19.7131 61.5007V69.0554L21.5894 70.9317H29.1441C29.5532 70.9317 29.8848 71.2633 29.8848 71.6724C29.8848 72.0814 29.5532 72.413 29.1441 72.413H21.9679C21.9307 72.4705 21.8869 72.525 21.8365 72.5754L19.7131 74.6988V81.8441Z" fill="#F9F9F9"/> +<path d="M19.7131 81.8441C19.7131 82.2532 19.3815 82.5848 18.9724 82.5848C18.5634 82.5848 18.2318 82.2532 18.2318 81.8441V74.6988L16.1084 72.5754C16.058 72.525 16.0142 72.4705 15.977 72.413H8.80071C8.39166 72.413 8.06005 72.0814 8.06005 71.6724C8.06005 71.2633 8.39166 70.9317 8.80071 70.9317H16.3554L18.2318 69.0554V61.5007C18.2318 61.0916 18.5634 60.76 18.9724 60.76C19.3815 60.76 19.7131 61.0916 19.7131 61.5007V69.0554L21.5894 70.9317H29.1441C29.5532 70.9317 29.8848 71.2633 29.8848 71.6724C29.8848 72.0814 29.5532 72.413 29.1441 72.413H21.9679C21.9307 72.4705 21.8869 72.525 21.8365 72.5754L19.7131 74.6988V81.8441Z" stroke="#F9F9F9"/> +<path d="M21.0427 61.7656L19.3571 60.8784L19.1796 62.3571L21.0427 61.7656Z" fill="#F9F9F9"/> +<path d="M9.13752 73.6866L9.7322 71.877L8.15164 72.0273L9.13752 73.6866Z" fill="#F9F9F9"/> +<path d="M19.3102 83.8567L19.9049 82.0471L18.3244 82.1974L19.3102 83.8567Z" fill="#F9F9F9"/> +<path d="M31.1567 71.909L29.4415 70.9922L29.264 72.4709L31.1567 71.909Z" fill="#F9F9F9"/> +<path fill-rule="evenodd" clip-rule="evenodd" d="M20.8287 84.9139C21.5317 84.9139 22.1016 84.344 22.1016 83.641V76.7161L24.0691 74.7487C24.0691 74.7487 24.0691 74.7487 24.0691 74.7487C24.0713 74.7465 24.0734 74.7444 24.0755 74.7422H31.0004C31.7034 74.7422 32.2734 74.1723 32.2734 73.4693C32.2734 72.7662 31.7034 72.1963 31.0004 72.1963H23.6662L22.1016 70.6318V63.2975C22.1016 62.5945 21.5317 62.0246 20.8287 62.0246C20.1256 62.0246 19.5557 62.5945 19.5557 63.2975V70.6318L17.9912 72.1963H10.657C9.95392 72.1963 9.38398 72.7662 9.38398 73.4693C9.38398 74.1723 9.95392 74.7422 10.657 74.7422H17.5818C17.5839 74.7444 17.5861 74.7465 17.5882 74.7487C17.5882 74.7487 17.5882 74.7487 17.5883 74.7487L19.5557 76.7161V83.641C19.5557 84.344 20.1256 84.9139 20.8287 84.9139ZM20.088 76.4957L17.9646 74.3723C17.9142 74.3219 17.8704 74.2674 17.8332 74.2099H10.657C10.2479 74.2099 9.91629 73.8783 9.91629 73.4693C9.91629 73.0602 10.2479 72.7286 10.657 72.7286H18.2117L20.088 70.8523V63.2975C20.088 62.8885 20.4196 62.5569 20.8287 62.5569C21.2377 62.5569 21.5693 62.8885 21.5693 63.2975V70.8523L23.4457 72.7286H31.0004C31.4094 72.7286 31.7411 73.0602 31.7411 73.4693C31.7411 73.8783 31.4094 74.2099 31.0004 74.2099H23.8241C23.7869 74.2674 23.7431 74.3219 23.6927 74.3723L21.5693 76.4957V83.641C21.5693 84.05 21.2377 84.3816 20.8287 84.3816C20.4196 84.3816 20.088 84.05 20.088 83.641V76.4957Z" fill="#F9F9F9"/> +<path d="M22.1279 83.641C22.1279 84.3586 21.5462 84.9404 20.8285 84.9404C20.1109 84.9404 19.5291 84.3586 19.5291 83.641V76.7271L17.5707 74.7687H10.6568C9.93916 74.7687 9.35738 74.1869 9.35738 73.4693C9.35738 72.7516 9.93916 72.1698 10.6568 72.1698H17.9801L19.5291 70.6208V63.2975C19.5291 62.5799 20.1109 61.9981 20.8285 61.9981C21.5462 61.9981 22.1279 62.5799 22.1279 63.2975V70.6208L23.677 72.1698H31.0002C31.7179 72.1698 32.2997 72.7516 32.2997 73.4693C32.2997 74.1869 31.7179 74.7687 31.0002 74.7687H24.0864L22.1279 76.7271V83.641Z" fill="#FBBE22" stroke="#1F0333" stroke-width="1.11753"/> +<path d="M138.42 203.984C138.42 204.393 138.752 204.725 139.161 204.725C139.57 204.725 139.902 204.393 139.902 203.984V196.839L142.025 194.715C142.075 194.665 142.119 194.611 142.156 194.553H149.333C149.742 194.553 150.073 194.221 150.073 193.812C150.073 193.403 149.742 193.072 149.333 193.072H141.778L139.902 191.195V183.641C139.902 183.232 139.57 182.9 139.161 182.9C138.752 182.9 138.42 183.232 138.42 183.641V191.195L136.544 193.072H128.989C128.58 193.072 128.249 193.403 128.249 193.812C128.249 194.221 128.58 194.553 128.989 194.553H136.166C136.203 194.611 136.247 194.665 136.297 194.715L138.42 196.839V203.984Z" fill="#F9F9F9"/> +<path d="M138.42 203.984C138.42 204.393 138.752 204.725 139.161 204.725C139.57 204.725 139.902 204.393 139.902 203.984V196.839L142.025 194.715C142.075 194.665 142.119 194.611 142.156 194.553H149.333C149.742 194.553 150.073 194.221 150.073 193.812C150.073 193.403 149.742 193.072 149.333 193.072H141.778L139.902 191.195V183.641C139.902 183.232 139.57 182.9 139.161 182.9C138.752 182.9 138.42 183.232 138.42 183.641V191.195L136.544 193.072H128.989C128.58 193.072 128.249 193.403 128.249 193.812C128.249 194.221 128.58 194.553 128.989 194.553H136.166C136.203 194.611 136.247 194.665 136.297 194.715L138.42 196.839V203.984Z" stroke="#F9F9F9"/> +<path d="M137.091 183.906L138.776 183.018L138.954 184.497L137.091 183.906Z" fill="#F9F9F9"/> +<path d="M148.996 195.827L148.401 194.017L149.982 194.167L148.996 195.827Z" fill="#F9F9F9"/> +<path d="M138.823 205.997L138.228 204.187L139.809 204.337L138.823 205.997Z" fill="#F9F9F9"/> +<path d="M126.977 194.049L128.692 193.132L128.869 194.611L126.977 194.049Z" fill="#F9F9F9"/> +<path fill-rule="evenodd" clip-rule="evenodd" d="M137.305 207.054C136.602 207.054 136.032 206.484 136.032 205.781V198.856L134.064 196.889C134.064 196.889 134.064 196.889 134.064 196.889C134.062 196.887 134.06 196.884 134.058 196.882H127.133C126.43 196.882 125.86 196.312 125.86 195.609C125.86 194.906 126.43 194.336 127.133 194.336H134.467L136.032 192.772V185.438C136.032 184.734 136.602 184.165 137.305 184.165C138.008 184.165 138.578 184.734 138.578 185.438V192.772L140.142 194.336H147.476C148.179 194.336 148.749 194.906 148.749 195.609C148.749 196.312 148.179 196.882 147.476 196.882H140.551C140.549 196.884 140.547 196.887 140.545 196.889C140.545 196.889 140.545 196.889 140.545 196.889L138.578 198.856V205.781C138.578 206.484 138.008 207.054 137.305 207.054ZM138.045 198.636L140.169 196.512C140.219 196.462 140.263 196.407 140.3 196.35H147.476C147.885 196.35 148.217 196.018 148.217 195.609C148.217 195.2 147.885 194.869 147.476 194.869H139.922L138.045 192.992V185.438C138.045 185.028 137.714 184.697 137.305 184.697C136.896 184.697 136.564 185.028 136.564 185.438V192.992L134.688 194.869H127.133C126.724 194.869 126.392 195.2 126.392 195.609C126.392 196.018 126.724 196.35 127.133 196.35H134.309C134.346 196.407 134.39 196.462 134.441 196.512L136.564 198.636V205.781C136.564 206.19 136.896 206.522 137.305 206.522C137.714 206.522 138.045 206.19 138.045 205.781V198.636Z" fill="#F9F9F9"/> +<path d="M136.005 205.781C136.005 206.499 136.587 207.08 137.305 207.08C138.022 207.08 138.604 206.499 138.604 205.781V198.867L140.563 196.909H147.477C148.194 196.909 148.776 196.327 148.776 195.609C148.776 194.892 148.194 194.31 147.477 194.31H140.153L138.604 192.761V185.438C138.604 184.72 138.022 184.138 137.305 184.138C136.587 184.138 136.005 184.72 136.005 185.438V192.761L134.456 194.31H127.133C126.415 194.31 125.834 194.892 125.834 195.609C125.834 196.327 126.415 196.909 127.133 196.909H134.047L136.005 198.867V205.781Z" fill="#FBBE22" stroke="#1F0333" stroke-width="1.11753"/> +<path d="M141.61 61.7298L142.165 61.8099C142.197 61.5878 142.093 61.368 141.902 61.2512C141.71 61.1344 141.468 61.143 141.285 61.2731L141.61 61.7298ZM140.384 62.6029L140.059 62.1462L140.059 62.1462L140.384 62.6029ZM140.119 62.5119L139.581 62.6719L139.581 62.6719L140.119 62.5119ZM141.67 38.6989L141.599 39.2549C141.623 39.258 141.647 39.2595 141.67 39.2595L141.67 38.6989ZM142.99 48.2922L142.43 48.2674C142.417 48.5608 142.633 48.8144 142.925 48.8489C143.216 48.8833 143.485 48.6869 143.541 48.3986L142.99 48.2922ZM150.899 34.5569L151.147 34.0539C151.127 34.0442 151.107 34.0357 151.087 34.0285L150.899 34.5569ZM148.373 49.1245L147.855 48.9123C147.758 49.1479 147.833 49.4188 148.036 49.5721C148.239 49.7253 148.52 49.7225 148.72 49.5652L148.373 49.1245ZM153.326 47.3405L153.418 46.7874L153.418 46.7874L153.326 47.3405ZM153.569 48.8728L153.961 49.2745L153.961 49.2745L153.569 48.8728ZM145.677 64.1722L145.116 64.1583L145.116 64.1583L145.677 64.1722ZM141.395 64.1641L141.955 64.1827L141.955 64.1827L141.395 64.1641ZM141.285 61.2731L140.059 62.1462L140.709 63.0596L141.935 62.1865L141.285 61.2731ZM140.059 62.1462C140.275 61.9923 140.58 62.0957 140.656 62.3519L139.581 62.6719C139.725 63.1545 140.3 63.3504 140.709 63.0595L140.059 62.1462ZM140.656 62.3519C138.942 56.5952 138.456 50.5986 138.831 46.1146C139.019 43.867 139.42 42.0388 139.965 40.8193C140.238 40.2085 140.531 39.7873 140.818 39.5364C141.093 39.2965 141.347 39.2225 141.599 39.2549L141.742 38.1429C141.113 38.0619 140.549 38.2831 140.081 38.692C139.625 39.0899 139.25 39.6712 138.941 40.3617C138.323 41.7449 137.906 43.7145 137.714 46.0211C137.327 50.6453 137.827 56.7821 139.581 62.6719L140.656 62.3519ZM141.67 39.2595C141.734 39.2595 141.885 39.2804 142.067 39.7038C142.247 40.1216 142.377 40.7713 142.455 41.6368C142.61 43.3554 142.543 45.7165 142.43 48.2674L143.55 48.3169C143.663 45.7774 143.734 43.3418 143.572 41.5364C143.491 40.6399 143.349 39.8457 143.097 39.2602C142.847 38.6802 142.405 38.1383 141.67 38.1383L141.67 39.2595ZM143.541 48.3986C144.279 44.5804 145.338 40.8848 146.642 38.3183C147.296 37.0308 147.988 36.0766 148.69 35.522C149.37 34.9855 150.026 34.8424 150.712 35.0853L151.087 34.0285C149.96 33.6295 148.907 33.9228 147.996 34.6419C147.108 35.3429 146.327 36.4633 145.642 37.8105C144.269 40.5135 143.186 44.3274 142.44 48.1857L143.541 48.3986ZM150.652 35.0599C151.086 35.2735 151.371 35.7129 151.462 36.5116C151.553 37.3208 151.427 38.3994 151.12 39.6989C150.508 42.2909 149.225 45.5632 147.855 48.9123L148.892 49.3368C150.257 46.0015 151.575 42.6484 152.211 39.9568C152.528 38.6146 152.689 37.3869 152.576 36.3857C152.461 35.3738 152.051 34.4987 151.147 34.0539L150.652 35.0599ZM148.72 49.5652C150.401 48.2431 152.017 47.6915 153.235 47.8935L153.418 46.7874C151.75 46.5108 149.817 47.2759 148.027 48.6839L148.72 49.5652ZM153.235 47.8935C153.303 47.9048 153.325 47.9269 153.331 47.9341C153.341 47.9447 153.358 47.9705 153.364 48.024C153.378 48.141 153.329 48.3248 153.178 48.4712L153.961 49.2745C154.34 48.9046 154.535 48.3827 154.477 47.8928C154.415 47.3674 154.054 46.8929 153.418 46.7874L153.235 47.8935ZM153.178 48.4712C151.087 50.5072 149.104 53.4602 147.632 56.361C146.17 59.2457 145.166 62.1725 145.116 64.1583L146.237 64.1861C146.28 62.4578 147.189 59.7147 148.632 56.8682C150.068 54.0378 151.985 51.1982 153.961 49.2745L153.178 48.4712ZM145.116 64.1583C145.122 63.9464 145.297 63.782 145.501 63.782V64.9031C145.898 64.9031 146.227 64.5897 146.237 64.1861L145.116 64.1583ZM145.501 63.782H141.567V64.9031H145.501V63.782ZM141.567 63.782C141.789 63.782 141.962 63.9659 141.955 64.1827L140.834 64.1454C140.821 64.5563 141.15 64.9031 141.567 64.9031V63.782ZM141.955 64.1827C141.982 63.3719 142.054 62.5801 142.165 61.8099L141.055 61.6498C140.938 62.4601 140.863 63.2929 140.834 64.1454L141.955 64.1827Z" fill="#F5F5F5"/> +<path d="M137.53 65.352C135.101 67.2507 132.651 68.5654 130.045 70.06C141.644 70.1431 160.246 72.725 157.748 71.2808C154.765 69.5559 150.258 66.5087 148.455 64.5087C146.652 62.5087 140.565 62.9785 137.53 65.352Z" fill="#B27AF4"/> +<path d="M149.687 65.7538C148.736 64.6705 147.039 62.7289 147.162 60.2617C147.22 59.1134 147.258 58.3946 147.304 57.9239C147.322 57.7362 146.847 57.3694 146.678 57.4528C144.922 58.3199 143.138 58.433 139.702 58.4366C139.605 58.4367 139.527 58.5192 139.531 58.6161C139.62 60.6812 138.514 64.4479 137.031 65.7369C136.426 66.2628 137.646 66.4979 139.607 66.5556C126.647 68.3794 116.634 80.4657 116.634 95.1039C116.634 103.673 120.065 111.368 125.51 116.641C129.48 120.486 133.915 121.596 139.814 123.074C140.304 123.197 140.804 123.322 141.315 123.451C142.433 123.735 143.604 123.77 144.732 123.533C151.764 122.054 156.202 120.821 160.518 116.641C165.963 111.368 169.395 103.673 169.395 95.1039C169.395 79.9975 158.731 67.6089 145.17 66.4123C146.805 66.3102 148.385 66.1694 149.586 66.0237C149.718 66.0078 149.774 65.8532 149.687 65.7538Z" fill="#B27AF4"/> +<path d="M163.993 95.3515C163.993 107.448 154.588 117.214 143.034 117.214C131.48 117.214 122.075 107.448 122.075 95.3515C122.075 83.2549 131.48 73.4885 143.034 73.4885C154.588 73.4885 163.993 83.2549 163.993 95.3515Z" stroke="#1F0333" stroke-width="1.12118"/> +<path d="M159.503 95.3515C159.503 104.85 152.109 112.512 143.034 112.512C133.959 112.512 126.565 104.85 126.565 95.3515C126.565 85.8526 133.959 78.1908 143.034 78.1908C152.109 78.1908 159.503 85.8526 159.503 95.3515Z" stroke="#1F0333" stroke-width="1.12118"/> +<path d="M155.074 95.3515C155.074 102.291 149.664 107.88 143.034 107.88C136.405 107.88 130.994 102.291 130.994 95.3515C130.994 88.4118 136.405 82.8229 143.034 82.8229C149.664 82.8229 155.074 88.4118 155.074 95.3515Z" stroke="#1F0333" stroke-width="1.12118"/> +<path d="M151.063 95.3515C151.063 100.006 147.447 103.739 143.034 103.739C138.621 103.739 135.005 100.006 135.005 95.3515C135.005 90.6972 138.621 86.9637 143.034 86.9637C147.447 86.9637 151.063 90.6972 151.063 95.3515Z" stroke="#1F0333" stroke-width="1.12118"/> +<path d="M147.172 95.3515C147.172 97.7557 145.3 99.6687 143.034 99.6687C140.768 99.6687 138.896 97.7557 138.896 95.3515C138.896 92.9473 140.768 91.0344 143.034 91.0344C145.3 91.0344 147.172 92.9473 147.172 95.3515Z" stroke="#1F0333" stroke-width="1.12118"/> +<path d="M216.903 61.7404L217.458 61.8204C217.49 61.5985 217.386 61.3788 217.195 61.2621C217.004 61.1453 216.761 61.1539 216.578 61.284L216.903 61.7404ZM215.678 62.6131L216.003 63.0695L216.003 63.0695L215.678 62.6131ZM215.413 62.5221L215.95 62.3622L215.95 62.3622L215.413 62.5221ZM216.964 38.7206L216.892 39.2763C216.916 39.2794 216.94 39.2809 216.964 39.2809L216.964 38.7206ZM218.283 48.3091L217.723 48.2844C217.71 48.5776 217.926 48.8311 218.217 48.8656C218.509 48.9 218.777 48.7037 218.833 48.4155L218.283 48.3091ZM226.188 34.5805L226.436 34.0778C226.416 34.0681 226.396 34.0596 226.375 34.0524L226.188 34.5805ZM223.663 49.1412L223.145 48.929C223.049 49.1645 223.123 49.4353 223.326 49.5885C223.529 49.7417 223.81 49.7389 224.01 49.5816L223.663 49.1412ZM228.614 47.358L228.706 46.8052L228.706 46.8052L228.614 47.358ZM228.857 48.8896L228.466 48.4881L228.466 48.4881L228.857 48.8896ZM220.968 64.1817L220.408 64.1678L220.408 64.1678L220.968 64.1817ZM216.688 64.1735L217.248 64.1921L217.248 64.1921L216.688 64.1735ZM216.578 61.284L215.353 62.1566L216.003 63.0695L217.228 62.1969L216.578 61.284ZM215.353 62.1566C215.569 62.0028 215.874 62.1061 215.95 62.3622L214.876 62.6821C215.019 63.1644 215.594 63.3602 216.003 63.0695L215.353 62.1566ZM215.95 62.3622C214.236 56.6083 213.751 50.6146 214.126 46.1327C214.313 43.8862 214.714 42.0588 215.259 40.8399C215.532 40.2294 215.825 39.8085 216.112 39.5577C216.387 39.3178 216.64 39.2439 216.892 39.2763L217.035 38.1648C216.407 38.0839 215.843 38.3049 215.375 38.7136C214.92 39.1113 214.545 39.6924 214.236 40.3826C213.618 41.7651 213.202 43.7338 213.009 46.0393C212.622 50.6613 213.123 56.7951 214.876 62.6821L215.95 62.3622ZM216.964 39.2809C217.027 39.2809 217.178 39.3018 217.36 39.725C217.54 40.1426 217.67 40.792 217.748 41.657C217.903 43.3747 217.836 45.7347 217.723 48.2844L218.843 48.3339C218.955 45.7955 219.027 43.3612 218.864 41.5567C218.784 40.6606 218.642 39.8668 218.39 39.2815C218.14 38.7019 217.698 38.1603 216.964 38.1603L216.964 39.2809ZM218.833 48.4155C219.571 44.5991 220.63 40.9053 221.933 38.3402C222.587 37.0533 223.278 36.0995 223.98 35.5452C224.66 35.0089 225.316 34.8659 226.001 35.1087L226.375 34.0524C225.249 33.6536 224.197 33.9468 223.286 34.6655C222.398 35.3661 221.618 36.486 220.934 37.8326C219.561 40.5343 218.479 44.3463 217.733 48.2027L218.833 48.4155ZM225.941 35.0833C226.375 35.2968 226.66 35.736 226.75 36.5343C226.842 37.3431 226.716 38.4212 226.409 39.7201C225.797 42.3108 224.514 45.5815 223.145 48.929L224.182 49.3533C225.546 46.0196 226.864 42.6681 227.499 39.9778C227.817 38.6362 227.977 37.4092 227.864 36.4084C227.749 35.3971 227.34 34.5224 226.436 34.0778L225.941 35.0833ZM224.01 49.5816C225.69 48.2602 227.305 47.7089 228.523 47.9108L228.706 46.8052C227.038 46.5288 225.106 47.2934 223.317 48.7008L224.01 49.5816ZM228.523 47.9108C228.591 47.9221 228.612 47.9441 228.619 47.9513C228.628 47.9619 228.645 47.9877 228.652 48.0412C228.665 48.1581 228.616 48.3418 228.466 48.4881L229.248 49.2911C229.628 48.9213 229.822 48.3997 229.765 47.9101C229.703 47.3849 229.342 46.9106 228.706 46.8052L228.523 47.9108ZM228.466 48.4881C226.376 50.5232 224.393 53.4748 222.923 56.3742C221.461 59.2575 220.457 62.1829 220.408 64.1678L221.528 64.1956C221.571 62.468 222.479 59.7263 223.922 56.8811C225.357 54.0521 227.273 51.2138 229.248 49.2911L228.466 48.4881ZM220.408 64.1678C220.413 63.9559 220.588 63.7916 220.793 63.7916V64.9122C221.189 64.9122 221.518 64.599 221.528 64.1956L220.408 64.1678ZM220.793 63.7916H216.86V64.9122H220.793V63.7916ZM216.86 63.7916C217.083 63.7916 217.255 63.9755 217.248 64.1921L216.128 64.1549C216.114 64.5656 216.443 64.9122 216.86 64.9122V63.7916ZM217.248 64.1921C217.275 63.3818 217.347 62.5903 217.458 61.8204L216.349 61.6604C216.232 62.4704 216.156 63.3028 216.128 64.1549L217.248 64.1921Z" fill="#F5F5F5"/> +<path d="M212.511 67.6308C210.1 69.5162 204.317 73.2836 201.729 74.7677C213.247 74.8502 233.43 73.5091 230.95 72.075C225.99 69.2071 225.15 68.7794 223.36 66.7934C221.569 64.8075 215.525 65.274 212.511 67.6308Z" fill="#B27AF4"/> +<path d="M224.582 68.0298C223.638 66.9541 221.947 65.1533 222.075 62.5763C222.132 61.4361 222.171 60.7223 222.216 60.2549C222.234 60.0686 221.762 59.7043 221.594 59.7872C219.85 60.6482 218.079 60.7604 214.667 60.764C214.571 60.7641 214.494 60.846 214.498 60.9423C214.21 65.565 214.21 66.185 212.016 68.013C211.43 68.5223 212.568 68.7569 214.43 68.8214C199.33 73.625 191.762 81.3103 191.762 94.3727C191.762 102.048 195.169 108.94 200.576 113.663C204.518 117.106 208.922 118.101 214.779 119.425C215.316 119.546 215.865 119.67 216.426 119.799C217.435 120.03 218.484 120.059 219.501 119.867C226.577 118.528 231.019 117.435 235.338 113.663C240.744 108.94 244.152 102.048 244.152 94.3727C244.152 80.8638 233.596 69.7815 220.161 68.6797C221.762 68.5785 223.305 68.4405 224.482 68.2978C224.613 68.282 224.669 68.1285 224.582 68.0298Z" fill="#B27AF4"/> +<path d="M238.914 93.7192C238.914 104.872 229.553 113.945 217.965 113.945C206.377 113.945 197.016 104.872 197.016 93.7192C197.016 82.5667 206.377 73.4934 217.965 73.4934C229.553 73.4934 238.914 82.5667 238.914 93.7192Z" stroke="#1F0333" stroke-width="1.12064"/> +<path d="M234.426 93.7192C234.426 102.464 227.075 109.586 217.965 109.586C208.854 109.586 201.503 102.464 201.503 93.7192C201.503 84.9748 208.854 77.8523 217.965 77.8523C227.075 77.8523 234.426 84.9748 234.426 93.7192Z" stroke="#1F0333" stroke-width="1.12064"/> +<path d="M229.999 93.7192C229.999 100.091 224.631 105.292 217.965 105.292C211.299 105.292 205.931 100.091 205.931 93.7192C205.931 87.3471 211.299 82.1461 217.965 82.1461C224.631 82.1461 229.999 87.3471 229.999 93.7192Z" stroke="#1F0333" stroke-width="1.12064"/> +<path d="M225.99 93.7192C225.99 97.9728 222.416 101.454 217.965 101.454C213.514 101.454 209.94 97.9728 209.94 93.7192C209.94 89.4655 213.514 85.9846 217.965 85.9846C222.416 85.9846 225.99 89.4655 225.99 93.7192Z" stroke="#1F0333" stroke-width="1.12064"/> +<path d="M222.101 93.7192C222.101 95.8871 220.27 97.6804 217.965 97.6804C215.66 97.6804 213.828 95.8871 213.828 93.7192C213.828 91.5514 215.66 89.758 217.965 89.758C220.27 89.758 222.101 91.5514 222.101 93.7192Z" stroke="#1F0333" stroke-width="1.12064"/> +<mask id="path-51-inside-1_156_3203" fill="white"> +<path fill-rule="evenodd" clip-rule="evenodd" d="M224.053 58.9985C223.241 59.9341 222.246 61.3164 222.115 63.55C218.938 71.3619 217.557 81.2255 217.557 91.5184C217.557 101.832 219.432 111.386 222.621 119.206C221.105 119.58 219.541 119.824 217.94 119.928C202.976 119.367 191.034 108.163 191.034 94.4234C191.034 84.7551 196.947 76.3423 205.666 72.0101C209.308 69.9951 213.749 67.5082 213.9 65.1C214.055 62.62 213.368 60.7799 212.721 59.4221C212.457 58.8685 212.806 58.1766 213.402 58.1324L223.402 57.391C224.048 57.343 224.49 58.0834 224.201 58.6826C224.152 58.7856 224.102 58.891 224.053 58.9985Z"/> +</mask> +<path fill-rule="evenodd" clip-rule="evenodd" d="M224.053 58.9985C223.241 59.9341 222.246 61.3164 222.115 63.55C218.938 71.3619 217.557 81.2255 217.557 91.5184C217.557 101.832 219.432 111.386 222.621 119.206C221.105 119.58 219.541 119.824 217.94 119.928C202.976 119.367 191.034 108.163 191.034 94.4234C191.034 84.7551 196.947 76.3423 205.666 72.0101C209.308 69.9951 213.749 67.5082 213.9 65.1C214.055 62.62 213.368 60.7799 212.721 59.4221C212.457 58.8685 212.806 58.1766 213.402 58.1324L223.402 57.391C224.048 57.343 224.49 58.0834 224.201 58.6826C224.152 58.7856 224.102 58.891 224.053 58.9985Z" fill="#1F0333"/> +<path d="M222.115 63.55L223.15 63.9709L223.219 63.7999L223.23 63.6156L222.115 63.55ZM224.053 58.9985L224.897 59.7304L225.001 59.6099L225.068 59.4651L224.053 58.9985ZM222.621 119.206L222.888 120.291L224.143 119.981L223.655 118.784L222.621 119.206ZM217.94 119.928L217.898 121.044L217.955 121.046L218.012 121.042L217.94 119.928ZM205.666 72.0101L206.163 73.0105L206.185 72.9996L206.206 72.9876L205.666 72.0101ZM213.9 65.1L215.015 65.1697L215.015 65.1697L213.9 65.1ZM212.721 59.4221L211.713 59.9028L211.713 59.9028L212.721 59.4221ZM213.402 58.1324L213.485 59.2465L213.485 59.2465L213.402 58.1324ZM223.402 57.391L223.484 58.505L223.484 58.505L223.402 57.391ZM224.201 58.6826L223.195 58.1978L223.195 58.1979L224.201 58.6826ZM223.23 63.6156C223.341 61.7295 224.164 60.575 224.897 59.7304L223.209 58.2666C222.319 59.2931 221.152 60.9033 221 63.4844L223.23 63.6156ZM218.674 91.5184C218.674 81.3075 220.046 71.6015 223.15 63.9709L221.08 63.1291C217.829 71.1223 216.44 81.1435 216.44 91.5184H218.674ZM223.655 118.784C220.526 111.111 218.674 101.702 218.674 91.5184H216.44C216.44 101.962 218.337 111.66 221.586 119.628L223.655 118.784ZM218.012 121.042C219.679 120.935 221.309 120.68 222.888 120.291L222.353 118.122C220.901 118.479 219.402 118.714 217.868 118.813L218.012 121.042ZM189.917 94.4234C189.917 108.859 202.433 120.465 217.898 121.044L217.982 118.811C203.518 118.27 192.151 107.467 192.151 94.4234H189.917ZM205.169 71.0097C196.123 75.5042 189.917 84.2746 189.917 94.4234H192.151C192.151 85.2356 197.771 77.1804 206.163 73.0105L205.169 71.0097ZM212.785 65.0303C212.768 65.3047 212.617 65.6925 212.198 66.2042C211.785 66.7078 211.183 67.2448 210.427 67.8051C208.913 68.9275 206.96 70.0174 205.125 71.0326L206.206 72.9876C208.014 71.9878 210.103 70.8267 211.757 69.5999C212.586 68.9856 213.35 68.3234 213.926 67.6205C214.496 66.9256 214.957 66.0995 215.015 65.1697L212.785 65.0303ZM211.713 59.9028C212.316 61.1686 212.924 62.8117 212.785 65.0303L215.015 65.1697C215.186 62.4283 214.421 60.3912 213.73 58.9415L211.713 59.9028ZM213.32 57.0184C211.82 57.1296 211.165 58.7526 211.713 59.9028L213.73 58.9415C213.76 59.0062 213.75 59.0639 213.731 59.1015C213.708 59.144 213.63 59.2357 213.485 59.2465L213.32 57.0184ZM223.319 56.2769L213.32 57.0184L213.485 59.2465L223.484 58.505L223.319 56.2769ZM225.208 59.1674C225.532 58.4938 225.439 57.7576 225.106 57.2118C224.769 56.6603 224.126 56.2171 223.319 56.2769L223.484 58.505C223.418 58.51 223.348 58.4931 223.292 58.4615C223.24 58.4326 223.213 58.3989 223.199 58.3764C223.176 58.3386 223.159 58.2721 223.195 58.1978L225.208 59.1674ZM225.068 59.4651C225.114 59.3638 225.161 59.2644 225.208 59.1673L223.195 58.1979C223.142 58.3068 223.09 58.4182 223.038 58.5319L225.068 59.4651Z" fill="#B27AF4" mask="url(#path-51-inside-1_156_3203)"/> +<path d="M211.231 74.8697C211.738 75.3026 211.738 76.0857 211.231 76.5186L211.061 76.6641C211.018 76.7009 210.978 76.741 210.941 76.784L210.796 76.9543C210.363 77.4609 209.58 77.4609 209.147 76.9543L209.001 76.784C208.964 76.741 208.924 76.7009 208.881 76.6641L208.711 76.5186C208.204 76.0857 208.204 75.3026 208.711 74.8697L208.881 74.7242C208.924 74.6874 208.964 74.6473 209.001 74.6043L209.147 74.434C209.58 73.9274 210.363 73.9274 210.796 74.434L210.941 74.6043C210.978 74.6473 211.018 74.6874 211.061 74.7242L211.231 74.8697Z" fill="#F9F9F9" style="mix-blend-mode:hard-light"/> +<path d="M207.684 79.2688C208.925 80.3286 208.925 82.2458 207.684 83.3057L207.268 83.6619C207.162 83.752 207.064 83.8501 206.974 83.9555L206.618 84.3724C205.558 85.6126 203.641 85.6126 202.581 84.3724L202.225 83.9555C202.135 83.8501 202.036 83.752 201.931 83.6619L201.514 83.3057C200.274 82.2458 200.274 80.3286 201.514 79.2688L201.931 78.9125C202.036 78.8225 202.135 78.7243 202.225 78.6189L202.581 78.2021C203.641 76.9618 205.558 76.9618 206.618 78.2021L206.974 78.6189C207.064 78.7243 207.162 78.8225 207.268 78.9125L207.684 79.2688Z" fill="#F9F9F9" style="mix-blend-mode:hard-light"/> +<path d="M65.8878 61.7812L66.4409 61.861C66.4729 61.6396 66.3697 61.4205 66.1788 61.3041C65.9878 61.1876 65.7458 61.1962 65.5636 61.3259L65.8878 61.7812ZM64.6653 62.6517L64.9894 63.1069L64.9894 63.1069L64.6653 62.6517ZM64.4011 62.561L63.8655 62.7205L63.8655 62.7205L64.4011 62.561ZM65.9481 38.8208L65.8767 39.3751C65.9004 39.3781 65.9242 39.3796 65.9481 39.3796L65.9481 38.8208ZM67.2641 48.3827L66.7057 48.358C66.6928 48.6505 66.9078 48.9034 67.1985 48.9377C67.4892 48.9721 67.7572 48.7763 67.8128 48.4888L67.2641 48.3827ZM75.1486 34.6914L75.3953 34.1899C75.3757 34.1803 75.3557 34.1718 75.3351 34.1646L75.1486 34.6914ZM72.6301 49.2149L72.1128 49.0033C72.0167 49.2382 72.0909 49.5083 72.2935 49.6611C72.4961 49.8139 72.7762 49.8111 72.9756 49.6542L72.6301 49.2149ZM77.5686 47.4359L77.4772 47.9872L77.4772 47.9872L77.5686 47.4359ZM77.8108 48.9636L77.421 48.5631L77.421 48.5631L77.8108 48.9636ZM69.9423 64.2162L70.501 64.2301L70.501 64.2301L69.9423 64.2162ZM65.6733 64.2081L66.2318 64.2266L66.2318 64.2266L65.6733 64.2081ZM65.5636 61.3259L64.3411 62.1964L64.9894 63.1069L66.2119 62.2365L65.5636 61.3259ZM64.3411 62.1964C64.5566 62.043 64.8607 62.146 64.9367 62.4015L63.8655 62.7205C64.0087 63.2016 64.5821 63.3969 64.9894 63.1069L64.3411 62.1964ZM64.9367 62.4015C63.2276 56.6624 62.7433 50.6841 63.1171 46.2137C63.3045 43.973 63.7045 42.1504 64.2479 40.9346C64.5201 40.3257 64.8121 39.9058 65.0985 39.6557C65.3724 39.4165 65.6253 39.3427 65.8767 39.3751L66.0194 38.2664C65.3924 38.1857 64.83 38.4062 64.3633 38.8138C63.9091 39.2105 63.5352 39.7901 63.2275 40.4785C62.6111 41.8574 62.1956 43.821 62.0033 46.1206C61.6177 50.7307 62.1168 56.8487 63.8655 62.7205L64.9367 62.4015ZM65.9481 39.3796C66.0115 39.3796 66.1618 39.4005 66.3436 39.8225C66.5231 40.2388 66.6529 40.8864 66.7305 41.749C66.8846 43.4619 66.818 45.8153 66.7057 48.358L67.8224 48.4074C67.9342 45.876 68.0057 43.4484 67.8438 41.6488C67.7634 40.7552 67.6216 39.9637 67.3701 39.3801C67.121 38.802 66.6807 38.2619 65.9481 38.2619L65.9481 39.3796ZM67.8128 48.4888C68.549 44.6826 69.6047 40.9988 70.9045 38.4407C71.5566 37.1573 72.246 36.2062 72.9465 35.6534C73.6241 35.1187 74.2783 34.9761 74.962 35.2182L75.3351 34.1646C74.212 33.7669 73.1623 34.0592 72.254 34.776C71.3686 35.4747 70.5903 36.5915 69.908 37.9344C68.539 40.6287 67.4593 44.4304 66.7154 48.2766L67.8128 48.4888ZM74.9019 35.1929C75.3347 35.4058 75.619 35.8439 75.709 36.6401C75.8001 37.4469 75.6747 38.5223 75.3685 39.8179C74.7578 42.402 73.4787 45.6644 72.1128 49.0033L73.1474 49.4265C74.5076 46.1013 75.8221 42.7584 76.4563 40.075C76.7726 38.7368 76.9325 37.5128 76.8197 36.5146C76.7057 35.5059 76.2969 34.6334 75.3953 34.1899L74.9019 35.1929ZM72.9756 49.6542C74.6514 48.3359 76.2625 47.7859 77.4772 47.9872L77.66 46.8846C75.9967 46.6088 74.0693 47.3717 72.2845 48.7757L72.9756 49.6542ZM77.4772 47.9872C77.5452 47.9985 77.5667 48.0206 77.5731 48.0277C77.5827 48.0383 77.5996 48.064 77.6059 48.1174C77.6197 48.234 77.5708 48.4172 77.421 48.5631L78.2007 49.364C78.5795 48.9952 78.7735 48.475 78.716 47.9866C78.6542 47.4627 78.2942 46.9897 77.66 46.8846L77.4772 47.9872ZM77.421 48.5631C75.336 50.593 73.3586 53.5369 71.892 56.4289C70.4335 59.3047 69.4326 62.2226 69.3836 64.2024L70.501 64.2301C70.5437 62.507 71.4497 59.7723 72.8888 56.9345C74.3198 54.1127 76.2308 51.2818 78.2007 49.364L77.421 48.5631ZM69.3836 64.2024C69.3888 63.991 69.5633 63.8271 69.7673 63.8271V64.9449C70.1625 64.9449 70.491 64.6324 70.501 64.2301L69.3836 64.2024ZM69.7673 63.8271H65.8447V64.9449H69.7673V63.8271ZM65.8447 63.8271C66.0667 63.8271 66.239 64.0105 66.2318 64.2266L65.1147 64.1895C65.1011 64.5992 65.4291 64.9449 65.8447 64.9449V63.8271ZM66.2318 64.2266C66.2587 63.4183 66.3301 62.6289 66.4409 61.861L65.3346 61.7014C65.2181 62.5093 65.143 63.3396 65.1147 64.1895L66.2318 64.2266Z" fill="#F5F5F5"/> +<path d="M61.0953 67.9906C58.6456 69.7632 52.7817 73.0054 50.1559 74.4049C61.8012 74.4114 82.7805 73.2837 80.29 72.23C76.26 70.525 73.5967 69.035 72.075 66.96C70.37 64.635 64.1575 65.7748 61.0953 67.9906Z" fill="#B27AF4"/> +<path d="M60.696 68.22C61.7544 67.0394 63.8054 64.7517 63.6866 62.3751C63.6103 60.8501 63.4023 59.7828 63.1922 59.0941C63.1373 58.9143 63.4817 58.6186 63.6381 58.7229C65.3801 59.8845 67.0923 61.0125 70.5351 61.0508C70.6318 61.0519 70.8392 61.7484 70.835 61.845C70.7411 64.015 71.7197 67.0446 73.1976 68.3297C73.9519 68.9856 71.8586 69.1877 69.035 69.1576C83.586 70.2238 95.0313 81.3689 95.0313 94.9604C95.0313 109.257 82.3678 120.847 66.7465 120.847C51.1253 120.847 38.4617 109.257 38.4617 94.9604C38.4617 80.7697 50.9384 69.2459 66.4 69.076C64.3237 68.976 62.1991 68.7997 60.6808 68.6156C60.5499 68.5998 60.4937 68.446 60.5816 68.3477C60.6182 68.3067 60.6564 68.2641 60.696 68.22Z" fill="#B27AF4"/> +<path d="M90.1851 94.579C90.1851 106.177 79.9852 115.654 67.3072 115.654C54.6291 115.654 44.4293 106.177 44.4293 94.579C44.4293 82.9809 54.6291 73.504 67.3072 73.504C79.9852 73.504 90.1851 82.9809 90.1851 94.579Z" stroke="#1F0333" stroke-width="1.11775"/> +<path d="M85.2957 94.579C85.2957 103.671 77.2857 111.117 67.3072 111.117C57.3288 111.117 49.3188 103.671 49.3188 94.579C49.3188 85.4871 57.3288 78.0407 67.3072 78.0407C77.2857 78.0407 85.2957 85.4871 85.2957 94.579Z" stroke="#1F0333" stroke-width="1.11775"/> +<path d="M80.4715 94.579C80.4715 101.202 74.6223 106.648 67.3073 106.648C59.9923 106.648 54.1431 101.202 54.1431 94.579C54.1431 87.9561 59.9923 82.5096 67.3073 82.5096C74.6223 82.5096 80.4715 87.9561 80.4715 94.579Z" stroke="#1F0333" stroke-width="1.11775"/> +<path d="M76.1034 94.579C76.1034 98.9969 72.2083 102.653 67.3071 102.653C62.406 102.653 58.5108 98.9969 58.5108 94.579C58.5108 90.161 62.406 86.5046 67.3071 86.5046C72.2083 86.5046 76.1034 90.161 76.1034 94.579Z" stroke="#1F0333" stroke-width="1.11775"/> +<path d="M71.8661 94.5791C71.8661 96.8262 69.8701 98.7262 67.3073 98.7262C64.7446 98.7262 62.7486 96.8262 62.7486 94.5791C62.7486 92.3319 64.7446 90.432 67.3073 90.432C69.8701 90.432 71.8661 92.3319 71.8661 94.5791Z" stroke="#1F0333" stroke-width="1.11775"/> +<mask id="path-63-inside-2_156_3203" fill="white"> +<path fill-rule="evenodd" clip-rule="evenodd" d="M70.9554 63.6708C70.8714 63.6974 70.7867 63.7234 70.7013 63.7488C67.3295 71.7762 65.3485 81.5748 65.3485 92.1517C65.3485 102.75 67.3375 112.558 70.7218 120.595C69.1087 120.98 67.4437 121.236 65.7393 121.344C49.8658 120.762 37.2002 109.251 37.2002 95.1369C37.2002 85.2018 43.4758 76.5568 52.7284 72.1051C56.5938 70.0344 61.9633 66.8915 61.82 64.5986C61.6969 62.6294 60.903 60.565 60.2162 59.1698C59.9362 58.6008 60.3066 57.8898 60.9391 57.8444L71.5512 57.0825C72.2372 57.0333 72.7059 57.794 72.3996 58.4098C71.6279 59.9611 70.8498 62.0394 70.9554 63.6708Z"/> +</mask> +<path fill-rule="evenodd" clip-rule="evenodd" d="M70.9554 63.6708C70.8714 63.6974 70.7867 63.7234 70.7013 63.7488C67.3295 71.7762 65.3485 81.5748 65.3485 92.1517C65.3485 102.75 67.3375 112.558 70.7218 120.595C69.1087 120.98 67.4437 121.236 65.7393 121.344C49.8658 120.762 37.2002 109.251 37.2002 95.1369C37.2002 85.2018 43.4758 76.5568 52.7284 72.1051C56.5938 70.0344 61.9633 66.8915 61.82 64.5986C61.6969 62.6294 60.903 60.565 60.2162 59.1698C59.9362 58.6008 60.3066 57.8898 60.9391 57.8444L71.5512 57.0825C72.2372 57.0333 72.7059 57.794 72.3996 58.4098C71.6279 59.9611 70.8498 62.0394 70.9554 63.6708Z" fill="#1F0333"/> +<path d="M70.7013 63.7488L70.384 62.6807L69.8783 62.8309L69.674 63.3173L70.7013 63.7488ZM70.9554 63.6708L71.2919 64.733L72.1237 64.4694L72.0673 63.5988L70.9554 63.6708ZM70.7218 120.595L70.9805 121.679L72.2588 121.373L71.7487 120.162L70.7218 120.595ZM65.7393 121.344L65.6984 122.458L65.7542 122.46L65.8099 122.456L65.7393 121.344ZM52.7284 72.1051L53.2115 73.1091L53.2333 73.0987L53.2546 73.0873L52.7284 72.1051ZM61.82 64.5986L62.9321 64.5291L62.9321 64.5291L61.82 64.5986ZM60.2162 59.1698L59.2166 59.6618L59.2166 59.6618L60.2162 59.1698ZM60.9391 57.8444L60.8593 56.7331L60.8593 56.7331L60.9391 57.8444ZM71.5512 57.0825L71.631 58.1939L71.631 58.1939L71.5512 57.0825ZM72.3996 58.4098L71.402 57.9135L71.402 57.9136L72.3996 58.4098ZM71.0185 64.8169C71.1103 64.7896 71.2015 64.7616 71.2919 64.733L70.6189 62.6086C70.5413 62.6332 70.463 62.6572 70.384 62.6807L71.0185 64.8169ZM66.4627 92.1517C66.4627 81.7087 68.4194 72.0585 71.7286 64.1803L69.674 63.3173C66.2396 71.4938 64.2343 81.4408 64.2343 92.1517H66.4627ZM71.7487 120.162C68.4273 112.275 66.4627 102.616 66.4627 92.1517H64.2343C64.2343 102.884 66.2477 112.841 69.695 121.027L71.7487 120.162ZM65.8099 122.456C67.5797 122.344 69.3075 122.078 70.9805 121.679L70.4632 119.511C68.9098 119.882 67.3078 120.128 65.6686 120.232L65.8099 122.456ZM36.086 95.1369C36.086 109.975 49.3589 121.858 65.6984 122.458L65.7802 120.231C50.3728 119.665 38.3144 108.527 38.3144 95.1369H36.086ZM52.2454 71.101C42.675 75.7056 36.086 84.703 36.086 95.1369H38.3144C38.3144 85.7006 44.2767 77.408 53.2115 73.1091L52.2454 71.101ZM60.708 64.6681C60.7166 64.806 60.637 65.1496 60.1491 65.7324C59.6875 66.2839 58.9891 66.8956 58.1168 67.538C56.3778 68.8186 54.1294 70.0906 52.2023 71.1229L53.2546 73.0873C55.1929 72.0489 57.5619 70.7141 59.4382 69.3324C60.3735 68.6436 61.2322 67.9102 61.8579 67.1628C62.4573 66.4467 62.9951 65.5376 62.9321 64.5291L60.708 64.6681ZM59.2166 59.6618C59.8758 61.0011 60.5982 62.9116 60.708 64.6681L62.9321 64.5291C62.7957 62.3471 61.9303 60.1289 61.2159 58.6777L59.2166 59.6618ZM60.8593 56.7331C59.3642 56.8404 58.6206 58.4512 59.2166 59.6618L61.2159 58.6777C61.2477 58.7422 61.2363 58.8022 61.2172 58.8378C61.1953 58.8785 61.128 58.948 61.0189 58.9558L60.8593 56.7331ZM71.4714 55.9712L60.8593 56.7331L61.0189 58.9558L71.631 58.1939L71.4714 55.9712ZM73.3972 58.906C74.0505 57.5928 73.0997 55.8543 71.4714 55.9712L71.631 58.1939C71.5824 58.1974 71.5281 58.1855 71.4825 58.1606C71.4411 58.138 71.4176 58.111 71.4051 58.0913C71.3836 58.0571 71.3648 57.9884 71.402 57.9135L73.3972 58.906ZM72.0673 63.5988C71.9822 62.284 72.6361 60.4361 73.3972 58.906L71.402 57.9136C70.6198 59.4861 69.7174 61.7947 69.8435 63.7428L72.0673 63.5988Z" fill="#B27AF4" mask="url(#path-63-inside-2_156_3203)"/> +<path d="M54.8463 80.9776C54.6754 81.0984 54.5059 81.2212 54.3378 81.346C53.6603 81.8492 53.0068 82.3849 52.3796 82.9514C52.3066 83.0174 52.2303 83.0781 52.1513 83.1335C51.2928 83.7353 50.1108 83.7123 49.3336 82.9793C48.4848 82.1788 48.441 80.8359 49.298 80.0443C49.3807 79.9679 49.4639 79.8919 49.5474 79.8165C50.2508 79.1811 50.9827 78.5791 51.7408 78.0123C51.9872 77.8281 52.2364 77.6476 52.4882 77.4709C53.263 76.9272 54.0631 76.4194 54.8861 75.9491C54.9489 75.9133 55.0119 75.8776 55.0749 75.8421C55.11 75.8224 55.1452 75.8027 55.1803 75.7832C56.1996 75.2155 57.462 75.6758 57.958 76.7318C58.4123 77.6987 58.0657 78.829 57.2263 79.4572C57.1491 79.515 57.0676 79.5686 56.9822 79.6174C56.2484 80.0367 55.5356 80.4907 54.8463 80.9776Z" fill="#F9F9F9" style="mix-blend-mode:hard-light"/> +<ellipse cx="43.8519" cy="85.0854" rx="2.13252" ry="2.13252" transform="rotate(1.58589 43.8519 85.0854)" fill="#F9F9F9" style="mix-blend-mode:hard-light"/> +</svg> ===================================== browser/components/abouttor/jar.mn ===================================== @@ -1,10 +1,12 @@ browser.jar: content/browser/abouttor/aboutTor.css (content/aboutTor.css) content/browser/abouttor/aboutTor.js (content/aboutTor.js) -* content/browser/abouttor/aboutTor.html (content/aboutTor.html) + content/browser/abouttor/aboutTor.html (content/aboutTor.html) content/browser/abouttor/dax-logo.svg (content/dax-logo.svg) content/browser/abouttor/1f4e3-megaphone.svg (content/1f4e3-megaphone.svg) content/browser/abouttor/26a1-high-voltage.svg (content/26a1-high-voltage.svg) content/browser/abouttor/2728-sparkles.svg (content/2728-sparkles.svg) content/browser/abouttor/2764-red-heart.svg (content/2764-red-heart.svg) content/browser/abouttor/onion-pattern.svg (content/onion-pattern.svg) + content/browser/abouttor/yec-2023-heart.svg (content/yec-2023-heart.svg) + content/browser/abouttor/yec-2023-image.svg (content/yec-2023-image.svg) View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/fd082b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/fd082b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-115.3.0esr-13.0-1] 2 commits: Bug 1847180. a=RyanVM
by richard (＠richard) 28 Sep '23

28 Sep '23

richard pushed to branch mullvad-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Mullvad Browser Commits: dd33df76 by Marco Bonardo at 2023-09-28T19:22:25+00:00 Bug 1847180. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D188240 Differential Revision: https://phabricator.services.mozilla.com/D188568 - - - - - 89afa055 by Ryan VanderMeulen at 2023-09-28T19:22:32+00:00 Bug 1855550 - VP8: disallow thread count changes. r=jesup, a=dsmith Cherry-pick of upstream libvpx commits: https://chromium.googlesource.com/webm/libvpx/+/af6dedd715f4307669366944cca… https://chromium.googlesource.com/webm/libvpx/+/3fbd1dca6a4d2dad332a2110d64… Differential Revision: https://phabricator.services.mozilla.com/D189428 - - - - - 6 changed files: - media/libvpx/libvpx/test/encode_api_test.cc - media/libvpx/libvpx/vp8/encoder/onyx_if.c - toolkit/components/reputationservice/ApplicationReputation.cpp - toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp - xpcom/io/nsLocalFileCommon.cpp - xpcom/io/nsLocalFileCommon.h Changes: ===================================== media/libvpx/libvpx/test/encode_api_test.cc ===================================== @@ -307,7 +307,6 @@ TEST(EncodeAPI, SetRoi) { void InitCodec(const vpx_codec_iface_t &iface, int width, int height, vpx_codec_ctx_t *enc, vpx_codec_enc_cfg_t *cfg) { - ASSERT_EQ(vpx_codec_enc_config_default(&iface, cfg, 0), VPX_CODEC_OK); cfg->g_w = width; cfg->g_h = height; cfg->g_lag_in_frames = 0; @@ -345,6 +344,7 @@ TEST(EncodeAPI, ConfigChangeThreadCount) { vpx_codec_ctx_t ctx = {}; } enc; + ASSERT_EQ(vpx_codec_enc_config_default(iface, &cfg, 0), VPX_CODEC_OK); EXPECT_NO_FATAL_FAILURE( InitCodec(*iface, kWidth, kHeight, &enc.ctx, &cfg)); if (IsVP9(iface)) { @@ -363,6 +363,50 @@ TEST(EncodeAPI, ConfigChangeThreadCount) { } } +TEST(EncodeAPI, ConfigResizeChangeThreadCount) { + constexpr int kInitWidth = 1024; + constexpr int kInitHeight = 1024; + + for (const auto *iface : kCodecIfaces) { + SCOPED_TRACE(vpx_codec_iface_name(iface)); + for (int i = 0; i < (IsVP9(iface) ? 2 : 1); ++i) { + vpx_codec_enc_cfg_t cfg = {}; + struct Encoder { + ~Encoder() { EXPECT_EQ(vpx_codec_destroy(&ctx), VPX_CODEC_OK); } + vpx_codec_ctx_t ctx = {}; + } enc; + + ASSERT_EQ(vpx_codec_enc_config_default(iface, &cfg, 0), VPX_CODEC_OK); + // Start in threaded mode to ensure resolution and thread related + // allocations are updated correctly across changes in resolution and + // thread counts. See https://crbug.com/1486441. + cfg.g_threads = 4; + EXPECT_NO_FATAL_FAILURE( + InitCodec(*iface, kInitWidth, kInitHeight, &enc.ctx, &cfg)); + if (IsVP9(iface)) { + EXPECT_EQ(vpx_codec_control_(&enc.ctx, VP9E_SET_TILE_COLUMNS, 6), + VPX_CODEC_OK); + EXPECT_EQ(vpx_codec_control_(&enc.ctx, VP9E_SET_ROW_MT, i), + VPX_CODEC_OK); + } + + cfg.g_w = 1000; + cfg.g_h = 608; + EXPECT_EQ(vpx_codec_enc_config_set(&enc.ctx, &cfg), VPX_CODEC_OK) + << vpx_codec_error_detail(&enc.ctx); + + cfg.g_w = 16; + cfg.g_h = 720; + + for (const auto threads : { 1, 4, 8, 6, 2, 1 }) { + cfg.g_threads = threads; + EXPECT_NO_FATAL_FAILURE(EncodeWithConfig(cfg, &enc.ctx)) + << "iteration: " << i << " threads: " << threads; + } + } + } +} + #if CONFIG_VP9_ENCODER class EncodeApiGetTplStatsTest : public ::libvpx_test::EncoderTest, ===================================== media/libvpx/libvpx/vp8/encoder/onyx_if.c ===================================== @@ -1447,6 +1447,12 @@ void vp8_change_config(VP8_COMP *cpi, VP8_CONFIG *oxcf) { last_h = cpi->oxcf.Height; prev_number_of_layers = cpi->oxcf.number_of_layers; + if (cpi->initial_width) { + // TODO(https://crbug.com/1486441): Allow changing thread counts; the + // allocation is done once in vp8_create_compressor(). + oxcf->multi_threaded = cpi->oxcf.multi_threaded; + } + cpi->oxcf = *oxcf; switch (cpi->oxcf.Mode) { ===================================== toolkit/components/reputationservice/ApplicationReputation.cpp ===================================== @@ -181,6 +181,8 @@ const char* const ApplicationReputationService::kBinaryFileExtensions[] = { ".applescript", //".application", exec // MS ClickOnce //".appref-ms", exec // MS ClickOnce + //".appx", exec + //".appxbundle", exec //".arc", //".arj", ".as", // Mac archive @@ -334,6 +336,8 @@ const char* const ApplicationReputationService::kBinaryFileExtensions[] = { //".msh2xml", exec // Windows shell //".mshxml", exec // Windows //".msi", exec // Windows installer + //".msix", exec // Windows installer + //".msixbundle", exec // Windows installer //".msp", exec // Windows installer //".mst", exec // Windows installer ".ndif", // Mac disk image ===================================== toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp ===================================== @@ -25,6 +25,8 @@ static const char* const kTestFileExtensions[] = { ".applescript", ".application", // MS ClickOnce ".appref-ms", // MS ClickOnce + ".appx", + ".appxbundle", ".as", // Mac archive ".asp", // Windows Server script ".asx", // Windows Media Player @@ -155,6 +157,8 @@ static const char* const kTestFileExtensions[] = { ".msh2xml", // Windows shell ".mshxml", // Windows ".msi", // Windows installer + ".msix", // Windows installer + ".msixbundle", // Windows installer ".msp", // Windows installer ".mst", // Windows installer ".ndif", // Mac disk image ===================================== xpcom/io/nsLocalFileCommon.cpp ===================================== @@ -42,6 +42,8 @@ const char* const sExecutableExts[] = { ".app", // executable application ".application", // from bug 348763 ".appref-ms", // ClickOnce link + ".appx", + ".appxbundle", ".asp", ".atloc", // Appletalk Location ".bas", @@ -96,6 +98,8 @@ const char* const sExecutableExts[] = { ".msh2xml", // Microsoft Shell ".mshxml", // Microsoft Shell ".msi", + ".msix", + ".msixbundle", ".msp", ".mst", ".ops", // Office Profile Settings ===================================== xpcom/io/nsLocalFileCommon.h ===================================== @@ -8,9 +8,9 @@ #define _NS_LOCAL_FILE_COMMON_H_ #ifdef MOZ_ESR -extern const char* const sExecutableExts[103]; +extern const char* const sExecutableExts[107]; #else -extern const char* const sExecutableExts[104]; +extern const char* const sExecutableExts[108]; #endif #endif View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/0f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/0f… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-115.3.0esr-13.0-1] 2 commits: Bug 1847180. a=RyanVM
by richard (＠richard) 28 Sep '23

28 Sep '23

richard pushed to branch base-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: d2019181 by Marco Bonardo at 2023-09-28T19:20:45+00:00 Bug 1847180. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D188240 Differential Revision: https://phabricator.services.mozilla.com/D188568 - - - - - 5d589242 by Ryan VanderMeulen at 2023-09-28T19:20:50+00:00 Bug 1855550 - VP8: disallow thread count changes. r=jesup, a=dsmith Cherry-pick of upstream libvpx commits: https://chromium.googlesource.com/webm/libvpx/+/af6dedd715f4307669366944cca… https://chromium.googlesource.com/webm/libvpx/+/3fbd1dca6a4d2dad332a2110d64… Differential Revision: https://phabricator.services.mozilla.com/D189428 - - - - - 6 changed files: - media/libvpx/libvpx/test/encode_api_test.cc - media/libvpx/libvpx/vp8/encoder/onyx_if.c - toolkit/components/reputationservice/ApplicationReputation.cpp - toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp - xpcom/io/nsLocalFileCommon.cpp - xpcom/io/nsLocalFileCommon.h Changes: ===================================== media/libvpx/libvpx/test/encode_api_test.cc ===================================== @@ -307,7 +307,6 @@ TEST(EncodeAPI, SetRoi) { void InitCodec(const vpx_codec_iface_t &iface, int width, int height, vpx_codec_ctx_t *enc, vpx_codec_enc_cfg_t *cfg) { - ASSERT_EQ(vpx_codec_enc_config_default(&iface, cfg, 0), VPX_CODEC_OK); cfg->g_w = width; cfg->g_h = height; cfg->g_lag_in_frames = 0; @@ -345,6 +344,7 @@ TEST(EncodeAPI, ConfigChangeThreadCount) { vpx_codec_ctx_t ctx = {}; } enc; + ASSERT_EQ(vpx_codec_enc_config_default(iface, &cfg, 0), VPX_CODEC_OK); EXPECT_NO_FATAL_FAILURE( InitCodec(*iface, kWidth, kHeight, &enc.ctx, &cfg)); if (IsVP9(iface)) { @@ -363,6 +363,50 @@ TEST(EncodeAPI, ConfigChangeThreadCount) { } } +TEST(EncodeAPI, ConfigResizeChangeThreadCount) { + constexpr int kInitWidth = 1024; + constexpr int kInitHeight = 1024; + + for (const auto *iface : kCodecIfaces) { + SCOPED_TRACE(vpx_codec_iface_name(iface)); + for (int i = 0; i < (IsVP9(iface) ? 2 : 1); ++i) { + vpx_codec_enc_cfg_t cfg = {}; + struct Encoder { + ~Encoder() { EXPECT_EQ(vpx_codec_destroy(&ctx), VPX_CODEC_OK); } + vpx_codec_ctx_t ctx = {}; + } enc; + + ASSERT_EQ(vpx_codec_enc_config_default(iface, &cfg, 0), VPX_CODEC_OK); + // Start in threaded mode to ensure resolution and thread related + // allocations are updated correctly across changes in resolution and + // thread counts. See https://crbug.com/1486441. + cfg.g_threads = 4; + EXPECT_NO_FATAL_FAILURE( + InitCodec(*iface, kInitWidth, kInitHeight, &enc.ctx, &cfg)); + if (IsVP9(iface)) { + EXPECT_EQ(vpx_codec_control_(&enc.ctx, VP9E_SET_TILE_COLUMNS, 6), + VPX_CODEC_OK); + EXPECT_EQ(vpx_codec_control_(&enc.ctx, VP9E_SET_ROW_MT, i), + VPX_CODEC_OK); + } + + cfg.g_w = 1000; + cfg.g_h = 608; + EXPECT_EQ(vpx_codec_enc_config_set(&enc.ctx, &cfg), VPX_CODEC_OK) + << vpx_codec_error_detail(&enc.ctx); + + cfg.g_w = 16; + cfg.g_h = 720; + + for (const auto threads : { 1, 4, 8, 6, 2, 1 }) { + cfg.g_threads = threads; + EXPECT_NO_FATAL_FAILURE(EncodeWithConfig(cfg, &enc.ctx)) + << "iteration: " << i << " threads: " << threads; + } + } + } +} + #if CONFIG_VP9_ENCODER class EncodeApiGetTplStatsTest : public ::libvpx_test::EncoderTest, ===================================== media/libvpx/libvpx/vp8/encoder/onyx_if.c ===================================== @@ -1447,6 +1447,12 @@ void vp8_change_config(VP8_COMP *cpi, VP8_CONFIG *oxcf) { last_h = cpi->oxcf.Height; prev_number_of_layers = cpi->oxcf.number_of_layers; + if (cpi->initial_width) { + // TODO(https://crbug.com/1486441): Allow changing thread counts; the + // allocation is done once in vp8_create_compressor(). + oxcf->multi_threaded = cpi->oxcf.multi_threaded; + } + cpi->oxcf = *oxcf; switch (cpi->oxcf.Mode) { ===================================== toolkit/components/reputationservice/ApplicationReputation.cpp ===================================== @@ -181,6 +181,8 @@ const char* const ApplicationReputationService::kBinaryFileExtensions[] = { ".applescript", //".application", exec // MS ClickOnce //".appref-ms", exec // MS ClickOnce + //".appx", exec + //".appxbundle", exec //".arc", //".arj", ".as", // Mac archive @@ -334,6 +336,8 @@ const char* const ApplicationReputationService::kBinaryFileExtensions[] = { //".msh2xml", exec // Windows shell //".mshxml", exec // Windows //".msi", exec // Windows installer + //".msix", exec // Windows installer + //".msixbundle", exec // Windows installer //".msp", exec // Windows installer //".mst", exec // Windows installer ".ndif", // Mac disk image ===================================== toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp ===================================== @@ -25,6 +25,8 @@ static const char* const kTestFileExtensions[] = { ".applescript", ".application", // MS ClickOnce ".appref-ms", // MS ClickOnce + ".appx", + ".appxbundle", ".as", // Mac archive ".asp", // Windows Server script ".asx", // Windows Media Player @@ -155,6 +157,8 @@ static const char* const kTestFileExtensions[] = { ".msh2xml", // Windows shell ".mshxml", // Windows ".msi", // Windows installer + ".msix", // Windows installer + ".msixbundle", // Windows installer ".msp", // Windows installer ".mst", // Windows installer ".ndif", // Mac disk image ===================================== xpcom/io/nsLocalFileCommon.cpp ===================================== @@ -42,6 +42,8 @@ const char* const sExecutableExts[] = { ".app", // executable application ".application", // from bug 348763 ".appref-ms", // ClickOnce link + ".appx", + ".appxbundle", ".asp", ".atloc", // Appletalk Location ".bas", @@ -96,6 +98,8 @@ const char* const sExecutableExts[] = { ".msh2xml", // Microsoft Shell ".mshxml", // Microsoft Shell ".msi", + ".msix", + ".msixbundle", ".msp", ".mst", ".ops", // Office Profile Settings ===================================== xpcom/io/nsLocalFileCommon.h ===================================== @@ -8,9 +8,9 @@ #define _NS_LOCAL_FILE_COMMON_H_ #ifdef MOZ_ESR -extern const char* const sExecutableExts[103]; +extern const char* const sExecutableExts[107]; #else -extern const char* const sExecutableExts[104]; +extern const char* const sExecutableExts[108]; #endif #endif View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/dee4b1… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/dee4b1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] 2 commits: Bug 1847180. a=RyanVM
by richard (＠richard) 28 Sep '23

28 Sep '23

richard pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 84e2f0cd by Marco Bonardo at 2023-09-28T19:12:39+00:00 Bug 1847180. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D188240 Differential Revision: https://phabricator.services.mozilla.com/D188568 - - - - - fd082b4b by Ryan VanderMeulen at 2023-09-28T19:12:39+00:00 Bug 1855550 - VP8: disallow thread count changes. r=jesup, a=dsmith Cherry-pick of upstream libvpx commits: https://chromium.googlesource.com/webm/libvpx/+/af6dedd715f4307669366944cca… https://chromium.googlesource.com/webm/libvpx/+/3fbd1dca6a4d2dad332a2110d64… Differential Revision: https://phabricator.services.mozilla.com/D189428 - - - - - 6 changed files: - media/libvpx/libvpx/test/encode_api_test.cc - media/libvpx/libvpx/vp8/encoder/onyx_if.c - toolkit/components/reputationservice/ApplicationReputation.cpp - toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp - xpcom/io/nsLocalFileCommon.cpp - xpcom/io/nsLocalFileCommon.h Changes: ===================================== media/libvpx/libvpx/test/encode_api_test.cc ===================================== @@ -307,7 +307,6 @@ TEST(EncodeAPI, SetRoi) { void InitCodec(const vpx_codec_iface_t &iface, int width, int height, vpx_codec_ctx_t *enc, vpx_codec_enc_cfg_t *cfg) { - ASSERT_EQ(vpx_codec_enc_config_default(&iface, cfg, 0), VPX_CODEC_OK); cfg->g_w = width; cfg->g_h = height; cfg->g_lag_in_frames = 0; @@ -345,6 +344,7 @@ TEST(EncodeAPI, ConfigChangeThreadCount) { vpx_codec_ctx_t ctx = {}; } enc; + ASSERT_EQ(vpx_codec_enc_config_default(iface, &cfg, 0), VPX_CODEC_OK); EXPECT_NO_FATAL_FAILURE( InitCodec(*iface, kWidth, kHeight, &enc.ctx, &cfg)); if (IsVP9(iface)) { @@ -363,6 +363,50 @@ TEST(EncodeAPI, ConfigChangeThreadCount) { } } +TEST(EncodeAPI, ConfigResizeChangeThreadCount) { + constexpr int kInitWidth = 1024; + constexpr int kInitHeight = 1024; + + for (const auto *iface : kCodecIfaces) { + SCOPED_TRACE(vpx_codec_iface_name(iface)); + for (int i = 0; i < (IsVP9(iface) ? 2 : 1); ++i) { + vpx_codec_enc_cfg_t cfg = {}; + struct Encoder { + ~Encoder() { EXPECT_EQ(vpx_codec_destroy(&ctx), VPX_CODEC_OK); } + vpx_codec_ctx_t ctx = {}; + } enc; + + ASSERT_EQ(vpx_codec_enc_config_default(iface, &cfg, 0), VPX_CODEC_OK); + // Start in threaded mode to ensure resolution and thread related + // allocations are updated correctly across changes in resolution and + // thread counts. See https://crbug.com/1486441. + cfg.g_threads = 4; + EXPECT_NO_FATAL_FAILURE( + InitCodec(*iface, kInitWidth, kInitHeight, &enc.ctx, &cfg)); + if (IsVP9(iface)) { + EXPECT_EQ(vpx_codec_control_(&enc.ctx, VP9E_SET_TILE_COLUMNS, 6), + VPX_CODEC_OK); + EXPECT_EQ(vpx_codec_control_(&enc.ctx, VP9E_SET_ROW_MT, i), + VPX_CODEC_OK); + } + + cfg.g_w = 1000; + cfg.g_h = 608; + EXPECT_EQ(vpx_codec_enc_config_set(&enc.ctx, &cfg), VPX_CODEC_OK) + << vpx_codec_error_detail(&enc.ctx); + + cfg.g_w = 16; + cfg.g_h = 720; + + for (const auto threads : { 1, 4, 8, 6, 2, 1 }) { + cfg.g_threads = threads; + EXPECT_NO_FATAL_FAILURE(EncodeWithConfig(cfg, &enc.ctx)) + << "iteration: " << i << " threads: " << threads; + } + } + } +} + #if CONFIG_VP9_ENCODER class EncodeApiGetTplStatsTest : public ::libvpx_test::EncoderTest, ===================================== media/libvpx/libvpx/vp8/encoder/onyx_if.c ===================================== @@ -1447,6 +1447,12 @@ void vp8_change_config(VP8_COMP *cpi, VP8_CONFIG *oxcf) { last_h = cpi->oxcf.Height; prev_number_of_layers = cpi->oxcf.number_of_layers; + if (cpi->initial_width) { + // TODO(https://crbug.com/1486441): Allow changing thread counts; the + // allocation is done once in vp8_create_compressor(). + oxcf->multi_threaded = cpi->oxcf.multi_threaded; + } + cpi->oxcf = *oxcf; switch (cpi->oxcf.Mode) { ===================================== toolkit/components/reputationservice/ApplicationReputation.cpp ===================================== @@ -181,6 +181,8 @@ const char* const ApplicationReputationService::kBinaryFileExtensions[] = { ".applescript", //".application", exec // MS ClickOnce //".appref-ms", exec // MS ClickOnce + //".appx", exec + //".appxbundle", exec //".arc", //".arj", ".as", // Mac archive @@ -334,6 +336,8 @@ const char* const ApplicationReputationService::kBinaryFileExtensions[] = { //".msh2xml", exec // Windows shell //".mshxml", exec // Windows //".msi", exec // Windows installer + //".msix", exec // Windows installer + //".msixbundle", exec // Windows installer //".msp", exec // Windows installer //".mst", exec // Windows installer ".ndif", // Mac disk image ===================================== toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp ===================================== @@ -25,6 +25,8 @@ static const char* const kTestFileExtensions[] = { ".applescript", ".application", // MS ClickOnce ".appref-ms", // MS ClickOnce + ".appx", + ".appxbundle", ".as", // Mac archive ".asp", // Windows Server script ".asx", // Windows Media Player @@ -155,6 +157,8 @@ static const char* const kTestFileExtensions[] = { ".msh2xml", // Windows shell ".mshxml", // Windows ".msi", // Windows installer + ".msix", // Windows installer + ".msixbundle", // Windows installer ".msp", // Windows installer ".mst", // Windows installer ".ndif", // Mac disk image ===================================== xpcom/io/nsLocalFileCommon.cpp ===================================== @@ -42,6 +42,8 @@ const char* const sExecutableExts[] = { ".app", // executable application ".application", // from bug 348763 ".appref-ms", // ClickOnce link + ".appx", + ".appxbundle", ".asp", ".atloc", // Appletalk Location ".bas", @@ -96,6 +98,8 @@ const char* const sExecutableExts[] = { ".msh2xml", // Microsoft Shell ".mshxml", // Microsoft Shell ".msi", + ".msix", + ".msixbundle", ".msp", ".mst", ".ops", // Office Profile Settings ===================================== xpcom/io/nsLocalFileCommon.h ===================================== @@ -8,9 +8,9 @@ #define _NS_LOCAL_FILE_COMMON_H_ #ifdef MOZ_ESR -extern const char* const sExecutableExts[103]; +extern const char* const sExecutableExts[107]; #else -extern const char* const sExecutableExts[104]; +extern const char* const sExecutableExts[108]; #endif #endif View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/1d7a21… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/1d7a21… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] fixup! Bug 40933: Add tor-launcher functionality
by richard (＠richard) 28 Sep '23

28 Sep '23

richard pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 1d7a2112 by Pier Angelo Vendrame at 2023-09-28T18:38:11+02:00 fixup! Bug 40933: Add tor-launcher functionality Bug 42129: Do not prompt to restart Tor if we could not connect to the control port but we were asked not to start it. - - - - - 1 changed file: - toolkit/components/tor-launcher/TorProviderBuilder.sys.mjs Changes: ===================================== toolkit/components/tor-launcher/TorProviderBuilder.sys.mjs ===================================== @@ -125,6 +125,11 @@ export class TorProviderBuilder { */ static async firstWindowLoaded() { // FIXME: Just integrate this with the about:torconnect or about:tor UI. + if (!lazy.TorLauncherUtil.shouldStartAndOwnTor) { + // If we are not managing the Tor daemon we cannot restart it, so just + // early return. + return; + } let running = false; try { const provider = await this.#provider; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/1d7a211… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/1d7a211… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android][firefox-android-115.2.1-13.0-1] fixup! Disable features and functionality
by Dan Ballard (＠dan) 28 Sep '23

28 Sep '23

Dan Ballard pushed to branch firefox-android-115.2.1-13.0-1 at The Tor Project / Applications / firefox-android Commits: ed46ed61 by Dan Ballard at 2023-09-28T16:42:56+00:00 fixup! Disable features and functionality Bug 42114: Disable Sharing URL from Recent Screen in Private Browsing mode - - - - - 1 changed file: - fenix/app/src/main/java/org/mozilla/fenix/HomeActivity.kt Changes: ===================================== fenix/app/src/main/java/org/mozilla/fenix/HomeActivity.kt ===================================== @@ -560,7 +560,9 @@ open class HomeActivity : LocaleAwareAppCompatActivity(), NavHostActivity { override fun onProvideAssistContent(outContent: AssistContent?) { super.onProvideAssistContent(outContent) val currentTabUrl = components.core.store.state.selectedTab?.content?.url - outContent?.webUri = currentTabUrl?.let { Uri.parse(it) } + if (components.core.store.state.selectedTab?.content?.private == false) { + outContent?.webUri = currentTabUrl?.let { Uri.parse(it) } + } } private fun getBookmarkCount(node: BookmarkNode): Int { View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/ed4… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/ed4… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android][firefox-android-115.2.1-13.0-1] fixup! Modify UI/UX
by Dan Ballard (＠dan) 28 Sep '23

28 Sep '23

Dan Ballard pushed to branch firefox-android-115.2.1-13.0-1 at The Tor Project / Applications / firefox-android Commits: c5b1df66 by Dan Ballard at 2023-09-27T23:48:46-07:00 fixup! Modify UI/UX Bug 42134: Remove Android icon shortcuts for new tab and logins/passwords - - - - - 5 changed files: - fenix/app/src/beta/res/xml/shortcuts.xml - fenix/app/src/debug/res/xml/shortcuts.xml - fenix/app/src/main/res/xml/shortcuts.xml - fenix/app/src/nightly/res/xml/shortcuts.xml - fenix/app/src/release/res/xml/shortcuts.xml Changes: ===================================== fenix/app/src/beta/res/xml/shortcuts.xml ===================================== @@ -3,28 +3,28 @@ - License, v. 2.0. If a copy of the MPL was not distributed with this - file, You can obtain one at http://mozilla.org/MPL/2.0/. --> <shortcuts xmlns:android="http://schemas.android.com/apk/res/android"> - <shortcut - android:shortcutId="password_manager" - android:enabled="true" - android:icon="@drawable/ic_static_password_shortcut" - android:shortcutShortLabel="@string/home_screen_shortcut_open_password_screen" - android:shortcutLongLabel="@string/home_screen_shortcut_open_password_screen"> - <intent - android:action="org.mozilla.fenix.OPEN_PASSWORD_MANAGER" - android:targetPackage="org.mozilla.firefox_beta" - android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> - </shortcut> - <shortcut - android:shortcutId="open_new_tab" - android:enabled="true" - android:icon="@drawable/ic_static_shortcut_tab" - android:shortcutShortLabel="@string/home_screen_shortcut_open_new_tab_2" - android:shortcutLongLabel="@string/home_screen_shortcut_open_new_tab_2"> - <intent - android:action="org.mozilla.fenix.OPEN_TAB" - android:targetPackage="org.torproject.torbrowser_alpha" - android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> - </shortcut> + + + + + + + + + + + + + + + + + + + + + + <shortcut android:shortcutId="open_new_private_tab" android:enabled="true" ===================================== fenix/app/src/debug/res/xml/shortcuts.xml ===================================== @@ -4,28 +4,28 @@ - file, You can obtain one at http://mozilla.org/MPL/2.0/. --> <shortcuts xmlns:android="http://schemas.android.com/apk/res/android"> - <shortcut - android:shortcutId="password_manager" - android:enabled="true" - android:icon="@drawable/ic_static_password_shortcut" - android:shortcutShortLabel="@string/home_screen_shortcut_open_password_screen" - android:shortcutLongLabel="@string/home_screen_shortcut_open_password_screen"> - <intent - android:action="org.mozilla.fenix.OPEN_PASSWORD_MANAGER" - android:targetPackage="org.mozilla.fenix.debug" - android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> - </shortcut> - <shortcut - android:shortcutId="open_new_tab" - android:enabled="true" - android:icon="@drawable/ic_static_shortcut_tab" - android:shortcutShortLabel="@string/home_screen_shortcut_open_new_tab_2" - android:shortcutLongLabel="@string/home_screen_shortcut_open_new_tab_2"> - <intent - android:action="org.mozilla.fenix.OPEN_TAB" - android:targetPackage="org.torproject.torbrowser_debug" - android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> - </shortcut> + + + + + + + + + + + + + + + + + + + + + + <shortcut android:shortcutId="open_new_private_tab" android:enabled="true" ===================================== fenix/app/src/main/res/xml/shortcuts.xml ===================================== @@ -4,28 +4,28 @@ - file, You can obtain one at http://mozilla.org/MPL/2.0/. --> <shortcuts xmlns:android="http://schemas.android.com/apk/res/android"> - <shortcut - android:shortcutId="password_manager" - android:enabled="true" - android:icon="@drawable/ic_static_password_shortcut" - android:shortcutShortLabel="@string/home_screen_shortcut_open_password_screen" - android:shortcutLongLabel="@string/home_screen_shortcut_open_password_screen"> - <intent - android:action="org.mozilla.fenix.OPEN_PASSWORD_MANAGER" - android:targetPackage="org.mozilla.fenix" - android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> - </shortcut> - <shortcut - android:shortcutId="open_new_tab" - android:enabled="true" - android:icon="@drawable/ic_static_shortcut_tab" - android:shortcutShortLabel="@string/home_screen_shortcut_open_new_tab_2" - android:shortcutLongLabel="@string/home_screen_shortcut_open_new_tab_2"> - <intent - android:action="org.mozilla.fenix.OPEN_TAB" - android:targetPackage="org.torproject.torbrowser_dev" - android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> - </shortcut> + + + + + + + + + + + + + + + + + + + + + + <shortcut android:shortcutId="open_new_private_tab" android:enabled="true" ===================================== fenix/app/src/nightly/res/xml/shortcuts.xml ===================================== @@ -4,28 +4,28 @@ - file, You can obtain one at http://mozilla.org/MPL/2.0/. --> <shortcuts xmlns:android="http://schemas.android.com/apk/res/android"> - <shortcut - android:shortcutId="password_manager" - android:enabled="true" - android:icon="@drawable/ic_static_password_shortcut" - android:shortcutShortLabel="@string/home_screen_shortcut_open_password_screen" - android:shortcutLongLabel="@string/home_screen_shortcut_open_password_screen"> - <intent - android:action="org.mozilla.fenix.OPEN_PASSWORD_MANAGER" - android:targetPackage="org.mozilla.fenix" - android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> - </shortcut> - <shortcut - android:shortcutId="open_new_tab" - android:enabled="true" - android:icon="@drawable/ic_static_shortcut_tab" - android:shortcutShortLabel="@string/home_screen_shortcut_open_new_tab_2" - android:shortcutLongLabel="@string/home_screen_shortcut_open_new_tab_2"> - <intent - android:action="org.mozilla.fenix.OPEN_TAB" - android:targetPackage="org.torproject.torbrowser_nightly" - android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> - </shortcut> + + + + + + + + + + + + + + + + + + + + + + <shortcut android:shortcutId="open_new_private_tab" android:enabled="true" @@ -37,4 +37,4 @@ android:targetPackage="org.torproject.torbrowser_nightly" android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> </shortcut> -</shortcuts> \ No newline at end of file +</shortcuts> ===================================== fenix/app/src/release/res/xml/shortcuts.xml ===================================== @@ -3,28 +3,28 @@ - License, v. 2.0. If a copy of the MPL was not distributed with this - file, You can obtain one at http://mozilla.org/MPL/2.0/. --> <shortcuts xmlns:android="http://schemas.android.com/apk/res/android"> - <shortcut - android:shortcutId="password_manager" - android:enabled="true" - android:icon="@drawable/ic_static_password_shortcut" - android:shortcutShortLabel="@string/home_screen_shortcut_open_password_screen" - android:shortcutLongLabel="@string/home_screen_shortcut_open_password_screen"> - <intent - android:action="org.mozilla.fenix.OPEN_PASSWORD_MANAGER" - android:targetPackage="org.mozilla.firefox" - android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> - </shortcut> - <shortcut - android:shortcutId="open_new_tab" - android:enabled="true" - android:icon="@drawable/ic_static_shortcut_tab" - android:shortcutShortLabel="@string/home_screen_shortcut_open_new_tab_2" - android:shortcutLongLabel="@string/home_screen_shortcut_open_new_tab_2"> - <intent - android:action="org.mozilla.fenix.OPEN_TAB" - android:targetPackage="org.torproject.torbrowser" - android:targetClass="org.mozilla.fenix.IntentReceiverActivity" /> - </shortcut> + + + + + + + + + + + + + + + + + + + + + + <shortcut android:shortcutId="open_new_private_tab" android:enabled="true" View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/c5b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/c5b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] fixup! Bug 2176: Rebrand Firefox to TorBrowser
by Pier Angelo Vendrame (＠pierov) 28 Sep '23

28 Sep '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: ba5e4b14 by Henry Wilkes at 2023-09-28T17:20:49+01:00 fixup! Bug 2176: Rebrand Firefox to TorBrowser Bug 41910: Restore tor browser help link in about:preferences. - - - - - 1 changed file: - toolkit/content/widgets/moz-support-link/moz-support-link.mjs Changes: ===================================== toolkit/content/widgets/moz-support-link/moz-support-link.mjs ===================================== @@ -103,6 +103,19 @@ export default class MozSupportLink extends HTMLAnchorElement { #setHref() { let supportPage = this.getAttribute("support-page") ?? ""; + // For tor-browser we sometimes want to override firefox support links with + // our own. + // See tor-browser#40899. + switch (supportPage) { + case "preferences": + // Shown twice in preferences, both as `{ -brand-short-name } Support`. + // Instead of directing to support for preferences, we link to general + // tor browser support. + // See tor-browser#32092. + this.href = "https://support.torproject.org/tbb" + return; + // Fall through to support.mozilla.org + } let base = MozSupportLink.SUPPORT_URL + supportPage; this.href = this.hasAttribute("utm-content") ? formatUTMParams(this.getAttribute("utm-content"), base) View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ba5e4b1… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ba5e4b1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] 2 commits: fixup! Bug 41995: Generated headers on Windows are not reproducible
by richard (＠richard) 28 Sep '23

28 Sep '23

richard pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 3b4f838b by Pier Angelo Vendrame at 2023-09-28T16:00:59+00:00 fixup! Bug 41995: Generated headers on Windows are not reproducible Revert "Bug 41995: Generated headers on Windows are not reproducible" This reverts commit 1f45f64ee2fb53129a06984f3b9fb36ef3b64645. - - - - - cea59f54 by Pier Angelo Vendrame at 2023-09-28T16:00:59+00:00 Bug 1854117 - Sort the DLL blocklist flags. r=mossop,win-reviewers,gstoll Differential Revision: https://phabricator.services.mozilla.com/D188716 - - - - - 0 changed files: Changes: View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/eb0fd6… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/eb0fd6… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.15.1esr-12.5-1] 2 commits: Bug 1847180. a=RyanVM
by Pier Angelo Vendrame (＠pierov) 28 Sep '23

28 Sep '23

Pier Angelo Vendrame pushed to branch base-browser-102.15.1esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 1183dcd0 by Marco Bonardo at 2023-09-28T16:46:19+02:00 Bug 1847180. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D188240 Differential Revision: https://phabricator.services.mozilla.com/D188568 - - - - - e98eeaff by Ryan VanderMeulen at 2023-09-28T16:46:22+02:00 Bug 1855550 - VP8: disallow thread count changes. r=jesup, a=dsmith Cherry-pick of upstream libvpx commits: https://chromium.googlesource.com/webm/libvpx/+/af6dedd715f4307669366944cca… https://chromium.googlesource.com/webm/libvpx/+/3fbd1dca6a4d2dad332a2110d64… Differential Revision: https://phabricator.services.mozilla.com/D189428 - - - - - 5 changed files: - media/libvpx/libvpx/vp8/encoder/onyx_if.c - toolkit/components/reputationservice/ApplicationReputation.cpp - toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp - xpcom/io/nsLocalFileCommon.cpp - xpcom/io/nsLocalFileCommon.h Changes: ===================================== media/libvpx/libvpx/vp8/encoder/onyx_if.c ===================================== @@ -1445,6 +1445,12 @@ void vp8_change_config(VP8_COMP *cpi, VP8_CONFIG *oxcf) { last_h = cpi->oxcf.Height; prev_number_of_layers = cpi->oxcf.number_of_layers; + if (cpi->initial_width) { + // TODO(https://crbug.com/1486441): Allow changing thread counts; the + // allocation is done once in vp8_create_compressor(). + oxcf->multi_threaded = cpi->oxcf.multi_threaded; + } + cpi->oxcf = *oxcf; switch (cpi->oxcf.Mode) { ===================================== toolkit/components/reputationservice/ApplicationReputation.cpp ===================================== @@ -181,6 +181,8 @@ const char* const ApplicationReputationService::kBinaryFileExtensions[] = { ".applescript", //".application", exec // MS ClickOnce //".appref-ms", exec // MS ClickOnce + //".appx", exec + //".appxbundle", exec //".arc", //".arj", ".as", // Mac archive @@ -331,6 +333,8 @@ const char* const ApplicationReputationService::kBinaryFileExtensions[] = { //".msh2xml", exec // Windows shell //".mshxml", exec // Windows //".msi", exec // Windows installer + //".msix", exec // Windows installer + //".msixbundle", exec // Windows installer //".msp", exec // Windows installer //".mst", exec // Windows installer ".ndif", // Mac disk image ===================================== toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp ===================================== @@ -24,6 +24,8 @@ static const char* const kTestFileExtensions[] = { ".applescript", ".application", // MS ClickOnce ".appref-ms", // MS ClickOnce + ".appx", + ".appxbundle", ".as", // Mac archive ".asp", // Windows Server script ".asx", // Windows Media Player @@ -151,6 +153,8 @@ static const char* const kTestFileExtensions[] = { ".msh2xml", // Windows shell ".mshxml", // Windows ".msi", // Windows installer + ".msix", // Windows installer + ".msixbundle", // Windows installer ".msp", // Windows installer ".mst", // Windows installer ".ndif", // Mac disk image ===================================== xpcom/io/nsLocalFileCommon.cpp ===================================== @@ -40,6 +40,8 @@ const char* const sExecutableExts[] = { ".app", // executable application ".application", // from bug 348763 ".appref-ms", // ClickOnce link + ".appx", + ".appxbundle", ".asp", ".atloc", // Appletalk Location ".bas", @@ -91,6 +93,8 @@ const char* const sExecutableExts[] = { ".msh2xml", // Microsoft Shell ".mshxml", // Microsoft Shell ".msi", + ".msix", + ".msixbundle", ".msp", ".mst", ".ops", // Office Profile Settings ===================================== xpcom/io/nsLocalFileCommon.h ===================================== @@ -7,6 +7,6 @@ #ifndef _NS_LOCAL_FILE_COMMON_H_ #define _NS_LOCAL_FILE_COMMON_H_ -extern const char* const sExecutableExts[103]; +extern const char* const sExecutableExts[107]; #endif View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/8461a8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/8461a8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-102.15.1esr-12.5-1-build3
by Pier Angelo Vendrame (＠pierov) 28 Sep '23

28 Sep '23

Pier Angelo Vendrame pushed new tag tor-browser-102.15.1esr-12.5-1-build3 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.15.1esr-12.5-1] 2 commits: Bug 1847180. a=RyanVM
by Pier Angelo Vendrame (＠pierov) 28 Sep '23

28 Sep '23

Pier Angelo Vendrame pushed to branch tor-browser-102.15.1esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: c9f778f9 by Marco Bonardo at 2023-09-28T11:12:19+02:00 Bug 1847180. a=RyanVM Original Revision: https://phabricator.services.mozilla.com/D188240 Differential Revision: https://phabricator.services.mozilla.com/D188568 - - - - - 1390a230 by Ryan VanderMeulen at 2023-09-28T11:14:27+02:00 Bug 1855550 - VP8: disallow thread count changes. r=jesup, a=dsmith Cherry-pick of upstream libvpx commits: https://chromium.googlesource.com/webm/libvpx/+/af6dedd715f4307669366944cca… https://chromium.googlesource.com/webm/libvpx/+/3fbd1dca6a4d2dad332a2110d64… Differential Revision: https://phabricator.services.mozilla.com/D189428 - - - - - 5 changed files: - media/libvpx/libvpx/vp8/encoder/onyx_if.c - toolkit/components/reputationservice/ApplicationReputation.cpp - toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp - xpcom/io/nsLocalFileCommon.cpp - xpcom/io/nsLocalFileCommon.h Changes: ===================================== media/libvpx/libvpx/vp8/encoder/onyx_if.c ===================================== @@ -1445,6 +1445,12 @@ void vp8_change_config(VP8_COMP *cpi, VP8_CONFIG *oxcf) { last_h = cpi->oxcf.Height; prev_number_of_layers = cpi->oxcf.number_of_layers; + if (cpi->initial_width) { + // TODO(https://crbug.com/1486441): Allow changing thread counts; the + // allocation is done once in vp8_create_compressor(). + oxcf->multi_threaded = cpi->oxcf.multi_threaded; + } + cpi->oxcf = *oxcf; switch (cpi->oxcf.Mode) { ===================================== toolkit/components/reputationservice/ApplicationReputation.cpp ===================================== @@ -181,6 +181,8 @@ const char* const ApplicationReputationService::kBinaryFileExtensions[] = { ".applescript", //".application", exec // MS ClickOnce //".appref-ms", exec // MS ClickOnce + //".appx", exec + //".appxbundle", exec //".arc", //".arj", ".as", // Mac archive @@ -331,6 +333,8 @@ const char* const ApplicationReputationService::kBinaryFileExtensions[] = { //".msh2xml", exec // Windows shell //".mshxml", exec // Windows //".msi", exec // Windows installer + //".msix", exec // Windows installer + //".msixbundle", exec // Windows installer //".msp", exec // Windows installer //".mst", exec // Windows installer ".ndif", // Mac disk image ===================================== toolkit/components/reputationservice/test/gtest/TestExecutableLists.cpp ===================================== @@ -24,6 +24,8 @@ static const char* const kTestFileExtensions[] = { ".applescript", ".application", // MS ClickOnce ".appref-ms", // MS ClickOnce + ".appx", + ".appxbundle", ".as", // Mac archive ".asp", // Windows Server script ".asx", // Windows Media Player @@ -151,6 +153,8 @@ static const char* const kTestFileExtensions[] = { ".msh2xml", // Windows shell ".mshxml", // Windows ".msi", // Windows installer + ".msix", // Windows installer + ".msixbundle", // Windows installer ".msp", // Windows installer ".mst", // Windows installer ".ndif", // Mac disk image ===================================== xpcom/io/nsLocalFileCommon.cpp ===================================== @@ -40,6 +40,8 @@ const char* const sExecutableExts[] = { ".app", // executable application ".application", // from bug 348763 ".appref-ms", // ClickOnce link + ".appx", + ".appxbundle", ".asp", ".atloc", // Appletalk Location ".bas", @@ -91,6 +93,8 @@ const char* const sExecutableExts[] = { ".msh2xml", // Microsoft Shell ".mshxml", // Microsoft Shell ".msi", + ".msix", + ".msixbundle", ".msp", ".mst", ".ops", // Office Profile Settings ===================================== xpcom/io/nsLocalFileCommon.h ===================================== @@ -7,6 +7,6 @@ #ifndef _NS_LOCAL_FILE_COMMON_H_ #define _NS_LOCAL_FILE_COMMON_H_ -extern const char* const sExecutableExts[103]; +extern const char* const sExecutableExts[107]; #endif View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/d1b5a5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/d1b5a5… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] fixup! Bug 41803: Add some developer tools for working on tor-browser.
by Pier Angelo Vendrame (＠pierov) 28 Sep '23

28 Sep '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: eb0fd6e1 by Henry Wilkes at 2023-09-28T11:37:57+00:00 fixup! Bug 41803: Add some developer tools for working on tor-browser. Bug 42130: Add support for specifying the branch for moving commits to a new default branch. We rename "rebase-on-default" to "move-to-default". Instead of rebasing (which requires checking out the branch, which can trigger a clobber build) we instead create a new branch with the same name, and renaming the old branch. Then we cherry-pick the commits into the new branch. Also rename "show-upstream-commit" to "show-upstream-basis-commit". When checking for the basis commit, we make sure that the upstream branch shares the same FIREFOX base. If a branch was moved onto a tor-browser branch that does not match its "upstream tracking branch", then this should throw. E.g. a branch was tracking origin/tor-browser-115.2.1esr-13.0.1 but was rebased onto origin/tor-browser-115.3.0esr-13.0.1 without changing the tracking branch. - - - - - 1 changed file: - tools/torbrowser/tb-dev Changes: ===================================== tools/torbrowser/tb-dev ===================================== @@ -1,4 +1,4 @@ -#!/usr/bin/python +#!/usr/bin/env python3 # PYTHON_ARGCOMPLETE_OK """ Useful tools for working on tor-browser repository. @@ -148,12 +148,28 @@ def get_firefox_ref(search_from): return get_nearest_ref("tag", "FIREFOX_", search_from) -def get_upstream_commit(search_from): +def get_upstream_tracking_branch(search_from): + return git_get(["rev-parse", "--abbrev-ref", f"{search_from}@{{upstream}}"])[0] + + +def get_upstream_basis_commit(search_from): """ Get the first common ancestor of search_from that is also in its upstream branch. """ - return git_get(["merge-base", search_from, f"{search_from}@{{upstream}}"])[0] + upstream_branch = get_upstream_tracking_branch(search_from) + commit = git_get(["merge-base", search_from, upstream_branch])[0] + # Verify that the upstream commit shares the same firefox basis. Otherwise, + # this would indicate that the upstream is on an early or later FIREFOX + # base. + upstream_firefox = get_firefox_ref(upstream_branch).commit + search_firefox = get_firefox_ref(search_from).commit + if upstream_firefox != search_firefox: + raise Exception( + f"Upstream of {search_from} has a different FIREFOX base. " + "You might want to set the upstream tracking branch to a new value." + ) + return commit def get_changed_files(from_commit, staged=False): @@ -239,11 +255,11 @@ def show_firefox_commit(_args): print(ref.commit) -def show_upstream_commit(_args): +def show_upstream_basis_commit(_args): """ Print the last upstream commit for the current HEAD. """ - print(get_upstream_commit("HEAD")) + print(get_upstream_basis_commit("HEAD")) def show_log(args): @@ -278,7 +294,7 @@ def show_changed_files(_args): """ List all the files that have been modified relative to upstream. """ - for filename in get_changed_files(get_upstream_commit("HEAD")): + for filename in get_changed_files(get_upstream_basis_commit("HEAD")): print(filename) @@ -289,7 +305,7 @@ def lint_changed_files(args): os.chdir(get_local_root()) file_list = [ f - for f in get_changed_files(get_upstream_commit("HEAD")) + for f in get_changed_files(get_upstream_basis_commit("HEAD")) if os.path.isfile(f) # Not deleted ] command_base = ["./mach", "lint"] @@ -495,25 +511,49 @@ def branch_from_default(args): git_run(["switch", "--create", args.branchname, "--track", default_branch]) -def rebase_on_default(_args): +def move_to_default(args): """ - Fetch the default gitlab branch from upstream and rebase the current branch - on top. + Fetch the default gitlab branch from upstream and move the specified + branch's commits on top. A new branch will be created tracking the default + branch, and the old branch will be renamed with a suffix for the old + tracking branch. This method will switch to the new branch, but will avoid + switching to the old branch to prevent triggering a CLOBBER build. """ - try: - branch_name = git_get(["branch", "--show-current"])[0] - except IndexError: - raise Exception("No current branch") + branch_name = args.branch + if branch_name is None: + # Use current branch as default. + try: + branch_name = git_get(["branch", "--show-current"])[0] + except IndexError: + raise Exception("No current branch") - current_upstream = get_upstream_commit("HEAD") + current_upstream_branch = get_upstream_tracking_branch(branch_name) default_branch = get_gitlab_default() git_run(["fetch"], get_upstream_name()) - # We set the new upstream before the rebase in case there are conflicts. - git_run(["branch", f"--set-upstream-to={default_branch}"]) - git_run( - ["rebase", "--onto", default_branch, current_upstream, branch_name], check=False - ) + + if current_upstream_branch == default_branch: + print(f"{branch_name} is already set to track the default branch {default_branch}.") + return + + # We want to avoid checking out the old branch because this can cause + # mozilla ./mach to do a CLOBBER build. + # Instead we create a new branch with the same name and cherry pick. + current_basis = get_upstream_basis_commit(branch_name) + old_branch_name = branch_name + "-" + get_firefox_ref(branch_name).name + + print(f"Moving old branch {branch_name} to {old_branch_name}") + git_run(["branch", "-m", branch_name, old_branch_name]) + + try: + git_run(["switch", "--create", branch_name, "--track", default_branch]) + except subprocess.CalledProcessError as err: + print(f"Moving {old_branch_name} back to {branch_name}") + git_run(["branch", "-m", old_branch_name, branch_name]) + raise err + + # Set check to False since cherry-pick might fail due to a merge conflict. + git_run(["cherry-pick", f"{current_basis}..{old_branch_name}"], check=False) def show_range_diff(args): @@ -608,8 +648,8 @@ parser = argparse.ArgumentParser() subparsers = parser.add_subparsers(required=True) for name, details in { - "show-upstream-commit": { - "func": show_upstream_commit, + "show-upstream-basis-commit": { + "func": show_upstream_basis_commit, }, "changed-files": { "func": show_changed_files, @@ -641,8 +681,16 @@ for name, details in { }, }, }, - "rebase-on-default": { - "func": rebase_on_default, + "move-to-default": { + "func": move_to_default, + "args": { + "branch": { + "help": "the branch to move, else uses the current branch", + "metavar": "<branch>", + "nargs": "?", + "completer": branch_complete, + }, + }, }, "show-firefox-commit": { "func": show_firefox_commit, View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/eb0fd6e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/eb0fd6e… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-spec][main] Bug 40060: FF113 Audit
by richard (＠richard) 27 Sep '23

27 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-spec Commits: 962190ab by Richard Pospesel at 2023-09-27T22:41:39+00:00 Bug 40060: FF113 Audit - - - - - 1 changed file: - + audits/FF113_AUDIT Changes: ===================================== audits/FF113_AUDIT ===================================== @@ -0,0 +1,73 @@ +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `8307d3d3e4bfbca09aaa17e444f106e1e1d91b65` ( `FIREFOX_112_0_2_RELEASE` ) +- End: `8a724297d78ba792067a7e4d17d170c6b3af796e` ( `FIREFOX_113_0_2_RELEASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `48916bbaf585f89fdff3404d181b260ed981a2d6` ( `v97.5.0` ) +- End: `e3db1107890d3fe69122d4d78ae04c857329b0ea` ( `v114.1` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Firefox Android: https://github.com/mozilla-mobile/firefox-android.git + +- Start: `32bb398127bacccb268a272091d2e62b8d72d6b9` +- End: `9d87757910437e94a860e1d6f2577d5648ded966` + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +#### Problematic Commits + +- Bug 1822268 - Part 1: Add juno onboarding fragment `536df038039d256cd41ecad41df97b1b3da1a2e4` +- Bug 1821726 - Part 2: Add juno onboarding telemetry `db4bc04177766a241f1e36621c1d8c480aab568d` +- Bug 1822750 - Add option to open default browser help page in custom tab `a488c06ae9ff9d060517da08e2a2db94465dc871` + - **RESOLUTION** All three of these are part of the Firefox onboarding which we have disabled entirely! + +## Ticket Review ## + +Bugzilla Query: `https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=FIXED&target_milestone=113%20Branch&order=priority%2Cbug_severity&limit=0` + +Nothing of interest (manual inspection) + +#### Problematic Tickets + +- **Allow users to submit site support requests in Fenix** https://bugzilla.mozilla.org/show_bug.cgi?id=1805450 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42007 + - **RESOLUTION** disabled +- **Copying images from Pixiv and pasting them in certain programs is broken** https://bugzilla.mozilla.org/show_bug.cgi?id=1808146 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42008 + - **RESOLUTION** verified the web request happens in Firefox not the destination app +- **Enable overscroll on Windows on all channels** https://bugzilla.mozilla.org/show_bug.cgi?id=1810641 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42010 + - **RESOLUTION** nothing to do here until we enable touch events (disabled for now) +## Export +- [ ] Export Report and save to `tor-browser-spec/audits` \ No newline at end of file View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/96… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/96… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-spec][main] Bug 40058: FF111 Audit
by richard (＠richard) 27 Sep '23

27 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-spec Commits: b9a30372 by Richard Pospesel at 2023-09-27T22:22:43+00:00 Bug 40058: FF111 Audit - - - - - 1 changed file: - + audits/FF111_AUDIT Changes: ===================================== audits/FF111_AUDIT ===================================== @@ -0,0 +1,85 @@ +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `250178df19caa1fb25bfa0e35728426cfbde95f8` ( `FIREFOX_110_0_1_RELEASE` ) +- End: `431cede9cc9472bb648f5dfe24c54d0067c290e4` ( `FIREFOX_111_0_1_RELEASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `5755d9ce30ef10248eb55c4b39a522a118ce7d95` ( `v97.1.0` ) +- End: `9657aebb7450c5b58e8b9a88bec12bd5e9e0f700` ( `v97.2.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Firefox Android: https://github.com/mozilla-mobile/firefox-android.git + +- Start: `bc529747751ab545dba0a90a339f11382d742c97` +- End: `6b0f9fdb3f603974914de82185cd184065b2ebee` + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +#### Problematic Commits + +- Bug 1811531 - Add 'site' query parameter to Pocket sponsored stories request + `2dfe183ed96720b843f872fdf51fe206ed9a311c` + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41990 + - **RESOLUTION** pocket not available in PBM which we lock+enforce +- Bug 1812518 - Allow a custom View for 3rd party downloads `174237dcbb6d8c631f5834ecbc7875d670bb6d8d` + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41991 + - **RESOLUTION** feature disabled + +## Fenix: https://github.com/mozilla-mobile/fenix.git + +- Start: `69e08e3ffbf4b9f5a2ffec99b238fa0c5da1d315` +- End: `8571b648efc860bd2511183540b792e10c6cc0f4` + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +#### Problematic Commits + +- Bug 1815623 - Add telemetry for sharing to an app from the share sheet + `4e5d9b323b465a73d24f8ee91a8b55df10545c36` + +## Ticket Review ## + +Bugzilla Query: `https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=FIXED&target_milestone=111%20Branch&order=priority%2Cbug_severity&limit=0` + +#### Problematic Tickets + +- **Add API for saving a PDF** https://bugzilla.mozilla.org/show_bug.cgi?id=1810761 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41993 + - **RESOLUTION** just enabling download byte-per-byte and viewing of PDF in browser, no extra meta data or conversion happens + +## Export +- [x] Export Report and save to `tor-browser-spec/audits` \ No newline at end of file View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/b9… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/b9… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-spec][main] Bug 40057: FF110 Audit
by richard (＠richard) 27 Sep '23

27 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-spec Commits: 347fe297 by Richard Pospesel at 2023-09-27T22:16:56+00:00 Bug 40057: FF110 Audit - - - - - 1 changed file: - + audits/FF110_AUDIT Changes: ===================================== audits/FF110_AUDIT ===================================== @@ -0,0 +1,82 @@ +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `b89c6dedbd57992efe751d1b585116f2eaa34481` ( `FIREFOX_109_0_1_RELEASE` ) +- End: `250178df19caa1fb25bfa0e35728426cfbde95f8` ( `FIREFOX_110_0_1_RELEASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `102fa0de36a21b1b2f561ba6de557e20d05b7380` ( `v96.3.0` ) +- End: `5755d9ce30ef10248eb55c4b39a522a118ce7d95` ( `v97.1.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +### Problematic Commits + +- Create shared remote settings client and port Nimbus to it `1d55a254fb6817c538ce19666cc02196c61170e6` + +## Firefox Android: https://github.com/mozilla-mobile/firefox-android.git + +- Start: `a7e03da7c26d76bea2fb9c77efce9d841d81f4e0` +- End: `bc529747751ab545dba0a90a339f11382d742c97` + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Fenix: https://github.com/mozilla-mobile/fenix.git + +- Start: `efb2198489bbf27e18e434306183667cf4df0526` ( `v110.0b1` ) +- End: `43c570380c5aa091f361018f038fa37cbfa71662` ( `v110.0.1` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Ticket Review ## + +Bugzilla Query: `https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=FIXED&target_milestone=$(FIREFOX_VERSION)%20Branch&order=priority%2Cbug_severity&limit=0` + +#### Problematic Tickets + +- **Add about:preferences entry for cookie banner handling** https://bugzilla.mozilla.org/show_bug.cgi?id=1800675 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41981 + - **RESOLUTION** disabling for 13.0 and revisiting for the 13.5 alpha series +- **Add Cocoa platform support for paste files** https://bugzilla.mozilla.org/show_bug.cgi?id=1762392 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41982 + - **RESOLUTION** has to deal with pasting into tor-browser, not exfiltration of data out, so we're good here +- **Create a reusable "support-link" widget** https://bugzilla.mozilla.org/show_bug.cgi?id=1770447 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41983 + - **RESOLUTION** not an issue, just a hint to us for future UX work + +## Export +- [ ] Export Report and save to `tor-browser-spec/audits` \ No newline at end of file View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/34… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/34… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-spec][main] Bug 40056: FF109 Audit
by richard (＠richard) 27 Sep '23

27 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-spec Commits: 651d6cff by Richard Pospesel at 2023-09-27T22:13:38+00:00 Bug 40056: FF109 Audit - - - - - 1 changed file: - + audits/FF109_AUDIT Changes: ===================================== audits/FF109_AUDIT ===================================== @@ -0,0 +1,76 @@ +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `0ae93a27c796bea7836d4b0885c8a1f2c4c18284` ( `FIREFOX_108_0_2_RELEASE` ) +- End: `b89c6dedbd57992efe751d1b585116f2eaa34481` ( `FIREFOX_109_0_1_RELEASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `d8b5a386936aa156f4c6d93e6645a6d2188aa788` ( `v96.2.1` ) +- End: `102fa0de36a21b1b2f561ba6de557e20d05b7380` ( `v96.3.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Firefox Android: https://github.com/mozilla-mobile/firefox-android.git + +- Start: `55d34bf82ad051e25f15c0d1ef5fb8b3a32a7522` +- End: `a7e03da7c26d76bea2fb9c77efce9d841d81f4e0` + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Fenix: https://github.com/mozilla-mobile/fenix.git + +- Start: `dc08c68a6cd7932dad599d0713bb3bd3b9f72b57` ( `v109.0b1` ) +- End: `a66807eeb0ff39f96a41a60ac950bd9f31ecf5bd` ( `v109.2.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Ticket Review ## + +Bugzilla Query: `https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=FIXED&target_milestone=109%20Branch&order=priority%2Cbug_severity&limit=0` + +#### Problematic Tickets + +- **Re-enable pingsender2** https://bugzilla.mozilla.org/show_bug.cgi?id=1746983 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41969 + - **RESOLUTION** our existing patches are sufficient to keep pingsender away +- **WebRTC bypasses Network settings & proxy.onRequest** https://bugzilla.mozilla.org/show_bug.cgi?id=1790270 + - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41970 + - **RESOLUTION** nothing to do here, the upstream bug fix is good for us and fixes some proxy leak +## Export +- [ ] Export Report and save to `tor-browser-spec/audits` \ No newline at end of file View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/65… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/65… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-115.3.0esr-13.0-1] fixup! Firefox preference overrides.
by richard (＠richard) 27 Sep '23

27 Sep '23

richard pushed to branch base-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: dee4b1e1 by Pier Angelo Vendrame at 2023-09-27T19:51:01+00:00 fixup! Firefox preference overrides. Bug 41496: Pref review for 115/13.0 - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -40,6 +40,8 @@ pref("app.update.promptWaitTime", 3600); pref("app.update.staging.enabled", false); #endif +pref("browser.startup.homepage_override.buildID", "20100101"); + // Disable the "Refresh" prompt that is displayed for stale profiles. pref("browser.disableResetPrompt", true); @@ -47,7 +49,6 @@ pref("browser.disableResetPrompt", true); pref("browser.privatebrowsing.autostart", true); pref("browser.cache.disk.enable", false); pref("permissions.memory_only", true); -pref("network.cookie.lifetimePolicy", 2); pref("security.nocertdb", true); pref("media.aboutwebrtc.hist.enabled", false); @@ -66,7 +67,10 @@ pref("browser.download.enable_spam_prevention", true); // Misc privacy: Disk pref("signon.rememberSignons", false); pref("browser.formfill.enable", false); +pref("signon.formlessCapture.enabled", false); // Added with tor-browser#41496 pref("signon.autofillForms", false); +// Do not store extra data (form, scrollbar positions, cookies, POST data) for +// the session restore functionality. pref("browser.sessionstore.privacy_level", 2); // Use the in-memory media cache and increase its maximum size (#29120) pref("browser.privatebrowsing.forceMediaMemoryCache", true); @@ -80,6 +84,8 @@ pref("browser.pagethumbnails.capturing_disabled", true); // Enable HTTPS-Only mode (tor-browser#19850) pref("dom.security.https_only_mode", true); +// The previous pref automatically sets this to true (see StaticPrefList.yaml), +// but set it anyway only as a defense-in-depth. pref("dom.security.https_only_mode_pbm", true); // tor-browser#22320: Hide referer when comming from a .onion address @@ -118,7 +124,8 @@ pref("security.tls.version.enable-deprecated", false, locked); // Misc privacy: Remote pref("browser.send_pings", false); // Space separated list of URLs that are allowed to send objects (instead of -// only strings) through webchannels. +// only strings) through webchannels. The default for Firefox is some Mozilla +// domains. pref("webchannel.allowObject.urlWhitelist", ""); pref("geo.enabled", false); pref("geo.provider.network.url", ""); @@ -127,6 +134,7 @@ pref("geo.provider.use_corelocation", false); pref("geo.provider.use_gpsd", false); pref("geo.provider.use_geoclue", false); pref("browser.search.suggest.enabled", false); +pref("browser.search.suggest.enabled.private", false); pref("browser.urlbar.suggest.searches", false); pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false); pref("browser.urlbar.suggest.quicksuggest.sponsored", false); @@ -143,7 +151,6 @@ pref("browser.safebrowsing.provider.google4.updateURL", ""); pref("browser.safebrowsing.provider.google4.gethashURL", ""); pref("browser.safebrowsing.provider.mozilla.updateURL", ""); pref("browser.safebrowsing.provider.mozilla.gethashURL", ""); -pref("extensions.ui.lastCategory", "addons://list/extension"); pref("datareporting.healthreport.uploadEnabled", false); pref("datareporting.policy.dataSubmissionEnabled", false); // Make sure Unified Telemetry is really disabled, see: #18738. @@ -152,6 +159,9 @@ pref("toolkit.telemetry.unified", false); pref("toolkit.telemetry.enabled", false, locked); pref("toolkit.telemetry.server", "data:,"); pref("toolkit.telemetry.archive.enabled", false); +pref("toolkit.telemetry.newProfilePing.enabled", false); // Added in tor-browser#41496 +pref("toolkit.telemetry.shutdownPingSender.enabled", false); // Added in tor-browser#41496 +pref("toolkit.telemetry.firstShutdownPing.enabled", false); // Added in tor-browser#41496 pref("toolkit.telemetry.updatePing.enabled", false); // Make sure updater telemetry is disabled; see #25909. pref("toolkit.telemetry.bhrPing.enabled", false); pref("toolkit.telemetry.coverage.opt-out", true); @@ -160,6 +170,11 @@ pref("toolkit.coverage.endpoint.base", ""); pref("browser.ping-centre.telemetry", false); pref("browser.tabs.crashReporting.sendReport", false); pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); +// Added in tor-browser#41496 even though false by default +pref("browser.crashReports.unsubmittedCheck.enabled", false); +// Added in tor-browser#41496 even though it shuld be already always disabled +// since we disable MOZ_CRASHREPORTER. +pref("breakpad.reportURL", "data:"); #ifdef XP_WIN // Defense-in-depth: ensure that the Windows default browser agent will // not ping Mozilla if it is somehow present (we omit it at build time). @@ -177,10 +192,8 @@ pref("services.sync.engine.passwords", false); pref("services.sync.engine.prefs", false); pref("services.sync.engine.tabs", false); pref("extensions.getAddons.cache.enabled", false); // https://blog.mozilla.org/addons/how-to-opt-out-of-add-on-metadata-updates/ -pref("browser.search.region", "US"); // The next two prefs disable GeoIP search lookups (#16254) -pref("browser.search.geoip.url", ""); pref("browser.fixup.alternate.enabled", false); // Bug #16783: Prevent .onion fixups -pref("privacy.donottrackheader.enabled", false); // (privacy-browser#17) +pref("privacy.donottrackheader.enabled", false); // (mullvad-browser#17) // Make sure there is no Tracking Protection active in Tor Browser, see: #17898. pref("privacy.trackingprotection.enabled", false); pref("privacy.trackingprotection.pbmode.enabled", false); @@ -200,15 +213,10 @@ pref("browser.newtabpage.activity-stream.feeds.section.topstories", false); pref("browser.newtabpage.activity-stream.showSponsored", false); pref("browser.newtabpage.activity-stream.showSponsoredTopSites", false); pref("browser.newtabpage.activity-stream.default.sites", ""); +// Activity Stream telemetry pref("browser.newtabpage.activity-stream.feeds.telemetry", false); pref("browser.newtabpage.activity-stream.telemetry", false); -// tor-browser#41945 - disable automatic cookie banners dismissal until -// we're sure it does not causes fingerprinting risks or other issues. -pref("cookiebanners.service.mode", 0); -pref("cookiebanners.service.mode.privateBrowsing", 0); -pref("cookiebanners.ui.desktop.enabled", false); - // tor-browser#40788: disable AS's calls to home. // Notice that null is between quotes because it is a JSON string. // Keep checked firefox.js to see if new entries are added. @@ -221,6 +229,12 @@ pref("browser.newtabpage.activity-stream.asrouter.providers.messaging-experiment // Disable fetching asrouter.ftl and related console errors (tor-browser#40763). pref("browser.newtabpage.activity-stream.asrouter.useRemoteL10n", false); +// tor-browser#41945 - disable automatic cookie banners dismissal until +// we're sure it does not causes fingerprinting risks or other issues. +pref("cookiebanners.service.mode", 0); +pref("cookiebanners.service.mode.privateBrowsing", 0); +pref("cookiebanners.ui.desktop.enabled", false); + // Disable moreFromMozilla pane in the preferences/settings (tor-browser#41292). pref("browser.preferences.moreFromMozilla", false); @@ -228,14 +242,16 @@ pref("browser.preferences.moreFromMozilla", false); pref("extensions.screenshots.disabled", true); pref("extensions.webcompat-reporter.enabled", false); +pref("browser.search.region", "US"); // Disable GeoIP search lookups (#16254) // Disable use of WiFi location information pref("browser.region.network.scan", false); pref("browser.region.network.url", ""); pref("browser.region.local-geocoding", false); -// Bug 40083: Make sure Region.jsm fetching is disabled +// Bug 40083: Make sure Region.sys.mjs fetching is disabled pref("browser.region.update.enabled", false); -// Don't load Mozilla domains in a separate tab process +// Don't load Mozilla domains in a separate privileged tab process +pref("browser.tabs.remote.separatePrivilegedMozillaWebContentProcess", false); pref("browser.tabs.remote.separatedMozillaDomains", ""); // Avoid DNS lookups on search terms @@ -270,12 +286,23 @@ pref("security.pki.crlite_mode", 0); // Disable website password breach alerts pref("signon.management.page.breach-alerts.enabled", false); -// Disable remote "password recipes" +// Disable remote "password recipes". They are a way to improve the UX of the +// password manager by havinc specific heuristics for some sites. +// It needs remote settings and in general we disable the password manager. +// More information about this feature at +// https://bugzilla.mozilla.org/show_bug.cgi?id=1119454 pref("signon.recipes.remoteRecipes.enabled", false); -// Disable ServiceWorkers and push notifications by default +// Disable ServiceWorkers by default. They do not work in PBM in any case. +// See https://bugzilla.mozilla.org/show_bug.cgi?id=1320796 pref("dom.serviceWorkers.enabled", false); +// Push notifications use an online Mozilla service and a persistent ID stored +// in dom.push.userAgentID, so disable them by default. +// See also https://support.mozilla.org/kb/push-notifications-firefox pref("dom.push.enabled", false); +// As a defense in depth measure, also set the push server URL to empty. +// See tor-browser#18801. +pref("dom.push.serverURL", ""); // Fingerprinting // tor-browser#41797: For release builds, lock RFP @@ -292,7 +319,6 @@ pref("privacy.resistFingerprinting", true); pref("webgl.disable-fail-if-major-performance-caveat", true); // tor-browser#16404: disable until we investigate it further (#22333) pref("webgl.enable-webgl2", false); -pref("browser.startup.homepage_override.buildID", "20100101"); pref("browser.link.open_newwindow.restriction", 0); // Bug 9881: Open popups in new tabs (to avoid fullscreen popups) // Prevent scripts from moving and resizing open windows pref("dom.disable_window_move_resize", true); @@ -307,7 +333,9 @@ pref("dom.webmidi.enabled", false); // Bug 41398: Disable Web MIDI API // randomized IDs when this pref is true). // Defense-in-depth (already the default value) from Firefox 119 or 120. pref("media.devices.enumerate.legacy.enabled", false); -pref("dom.w3c_touch_events.enabled", 0); // Bug 10286: Always disable Touch API +// Bug 10286: Always disable Touch API. +// We might need to deepen this topic, see tor-browser#42069. +pref("dom.w3c_touch_events.enabled", 0); pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now pref("security.webauth.webauthn", false); // Bug 26614: Disable Web Authentication API for now // Disable SAB, no matter if the sites are cross-origin isolated. @@ -350,6 +378,7 @@ pref("javascript.options.spectre.disable_for_isolated_content", false, locked); pref("privacy.firstparty.isolate", true); // Always enforce first party isolation // tor-browser#40123 and #40308: Disable for now until audit pref("privacy.partition.network_state", false); +// Only accept cookies from the originating site (block third party cookies) pref("network.cookie.cookieBehavior", 1); pref("network.cookie.cookieBehavior.pbmode", 1); pref("network.predictor.enabled", false); // Temporarily disabled. See https://bugs.torproject.org/16633 @@ -365,7 +394,9 @@ pref("privacy.purge_trackers.enabled", false); // Do not allow cross-origin sub-resources to open HTTP authentication // credentials dialogs. Hardens against potential credentials phishing. pref("network.auth.subresource-http-auth-allow", 1); -// Disable sending additional analytics to web servers +// Disable sending additional analytics to web servers. +// This disables navigator.sendBeacon, even though this is discouraged by the +// standard: https://w3c.github.io/beacon/#privacy-and-security pref("beacon.enabled", false); pref("network.dns.disablePrefetch", true); @@ -379,13 +410,19 @@ pref("network.protocol-handler.warn-external.mailto", true); pref("network.protocol-handler.warn-external.news", true); pref("network.protocol-handler.warn-external.nntp", true); pref("network.protocol-handler.warn-external.snews", true); +#ifdef XP_WIN + pref("network.protocol-handler.external.ms-windows-store", false); + pref("network.protocol-handler.warn-external.ms-windows-store", true); +#endif pref("network.proxy.allow_bypass", false, locked); // #40682 // Lock to 'true', which is already the firefox default, to prevent users // from making themselves fingerprintable by disabling. This pref // alters content load order in a page. See tor-browser#24686 pref("network.http.tailing.enabled", true, locked); -// Make sure the varoius http2 settings, buffer sizes, timings, etc are locked to firefox defaults to minimize network performance fingerprinting. See https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/27128 +// Make sure the varoius http2 settings, buffer sizes, timings, etc are locked +// to firefox defaults to minimize network performance fingerprinting. +// See https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/27128 pref("network.http.http2.enabled", true, locked); pref("network.http.http2.enabled.deps", true, locked); pref("network.http.http2.enforce-tls-profile", true, locked); @@ -395,13 +432,13 @@ pref("network.http.http2.coalesce-hostnames", true, locked); pref("network.http.http2.persistent-settings", false, locked); pref("network.http.http2.ping-threshold", 58, locked); pref("network.http.http2.ping-timeout", 8, locked); -pref("network.http.http2.send-buffer-size", 131072, locked); +pref("network.http.http2.send-buffer-size", 0, locked); pref("network.http.http2.allow-push", true, locked); pref("network.http.http2.push-allowance", 131072, locked); pref("network.http.http2.pull-allowance", 12582912, locked); pref("network.http.http2.default-concurrent", 100, locked); pref("network.http.http2.default-hpack-buffer", 65536, locked); -pref("network.http.http2.websockets", false, locked); +pref("network.http.http2.websockets", true, locked); pref("network.http.http2.enable-hpack-dump", false, locked); // tor-browser#23044: Make sure we don't have any GIO supported protocols @@ -467,10 +504,6 @@ pref("network.manage-offline-status", false); pref("network.captive-portal-service.enabled", false); pref("network.connectivity-service.enabled", false); pref("captivedetect.canonicalURL", ""); -// As a "defense in depth" measure, configure an empty push server URL (the -// DOM Push features are disabled by default via other prefs). -// See tor-browser#18801. -pref("dom.push.serverURL", ""); #ifdef XP_WIN // tor-browser#41683: Disable the network process on Windows @@ -482,9 +515,7 @@ pref("network.process.enabled", false); // Extension support pref("extensions.autoDisableScopes", 0); -pref("extensions.databaseSchema", 3); pref("extensions.enabledScopes", 5); // AddonManager.SCOPE_PROFILE=1 | AddonManager.SCOPE_APPLICATION=4 -pref("extensions.pendingOperations", false); // We don't know what extensions Mozilla is advertising to our users and we // don't want to have some random Google Analytics script running either on the // about:addons page, see bug 22073, 22900 and 31601. @@ -498,8 +529,8 @@ pref("browser.discovery.enabled", false); pref("extensions.webextensions.restrictedDomains", ""); // Don't give Mozilla-recommended third-party extensions special privileges. pref("extensions.postDownloadThirdPartyPrompt", false); -// tor-browser#41701: Reporting an extension does not work -// disable extension reporting since the request goes to Mozilla and is rejected anyway (HTTP 400) +// tor-browser#41701: Reporting an extension does not work. The request goes to +// Mozilla and is always rejected anyway (HTTP 400). pref("extensions.abuseReport.enabled", false); // We are already providing the languages we support in multi-lingual packages. // Therefore, do not allow download of additional language packs. They are not a @@ -526,10 +557,6 @@ pref("security.certerrors.mitm.priming.enabled", false); // Don't automatically enable enterprise roots, see bug 40166 pref("security.certerrors.mitm.auto_enable_enterprise_roots", false); -// Don't allow any domain overrides access to offscreen rendering, see tor-browser#41135 -pref("gfx.offscreencanvas.domain-enabled", false); -pref("gfx.offscreencanvas.domain-allowlist", ""); - // Disable share menus on Mac and Windows tor-browser#41117 pref("browser.menu.share_url.allow", false, locked); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/dee4b1e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/dee4b1e… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] 2 commits: fixup! Bug 40933: Add tor-launcher functionality
by richard (＠richard) 27 Sep '23

27 Sep '23

richard pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 14e1b34c by Pier Angelo Vendrame at 2023-09-27T19:39:39+00:00 fixup! Bug 40933: Add tor-launcher functionality Bug 42131: Check for existing circuits during initialization. - - - - - 4b7f4df4 by Pier Angelo Vendrame at 2023-09-27T19:39:39+00:00 fixup! Bug 40933: Add tor-launcher functionality Bug 42132: Poll for circuit information when we did not collect its data already. - - - - - 2 changed files: - toolkit/components/tor-launcher/TorControlPort.sys.mjs - toolkit/components/tor-launcher/TorProvider.sys.mjs Changes: ===================================== toolkit/components/tor-launcher/TorControlPort.sys.mjs ===================================== @@ -272,6 +272,11 @@ class AsyncSocket { * * @typedef {string} NodeFingerprint */ +/** + * @typedef {object} CircuitInfo + * @property {CircuitID} id + * @property {NodeFingerprint[]} nodes + */ /** * @typedef {object} Bridge * @property {string} transport The transport of the bridge, or vanilla if not @@ -729,12 +734,14 @@ export class TorController { /** * Ask Tor a list of circuits. * - * @returns {string[]} An array with a string for each line + * @returns {CircuitInfo[]} An array with a string for each line */ async getCircuits() { const circuits = await this.#getInfo("circuit-status"); - // TODO: Do more parsing once we move the event parsing to this class! - return circuits.split(/\r?\n/); + return circuits + .split(/\r?\n/) + .map(this.#parseCircBuilt.bind(this)) + .filter(circ => circ); } // Configuration @@ -1022,25 +1029,15 @@ export class TorController { this.#eventHandler.onBootstrapStatus(status); break; case "CIRC": - const builtEvent = - /^(?<ID>[a-zA-Z0-9]{1,16})\sBUILT\s(?<Path>(,?\$([0-9a-fA-F]{40})(?:~[a-zA-Z0-9]{1,19})?)+)/.exec( - data.groups.data - ); + const maybeCircuit = this.#parseCircBuilt(data.groups.data); const closedEvent = /^(?<ID>[a-zA-Z0-9]{1,16})\sCLOSED/.exec( data.groups.data ); - if (builtEvent) { - const fp = /\$([0-9a-fA-F]{40})/g; - const nodes = Array.from(builtEvent.groups.Path.matchAll(fp), g => - g[1].toUpperCase() + if (maybeCircuit) { + this.#eventHandler.onCircuitBuilt( + maybeCircuit.id, + maybeCircuit.nodes ); - // In some cases, we might already receive SOCKS credentials in the - // line. However, this might be a problem with onion services: we get - // also a 4-hop circuit that we likely do not want to show to the - // user, especially because it is used only temporarily, and it would - // need a technical explaination. - // const credentials = this.#parseCredentials(data.groups.data); - this.#eventHandler.onCircuitBuilt(builtEvent.groups.ID, nodes); } else if (closedEvent) { this.#eventHandler.onCircuitClosed(closedEvent.groups.ID); } @@ -1068,7 +1065,7 @@ export class TorController { } } - // Other helpers + // Parsers /** * Parse a bootstrap status line. @@ -1099,15 +1096,32 @@ export class TorController { } /** - * Throw an exception when value is not a string. + * Parse a CIRC BUILT event or a GETINFO circuit-status. * - * @param {any} value The value to check - * @param {string} name The name of the `value` argument + * @param {string} line The line to parse + * @returns {CircuitInfo?} The ID and nodes of the circuit, or null if the + * parsing failed. */ - #expectString(value, name) { - if (typeof value !== "string" && !(value instanceof String)) { - throw new Error(`The ${name} argument is expected to be a string.`); + #parseCircBuilt(line) { + const builtEvent = + /^(?<ID>[a-zA-Z0-9]{1,16})\sBUILT\s(?<Path>(,?\$([0-9a-fA-F]{40})(?:~[a-zA-Z0-9]{1,19})?)+)/.exec( + line + ); + if (!builtEvent) { + return null; } + const fp = /\$([0-9a-fA-F]{40})/g; + const nodes = Array.from(builtEvent.groups.Path.matchAll(fp), g => + g[1].toUpperCase() + ); + // In some cases, we might already receive SOCKS credentials in the + // line. However, this might be a problem with Onion services: we get + // also a 4-hop circuit that we likely do not want to show to the + // user, especially because it is used only temporarily, and it would + // need a technical explaination. + // So we do not try to extract them for now. Otherwise, we could do + // const credentials = this.#parseCredentials(line); + return { id: builtEvent.groups.ID, nodes }; } /** @@ -1146,6 +1160,20 @@ export class TorController { ) ); } + + // Other helpers + + /** + * Throw an exception when value is not a string. + * + * @param {any} value The value to check + * @param {string} name The name of the `value` argument + */ + #expectString(value, name) { + if (typeof value !== "string" && !(value instanceof String)) { + throw new Error(`The ${name} argument is expected to be a string.`); + } + } } /** ===================================== toolkit/components/tor-launcher/TorProvider.sys.mjs ===================================== @@ -137,7 +137,7 @@ export class TorProvider { * built before the new identity but not yet used. If we cleaned the map, we * risked of not having the data about it. * - * @type {Map<CircuitID, NodeFingerprint[]>} + * @type {Map<CircuitID, Promise<NodeFingerprint[]>>} */ #circuits = new Map(); /** @@ -204,6 +204,11 @@ export class TorProvider { logger.debug(`Notifying ${TorProviderTopics.ProcessIsReady}`); Services.obs.notifyObservers(null, TorProviderTopics.ProcessIsReady); + + // If we are using an external Tor daemon, we might need to fetch circuits + // already, in case streams use them. Do not await because we do not want to + // block the intialization on this (it should not fail anyway...). + this.#fetchCircuits(); } /** @@ -799,6 +804,16 @@ export class TorProvider { return crypto.getRandomValues(new Uint8Array(kPasswordLen)); } + /** + * Ask Tor the circuits it already knows to populate our circuit map with the + * circuits that were already open before we started listening for events. + */ + async #fetchCircuits() { + for (const { id, nodes } of await this.#controller.getCircuits()) { + this.onCircuitBuilt(id, nodes); + } + } + // Notification handlers /** @@ -983,18 +998,35 @@ export class TorProvider { * @param {CircuitID} circuitId The ID of the circuit used by the stream * @param {string} username The SOCKS username * @param {string} password The SOCKS password - * @returns */ - onStreamSucceeded(streamId, circuitId, username, password) { + async onStreamSucceeded(streamId, circuitId, username, password) { if (!username || !password) { return; } logger.debug("Stream succeeded event", username, password, circuitId); - const circuit = this.#circuits.get(circuitId); + let circuit = this.#circuits.get(circuitId); if (!circuit) { - logger.error( - "Seen a STREAM SUCCEEDED with an unknown circuit. Not notifying observers." - ); + circuit = new Promise((resolve, reject) => { + this.#controlConnection.getCircuits().then(circuits => { + for (const { id, nodes } of circuits) { + if (id === circuitId) { + resolve(nodes); + return; + } + // Opportunistically collect circuits, since we are iterating them. + this.#circuits.set(id, nodes); + } + logger.error( + `Seen a STREAM SUCCEEDED with circuit ${circuitId}, but Tor did not send information about it.` + ); + reject(); + }); + }); + this.#circuits.set(circuitId, circuit); + } + try { + circuit = await circuit; + } catch { return; } Services.obs.notifyObservers( View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/c97861… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/c97861… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] 2 commits: fixup! Bug 40562: Added Tor Browser preferences to 000-tor-browser.js
by richard (＠richard) 27 Sep '23

27 Sep '23

richard pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 8085f615 by Pier Angelo Vendrame at 2023-09-27T14:55:14+02:00 fixup! Bug 40562: Added Tor Browser preferences to 000-tor-browser.js Bug 41496: Pref review for 115/13.0 - - - - - c978614e by Pier Angelo Vendrame at 2023-09-27T14:55:16+02:00 fixup! Firefox preference overrides. Bug 41496: Pref review for 115/13.0 - - - - - 2 changed files: - browser/app/profile/000-tor-browser.js - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/000-tor-browser.js ===================================== @@ -41,14 +41,19 @@ pref("dom.security.https_only_mode.upgrade_onion", false); // Bug 40423/41137: Disable http/3 // We should re-enable it as soon as Tor gets UDP support -pref("network.http.http3.enabled", false); +pref("network.http.http3.enable", false); // 0 = do not use a second connection, see all.js and #7656 pref("network.http.connection-retry-timeout", 0); #expand pref("torbrowser.version", __BASE_BROWSER_VERSION_QUOTED__); -// Old torbutton pref +// Tor Browser used to be compatible with non-Tor proxies. This feature is not +// available anymore, but this legacy preference can be still used to disable +// first-party domain circuit isolation. +// In general, it should not be used. This use-case is still supported only for +// sites that break with this isolation (and even in that case, its use should +// be reduced to the strictly required time). pref("extensions.torbutton.use_nontor_proxy", false); // Browser home page: @@ -61,8 +66,6 @@ pref("browser.download.showTorWarning", true); pref("extensions.torbutton.pref_fixup_version", 0); // Formerly tor-launcher defaults -// When presenting the setup wizard, first prompt for locale. -pref("intl.locale.matchOS", true); pref("extensions.torlauncher.start_tor", true); pref("extensions.torlauncher.prompt_at_startup", true); @@ -112,7 +115,7 @@ pref("extensions.torlauncher.bridgedb_reflector", "https://moat.torproject.org.g pref("extensions.torlauncher.moat_service", "https://bridges.torproject.org/moat"); pref("extensions.torlauncher.bridgedb_bridge_type", "obfs4"); -// Recommended default bridge type (can be set per localized bundle). +// Recommended default bridge type. // pref("extensions.torlauncher.default_bridge_recommended_type", "obfs3"); // Default bridges. ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -40,6 +40,8 @@ pref("app.update.promptWaitTime", 3600); pref("app.update.staging.enabled", false); #endif +pref("browser.startup.homepage_override.buildID", "20100101"); + // Disable the "Refresh" prompt that is displayed for stale profiles. pref("browser.disableResetPrompt", true); @@ -47,7 +49,6 @@ pref("browser.disableResetPrompt", true); pref("browser.privatebrowsing.autostart", true); pref("browser.cache.disk.enable", false); pref("permissions.memory_only", true); -pref("network.cookie.lifetimePolicy", 2); pref("security.nocertdb", true); pref("media.aboutwebrtc.hist.enabled", false); @@ -66,7 +67,10 @@ pref("browser.download.enable_spam_prevention", true); // Misc privacy: Disk pref("signon.rememberSignons", false); pref("browser.formfill.enable", false); +pref("signon.formlessCapture.enabled", false); // Added with tor-browser#41496 pref("signon.autofillForms", false); +// Do not store extra data (form, scrollbar positions, cookies, POST data) for +// the session restore functionality. pref("browser.sessionstore.privacy_level", 2); // Use the in-memory media cache and increase its maximum size (#29120) pref("browser.privatebrowsing.forceMediaMemoryCache", true); @@ -80,6 +84,8 @@ pref("browser.pagethumbnails.capturing_disabled", true); // Enable HTTPS-Only mode (tor-browser#19850) pref("dom.security.https_only_mode", true); +// The previous pref automatically sets this to true (see StaticPrefList.yaml), +// but set it anyway only as a defense-in-depth. pref("dom.security.https_only_mode_pbm", true); // tor-browser#22320: Hide referer when comming from a .onion address @@ -118,7 +124,8 @@ pref("security.tls.version.enable-deprecated", false, locked); // Misc privacy: Remote pref("browser.send_pings", false); // Space separated list of URLs that are allowed to send objects (instead of -// only strings) through webchannels. +// only strings) through webchannels. The default for Firefox is some Mozilla +// domains. pref("webchannel.allowObject.urlWhitelist", ""); pref("geo.enabled", false); pref("geo.provider.network.url", ""); @@ -127,6 +134,7 @@ pref("geo.provider.use_corelocation", false); pref("geo.provider.use_gpsd", false); pref("geo.provider.use_geoclue", false); pref("browser.search.suggest.enabled", false); +pref("browser.search.suggest.enabled.private", false); pref("browser.urlbar.suggest.searches", false); pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false); pref("browser.urlbar.suggest.quicksuggest.sponsored", false); @@ -143,7 +151,6 @@ pref("browser.safebrowsing.provider.google4.updateURL", ""); pref("browser.safebrowsing.provider.google4.gethashURL", ""); pref("browser.safebrowsing.provider.mozilla.updateURL", ""); pref("browser.safebrowsing.provider.mozilla.gethashURL", ""); -pref("extensions.ui.lastCategory", "addons://list/extension"); pref("datareporting.healthreport.uploadEnabled", false); pref("datareporting.policy.dataSubmissionEnabled", false); // Make sure Unified Telemetry is really disabled, see: #18738. @@ -152,6 +159,9 @@ pref("toolkit.telemetry.unified", false); pref("toolkit.telemetry.enabled", false, locked); pref("toolkit.telemetry.server", "data:,"); pref("toolkit.telemetry.archive.enabled", false); +pref("toolkit.telemetry.newProfilePing.enabled", false); // Added in tor-browser#41496 +pref("toolkit.telemetry.shutdownPingSender.enabled", false); // Added in tor-browser#41496 +pref("toolkit.telemetry.firstShutdownPing.enabled", false); // Added in tor-browser#41496 pref("toolkit.telemetry.updatePing.enabled", false); // Make sure updater telemetry is disabled; see #25909. pref("toolkit.telemetry.bhrPing.enabled", false); pref("toolkit.telemetry.coverage.opt-out", true); @@ -160,6 +170,11 @@ pref("toolkit.coverage.endpoint.base", ""); pref("browser.ping-centre.telemetry", false); pref("browser.tabs.crashReporting.sendReport", false); pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); +// Added in tor-browser#41496 even though false by default +pref("browser.crashReports.unsubmittedCheck.enabled", false); +// Added in tor-browser#41496 even though it shuld be already always disabled +// since we disable MOZ_CRASHREPORTER. +pref("breakpad.reportURL", "data:"); #ifdef XP_WIN // Defense-in-depth: ensure that the Windows default browser agent will // not ping Mozilla if it is somehow present (we omit it at build time). @@ -177,10 +192,8 @@ pref("services.sync.engine.passwords", false); pref("services.sync.engine.prefs", false); pref("services.sync.engine.tabs", false); pref("extensions.getAddons.cache.enabled", false); // https://blog.mozilla.org/addons/how-to-opt-out-of-add-on-metadata-updates/ -pref("browser.search.region", "US"); // The next two prefs disable GeoIP search lookups (#16254) -pref("browser.search.geoip.url", ""); pref("browser.fixup.alternate.enabled", false); // Bug #16783: Prevent .onion fixups -pref("privacy.donottrackheader.enabled", false); // (privacy-browser#17) +pref("privacy.donottrackheader.enabled", false); // (mullvad-browser#17) // Make sure there is no Tracking Protection active in Tor Browser, see: #17898. pref("privacy.trackingprotection.enabled", false); pref("privacy.trackingprotection.pbmode.enabled", false); @@ -200,15 +213,10 @@ pref("browser.newtabpage.activity-stream.feeds.section.topstories", false); pref("browser.newtabpage.activity-stream.showSponsored", false); pref("browser.newtabpage.activity-stream.showSponsoredTopSites", false); pref("browser.newtabpage.activity-stream.default.sites", ""); +// Activity Stream telemetry pref("browser.newtabpage.activity-stream.feeds.telemetry", false); pref("browser.newtabpage.activity-stream.telemetry", false); -// tor-browser#41945 - disable automatic cookie banners dismissal until -// we're sure it does not causes fingerprinting risks or other issues. -pref("cookiebanners.service.mode", 0); -pref("cookiebanners.service.mode.privateBrowsing", 0); -pref("cookiebanners.ui.desktop.enabled", false); - // tor-browser#40788: disable AS's calls to home. // Notice that null is between quotes because it is a JSON string. // Keep checked firefox.js to see if new entries are added. @@ -221,6 +229,12 @@ pref("browser.newtabpage.activity-stream.asrouter.providers.messaging-experiment // Disable fetching asrouter.ftl and related console errors (tor-browser#40763). pref("browser.newtabpage.activity-stream.asrouter.useRemoteL10n", false); +// tor-browser#41945 - disable automatic cookie banners dismissal until +// we're sure it does not causes fingerprinting risks or other issues. +pref("cookiebanners.service.mode", 0); +pref("cookiebanners.service.mode.privateBrowsing", 0); +pref("cookiebanners.ui.desktop.enabled", false); + // Disable moreFromMozilla pane in the preferences/settings (tor-browser#41292). pref("browser.preferences.moreFromMozilla", false); @@ -228,14 +242,16 @@ pref("browser.preferences.moreFromMozilla", false); pref("extensions.screenshots.disabled", true); pref("extensions.webcompat-reporter.enabled", false); +pref("browser.search.region", "US"); // Disable GeoIP search lookups (#16254) // Disable use of WiFi location information pref("browser.region.network.scan", false); pref("browser.region.network.url", ""); pref("browser.region.local-geocoding", false); -// Bug 40083: Make sure Region.jsm fetching is disabled +// Bug 40083: Make sure Region.sys.mjs fetching is disabled pref("browser.region.update.enabled", false); -// Don't load Mozilla domains in a separate tab process +// Don't load Mozilla domains in a separate privileged tab process +pref("browser.tabs.remote.separatePrivilegedMozillaWebContentProcess", false); pref("browser.tabs.remote.separatedMozillaDomains", ""); // Avoid DNS lookups on search terms @@ -270,12 +286,23 @@ pref("security.pki.crlite_mode", 0); // Disable website password breach alerts pref("signon.management.page.breach-alerts.enabled", false); -// Disable remote "password recipes" +// Disable remote "password recipes". They are a way to improve the UX of the +// password manager by havinc specific heuristics for some sites. +// It needs remote settings and in general we disable the password manager. +// More information about this feature at +// https://bugzilla.mozilla.org/show_bug.cgi?id=1119454 pref("signon.recipes.remoteRecipes.enabled", false); -// Disable ServiceWorkers and push notifications by default +// Disable ServiceWorkers by default. They do not work in PBM in any case. +// See https://bugzilla.mozilla.org/show_bug.cgi?id=1320796 pref("dom.serviceWorkers.enabled", false); +// Push notifications use an online Mozilla service and a persistent ID stored +// in dom.push.userAgentID, so disable them by default. +// See also https://support.mozilla.org/kb/push-notifications-firefox pref("dom.push.enabled", false); +// As a defense in depth measure, also set the push server URL to empty. +// See tor-browser#18801. +pref("dom.push.serverURL", ""); // Fingerprinting // tor-browser#41797: For release builds, lock RFP @@ -292,7 +319,6 @@ pref("privacy.resistFingerprinting", true); pref("webgl.disable-fail-if-major-performance-caveat", true); // tor-browser#16404: disable until we investigate it further (#22333) pref("webgl.enable-webgl2", false); -pref("browser.startup.homepage_override.buildID", "20100101"); pref("browser.link.open_newwindow.restriction", 0); // Bug 9881: Open popups in new tabs (to avoid fullscreen popups) // Prevent scripts from moving and resizing open windows pref("dom.disable_window_move_resize", true); @@ -307,7 +333,9 @@ pref("dom.webmidi.enabled", false); // Bug 41398: Disable Web MIDI API // randomized IDs when this pref is true). // Defense-in-depth (already the default value) from Firefox 119 or 120. pref("media.devices.enumerate.legacy.enabled", false); -pref("dom.w3c_touch_events.enabled", 0); // Bug 10286: Always disable Touch API +// Bug 10286: Always disable Touch API. +// We might need to deepen this topic, see tor-browser#42069. +pref("dom.w3c_touch_events.enabled", 0); pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now pref("security.webauth.webauthn", false); // Bug 26614: Disable Web Authentication API for now // Disable SAB, no matter if the sites are cross-origin isolated. @@ -350,6 +378,7 @@ pref("javascript.options.spectre.disable_for_isolated_content", false, locked); pref("privacy.firstparty.isolate", true); // Always enforce first party isolation // tor-browser#40123 and #40308: Disable for now until audit pref("privacy.partition.network_state", false); +// Only accept cookies from the originating site (block third party cookies) pref("network.cookie.cookieBehavior", 1); pref("network.cookie.cookieBehavior.pbmode", 1); pref("network.predictor.enabled", false); // Temporarily disabled. See https://bugs.torproject.org/16633 @@ -365,7 +394,9 @@ pref("privacy.purge_trackers.enabled", false); // Do not allow cross-origin sub-resources to open HTTP authentication // credentials dialogs. Hardens against potential credentials phishing. pref("network.auth.subresource-http-auth-allow", 1); -// Disable sending additional analytics to web servers +// Disable sending additional analytics to web servers. +// This disables navigator.sendBeacon, even though this is discouraged by the +// standard: https://w3c.github.io/beacon/#privacy-and-security pref("beacon.enabled", false); pref("network.dns.disablePrefetch", true); @@ -379,13 +410,19 @@ pref("network.protocol-handler.warn-external.mailto", true); pref("network.protocol-handler.warn-external.news", true); pref("network.protocol-handler.warn-external.nntp", true); pref("network.protocol-handler.warn-external.snews", true); +#ifdef XP_WIN + pref("network.protocol-handler.external.ms-windows-store", false); + pref("network.protocol-handler.warn-external.ms-windows-store", true); +#endif pref("network.proxy.allow_bypass", false, locked); // #40682 // Lock to 'true', which is already the firefox default, to prevent users // from making themselves fingerprintable by disabling. This pref // alters content load order in a page. See tor-browser#24686 pref("network.http.tailing.enabled", true, locked); -// Make sure the varoius http2 settings, buffer sizes, timings, etc are locked to firefox defaults to minimize network performance fingerprinting. See https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/27128 +// Make sure the varoius http2 settings, buffer sizes, timings, etc are locked +// to firefox defaults to minimize network performance fingerprinting. +// See https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/27128 pref("network.http.http2.enabled", true, locked); pref("network.http.http2.enabled.deps", true, locked); pref("network.http.http2.enforce-tls-profile", true, locked); @@ -395,13 +432,13 @@ pref("network.http.http2.coalesce-hostnames", true, locked); pref("network.http.http2.persistent-settings", false, locked); pref("network.http.http2.ping-threshold", 58, locked); pref("network.http.http2.ping-timeout", 8, locked); -pref("network.http.http2.send-buffer-size", 131072, locked); +pref("network.http.http2.send-buffer-size", 0, locked); pref("network.http.http2.allow-push", true, locked); pref("network.http.http2.push-allowance", 131072, locked); pref("network.http.http2.pull-allowance", 12582912, locked); pref("network.http.http2.default-concurrent", 100, locked); pref("network.http.http2.default-hpack-buffer", 65536, locked); -pref("network.http.http2.websockets", false, locked); +pref("network.http.http2.websockets", true, locked); pref("network.http.http2.enable-hpack-dump", false, locked); // tor-browser#23044: Make sure we don't have any GIO supported protocols @@ -467,10 +504,6 @@ pref("network.manage-offline-status", false); pref("network.captive-portal-service.enabled", false); pref("network.connectivity-service.enabled", false); pref("captivedetect.canonicalURL", ""); -// As a "defense in depth" measure, configure an empty push server URL (the -// DOM Push features are disabled by default via other prefs). -// See tor-browser#18801. -pref("dom.push.serverURL", ""); #ifdef XP_WIN // tor-browser#41683: Disable the network process on Windows @@ -482,9 +515,7 @@ pref("network.process.enabled", false); // Extension support pref("extensions.autoDisableScopes", 0); -pref("extensions.databaseSchema", 3); pref("extensions.enabledScopes", 5); // AddonManager.SCOPE_PROFILE=1 | AddonManager.SCOPE_APPLICATION=4 -pref("extensions.pendingOperations", false); // We don't know what extensions Mozilla is advertising to our users and we // don't want to have some random Google Analytics script running either on the // about:addons page, see bug 22073, 22900 and 31601. @@ -498,8 +529,8 @@ pref("browser.discovery.enabled", false); pref("extensions.webextensions.restrictedDomains", ""); // Don't give Mozilla-recommended third-party extensions special privileges. pref("extensions.postDownloadThirdPartyPrompt", false); -// tor-browser#41701: Reporting an extension does not work -// disable extension reporting since the request goes to Mozilla and is rejected anyway (HTTP 400) +// tor-browser#41701: Reporting an extension does not work. The request goes to +// Mozilla and is always rejected anyway (HTTP 400). pref("extensions.abuseReport.enabled", false); // We are already providing the languages we support in multi-lingual packages. // Therefore, do not allow download of additional language packs. They are not a @@ -526,10 +557,6 @@ pref("security.certerrors.mitm.priming.enabled", false); // Don't automatically enable enterprise roots, see bug 40166 pref("security.certerrors.mitm.auto_enable_enterprise_roots", false); -// Don't allow any domain overrides access to offscreen rendering, see tor-browser#41135 -pref("gfx.offscreencanvas.domain-enabled", false); -pref("gfx.offscreencanvas.domain-allowlist", ""); - // Disable share menus on Mac and Windows tor-browser#41117 pref("browser.menu.share_url.allow", false, locked); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/eae5ea… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/eae5ea… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-12.5] Bug 40957: Update subkey expiration date for Tor Browser gpg key
by richard (＠richard) 26 Sep '23

26 Sep '23

richard pushed to branch maint-12.5 at The Tor Project / Applications / tor-browser-build Commits: 078300d8 by Nicolas Vigier at 2023-09-26T22:18:45+00:00 Bug 40957: Update subkey expiration date for Tor Browser gpg key - - - - - 1 changed file: - keyring/torbrowser.gpg Changes: ===================================== keyring/torbrowser.gpg ===================================== Binary files a/keyring/torbrowser.gpg and b/keyring/torbrowser.gpg differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40957: Update subkey expiration date for Tor Browser gpg key
by richard (＠richard) 26 Sep '23

26 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: ed83891d by Nicolas Vigier at 2023-09-26T22:17:44+00:00 Bug 40957: Update subkey expiration date for Tor Browser gpg key - - - - - 1 changed file: - keyring/torbrowser.gpg Changes: ===================================== keyring/torbrowser.gpg ===================================== Binary files a/keyring/torbrowser.gpg and b/keyring/torbrowser.gpg differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/e… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android][firefox-android-115.2.1-13.0-1] fixup! Disable features and functionality
by Dan Ballard (＠dan) 26 Sep '23

26 Sep '23

Dan Ballard pushed to branch firefox-android-115.2.1-13.0-1 at The Tor Project / Applications / firefox-android Commits: 533daef0 by clairehurst at 2023-09-26T17:59:27+00:00 fixup! Disable features and functionality - - - - - 3 changed files: - fenix/app/src/main/java/org/mozilla/fenix/settings/quicksettings/QuickSettingsSheetDialogFragment.kt - fenix/app/src/main/java/org/mozilla/fenix/settings/quicksettings/protections/ProtectionsView.kt - fenix/app/src/main/res/layout/quicksettings_protections_panel.xml Changes: ===================================== fenix/app/src/main/java/org/mozilla/fenix/settings/quicksettings/QuickSettingsSheetDialogFragment.kt ===================================== @@ -132,7 +132,8 @@ class QuickSettingsSheetDialogFragment : FenixDialogFragment() { override fun onViewCreated(view: View, savedInstanceState: Bundle?) { super.onViewCreated(view, savedInstanceState) - observeTrackersChange(requireComponents.core.store) +// Removed as part of Bug_42115: Enhanced Tracking Protection can still be enabled +// observeTrackersChange(requireComponents.core.store) consumeFrom(quickSettingsStore) { websiteInfoView.update(it.webInfoState) websitePermissionsView.update(it.websitePermissionsState) @@ -190,34 +191,36 @@ class QuickSettingsSheetDialogFragment : FenixDialogFragment() { @VisibleForTesting internal fun provideTabId(): String = args.sessionId - @VisibleForTesting - internal fun observeTrackersChange(store: BrowserStore) { - consumeFlow(store) { flow -> - flow.mapNotNull { state -> - state.findTabOrCustomTab(provideTabId()) - }.ifAnyChanged { tab -> - arrayOf( - tab.trackingProtection.blockedTrackers, - tab.trackingProtection.loadedTrackers, - ) - }.collect { - updateTrackers(it) - } - } - } - - @VisibleForTesting - internal fun updateTrackers(tab: SessionState) { - provideTrackingProtectionUseCases().fetchTrackingLogs( - tab.id, - onSuccess = { trackers -> - protectionsView.updateDetailsSection(trackers.isNotEmpty()) - }, - onError = { - Logger.error("QuickSettingsSheetDialogFragment - fetchTrackingLogs onError", it) - }, - ) - } +// Removed as part of Bug_42115: Enhanced Tracking Protection can still be enabled +// @VisibleForTesting +// internal fun observeTrackersChange(store: BrowserStore) { +// consumeFlow(store) { flow -> +// flow.mapNotNull { state -> +// state.findTabOrCustomTab(provideTabId()) +// }.ifAnyChanged { tab -> +// arrayOf( +// tab.trackingProtection.blockedTrackers, +// tab.trackingProtection.loadedTrackers, +// ) +// }.collect { +// updateTrackers(it) +// } +// } +// } + +// Removed as part of Bug_42115: Enhanced Tracking Protection can still be enabled +// @VisibleForTesting +// internal fun updateTrackers(tab: SessionState) { +// provideTrackingProtectionUseCases().fetchTrackingLogs( +// tab.id, +// onSuccess = { trackers -> +// protectionsView.updateDetailsSection(trackers.isNotEmpty()) +// }, +// onError = { +// Logger.error("QuickSettingsSheetDialogFragment - fetchTrackingLogs onError", it) +// }, +// ) +// } @VisibleForTesting internal fun provideTrackingProtectionUseCases() = requireComponents.useCases.trackingProtectionUseCases ===================================== fenix/app/src/main/java/org/mozilla/fenix/settings/quicksettings/protections/ProtectionsView.kt ===================================== @@ -54,28 +54,32 @@ class ProtectionsView( * Allows changing what this View displays. */ fun update(state: ProtectionsState) { - bindTrackingProtectionInfo(state.isTrackingProtectionEnabled) +// Removed as part of Bug_42115: Enhanced Tracking Protection can still be enabled +// bindTrackingProtectionInfo(state.isTrackingProtectionEnabled) bindCookieBannerProtection(state.cookieBannerUIMode) - binding.trackingProtectionSwitch.isVisible = settings.shouldUseTrackingProtection +// Removed as part of Bug_42115: Enhanced Tracking Protection can still be enabled +// binding.trackingProtectionSwitch.isVisible = settings.shouldUseTrackingProtection binding.cookieBannerItem.isVisible = shouldShowCookieBanner && state.cookieBannerUIMode != CookieBannerUIMode.HIDE - - binding.trackingProtectionDetails.setOnClickListener { - interactor.onTrackingProtectionDetailsClicked() - } +// Removed as part of Bug_42115: Enhanced Tracking Protection can still be enabled +// binding.trackingProtectionDetails.setOnClickListener { +// interactor.onTrackingProtectionDetailsClicked() +// } } - @VisibleForTesting - internal fun updateDetailsSection(show: Boolean) { - binding.trackingProtectionDetails.isVisible = show - } - - private fun bindTrackingProtectionInfo(isTrackingProtectionEnabled: Boolean) { - binding.trackingProtectionSwitch.isChecked = isTrackingProtectionEnabled - binding.trackingProtectionSwitch.setOnCheckedChangeListener { _, isChecked -> - interactor.onTrackingProtectionToggled(isChecked) - } - } +// Removed as part of Bug_42115: Enhanced Tracking Protection can still be enabled +// @VisibleForTesting +// internal fun updateDetailsSection(show: Boolean) { +// binding.trackingProtectionDetails.isVisible = show +// } + +// Removed as part of Bug_42115: Enhanced Tracking Protection can still be enabled +// private fun bindTrackingProtectionInfo(isTrackingProtectionEnabled: Boolean) { +// binding.trackingProtectionSwitch.isChecked = isTrackingProtectionEnabled +// binding.trackingProtectionSwitch.setOnCheckedChangeListener { _, isChecked -> +// interactor.onTrackingProtectionToggled(isChecked) +// } +// } @VisibleForTesting internal val binding = QuicksettingsProtectionsPanelBinding.inflate( ===================================== fenix/app/src/main/res/layout/quicksettings_protections_panel.xml ===================================== @@ -12,36 +12,38 @@ android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="@dimen/tracking_protection_item_height" - app:layout_constraintBottom_toTopOf="@id/trackingProtectionSwitch" + app:layout_constraintBottom_toBottomOf="parent" app:layout_constraintTop_toTopOf="parent" /> - <org.mozilla.fenix.trackingprotection.SwitchWithDescription - android:id="@+id/trackingProtectionSwitch" - android:layout_width="match_parent" - android:layout_height="wrap_content" - android:layout_marginTop="16dp" - android:minHeight="@dimen/tracking_protection_item_height" - android:text="@string/preference_enhanced_tracking_protection" - app:layout_constraintBottom_toTopOf="@id/trackingProtectionDetails" - app:layout_constraintTop_toBottomOf="@id/cookieBannerItem" - app:switchDescriptionOff="@string/etp_panel_off" - app:switchDescriptionOn="@string/etp_panel_on" - app:switchIconOff="@drawable/ic_tracking_protection_disabled" - app:switchIconOn="@drawable/ic_tracking_protection_enabled" - app:switchTitle="@string/preference_enhanced_tracking_protection" /> + + + + + + + + + + + + + + + - <TextView - android:id="@+id/trackingProtectionDetails" - style="@style/QuickSettingsText.Icon" - android:layout_width="0dp" - android:layout_height="@dimen/quicksettings_item_height" - android:layout_alignParentEnd="true" - android:gravity="end|center_vertical" - android:text="@string/enhanced_tracking_protection_details" - android:visibility="gone" - app:drawableEndCompat="@drawable/ic_arrowhead_right" - app:layout_constraintBottom_toBottomOf="parent" - app:layout_constraintEnd_toEndOf="parent" - app:layout_constraintStart_toStartOf="parent" /> +  + + + + + + + + + + + + + </androidx.constraintlayout.widget.ConstraintLayout> View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/533… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/533… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] release: new version, 12.5.5
by richard (＠richard) 26 Sep '23

26 Sep '23

richard pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: a5c4e965 by Richard Pospesel at 2023-09-26T17:40:28+00:00 release: new version, 12.5.5 - - - - - 30 changed files: - update_3/release/.htaccess - − update_3/release/12.5.1-12.5.4-linux32-ALL.xml - − update_3/release/12.5.1-12.5.4-linux64-ALL.xml - − update_3/release/12.5.1-12.5.4-macos-ALL.xml - − update_3/release/12.5.1-12.5.4-win32-ALL.xml - − update_3/release/12.5.1-12.5.4-win64-ALL.xml - + update_3/release/12.5.1-12.5.5-linux32-ALL.xml - + update_3/release/12.5.1-12.5.5-linux64-ALL.xml - + update_3/release/12.5.1-12.5.5-macos-ALL.xml - + update_3/release/12.5.1-12.5.5-win32-ALL.xml - + update_3/release/12.5.1-12.5.5-win64-ALL.xml - − update_3/release/12.5.2-12.5.4-linux32-ALL.xml - − update_3/release/12.5.2-12.5.4-linux64-ALL.xml - − update_3/release/12.5.2-12.5.4-macos-ALL.xml - − update_3/release/12.5.2-12.5.4-win32-ALL.xml - − update_3/release/12.5.2-12.5.4-win64-ALL.xml - + update_3/release/12.5.2-12.5.5-linux32-ALL.xml - + update_3/release/12.5.2-12.5.5-linux64-ALL.xml - + update_3/release/12.5.2-12.5.5-macos-ALL.xml - + update_3/release/12.5.2-12.5.5-win32-ALL.xml - + update_3/release/12.5.2-12.5.5-win64-ALL.xml - − update_3/release/12.5.3-12.5.4-linux32-ALL.xml - − update_3/release/12.5.3-12.5.4-linux64-ALL.xml - − update_3/release/12.5.3-12.5.4-macos-ALL.xml - − update_3/release/12.5.3-12.5.4-win32-ALL.xml - − update_3/release/12.5.3-12.5.4-win64-ALL.xml - + update_3/release/12.5.3-12.5.5-linux32-ALL.xml - + update_3/release/12.5.3-12.5.5-linux64-ALL.xml - + update_3/release/12.5.3-12.5.5-macos-ALL.xml - + update_3/release/12.5.3-12.5.5-win32-ALL.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-12.5.5-build1
by richard (＠richard) 26 Sep '23

26 Sep '23

richard pushed new tag mb-12.5.5-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-12.5.5-build1
by richard (＠richard) 26 Sep '23

26 Sep '23

richard pushed new tag tbb-12.5.5-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-12.5] Bugs 40961, 40962: Tor Browser and Mullvad Browser 12.5.5
by richard (＠richard) 26 Sep '23

26 Sep '23

richard pushed to branch maint-12.5 at The Tor Project / Applications / tor-browser-build Commits: db01e230 by Richard Pospesel at 2023-09-25T20:43:08+00:00 Bugs 40961, 40962: Tor Browser and Mullvad Browser 12.5.5 - - - - - 9 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/allowed_addons.json - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/tor/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,70 @@ +Mullvad Browse 12.5.5 - September 25 2023 + * All Platforms + * Updated NoScript to 11.4.27 + * Upated uBlock Origin to 1.52.2 + * Bug 42123: Backport security fixes from Firefox 118 to ESR 102.15 / 115.3 - based Tor Browser [tor-browser] + +Mullvad Browser 13.0a5 - September 21 2023 + * All Platforms + * Updated Translations + * Updated Firefox to 115.3.0esr + * Bug 228: Remove popup asking for preferred language on websites [mullvad-browser] + * Bug 238: Rebase Mullvad Browser to 115.3.0esr [mullvad-browser] + * Bug 40893: Update (Noto) fonts for 13.0 [tor-browser-build] + * Bug 41327: Disable UrlbarProviderInterventions [tor-browser] + * Bug 41581: ESR115: figure out extension pinning / unified Extensions [tor-browser] + * Bug 41903: The info icon on the language change prompt is not shown [tor-browser] + * Bug 42026: Disable cookie banner service and UI. [tor-browser] + * Bug 42037: Disable about:firefoxview [tor-browser] + * Bug 42083: RemoteSecuritySettings.init throws error in console [tor-browser] + * Bug 42094: Disable media.aboutwebrtc.hist.enabled as security in-depth [tor-browser] + * Windows + * Bug 41798: Stop building private_browsing.exe on Windows [tor-browser] + * Build System + * All Platforms + * Bug 40956: Allow testing the updater also with release and alpha channel [tor-browser-build] + * Windows + * Bug 41995: Generated headers on Windows aren't reproducible [tor-browser] + +Mullvad Browser 13.0a4 - September 12 2023 + * All Platforms + * Updated Firefox to 115.2.1esr + * Updated Translations + * Updated NoScript to 11.4.27 + * Bug 211: Change "Mullvad Browser Home" to "New tab" [mullvad-browser] + * Bug 231: Fix the Security Level "read more" link in popup/settings panel [mullvad-browser] + * Bug 236: Rebase alpha onto 115.2.1 [mullvad-browser] + * Bug 40149: Remove patching of nightly update URL [tor-browser-build] + * Bug 40937: First window after update should go to the user-friendly release page on GitHub [tor-browser-build] + * Bug 41528: Hard-coded English "based on Mozilla Firefox" appears in version in "About" dialog [tor-browser] + * Bug 41675: ESR115: decide on large array buffers [tor-browser] + * Bug 41739: Remove "Website appearance" [tor-browser] + * Bug 41740: ESR115: change devicePixelRatio spoof to 2 in alpha for testing [tor-browser] + * Bug 41774: Hide the new "Switching to a new device" help menu item [tor-browser] + * Bug 41797: Lock RFP in release builds [tor-browser] + * Bug 41876: Remove firefox view from title bar [tor-browser] + * Bug 41881: Developer tools/Network/New Request remembers requests [tor-browser] + * Bug 42027: Create a Base Browser version of migrateUI [tor-browser] + * Bug 42043: Disable gUM: media.devices.enumerate.legacy.enabled [tor-browser] + * Bug 42046: Remove XUL layout hacks from base browser [tor-browser] + * Bug 42050: Bring back Save As... dialog as default [tor-browser] + * Bug 42061: Move the alpha update channel creation to a commit on its own [tor-browser] + * Bug 42084: Race condition with language preferences may make spoof_english ineffective [tor-browser] + * Windows + * Bug 40930: Update zlib to 1.3 after 13.0a3 [tor-browser-build] + * macOS + * Bug 42057: Disable Platform text-recognition functionality [tor-browser] + * Build System + * All Platforms + * Bug 40857: Mullvad Browser generated downloads.json references tbb-* build tag rather than mb-* [tor-browser-build] + * Bug 40932: Remove appname_bundle_android, appname_bundle_macos, appname_bundle_linux, appname_bundle_win32, appname_bundle_win64 from projects/release/update_responses_config.yml [tor-browser-build] + * Bug 40933: Fix generating incrementals between 12.5.x and 13.0 [tor-browser-build] + * Bug 40935: Fix fallout from build target rename in signing scripts [tor-browser-build] + * Bug 40942: Use the branch to build Base Browser [tor-browser-build] + * Bug 40946: override_updater_url does not work for Mullvad Browser [tor-browser-build] + * macOS + * Bug 40943: Update libdmg-hfsplus to include our uplifted patch [tor-browser-build] + Mullvad Browser 12.5.4 - September 12 2023 * All Platforms * Updated Firefox to 102.15.1esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,139 @@ +Tor Browser 12.5.5 - September 25 2023 + * All Platforms + * Updated tor to 0.4.7.15 + * Updated NoScript to 11.4.27 + * Updated Translations + * Bug 42120: Use foursquare as domain front for snowflake [tor-browser] + * Bug 42123: Backport security fixes from Firefox 118 to ESR 102.15 / 115.3 - based Tor Browser [tor-browser] + * Windows + macOS + Linux + * Bug 42126: moat and connect assist broken for people who can't reach domain front [tor-browser] + +Tor Browser 13.0a5 - September 21 2023 + * All Platforms + * Updated Translations + * Updated OpenSSL to 3.0.11 + * Updated tor to 0.4.8.6 + * Bug 40938: Migrate remaining torbutton functionality to tor-browser [tor-browser] + * Bug 41327: Disable UrlbarProviderInterventions [tor-browser] + * Bug 42026: Disable cookie banner service and UI. [tor-browser] + * Bug 42094: Disable media.aboutwebrtc.hist.enabled as security in-depth [tor-browser] + * Bug 42112: Rebase alpha to 115.3.0esr [tor-browser] + * Bug 42120: Use foursquare as domain front for snowflake [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 115.3.0esr + * Bug 40893: Update (Noto) fonts for 13.0 [tor-browser-build] + * Bug 41639: Fix the wordmark (title and background) of the "About Tor Browser" window [tor-browser] + * Bug 41822: The default browser button came back on 115 [tor-browser] + * Bug 41864: TOR_CONTROL_HOST and TOR_SOCKS_HOST do not work as expected when the browser launches tor [tor-browser] + * Bug 41903: The info icon on the language change prompt is not shown [tor-browser] + * Bug 41957: Revert to Fx's default identity block style for internal pages [tor-browser] + * Bug 41958: Console error when closing tor browser with about:preferences open [tor-browser] + * Bug 41986: Fix the control port password handling [tor-browser] + * Bug 42037: Disable about:firefoxview [tor-browser] + * Bug 42073: Add simplified onion pattern to the new homepage [tor-browser] + * Bug 42079: TorConnect: handle switching from Bootstrapped to Configuring state [tor-browser] + * Bug 42083: RemoteSecuritySettings.init throws error in console [tor-browser] + * Bug 42091: Onion authorization prompt overflows [tor-browser] + * Bug 42092: Onion services key table display problems. [tor-browser] + * Bug 42102: TorProcess says the SOCKS port is not valid even though it is [tor-browser] + * Bug 42110: Add a utility module for shared UI methods needed for several tor browser components [tor-browser] + * Windows + * Bug 41798: Stop building private_browsing.exe on Windows [tor-browser] + * macOS + * Bug 42078: Implement MacOS application icons [tor-browser] + * Linux + * Bug 42088: Implement Linux application icons [tor-browser] + * Android + * Updated GeckoView to 115.3.0esr + * Bug 42089: Disable Mozilla 1805450 [tor-browser] + * Bug 42122: Fix crash due to bad android deprecation and APIs + * Build System + * Windows + macOS + Linux + * Bug 40956: Allow testing the updater also with release and alpha channel [tor-browser-build] + * Windows + * Bug 41995: Generated headers on Windows aren't reproducible [tor-browser] + +Tor Browser 13.0a4 - September 12 2023 + * All Platforms + * Updated Translations + * Updated NoScript to 11.4.27 + * Updated tor to 0.4.8.5 + * Updated Snowflake to 2.6.1 + * Bug 40951: Firefox fails to build for macos after #40938 [tor-browser-build] + * Bug 41675: ESR115: decide on large array buffers [tor-browser] + * Bug 41740: ESR115: change devicePixelRatio spoof to 2 in alpha for testing [tor-browser] + * Bug 41797: Lock RFP in release builds [tor-browser] + * Bug 41934: Websocket raises DOMException on http onions in 13.0a1 [tor-browser] + * Bug 42034: aboutTBUpdate.dtd is duplicated [tor-browser] + * Bug 42043: Disable gUM: media.devices.enumerate.legacy.enabled [tor-browser] + * Bug 42061: Move the alpha update channel creation to a commit on its own [tor-browser] + * Bug 42084: Race condition with language preferences may make spoof_english ineffective [tor-browser] + * Bug 42093: Rebase alpha onto 115.2.1esr [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 115.2.1esr + * Bug 40149: Remove patching of nightly update URL [tor-browser-build] + * Bug 40821: The update details URL is wrong in alphas [tor-browser-build] + * Bug 40938: Copy the new tor-browser.ftl file to the appropriate directory [tor-browser-build] + * Bug 41333: Modernize Tor Browser's new-tab page (about:tor) [tor-browser] + * Bug 41528: Hard-coded English "based on Mozilla Firefox" appears in version in "About" dialog [tor-browser] + * Bug 41651: Use moz-toggle in connection preferences [tor-browser] + * Bug 41739: Remove "Website appearance" [tor-browser] + * Bug 41774: Hide the new "Switching to a new device" help menu item [tor-browser] + * Bug 41821: Fix the proxy type in the proxy modal of about:preferences in 13.0 [tor-browser] + * Bug 41865: Use --text-color-deemphasized rather than --panel-description-color [tor-browser] + * Bug 41876: Remove firefox view from title bar [tor-browser] + * Bug 41881: Developer tools/Network/New Request remembers requests [tor-browser] + * Bug 41886: Downloads drop-down panel has new-line/line-break between every word in the 'Be careful opening downloads' warning [tor-browser] + * Bug 41904: The log textarea doesn't resize anymore [tor-browser] + * BUg 41906: hide about:preferences#privacy > DNS over HTTPS section [tor-browser] + * Bug 41971: Update Tails URL in downloads warning [tor-browser] + * Bug 41974: De-emphasized text in custom components is no longer gray in 13.0 alpha [tor-browser] + * Bug 41977: Hide the "Learn more" link in bridge cards [tor-browser] + * Bug 41980: Circuit display headline is misaligned in 13.0 alpha [tor-browser] + * Bug 42027: Create a Base Browser version of migrateUI [tor-browser] + * Bug 42045: Circuit panel overflows with long ipv6 addresses [tor-browser] + * Bug 42046: Remove XUL layout hacks from base browser [tor-browser] + * Bug 42047: Remove layout hacks from tor browser preferences [tor-browser] + * Bug 42050: Bring back Save As... dialog as default [tor-browser] + * Bug 42075: Fix link spacing and underline on new homepage [tor-browser] + * Windows + Android + * Updated zlib to 1.3 + * Bug 40930: Update zlib to 1.3 after 13.0a3 [tor-browser-build] + * macOS + * Bug 42057: Disable Platform text-recognition functionality [tor-browser] + * Linux + * Bug 41509: After update, KDE Plasma identifies Tor Browser Nightly window group as "firefox-nightly" [tor-browser] + * Android + * Updated GeckoView to 115.2.1esr + * Bug 40941: Remove PT process options on Android [tor-browser-build] + * Bug 41878: firefox-mobile: refactor tor bootstrap off deleted onboarding path [tor-browser] + * Bug 41879: firefox-android: Add Tor integration and UI commit is too big, needs to be split up [tor-browser] + * Bug 41882: Update DuckDuckGo icons [tor-browser] + * Bug 41987: Tor Browser Android Onboarding Plan [tor-browser] + * Bug 42001: Hide 'Open links in external app' settings option and force defaults [tor-browser] + * Bug 42038: TBA Alpha - inscriptions Tor Browser Alpha and FireFox Browser simultaneously on the start screen [tor-browser] + * Bug 42076: Theme is visable in options, but shouldn't be [tor-browser] + * Build System + * All Platforms + * Updated Go to 1.21.1 + * Bug 40929: Update go to 1.21 series after 13.0a3 [tor-browser-build] + * Bug 40932: Remove appname_bundle_android, appname_bundle_macos, appname_bundle_linux, appname_bundle_win32, appname_bundle_win64 from projects/release/update_responses_config.yml [tor-browser-build] + * Bug 40935: Fix fallout from build target rename in signing scripts [tor-browser-build] + * Bug 40948: Remove lyrebird-vendor sha256sum in nightly [tor-browser-build] + * Windows + macOS + Linux + * Bug 40786: deploy_update_responses-*.sh requires +r permissions to run [tor-browser-build] + * Bug 40931: Fix incrementals after tor-browser-build#40829 [tor-browser-build] + * Bug 40933: Fix generating incrementals between 12.5.x and 13.0 [tor-browser-build] + * Bug 40942: Use the branch to build Base Browser [tor-browser-build] + * Bug 40944: After #40931, updates_responses is using incremental.mar files as if they were non-incremental mar files [tor-browser-build] + * Bug 40946: override_updater_url does not work for Mullvad Browser [tor-browser-build] + * Bug 40947: Remove migrate_langs from tools/signing/nightly/update-responses-base-config.yml [tor-browser-build] + * macOS + * Bug 40943: Update libdmg-hfsplus to include our uplifted patch [tor-browser-build] + * Bug 42035: Update tools/torbrowser/ scripts to support macOS dev environment [tor-browser] + * Linux + * Bug 42071: tor-browser deployed format changed breaking fetch.sh [tor-browser] + Tor Browser 12.5.4 - September 12 2023 * All Platforms * Updated Translations ===================================== projects/browser/allowed_addons.json ===================================== @@ -17,7 +17,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/34/9734/13299734/13299734.pn…" } ], - "average_daily_users": 997396, + "average_daily_users": 1014444, "categories": { "android": [ "experimental", @@ -221,10 +221,10 @@ "category": "recommended" }, "ratings": { - "average": 4.5546, - "bayesian_average": 4.553446665437272, - "count": 5144, - "text_count": 1618 + "average": 4.5534, + "bayesian_average": 4.55225009063314, + "count": 5166, + "text_count": 1629 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/reviews/", "requires_payment": false, @@ -321,7 +321,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/versions/", - "weekly_downloads": 25493 + "weekly_downloads": 26444 }, "notes": null }, @@ -337,7 +337,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/56/7656/6937656/6937656.png?…" } ], - "average_daily_users": 254833, + "average_daily_users": 256930, "categories": { "android": [ "security-privacy" @@ -553,9 +553,9 @@ "category": "recommended" }, "ratings": { - "average": 4.8125, - "bayesian_average": 4.807850481587009, - "count": 1360, + "average": 4.8128, + "bayesian_average": 4.80814342064221, + "count": 1362, "text_count": 240 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/reviews/", @@ -641,7 +641,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions/", - "weekly_downloads": 3381 + "weekly_downloads": 3097 }, "notes": null }, @@ -657,7 +657,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?…" } ], - "average_daily_users": 1103209, + "average_daily_users": 1117012, "categories": { "android": [ "security-privacy" @@ -669,7 +669,7 @@ "contributions_url": "https://paypal.me/SupportEFF?utm_content=product-page-contribute&utm_medium…", "created": "2014-05-01T18:23:16Z", "current_version": { - "id": 5584898, + "id": 5622730, "compatibility": { "firefox": { "min": "60.0", @@ -680,7 +680,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-badger17/versions…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-badger17/versions…", "is_strict_compatibility_enabled": false, "license": { "id": 6, @@ -691,23 +691,24 @@ "url": "http://www.gnu.org/licenses/gpl-3.0.html" }, "release_notes": { - "en-US": "2023.6.23 is a bug fix release addressing various site breakages.\n\nNotes for 2023.6.14:\n<ul><li>Privacy Badger now comes with the largest blocklist yet, thanks to improved tracking detection and continually expanding <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e7679342a72ee118b720d9…" rel=\"nofollow\">pre-training</a>. In addition to learning from tracking techniques like cookies and canvas fingerprinting, Privacy Badger now also learns from the <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/5a177129df8c5230a116e1…" rel=\"nofollow\">Beacon API</a>.</li><li>Fixed blocking trackers from just-closed tabs or from pages you recently navigated away from</li><li>Improved display of tracking domains on the options page on larger screens</li><li>Fixed various site breakages</li><li>Improved Italian translations</li></ul>" + "en-US": "<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/07ac27a67ad814cdf74ed5…" rel=\"nofollow\">Improved link tracking protection</a> (\"link unwrapping\") on Google sites. With this update Privacy Badger removes tracking from links in Google Docs, Gmail, Google Maps, and Google Images results. Privacy Badger now also removes tracking from links added after scrolling through Google Search results.</li><li>Fixed various site breakages</li><li>Added Malay and restored Serbian translations</li><li>Improved Traditional Chinese translations</li></ul>" }, - "reviewed": "2023-06-28T16:18:01Z", - "version": "2023.6.23", + "reviewed": "2023-09-15T11:48:09Z", + "version": "2023.9.12", "files": [ { - "id": 4129240, - "created": "2023-06-23T20:19:09Z", - "hash": "sha256:ce79513710b2aed96bf03ec63d8be2e8274329e8d90911f5b8962c777e006e96", + "id": 4167070, + "created": "2023-09-12T19:42:38Z", + "hash": "sha256:eae97d9d3df3350476901ca412505cb4a43d0e7fa79bd9516584935158f82095", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 1968096, + "size": 1986265, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4129240/privacy_badger17-…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4167070/privacy_badger17-…", "permissions": [ + "alarms", "tabs", "http://*/*", "https://*/*", @@ -721,6 +722,10 @@ "https://*.messenger.com/*", "http://*.messenger.com/*", "*://*.facebookcorewwwi.onion/*", + "https://docs.google.com/*", + "http://docs.google.com/*", + "https://mail.google.com/*", + "http://mail.google.com/*", "https://www.google.com/*", "http://www.google.com/*", "https://www.google.ad/*", @@ -1101,10 +1106,6 @@ "http://www.google.co.zw/*", "https://www.google.cat/*", "http://www.google.cat/*", - "https://hangouts.google.com/*", - "http://hangouts.google.com/*", - "https://docs.google.com/*", - "http://docs.google.com/*", "<all_urls>" ], "optional_permissions": [], @@ -1134,7 +1135,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-06-28T16:18:01Z", + "last_updated": "2023-09-15T11:48:09Z", "name": { "en-US": "Privacy Badger" }, @@ -1180,9 +1181,9 @@ "category": "recommended" }, "ratings": { - "average": 4.8008, - "bayesian_average": 4.798040649165502, - "count": 2289, + "average": 4.8005, + "bayesian_average": 4.797738794107263, + "count": 2291, "text_count": 436 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/reviews/", @@ -1207,7 +1208,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/versions/", - "weekly_downloads": 18054 + "weekly_downloads": 18666 }, "notes": null }, @@ -1223,7 +1224,7 @@ "picture_url": null } ], - "average_daily_users": 6472388, + "average_daily_users": 6583619, "categories": { "android": [ "security-privacy" @@ -1235,7 +1236,7 @@ "contributions_url": "", "created": "2015-04-25T07:26:22Z", "current_version": { - "id": 5596914, + "id": 5626680, "compatibility": { "firefox": { "min": "78.0", @@ -1246,7 +1247,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/ublock-origin/versions/55…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/ublock-origin/versions/56…", "is_strict_compatibility_enabled": false, "license": { "id": 6, @@ -1257,22 +1258,22 @@ "url": "http://www.gnu.org/licenses/gpl-3.0.html" }, "release_notes": { - "en-US": "See complete release notes for <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/57eadd553bcb629be4f757…" rel=\"nofollow\">1.51.0</a>.\n\n<b>Fixes / changes</b>\n\n<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/a578674b791ed67b926b31…" rel=\"nofollow\">Remove obsolete web<em>accessible</em>resources</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/7071379ad6c88fec4e40b3…" rel=\"nofollow\">Add missing (deprecated) method to google ima</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/bf46690e10ed8a086d9d50…" rel=\"nofollow\">Fix regression in handling of experimental <code>header=</code> filter option</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f2328063ec5c7512d5899f…" rel=\"nofollow\">Only already normalized CSS selectors can be fast path-compiled</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e271cd306c9578e0ed17c7…" rel=\"nofollow\">Improve compatibility with AdGuard's scriptlets</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f42373a2522c9739807b48…" rel=\"nofollow\">Add static network filter option: <code>permissions</code></a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f502abdb178413a344a43d…" rel=\"nofollow\">Add <code>set-attr</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/46449872121aa9a39f8fe5…" rel=\"nofollow\">Do not bail too early when trapping properties in <code>acs</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/76b28688717445a36e5ee4…" rel=\"nofollow\">Fix regression in cloud storage import of \"Filter lists\" pane</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/eb0f0fdfbd50904d7cd8e2…" rel=\"nofollow\">Add <code>set-session-storage-item</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f125a8290e220a02336532…" rel=\"nofollow\">Prevent negative position when widget size is greater than viewport size</a><ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e49ec519e35ce90b1ce424…" rel=\"nofollow\">Ensure no negative value for <code>top</code> property of floating widget in logger</a></li></ul></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2398a39690c82a85f3fb23…" rel=\"nofollow\">Add visual hint when not all sublists are enabled</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f549cc526fa10665161c86…" rel=\"nofollow\">Add support for AdGuard's noop (<code>_</code>) network filter option</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/c649c1ddb8b1d7f280a068…" rel=\"nofollow\">Add \"tabless\" filter expression for logger output</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/3f7e7d0a06e918e4c8b3f8…" rel=\"nofollow\">Add support for logical expressions to <code>!#if</code> directive</a><ul><li>Also added support for <code>!#else</code></li></ul></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f1e827e5c4e256a0c832f9…" rel=\"nofollow\">Add resource aliases for increased compatibility with AdGuard lists</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/6f42d070e087002ada8f37…" rel=\"nofollow\">Add compatibility with AdGuard's <code>#%#//scriptlet(...)</code> syntax</a><ul><li>Also added support for quoted parameters in <code>##+js(...)</code> syntax</li></ul></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/50632bd7b34e7e7185c764…" rel=\"nofollow\">Fix syntax highlighter throwing with invalid patterns</a></li><li>...</li></ul>\n<a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/7c755863346ab5ff9e77ae…" rel=\"nofollow\">Commits history since last version</a>." + "en-US": "See complete release notes for <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e38b38b24e46f55b7c57f8…" rel=\"nofollow\">1.52.2</a>.\n\n<b>Fixes / changes</b>\n\n<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/c8600567c8c689e1622572…" rel=\"nofollow\">Fix XHR hook partial response handling</a> (fix by @ephemeralViolette)</li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/086a07ab99860699ff92c9…" rel=\"nofollow\">Fix regression in <code>:is()</code> operator</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/70ff1de4e99376d9ec6147…" rel=\"nofollow\">Do not assume set viewport for popup panel when using portrait mode in descktop</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/bbe0786f040f57b52d6ee7…" rel=\"nofollow\">Fix removal of <code>:scope</code> prefix in <code>:has()</code> operator</a></li></ul>\n<a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/3851922ac2114338a1a10a…" rel=\"nofollow\">Commits history since last version</a>." }, - "reviewed": "2023-07-25T09:58:22Z", - "version": "1.51.0", + "reviewed": "2023-09-25T15:47:17Z", + "version": "1.52.2", "files": [ { - "id": 4141256, - "created": "2023-07-19T23:09:25Z", - "hash": "sha256:8b73468bc233a11dd2895219466381783d19123857dd0b6fd16a01820fca4834", + "id": 4171020, + "created": "2023-09-21T17:09:35Z", + "hash": "sha256:e8ee3f9d597a6d42db9d73fe87c1d521de340755fd8bfdd69e41623edfe096d6", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 3538418, + "size": 3578876, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4141256/ublock_origin-1.5…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4171020/ublock_origin-1.5…", "permissions": [ "dns", "menus", @@ -1388,7 +1389,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-09-11T16:45:44Z", + "last_updated": "2023-09-25T15:47:17Z", "name": { "ar": "uBlock Origin", "bg": "uBlock Origin", @@ -1533,10 +1534,10 @@ "category": "recommended" }, "ratings": { - "average": 4.7827, - "bayesian_average": 4.782306388225343, - "count": 15984, - "text_count": 4147 + "average": 4.7829, + "bayesian_average": 4.782507229381479, + "count": 16045, + "text_count": 4163 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/reviews/", "requires_payment": false, @@ -1598,7 +1599,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions/", - "weekly_downloads": 141824 + "weekly_downloads": 146003 }, "notes": null }, @@ -1614,7 +1615,7 @@ "picture_url": null } ], - "average_daily_users": 170796, + "average_daily_users": 170996, "categories": { "android": [ "photos-media" @@ -1713,9 +1714,9 @@ "category": "recommended" }, "ratings": { - "average": 4.4934, - "bayesian_average": 4.488285425448023, - "count": 1139, + "average": 4.4899, + "bayesian_average": 4.484788968165164, + "count": 1141, "text_count": 425 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/re…", @@ -1738,7 +1739,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/ve…", - "weekly_downloads": 408 + "weekly_downloads": 305 }, "notes": null }, @@ -1754,7 +1755,7 @@ "picture_url": null } ], - "average_daily_users": 85891, + "average_daily_users": 86760, "categories": { "android": [ "experimental", @@ -1775,11 +1776,11 @@ }, "android": { "min": "48.0", - "max": "*" + "max": "68.*" } }, "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-possum/versions/4…", - "is_strict_compatibility_enabled": false, + "is_strict_compatibility_enabled": true, "license": { "id": 6, "is_custom": false, @@ -1892,7 +1893,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions/", - "weekly_downloads": 720 + "weekly_downloads": 2439 }, "notes": null }, @@ -1908,7 +1909,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/64/9064/12929064/12929064.pn…" } ], - "average_daily_users": 265122, + "average_daily_users": 268258, "categories": { "android": [ "photos-media", @@ -2127,10 +2128,10 @@ "category": "recommended" }, "ratings": { - "average": 4.6523, - "bayesian_average": 4.647695702345138, - "count": 1320, - "text_count": 254 + "average": 4.6533, + "bayesian_average": 4.648688441384268, + "count": 1321, + "text_count": 255 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/reviews/", "requires_payment": false, @@ -2151,7 +2152,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/versions/", - "weekly_downloads": 3992 + "weekly_downloads": 4288 }, "notes": null }, @@ -2174,7 +2175,7 @@ "picture_url": null } ], - "average_daily_users": 111829, + "average_daily_users": 112323, "categories": { "android": [ "other" @@ -2457,10 +2458,10 @@ "category": "recommended" }, "ratings": { - "average": 4.3834, - "bayesian_average": 4.378879936387472, - "count": 1252, - "text_count": 346 + "average": 4.3746, + "bayesian_average": 4.370112364351098, + "count": 1260, + "text_count": 351 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/reviews/", "requires_payment": false, @@ -2480,7 +2481,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/versions/", - "weekly_downloads": 48 + "weekly_downloads": 59 }, "notes": null }, @@ -2496,7 +2497,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/43/0143/143/143.png?modified…" } ], - "average_daily_users": 304519, + "average_daily_users": 306943, "categories": { "android": [ "performance", @@ -2510,7 +2511,7 @@ "contributions_url": "https://www.paypal.com/donate/?hosted_button_id=9ERKTU5MBH4EW&utm_content=p…", "created": "2005-05-13T10:51:32Z", "current_version": { - "id": 5597003, + "id": 5620645, "compatibility": { "firefox": { "min": "59.0", @@ -2521,7 +2522,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/noscript/versions/5597003", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/noscript/versions/5620645", "is_strict_compatibility_enabled": false, "license": { "id": 13, @@ -2532,22 +2533,22 @@ "url": "http://www.gnu.org/licenses/gpl-2.0.html" }, "release_notes": { - "en-US": "v 11.4.26\n============================================================\nx [Android] Fixed regression preventing NoScript prompts\n from being shown\nx [XSS] Fallback to execute most demanding regular\n expressions asynchronously\nx [XSS] Removed obsolete Flash-related checks\nx [XSS] Make InjectionChecker's regular expressions easier\n to debug\nx [XSS] Updated OpenID regexp" + "en-US": "v 11.4.27\n============================================================\nx [XSS] Better specificity of HTML elements preliminary\n checks\nx [XSS] Better specificity of potential fragmented injection\n through framework syntax detection (thanks Rom623, barbaz\n et al)\nx [nscl] RegExp.combo(): RegExp creation by combination for\n better readability and comments\nx [nscl] Replaced lib/sha256.js with web platform native\n implementation (thanks Martin for suggested patch)\nx [nscl] Fixed property/function mismatch (thanks Alex)\nx Fixed operators precedence issue #312 (thanks Alex)\nx [nscl] Prevent dead object access on BF cache (thanks\n jamhubub and mriehm)" }, - "reviewed": "2023-07-25T09:58:54Z", - "version": "11.4.26", + "reviewed": "2023-09-13T06:54:08Z", + "version": "11.4.27", "files": [ { - "id": 4141345, - "created": "2023-07-20T07:16:01Z", - "hash": "sha256:283db0eaebbd2888c1a852f5acabaa8e0225ff1eb1a97a25bceaedfd14d9f44c", + "id": 4164985, + "created": "2023-09-08T14:50:57Z", + "hash": "sha256:6b57d9afce663f801177b7492fe7f00967ee3e66b6351b2cf3ff2a6c3ca99637", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 952442, + "size": 950105, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4141345/noscript-11.4.26.…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4164985/noscript-11.4.27.…", "permissions": [ "contextMenus", "storage", @@ -2614,7 +2615,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-09-08T14:26:13Z", + "last_updated": "2023-09-13T06:54:08Z", "name": { "de": "NoScript", "el": "NoScript", @@ -2686,10 +2687,10 @@ "category": "recommended" }, "ratings": { - "average": 4.3969, - "bayesian_average": 4.394206528489455, - "count": 2109, - "text_count": 816 + "average": 4.3975, + "bayesian_average": 4.39481198926411, + "count": 2118, + "text_count": 819 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/reviews/", "requires_payment": false, @@ -2733,7 +2734,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/", - "weekly_downloads": 7314 + "weekly_downloads": 7384 }, "notes": null }, @@ -2749,7 +2750,7 @@ "picture_url": null } ], - "average_daily_users": 153051, + "average_daily_users": 153921, "categories": { "android": [ "performance", @@ -2763,18 +2764,18 @@ "contributions_url": "", "created": "2011-07-15T10:42:41Z", "current_version": { - "id": 5522766, + "id": 5625141, "compatibility": { "firefox": { - "min": "48.0", + "min": "113.0", "max": "*" }, "android": { - "min": "48.0", + "min": "113.0", "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/youtube-high-definition/v…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/youtube-high-definition/v…", "is_strict_compatibility_enabled": false, "license": { "id": 12, @@ -2785,33 +2786,30 @@ "url": "http://www.gnu.org/licenses/lgpl-3.0.html" }, "release_notes": { - "en-US": "AMO GUID added" + "en-US": "Manifest v3 Support" }, - "reviewed": "2023-02-09T15:16:44Z", - "version": "109.0.0", + "reviewed": "2023-09-21T07:50:10Z", + "version": "118.0.5", "files": [ { - "id": 4067111, - "created": "2023-02-06T12:44:20Z", - "hash": "sha256:bdda70d2ad5bfc5065844b76008ac731341b46be0d43ab9de535f28206ea3c59", + "id": 4169481, + "created": "2023-09-18T12:22:43Z", + "hash": "sha256:66d24520820ea01056219751f4c42bf49cb7c0a295eb53e63cf28d603ea42d50", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 234450, + "size": 216452, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4067111/youtube_high_defi…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4169481/youtube_high_defi…", "permissions": [ - "tabs", "storage", - "cookies", - "webRequest", - "webRequestBlocking", - "<all_urls>", "*://*.youtube.com/*" ], "optional_permissions": [], - "host_permissions": [] + "host_permissions": [ + "<all_urls>" + ] } ] }, @@ -2835,7 +2833,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-02-09T15:16:44Z", + "last_updated": "2023-09-21T07:50:10Z", "name": { "en-US": "YouTube High Definition", "zh-TW": "YouTube High Definition" @@ -2864,10 +2862,10 @@ "category": "recommended" }, "ratings": { - "average": 3.8981, - "bayesian_average": 3.8938714538391337, - "count": 1158, - "text_count": 410 + "average": 3.897, + "bayesian_average": 3.8927898014617073, + "count": 1165, + "text_count": 416 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/revi…", "requires_payment": false, @@ -2886,7 +2884,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/vers…", - "weekly_downloads": 1907 + "weekly_downloads": 1686 }, "notes": null } ===================================== projects/browser/config ===================================== @@ -103,12 +103,12 @@ input_files: enable: '[% ! c("var/android") %]' - filename: Bundle-Data enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4141345/noscript-11.4.26.… + - URL: https://addons.mozilla.org/firefox/downloads/file/4164985/noscript-11.4.27.… name: noscript - sha256sum: 283db0eaebbd2888c1a852f5acabaa8e0225ff1eb1a97a25bceaedfd14d9f44c - - URL: https://addons.mozilla.org/firefox/downloads/file/4141256/ublock_origin-1.5… + sha256sum: 6b57d9afce663f801177b7492fe7f00967ee3e66b6351b2cf3ff2a6c3ca99637 + - URL: https://addons.mozilla.org/firefox/downloads/file/4171020/ublock_origin-1.5… name: ublock-origin - sha256sum: 8b73468bc233a11dd2895219466381783d19123857dd0b6fd16a01820fca4834 + sha256sum: e8ee3f9d597a6d42db9d73fe87c1d521de340755fd8bfdd69e41623edfe096d6 enable: '[% c("var/mullvad-browser") %]' - URL: https://github.com/mullvad/browser-extension/releases/download/v0.8.3-firef… name: mullvad-extension ===================================== projects/firefox/config ===================================== @@ -18,7 +18,7 @@ var: firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '12.5' browser_branch: '[% c("var/browser_series") %]-1' - browser_build: 1 + browser_build: 2 branding_directory_prefix: 'tb' copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' @@ -88,7 +88,6 @@ targets: git_url: https://gitlab.torproject.org/tpo/applications/mullvad-browser.git var: branding_directory_prefix: 'mb' - browser_build: 1 gitlab_project: https://gitlab.torproject.org/tpo/applications/mullvad-browser linux-x86_64: ===================================== projects/geckoview/config ===================================== @@ -16,7 +16,7 @@ container: var: geckoview_version: 102.15.1esr browser_branch: 12.5-1 - browser_build: 1 + browser_build: 2 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse HEAD") %]' ===================================== projects/tor/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.gz' -version: 0.4.7.14 +version: 0.4.7.15 git_hash: 'tor-[% c("version") %]' git_url: https://gitlab.torproject.org/tpo/core/tor.git git_submodule: 1 ===================================== projects/translation/config ===================================== @@ -6,7 +6,7 @@ version: '[% c("abbrev") %]' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: 566b80ceb253add31128e6bde62a6c0224afeeb9 + git_hash: b7a2b2cde8e814640554e14520b6b81693810bbd targets: nightly: git_hash: 'base-browser' @@ -18,7 +18,7 @@ steps: git_hash: 'basebrowser-newidentityftl' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: c4e6b2794f42ab85025fdf61cdb9ed4cc0fbab05 + git_hash: 00be2129bd017415db63a5da5e18ce54375b7dde targets: nightly: git_hash: 'tor-browser' @@ -26,7 +26,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 8a98bcc4f466a6cd61c121c502898affc5b96141 + git_hash: fca8abec22d042536973c482af21683edd98f1b1 targets: nightly: git_hash: 'fenix-torbrowserstringsxml' ===================================== rbm.conf ===================================== @@ -94,9 +94,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '12.5.4' + torbrowser_version: '12.5.5' torbrowser_build: 'build1' torbrowser_incremental_from: + - 12.5.4 - 12.5.3 - 12.5.2 - 12.5.1 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40963: Make update channel usage consistent between geckoview and firefox-android
by Pier Angelo Vendrame (＠pierov) 26 Sep '23

26 Sep '23

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: e92709ce by Richard Pospesel at 2023-09-25T20:55:45+00:00 Bug 40963: Make update channel usage consistent between geckoview and firefox-android - - - - - 1 changed file: - projects/geckoview/build Changes: ===================================== projects/geckoview/build ===================================== @@ -78,7 +78,7 @@ mkdir "$HOME/.mozbuild" # For single-arch builds, we want to fake a fat aar anyway, to avoid having # arch suffixes in filenames, or having to rename files. cat >> mozconfig-android-all << 'MOZCONFIG_EOF' -ac_add_options --enable-update-channel=[% c("var/channel") %] +ac_add_options --enable-update-channel=[% c("var/variant") %] ac_add_options --with-base-browser-version=[% c("var/torbrowser_version") %] export MOZ_INCLUDE_SOURCE_INFO=1 export MOZ_SOURCE_REPO="[% c('var/gitlab_project') %]" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/e… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android][firefox-android-115.2.1-13.0-1] fixup! Modify UI/UX
by Dan Ballard (＠dan) 25 Sep '23

25 Sep '23

Dan Ballard pushed to branch firefox-android-115.2.1-13.0-1 at The Tor Project / Applications / firefox-android Commits: f2fc794e by clairehurst at 2023-09-25T12:44:59-06:00 fixup! Modify UI/UX - - - - - 2 changed files: - fenix/app/src/main/java/org/mozilla/fenix/settings/SupportUtils.kt - fenix/app/src/test/java/org/mozilla/fenix/settings/SupportUtilsTest.kt Changes: ===================================== fenix/app/src/main/java/org/mozilla/fenix/settings/SupportUtils.kt ===================================== @@ -38,10 +38,9 @@ object SupportUtils { const val MEITUAN_URL = "https://tb.j5k6.com/6ZSOp" const val GOOGLE_US_URL = "https://www.google.com/webhp?client=firefox-b-1-m&channel=ts" const val GOOGLE_XX_URL = "https://www.google.com/webhp?client=firefox-b-m&channel=ts" - const val WHATS_NEW_URL = "https://www.mozilla.org/firefox/android/notes" + const val WHATS_NEW_URL = "https://www.torproject.org/releases/" const val DONATE_URL = "https://donate.torproject.org/" const val TB_MANUAL_URL = "https://tb-manual.torproject.org/mobile-tor" - const val TOR_RELEASES = "https://www.torproject.org/releases/" enum class SumoTopic(internal val topicStr: String) { HELP("faq-android"), @@ -101,20 +100,12 @@ object SupportUtils { return TB_MANUAL_URL } - fun getTorReleasePageUrl(): String { - return TOR_RELEASES - } - fun getMozillaPageUrl(page: MozillaPage, locale: Locale = Locale.getDefault()): String { val path = page.path val langTag = getLanguageTag(locale) return "https://www.mozilla.org/$langTag/$path" } - fun getWhatsNewUrl(@Suppress("UNUSED_PARAMETER") context: Context): String { - return getTorReleasePageUrl() - } - fun createCustomTabIntent(context: Context, url: String): Intent = CustomTabsIntent.Builder() .setInstantAppsEnabled(false) .setDefaultColorSchemeParams( ===================================== fenix/app/src/test/java/org/mozilla/fenix/settings/SupportUtilsTest.kt ===================================== @@ -63,7 +63,7 @@ class SupportUtilsTest { ) assertEquals( "https://www.torproject.org/releases/", - SupportUtils.getTorReleasePageUrl() + SupportUtils.WHATS_NEW_URL ) } View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/f2f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/f2f… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-102.15.1esr-12.5-1-build2
by richard (＠richard) 25 Sep '23

25 Sep '23

richard pushed new tag tor-browser-102.15.1esr-12.5-1-build2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-102.15.1esr-12.5-1] 14 commits: Bug 1836353 - make mStartedReading an Atomic r=valentin, necko-reviewers a=pascalc
by richard (＠richard) 25 Sep '23

25 Sep '23

richard pushed to branch base-browser-102.15.1esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: 1eb99a89 by Randell Jesup at 2023-09-25T19:15:30+00:00 Bug 1836353 - make mStartedReading an Atomic r=valentin,necko-reviewers a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D187484 ESR102 backport amend: removed MOZ_ prefix from Bug 1761040 - - - - - fdd2e34e by Andrew Creskey at 2023-09-25T19:15:31+00:00 Bug 1823172 - Refactor TransactionObserver::OnDataAvailable() r=necko-reviewers,jesup Cleanup processing of parameters, fields in TransactionObserver::OnDataAvailable. Differential Revision: https://phabricator.services.mozilla.com/D184977 - - - - - 083e5ef4 by André Bargull at 2023-09-25T19:15:31+00:00 Bug 1843824: Handle dead wrappers. r=iain a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D183714 - - - - - b4eee326 by Andreas Pehrson at 2023-09-25T19:15:32+00:00 Bug 1843962 - In WebrtcCallWrapper, reference conduits registered for ssrc changes. r=bwc a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D186446 - - - - - 370a1dbd by Bob Owen at 2023-09-25T19:15:32+00:00 Bug 1846683: Make assertions in FilterNodeD2D1::SetInput release assertions. r=jrmuizel a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D186148 - - - - - 89d81f95 by Bob Owen at 2023-09-25T19:15:33+00:00 Bug 1846685: Add PathOps::CheckedStreamToSink and use for event playback. r=jrmuizel a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D186161 - - - - - 597d679d by Bob Owen at 2023-09-25T19:15:33+00:00 Bug 1846686: Remove DataSourceSurfaces when adding SourceSurfaces to CanvasTranslator. r=jrmuizel a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D186171 - - - - - 7c18fe80 by Bob Owen at 2023-09-25T19:15:34+00:00 Bug 1848454: Ensure an attempt is made to terminate the child when SpawnTarget fails and there is no job. r=handyman, a=RyanVM Differential Revision: https://phabricator.services.mozilla.com/D186488 - - - - - ac24ef5c by Jonathan Kew at 2023-09-25T19:15:34+00:00 Bug 1848890 - Guard access to FontList::mBlocks with the font-list lock. r=jnicol a=RyanVM Differential Revision: https://phabricator.services.mozilla.com/D187690 ESR102 backport amend: removed MOZ_ prefix from Bug 1761040 - - - - - 54584eeb by John Schanck at 2023-09-25T19:15:35+00:00 Bug 1849056 - handle failures of CryptoBuffer::ToArrayBuffer. r=tschuster,webidl,smaug a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D186398 - - - - - fa18d558 by Bob Owen at 2023-09-25T19:15:35+00:00 Bug 1850180: Release assert on too many PopLayers in DrawTargetSkia and DrawTargetCairo. r=jrmuizel a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D187470 - - - - - 46499491 by Bob Owen at 2023-09-25T19:15:36+00:00 Bug 1850983: Add check for correct format in DrawTarget::IntoLuminanceSource. r=jrmuizel a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D187561 - - - - - d8c3a3ff by Andrew McCreight at 2023-09-25T19:15:36+00:00 Bug 1851195 - Remove PContent::DeviceReset. r=gfx-reviewers,bradwerth a=pascalc This IPC message is never used. about:support runs in the parent process, and test_device_reset.html is a mochitest chrome, so it also runs in the parent process. Differential Revision: https://phabricator.services.mozilla.com/D187292 - - - - - 8461a881 by Timothy Nikkel at 2023-09-25T19:16:43+00:00 Bug 1852749. Cherry-pick upstream libwebp fix. r=gfx-reviewers,lsalzman a=RyanVM https://github.com/webmproject/libwebp/commit/95ea5226c870449522240ccff26f0… Differential Revision: https://phabricator.services.mozilla.com/D188066 - - - - - 30 changed files: - dom/base/nsDOMWindowUtils.cpp - dom/ipc/ContentParent.cpp - dom/ipc/PContent.ipdl - dom/media/webrtc/libwebrtcglue/WebrtcCallWrapper.cpp - dom/media/webrtc/libwebrtcglue/WebrtcCallWrapper.h - dom/webauthn/AuthenticatorAssertionResponse.cpp - dom/webauthn/AuthenticatorAssertionResponse.h - dom/webauthn/AuthenticatorAttestationResponse.cpp - dom/webauthn/AuthenticatorAttestationResponse.h - dom/webauthn/AuthenticatorResponse.cpp - dom/webauthn/AuthenticatorResponse.h - dom/webauthn/PublicKeyCredential.cpp - dom/webauthn/PublicKeyCredential.h - dom/webidl/WebAuthentication.webidl - gfx/2d/DrawTarget.cpp - gfx/2d/DrawTargetCairo.cpp - gfx/2d/DrawTargetSkia.cpp - gfx/2d/FilterNodeD2D1.cpp - gfx/2d/InlineTranslator.h - gfx/2d/PathRecording.cpp - gfx/2d/PathRecording.h - gfx/2d/RecordedEventImpl.h - gfx/layers/RecordedCanvasEventImpl.h - gfx/layers/ipc/CanvasTranslator.h - gfx/thebes/SharedFontList-impl.h - gfx/thebes/SharedFontList.cpp - gfx/thebes/gfxPlatformFontList.cpp - js/src/builtin/Promise.cpp - media/libwebp/src/dec/vp8l_dec.c - netwerk/base/nsMIMEInputStream.cpp The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/791669… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/791669… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.15.1esr-12.5-1] 14 commits: Bug 1836353 - make mStartedReading an Atomic r=valentin, necko-reviewers a=pascalc
by richard (＠richard) 25 Sep '23

25 Sep '23

richard pushed to branch tor-browser-102.15.1esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: ea41e892 by Randell Jesup at 2023-09-25T18:15:06+00:00 Bug 1836353 - make mStartedReading an Atomic r=valentin,necko-reviewers a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D187484 ESR102 backport amend: removed MOZ_ prefix from Bug 1761040 - - - - - 06c0cb2c by Andrew Creskey at 2023-09-25T18:15:07+00:00 Bug 1823172 - Refactor TransactionObserver::OnDataAvailable() r=necko-reviewers,jesup Cleanup processing of parameters, fields in TransactionObserver::OnDataAvailable. Differential Revision: https://phabricator.services.mozilla.com/D184977 - - - - - 1a29fc93 by André Bargull at 2023-09-25T18:15:08+00:00 Bug 1843824: Handle dead wrappers. r=iain a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D183714 - - - - - b245331a by Andreas Pehrson at 2023-09-25T18:15:09+00:00 Bug 1843962 - In WebrtcCallWrapper, reference conduits registered for ssrc changes. r=bwc a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D186446 - - - - - f7b7decb by Bob Owen at 2023-09-25T18:15:09+00:00 Bug 1846683: Make assertions in FilterNodeD2D1::SetInput release assertions. r=jrmuizel a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D186148 - - - - - d354084e by Bob Owen at 2023-09-25T18:15:10+00:00 Bug 1846685: Add PathOps::CheckedStreamToSink and use for event playback. r=jrmuizel a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D186161 - - - - - 844fbce4 by Bob Owen at 2023-09-25T18:15:10+00:00 Bug 1846686: Remove DataSourceSurfaces when adding SourceSurfaces to CanvasTranslator. r=jrmuizel a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D186171 - - - - - 93620241 by Bob Owen at 2023-09-25T18:15:11+00:00 Bug 1848454: Ensure an attempt is made to terminate the child when SpawnTarget fails and there is no job. r=handyman, a=RyanVM Differential Revision: https://phabricator.services.mozilla.com/D186488 - - - - - daef8db8 by Jonathan Kew at 2023-09-25T18:15:12+00:00 Bug 1848890 - Guard access to FontList::mBlocks with the font-list lock. r=jnicol a=RyanVM Differential Revision: https://phabricator.services.mozilla.com/D187690 ESR102 backport amend: removed MOZ_ prefix from Bug 1761040 - - - - - fe56623c by John Schanck at 2023-09-25T18:15:12+00:00 Bug 1849056 - handle failures of CryptoBuffer::ToArrayBuffer. r=tschuster,webidl,smaug a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D186398 - - - - - d3471b53 by Bob Owen at 2023-09-25T18:15:13+00:00 Bug 1850180: Release assert on too many PopLayers in DrawTargetSkia and DrawTargetCairo. r=jrmuizel a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D187470 - - - - - 86edc308 by Bob Owen at 2023-09-25T18:15:13+00:00 Bug 1850983: Add check for correct format in DrawTarget::IntoLuminanceSource. r=jrmuizel a=pascalc Differential Revision: https://phabricator.services.mozilla.com/D187561 - - - - - 64b62a99 by Andrew McCreight at 2023-09-25T18:15:14+00:00 Bug 1851195 - Remove PContent::DeviceReset. r=gfx-reviewers,bradwerth a=pascalc This IPC message is never used. about:support runs in the parent process, and test_device_reset.html is a mochitest chrome, so it also runs in the parent process. Differential Revision: https://phabricator.services.mozilla.com/D187292 - - - - - d1b5a5ed by Timothy Nikkel at 2023-09-25T18:15:15+00:00 Bug 1852749. Cherry-pick upstream libwebp fix. r=gfx-reviewers,lsalzman a=RyanVM https://github.com/webmproject/libwebp/commit/95ea5226c870449522240ccff26f0… Differential Revision: https://phabricator.services.mozilla.com/D188066 - - - - - 30 changed files: - dom/base/nsDOMWindowUtils.cpp - dom/ipc/ContentParent.cpp - dom/ipc/PContent.ipdl - dom/media/webrtc/libwebrtcglue/WebrtcCallWrapper.cpp - dom/media/webrtc/libwebrtcglue/WebrtcCallWrapper.h - dom/webauthn/AuthenticatorAssertionResponse.cpp - dom/webauthn/AuthenticatorAssertionResponse.h - dom/webauthn/AuthenticatorAttestationResponse.cpp - dom/webauthn/AuthenticatorAttestationResponse.h - dom/webauthn/AuthenticatorResponse.cpp - dom/webauthn/AuthenticatorResponse.h - dom/webauthn/PublicKeyCredential.cpp - dom/webauthn/PublicKeyCredential.h - dom/webidl/WebAuthentication.webidl - gfx/2d/DrawTarget.cpp - gfx/2d/DrawTargetCairo.cpp - gfx/2d/DrawTargetSkia.cpp - gfx/2d/FilterNodeD2D1.cpp - gfx/2d/InlineTranslator.h - gfx/2d/PathRecording.cpp - gfx/2d/PathRecording.h - gfx/2d/RecordedEventImpl.h - gfx/layers/RecordedCanvasEventImpl.h - gfx/layers/ipc/CanvasTranslator.h - gfx/thebes/SharedFontList-impl.h - gfx/thebes/SharedFontList.cpp - gfx/thebes/gfxPlatformFontList.cpp - js/src/builtin/Promise.cpp - media/libwebp/src/dec/vp8l_dec.c - netwerk/base/nsMIMEInputStream.cpp The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/be70dd… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/be70dd… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-102.15.1esr-12.5-1] fixup! Bug 40562: Added Tor Browser preferences to 000-tor-browser.js
by richard (＠richard) 25 Sep '23

25 Sep '23

richard pushed to branch tor-browser-102.15.1esr-12.5-1 at The Tor Project / Applications / Tor Browser Commits: be70ddab by Richard Pospesel at 2023-09-25T17:59:14+00:00 fixup! Bug 40562: Added Tor Browser preferences to 000-tor-browser.js Bug 42126: Update extensions.torlauncher.bridgedb_front to foursquare.com - - - - - 1 changed file: - browser/app/profile/000-tor-browser.js Changes: ===================================== browser/app/profile/000-tor-browser.js ===================================== @@ -124,7 +124,7 @@ pref("extensions.torlauncher.torrc_path", ""); pref("extensions.torlauncher.tordatadir_path", ""); // BridgeDB-related preferences (used for Moat). -pref("extensions.torlauncher.bridgedb_front", "cdn.sstatic.net"); +pref("extensions.torlauncher.bridgedb_front", "foursquare.com"); pref("extensions.torlauncher.bridgedb_reflector", "https://moat.torproject.org.global.prod.fastly.net/"); pref("extensions.torlauncher.moat_service", "https://bridges.torproject.org/moat"); pref("extensions.torlauncher.bridgedb_bridge_type", "obfs4"); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/be70dda… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/be70dda… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] fixup! Bug 40562: Added Tor Browser preferences to 000-tor-browser.js
by richard (＠richard) 25 Sep '23

25 Sep '23

richard pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: eae5ea5a by Richard Pospesel at 2023-09-25T16:55:06+00:00 fixup! Bug 40562: Added Tor Browser preferences to 000-tor-browser.js Bug 42126: Update extensions.torlauncher.bridgedb_front to foursquare.com - - - - - 1 changed file: - browser/app/profile/000-tor-browser.js Changes: ===================================== browser/app/profile/000-tor-browser.js ===================================== @@ -107,7 +107,7 @@ pref("extensions.torlauncher.torrc_path", ""); pref("extensions.torlauncher.tordatadir_path", ""); // BridgeDB-related preferences (used for Moat). -pref("extensions.torlauncher.bridgedb_front", "cdn.sstatic.net"); +pref("extensions.torlauncher.bridgedb_front", "foursquare.com"); pref("extensions.torlauncher.bridgedb_reflector", "https://moat.torproject.org.global.prod.fastly.net/"); pref("extensions.torlauncher.moat_service", "https://bridges.torproject.org/moat"); pref("extensions.torlauncher.bridgedb_bridge_type", "obfs4"); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/eae5ea5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/eae5ea5… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] fixup! Bug 40458: Implement .tor.onion aliases
by Pier Angelo Vendrame (＠pierov) 25 Sep '23

25 Sep '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 66a32102 by guest475646844 at 2023-09-25T15:17:29+00:00 fixup! Bug 40458: Implement .tor.onion aliases - - - - - 2 changed files: - modules/libpref/Preferences.cpp - modules/libpref/init/StaticPrefList.yaml Changes: ===================================== modules/libpref/Preferences.cpp ===================================== @@ -6186,7 +6186,10 @@ static bool ShouldSanitizePreference(const Pref* const aPref) { const auto* p = prefName; // This avoids clang-format doing ugly things. return !(strncmp("services.settings.clock_skew_seconds", p, 36) == 0 || strncmp("services.settings.last_update_seconds", p, 37) == 0 || - strncmp("services.settings.server", p, 24) == 0); + strncmp("services.settings.server", p, 24) == 0 || + // Prevent a crash in debug builds. Please refer to + // StaticPrefList.yaml, tor-browser#41165 and tor-browser!765 for details. + strncmp("browser.urlbar.onionRewrites.enabled", p, 36) == 0); } } ===================================== modules/libpref/init/StaticPrefList.yaml ===================================== @@ -1790,6 +1790,9 @@ value: true mirror: always +# tor-browser#28005, tor-browser#40458: enable .tor.onion aliases by default. +# When they are enabled, the browser will need to refresh the alias lists by +# connecting to third parties periodically. - name: browser.urlbar.onionRewrites.enabled type: RelaxedAtomicBool value: true View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/66a3210… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/66a3210… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40954: Updated Windows installer icons.
by Pier Angelo Vendrame (＠pierov) 25 Sep '23

25 Sep '23

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 19c871a6 by Pier Angelo Vendrame at 2023-09-25T10:03:49+02:00 Bug 40954: Updated Windows installer icons. The new icons are differentiated on the channel basis, so also adjust the NSIS script to take that into account. - - - - - 4 changed files: - projects/browser/windows-installer.nsi - + projects/browser/windows-installer/torbrowser-alpha.ico - + projects/browser/windows-installer/torbrowser-nightly.ico - + projects/browser/windows-installer/torbrowser-release.ico Changes: ===================================== projects/browser/windows-installer.nsi ===================================== @@ -57,7 +57,7 @@ ;-------------------------------- ;Interface Configuration - !define MUI_ICON "[% c('var/projectname') %][% IF c('var/mullvad-browser') -%]-[% c('var/channel') %][% END -%].ico" + !define MUI_ICON "[% c('var/projectname') %][% IF !c('var/base-browser') -%]-[% c('var/channel') %][% END -%].ico" !define MUI_ABORTWARNING ;-------------------------------- ===================================== projects/browser/windows-installer/torbrowser-alpha.ico ===================================== Binary files /dev/null and b/projects/browser/windows-installer/torbrowser-alpha.ico differ ===================================== projects/browser/windows-installer/torbrowser-nightly.ico ===================================== Binary files /dev/null and b/projects/browser/windows-installer/torbrowser-nightly.ico differ ===================================== projects/browser/windows-installer/torbrowser-release.ico ===================================== Binary files /dev/null and b/projects/browser/windows-installer/torbrowser-release.ico differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/1… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] fixup! Bug 27476: Implement about:torconnect captive portal within Tor Browser
by Pier Angelo Vendrame (＠pierov) 25 Sep '23

25 Sep '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: c1cf0f54 by Pier Angelo Vendrame at 2023-09-25T12:28:31+02:00 fixup! Bug 27476: Implement about:torconnect captive portal within Tor Browser Bug 42100: Center the select in about:torconnect - - - - - 1 changed file: - browser/components/torconnect/content/aboutTorConnect.css Changes: ===================================== browser/components/torconnect/content/aboutTorConnect.css ===================================== @@ -187,7 +187,6 @@ form#locationDropdown { form#locationDropdown select { max-width: 100%; - padding-block: 0; margin-inline: 0; font-weight: 700; } View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/c1cf0f5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/c1cf0f5… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.3.0esr-13.0-1] squash! Bug 2176: Rebrand Firefox to TorBrowser
by Pier Angelo Vendrame (＠pierov) 25 Sep '23

25 Sep '23

Pier Angelo Vendrame pushed to branch tor-browser-115.3.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: d4d1b3a1 by Henry Wilkes at 2023-09-25T10:32:07+01:00 squash! Bug 2176: Rebrand Firefox to TorBrowser Bug 42087: New application icons (windows). - - - - - 15 changed files: - browser/branding/tb-alpha/VisualElements_150.png - browser/branding/tb-alpha/VisualElements_70.png - browser/branding/tb-alpha/document.ico - browser/branding/tb-alpha/firefox.VisualElementsManifest.xml - browser/branding/tb-alpha/firefox.ico - browser/branding/tb-nightly/VisualElements_150.png - browser/branding/tb-nightly/VisualElements_70.png - browser/branding/tb-nightly/document.ico - browser/branding/tb-nightly/firefox.VisualElementsManifest.xml - browser/branding/tb-nightly/firefox.ico - browser/branding/tb-release/VisualElements_150.png - browser/branding/tb-release/VisualElements_70.png - browser/branding/tb-release/document.ico - browser/branding/tb-release/firefox.VisualElementsManifest.xml - browser/branding/tb-release/firefox.ico Changes: ===================================== browser/branding/tb-alpha/VisualElements_150.png ===================================== Binary files a/browser/branding/tb-alpha/VisualElements_150.png and b/browser/branding/tb-alpha/VisualElements_150.png differ ===================================== browser/branding/tb-alpha/VisualElements_70.png ===================================== Binary files a/browser/branding/tb-alpha/VisualElements_70.png and b/browser/branding/tb-alpha/VisualElements_70.png differ ===================================== browser/branding/tb-alpha/document.ico ===================================== Binary files a/browser/branding/tb-alpha/document.ico and b/browser/branding/tb-alpha/document.ico differ ===================================== browser/branding/tb-alpha/firefox.VisualElementsManifest.xml ===================================== @@ -8,5 +8,5 @@ Square150x150Logo='browser\VisualElements\VisualElements_150.png' Square70x70Logo='browser\VisualElements\VisualElements_70.png' ForegroundText='light' - BackgroundColor='#1c191d'/> + BackgroundColor='#0b2316'/> </Application> ===================================== browser/branding/tb-alpha/firefox.ico ===================================== Binary files a/browser/branding/tb-alpha/firefox.ico and b/browser/branding/tb-alpha/firefox.ico differ ===================================== browser/branding/tb-nightly/VisualElements_150.png ===================================== Binary files a/browser/branding/tb-nightly/VisualElements_150.png and b/browser/branding/tb-nightly/VisualElements_150.png differ ===================================== browser/branding/tb-nightly/VisualElements_70.png ===================================== Binary files a/browser/branding/tb-nightly/VisualElements_70.png and b/browser/branding/tb-nightly/VisualElements_70.png differ ===================================== browser/branding/tb-nightly/document.ico ===================================== Binary files a/browser/branding/tb-nightly/document.ico and b/browser/branding/tb-nightly/document.ico differ ===================================== browser/branding/tb-nightly/firefox.VisualElementsManifest.xml ===================================== @@ -8,5 +8,5 @@ Square150x150Logo='browser\VisualElements\VisualElements_150.png' Square70x70Logo='browser\VisualElements\VisualElements_70.png' ForegroundText='light' - BackgroundColor='#1c191d'/> + BackgroundColor='#191339'/> </Application> ===================================== browser/branding/tb-nightly/firefox.ico ===================================== Binary files a/browser/branding/tb-nightly/firefox.ico and b/browser/branding/tb-nightly/firefox.ico differ ===================================== browser/branding/tb-release/VisualElements_150.png ===================================== Binary files a/browser/branding/tb-release/VisualElements_150.png and b/browser/branding/tb-release/VisualElements_150.png differ ===================================== browser/branding/tb-release/VisualElements_70.png ===================================== Binary files a/browser/branding/tb-release/VisualElements_70.png and b/browser/branding/tb-release/VisualElements_70.png differ ===================================== browser/branding/tb-release/document.ico ===================================== Binary files a/browser/branding/tb-release/document.ico and b/browser/branding/tb-release/document.ico differ ===================================== browser/branding/tb-release/firefox.VisualElementsManifest.xml ===================================== @@ -8,5 +8,5 @@ Square150x150Logo='browser\VisualElements\VisualElements_150.png' Square70x70Logo='browser\VisualElements\VisualElements_70.png' ForegroundText='light' - BackgroundColor='#420c5e'/> + BackgroundColor='#271339'/> </Application> ===================================== browser/branding/tb-release/firefox.ico ===================================== Binary files a/browser/branding/tb-release/firefox.ico and b/browser/branding/tb-release/firefox.ico differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d4d1b3a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d4d1b3a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] alpha: new version, 13.0a5
by richard (＠richard) 24 Sep '23

24 Sep '23

richard pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 738b7d4f by Richard Pospesel at 2023-09-24T17:54:29+00:00 alpha: new version, 13.0a5 - - - - - 30 changed files: - update_3/alpha/.htaccess - − update_3/alpha/13.0a1-13.0a4-linux-i686-ALL.xml - − update_3/alpha/13.0a1-13.0a4-linux-x86_64-ALL.xml - − update_3/alpha/13.0a1-13.0a4-macos-ALL.xml - − update_3/alpha/13.0a1-13.0a4-windows-i686-ALL.xml - − update_3/alpha/13.0a1-13.0a4-windows-x86_64-ALL.xml - + update_3/alpha/13.0a1-13.0a5-linux-i686-ALL.xml - + update_3/alpha/13.0a1-13.0a5-linux-x86_64-ALL.xml - + update_3/alpha/13.0a1-13.0a5-macos-ALL.xml - + update_3/alpha/13.0a1-13.0a5-windows-i686-ALL.xml - + update_3/alpha/13.0a1-13.0a5-windows-x86_64-ALL.xml - − update_3/alpha/13.0a2-13.0a4-linux-i686-ALL.xml - − update_3/alpha/13.0a2-13.0a4-linux-x86_64-ALL.xml - − update_3/alpha/13.0a2-13.0a4-macos-ALL.xml - − update_3/alpha/13.0a2-13.0a4-windows-i686-ALL.xml - − update_3/alpha/13.0a2-13.0a4-windows-x86_64-ALL.xml - + update_3/alpha/13.0a2-13.0a5-linux-i686-ALL.xml - + update_3/alpha/13.0a2-13.0a5-linux-x86_64-ALL.xml - + update_3/alpha/13.0a2-13.0a5-macos-ALL.xml - + update_3/alpha/13.0a2-13.0a5-windows-i686-ALL.xml - + update_3/alpha/13.0a2-13.0a5-windows-x86_64-ALL.xml - − update_3/alpha/13.0a3-13.0a4-linux-i686-ALL.xml - − update_3/alpha/13.0a3-13.0a4-linux-x86_64-ALL.xml - − update_3/alpha/13.0a3-13.0a4-macos-ALL.xml - − update_3/alpha/13.0a3-13.0a4-windows-i686-ALL.xml - − update_3/alpha/13.0a3-13.0a4-windows-x86_64-ALL.xml - + update_3/alpha/13.0a3-13.0a5-linux-i686-ALL.xml - + update_3/alpha/13.0a3-13.0a5-linux-x86_64-ALL.xml - + update_3/alpha/13.0a3-13.0a5-macos-ALL.xml - + update_3/alpha/13.0a3-13.0a5-windows-i686-ALL.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-13.0a5-build1
by richard (＠richard) 24 Sep '23

24 Sep '23

richard pushed new tag mb-13.0a5-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-13.0a5-build1
by richard (＠richard) 24 Sep '23

24 Sep '23

richard pushed new tag tbb-13.0a5-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 40949, 40950: Prepare Tor+Mullvad Browser Alpha 13.0a5
by richard (＠richard) 24 Sep '23

24 Sep '23

richard pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: cd838657 by Richard Pospesel at 2023-09-22T17:26:20+00:00 Bug 40949, 40950: Prepare Tor+Mullvad Browser Alpha 13.0a5 - - - - - 11 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/allowed_addons.json - projects/firefox-android/config - projects/firefox/config - projects/geckoview/config - projects/manual/config - projects/openssl/config - projects/tor/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,25 @@ +Mullvad Browser 13.0a5 - September 21 2023 + * All Platforms + * Updated Translations + * Updated Firefox to 115.3.0esr + * Bug 228: Remove popup asking for preferred language on websites [mullvad-browser] + * Bug 238: Rebase Mullvad Browser to 115.3.0esr [mullvad-browser] + * Bug 40893: Update (Noto) fonts for 13.0 [tor-browser-build] + * Bug 41327: Disable UrlbarProviderInterventions [tor-browser] + * Bug 41581: ESR115: figure out extension pinning / unified Extensions [tor-browser] + * Bug 41903: The info icon on the language change prompt is not shown [tor-browser] + * Bug 42026: Disable cookie banner service and UI. [tor-browser] + * Bug 42037: Disable about:firefoxview [tor-browser] + * Bug 42083: RemoteSecuritySettings.init throws error in console [tor-browser] + * Bug 42094: Disable media.aboutwebrtc.hist.enabled as security in-depth [tor-browser] + * Windows + * Bug 41798: Stop building private_browsing.exe on Windows [tor-browser] + * Build System + * All Platforms + * Bug 40956: Allow testing the updater also with release and alpha channel [tor-browser-build] + * Windows + * Bug 41995: Generated headers on Windows aren't reproducible [tor-browser] + Mullvad Browser 13.0a4 - September 12 2023 * All Platforms * Updated Firefox to 115.2.1esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,48 @@ +Tor Browser 13.0a5 - September 21 2023 + * All Platforms + * Updated Translations + * Updated OpenSSL to 3.0.11 + * Updated tor to 0.4.8.6 + * Bug 40938: Migrate remaining torbutton functionality to tor-browser [tor-browser] + * Bug 41327: Disable UrlbarProviderInterventions [tor-browser] + * Bug 42026: Disable cookie banner service and UI. [tor-browser] + * Bug 42094: Disable media.aboutwebrtc.hist.enabled as security in-depth [tor-browser] + * Bug 42112: Rebase alpha to 115.3.0esr [tor-browser] + * Bug 42120: Use foursquare as domain front for snowflake [tor-browser] + * Windows + macOS + Linux + * Updated Firefox to 115.3.0esr + * Bug 40893: Update (Noto) fonts for 13.0 [tor-browser-build] + * Bug 41639: Fix the wordmark (title and background) of the "About Tor Browser" window [tor-browser] + * Bug 41822: The default browser button came back on 115 [tor-browser] + * Bug 41864: TOR_CONTROL_HOST and TOR_SOCKS_HOST do not work as expected when the browser launches tor [tor-browser] + * Bug 41903: The info icon on the language change prompt is not shown [tor-browser] + * Bug 41957: Revert to Fx's default identity block style for internal pages [tor-browser] + * Bug 41958: Console error when closing tor browser with about:preferences open [tor-browser] + * Bug 41986: Fix the control port password handling [tor-browser] + * Bug 42037: Disable about:firefoxview [tor-browser] + * Bug 42073: Add simplified onion pattern to the new homepage [tor-browser] + * Bug 42079: TorConnect: handle switching from Bootstrapped to Configuring state [tor-browser] + * Bug 42083: RemoteSecuritySettings.init throws error in console [tor-browser] + * Bug 42091: Onion authorization prompt overflows [tor-browser] + * Bug 42092: Onion services key table display problems. [tor-browser] + * Bug 42102: TorProcess says the SOCKS port is not valid even though it is [tor-browser] + * Bug 42110: Add a utility module for shared UI methods needed for several tor browser components [tor-browser] + * Windows + * Bug 41798: Stop building private_browsing.exe on Windows [tor-browser] + * macOS + * Bug 42078: Implement MacOS application icons [tor-browser] + * Linux + * Bug 42088: Implement Linux application icons [tor-browser] + * Android + * Updated GeckoView to 115.3.0esr + * Bug 42089: Disable Mozilla 1805450 [tor-browser] + * Bug 42122: Fix crash due to bad android deprecation and APIs + * Build System + * Windows + macOS + Linux + * Bug 40956: Allow testing the updater also with release and alpha channel [tor-browser-build] + * Windows + * Bug 41995: Generated headers on Windows aren't reproducible [tor-browser] + Tor Browser 13.0a4 - September 12 2023 * All Platforms * Updated Translations ===================================== projects/browser/allowed_addons.json ===================================== @@ -17,7 +17,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/34/9734/13299734/13299734.pn…" } ], - "average_daily_users": 998920, + "average_daily_users": 1013576, "categories": { "android": [ "experimental", @@ -221,10 +221,10 @@ "category": "recommended" }, "ratings": { - "average": 4.554, - "bayesian_average": 4.552847296253503, - "count": 5146, - "text_count": 1620 + "average": 4.5535, + "bayesian_average": 4.552349724151479, + "count": 5162, + "text_count": 1627 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/reviews/", "requires_payment": false, @@ -321,7 +321,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/darkreader/versions/", - "weekly_downloads": 25970 + "weekly_downloads": 26661 }, "notes": null }, @@ -337,7 +337,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/56/7656/6937656/6937656.png?…" } ], - "average_daily_users": 254948, + "average_daily_users": 257278, "categories": { "android": [ "security-privacy" @@ -553,9 +553,9 @@ "category": "recommended" }, "ratings": { - "average": 4.8125, - "bayesian_average": 4.807850481587009, - "count": 1360, + "average": 4.8126, + "bayesian_average": 4.807945503403016, + "count": 1361, "text_count": 240 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/reviews/", @@ -641,7 +641,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions/", - "weekly_downloads": 3376 + "weekly_downloads": 3350 }, "notes": null }, @@ -657,7 +657,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/73/4073/5474073/5474073.png?…" } ], - "average_daily_users": 1104333, + "average_daily_users": 1117495, "categories": { "android": [ "security-privacy" @@ -669,7 +669,7 @@ "contributions_url": "https://paypal.me/SupportEFF?utm_content=product-page-contribute&utm_medium…", "created": "2014-05-01T18:23:16Z", "current_version": { - "id": 5584898, + "id": 5622730, "compatibility": { "firefox": { "min": "60.0", @@ -680,7 +680,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-badger17/versions…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/privacy-badger17/versions…", "is_strict_compatibility_enabled": false, "license": { "id": 6, @@ -691,23 +691,24 @@ "url": "http://www.gnu.org/licenses/gpl-3.0.html" }, "release_notes": { - "en-US": "2023.6.23 is a bug fix release addressing various site breakages.\n\nNotes for 2023.6.14:\n<ul><li>Privacy Badger now comes with the largest blocklist yet, thanks to improved tracking detection and continually expanding <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e7679342a72ee118b720d9…" rel=\"nofollow\">pre-training</a>. In addition to learning from tracking techniques like cookies and canvas fingerprinting, Privacy Badger now also learns from the <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/5a177129df8c5230a116e1…" rel=\"nofollow\">Beacon API</a>.</li><li>Fixed blocking trackers from just-closed tabs or from pages you recently navigated away from</li><li>Improved display of tracking domains on the options page on larger screens</li><li>Fixed various site breakages</li><li>Improved Italian translations</li></ul>" + "en-US": "<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/07ac27a67ad814cdf74ed5…" rel=\"nofollow\">Improved link tracking protection</a> (\"link unwrapping\") on Google sites. With this update Privacy Badger removes tracking from links in Google Docs, Gmail, Google Maps, and Google Images results. Privacy Badger now also removes tracking from links added after scrolling through Google Search results.</li><li>Fixed various site breakages</li><li>Added Malay and restored Serbian translations</li><li>Improved Traditional Chinese translations</li></ul>" }, - "reviewed": "2023-06-28T16:18:01Z", - "version": "2023.6.23", + "reviewed": "2023-09-15T11:48:09Z", + "version": "2023.9.12", "files": [ { - "id": 4129240, - "created": "2023-06-23T20:19:09Z", - "hash": "sha256:ce79513710b2aed96bf03ec63d8be2e8274329e8d90911f5b8962c777e006e96", + "id": 4167070, + "created": "2023-09-12T19:42:38Z", + "hash": "sha256:eae97d9d3df3350476901ca412505cb4a43d0e7fa79bd9516584935158f82095", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 1968096, + "size": 1986265, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4129240/privacy_badger17-…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4167070/privacy_badger17-…", "permissions": [ + "alarms", "tabs", "http://*/*", "https://*/*", @@ -721,6 +722,10 @@ "https://*.messenger.com/*", "http://*.messenger.com/*", "*://*.facebookcorewwwi.onion/*", + "https://docs.google.com/*", + "http://docs.google.com/*", + "https://mail.google.com/*", + "http://mail.google.com/*", "https://www.google.com/*", "http://www.google.com/*", "https://www.google.ad/*", @@ -1101,10 +1106,6 @@ "http://www.google.co.zw/*", "https://www.google.cat/*", "http://www.google.cat/*", - "https://hangouts.google.com/*", - "http://hangouts.google.com/*", - "https://docs.google.com/*", - "http://docs.google.com/*", "<all_urls>" ], "optional_permissions": [], @@ -1134,7 +1135,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-06-28T16:18:01Z", + "last_updated": "2023-09-15T11:48:09Z", "name": { "en-US": "Privacy Badger" }, @@ -1180,9 +1181,9 @@ "category": "recommended" }, "ratings": { - "average": 4.8007, - "bayesian_average": 4.797939512443901, - "count": 2288, + "average": 4.8005, + "bayesian_average": 4.797741146818847, + "count": 2291, "text_count": 436 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/reviews/", @@ -1207,7 +1208,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/versions/", - "weekly_downloads": 18205 + "weekly_downloads": 18744 }, "notes": null }, @@ -1223,7 +1224,7 @@ "picture_url": null } ], - "average_daily_users": 6484239, + "average_daily_users": 6579871, "categories": { "android": [ "security-privacy" @@ -1235,7 +1236,7 @@ "contributions_url": "", "created": "2015-04-25T07:26:22Z", "current_version": { - "id": 5596914, + "id": 5620609, "compatibility": { "firefox": { "min": "78.0", @@ -1246,7 +1247,7 @@ "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/ublock-origin/versions/55…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/ublock-origin/versions/56…", "is_strict_compatibility_enabled": false, "license": { "id": 6, @@ -1257,22 +1258,22 @@ "url": "http://www.gnu.org/licenses/gpl-3.0.html" }, "release_notes": { - "en-US": "See complete release notes for <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/57eadd553bcb629be4f757…" rel=\"nofollow\">1.51.0</a>.\n\n<b>Fixes / changes</b>\n\n<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/a578674b791ed67b926b31…" rel=\"nofollow\">Remove obsolete web<em>accessible</em>resources</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/7071379ad6c88fec4e40b3…" rel=\"nofollow\">Add missing (deprecated) method to google ima</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/bf46690e10ed8a086d9d50…" rel=\"nofollow\">Fix regression in handling of experimental <code>header=</code> filter option</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f2328063ec5c7512d5899f…" rel=\"nofollow\">Only already normalized CSS selectors can be fast path-compiled</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e271cd306c9578e0ed17c7…" rel=\"nofollow\">Improve compatibility with AdGuard's scriptlets</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f42373a2522c9739807b48…" rel=\"nofollow\">Add static network filter option: <code>permissions</code></a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f502abdb178413a344a43d…" rel=\"nofollow\">Add <code>set-attr</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/46449872121aa9a39f8fe5…" rel=\"nofollow\">Do not bail too early when trapping properties in <code>acs</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/76b28688717445a36e5ee4…" rel=\"nofollow\">Fix regression in cloud storage import of \"Filter lists\" pane</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/eb0f0fdfbd50904d7cd8e2…" rel=\"nofollow\">Add <code>set-session-storage-item</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f125a8290e220a02336532…" rel=\"nofollow\">Prevent negative position when widget size is greater than viewport size</a><ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e49ec519e35ce90b1ce424…" rel=\"nofollow\">Ensure no negative value for <code>top</code> property of floating widget in logger</a></li></ul></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/2398a39690c82a85f3fb23…" rel=\"nofollow\">Add visual hint when not all sublists are enabled</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f549cc526fa10665161c86…" rel=\"nofollow\">Add support for AdGuard's noop (<code>_</code>) network filter option</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/c649c1ddb8b1d7f280a068…" rel=\"nofollow\">Add \"tabless\" filter expression for logger output</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/3f7e7d0a06e918e4c8b3f8…" rel=\"nofollow\">Add support for logical expressions to <code>!#if</code> directive</a><ul><li>Also added support for <code>!#else</code></li></ul></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f1e827e5c4e256a0c832f9…" rel=\"nofollow\">Add resource aliases for increased compatibility with AdGuard lists</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/6f42d070e087002ada8f37…" rel=\"nofollow\">Add compatibility with AdGuard's <code>#%#//scriptlet(...)</code> syntax</a><ul><li>Also added support for quoted parameters in <code>##+js(...)</code> syntax</li></ul></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/50632bd7b34e7e7185c764…" rel=\"nofollow\">Fix syntax highlighter throwing with invalid patterns</a></li><li>...</li></ul>\n<a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/7c755863346ab5ff9e77ae…" rel=\"nofollow\">Commits history since last version</a>." + "en-US": "See complete release notes for <a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/ada021240195c344534ac7…" rel=\"nofollow\">1.52.0</a>.\n\n<b>Fixes / changes</b>\n\n<ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/43660a0fdd02565af8dd50…" rel=\"nofollow\">Add <code>json-prune-xhr-response</code> and <code>trusted-replace-xhr-response</code> scriptlets</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/0b76481be89ff31b1df929…" rel=\"nofollow\">Use <code>globalThis</code> instead of <code>self</code> in scriptlet helper</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/a3b064883c9254c33ef4d8…" rel=\"nofollow\">Add <code>json-prune-fetch-response</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/c01c1c7149d235d50f8619…" rel=\"nofollow\">Position reload icon in logger as per feedback</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/b99b2ae5d56e8805a8735a…" rel=\"nofollow\">Re-factor extra args for <code>set-constant</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/250b16a29ba08fd699fe14…" rel=\"nofollow\">Use Unicode version of hostnames in element picker</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/46fc71548ab78a56ec5213…" rel=\"nofollow\">Disallow trailing CSS universal selector unless properly separated</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/caa2344764766fe37075d4…" rel=\"nofollow\">Fix/improve <code>xml-prune</code> scriptlet</a><ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/38c21a2f21288e4256e098…" rel=\"nofollow\">Improve <code>xml-prune</code> scriptlet</a></li></ul></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/fffabcc429722fe82dd694…" rel=\"nofollow\">Put uBO's icon in nav bar by default</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/f33ff640227bef265ab6e8…" rel=\"nofollow\">Properly serialize CSS combinators according to position in selector</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/683a1ade8523c917879854…" rel=\"nofollow\">Improve <code>no-xhr-if</code> scriptlet</a><ul><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/ac6728961d33617c634909…" rel=\"nofollow\">Improve <code>no-xhr-if</code> scriptlet</a></li></ul></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/fb5ebf9191f45d506f1c93…" rel=\"nofollow\">Use non-normalized URL for reload/report operations</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/ff81090360f2c366f4ab55…" rel=\"nofollow\">Add commented keywords to <code>googlesyndication_adsbygoogle.js</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/1e07de6f8e77576d2eab3f…" rel=\"nofollow\">Improve <code>fingerprint2.js</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/c2dce58b5b071126b08b35…" rel=\"nofollow\">Nothing can come after action operator in procedural cosmetic filters</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/6a76648535af29c605ce7d…" rel=\"nofollow\">Add <code>trusted-replace-fetch-response</code> scriptlet</a></li><li><a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/e1fc743a71a2459b9ff369…" rel=\"nofollow\">Harden <code>spoof-css</code> scriptlet</a></li><li>...</li></ul>\n<a href=\"https://prod.outgoing.prod.webservices.mozgcp.net/v1/d0c70dac55ba032441d8ce…" rel=\"nofollow\">Commits history since last version</a>." }, - "reviewed": "2023-07-25T09:58:22Z", - "version": "1.51.0", + "reviewed": "2023-09-13T15:18:10Z", + "version": "1.52.0", "files": [ { - "id": 4141256, - "created": "2023-07-19T23:09:25Z", - "hash": "sha256:8b73468bc233a11dd2895219466381783d19123857dd0b6fd16a01820fca4834", + "id": 4164949, + "created": "2023-09-08T13:45:36Z", + "hash": "sha256:3932506ce4df306e4da7527d93d60fe0421cf15045c2f4ea73589d9a0902266b", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 3538418, + "size": 3576858, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4141256/ublock_origin-1.5…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4164949/ublock_origin-1.5…", "permissions": [ "dns", "menus", @@ -1388,7 +1389,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-09-13T00:40:42Z", + "last_updated": "2023-09-19T11:30:34Z", "name": { "ar": "uBlock Origin", "bg": "uBlock Origin", @@ -1534,9 +1535,9 @@ }, "ratings": { "average": 4.7828, - "bayesian_average": 4.782406452276442, - "count": 15987, - "text_count": 4147 + "bayesian_average": 4.782407037314675, + "count": 16029, + "text_count": 4157 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/reviews/", "requires_payment": false, @@ -1598,7 +1599,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions/", - "weekly_downloads": 142541 + "weekly_downloads": 144702 }, "notes": null }, @@ -1614,7 +1615,7 @@ "picture_url": null } ], - "average_daily_users": 170891, + "average_daily_users": 171394, "categories": { "android": [ "photos-media" @@ -1713,9 +1714,9 @@ "category": "recommended" }, "ratings": { - "average": 4.4934, - "bayesian_average": 4.488285425448023, - "count": 1139, + "average": 4.4899, + "bayesian_average": 4.484788968165164, + "count": 1141, "text_count": 425 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/re…", @@ -1738,7 +1739,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/video-background-play-fix/ve…", - "weekly_downloads": 401 + "weekly_downloads": 332 }, "notes": null }, @@ -1754,7 +1755,7 @@ "picture_url": null } ], - "average_daily_users": 85953, + "average_daily_users": 86528, "categories": { "android": [ "experimental", @@ -1892,7 +1893,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions/", - "weekly_downloads": 670 + "weekly_downloads": 2140 }, "notes": null }, @@ -1908,7 +1909,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/64/9064/12929064/12929064.pn…" } ], - "average_daily_users": 265417, + "average_daily_users": 268136, "categories": { "android": [ "photos-media", @@ -2127,8 +2128,8 @@ "category": "recommended" }, "ratings": { - "average": 4.6523, - "bayesian_average": 4.647695702345138, + "average": 4.653, + "bayesian_average": 4.648390512257286, "count": 1320, "text_count": 254 }, @@ -2151,7 +2152,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/search_by_image/versions/", - "weekly_downloads": 3986 + "weekly_downloads": 4186 }, "notes": null }, @@ -2174,7 +2175,7 @@ "picture_url": null } ], - "average_daily_users": 111888, + "average_daily_users": 112281, "categories": { "android": [ "other" @@ -2457,10 +2458,10 @@ "category": "recommended" }, "ratings": { - "average": 4.3834, - "bayesian_average": 4.378879936387472, - "count": 1252, - "text_count": 346 + "average": 4.3768, + "bayesian_average": 4.372306305313843, + "count": 1258, + "text_count": 350 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/reviews/", "requires_payment": false, @@ -2480,7 +2481,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/google-search-fixer/versions/", - "weekly_downloads": 49 + "weekly_downloads": 28 }, "notes": null }, @@ -2496,7 +2497,7 @@ "picture_url": "https://addons.mozilla.org/user-media/userpics/43/0143/143/143.png?modified…" } ], - "average_daily_users": 304718, + "average_daily_users": 307256, "categories": { "android": [ "performance", @@ -2686,10 +2687,10 @@ "category": "recommended" }, "ratings": { - "average": 4.3969, - "bayesian_average": 4.3942052905947815, - "count": 2109, - "text_count": 815 + "average": 4.3961, + "bayesian_average": 4.393408956051146, + "count": 2113, + "text_count": 817 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/reviews/", "requires_payment": false, @@ -2733,7 +2734,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/", - "weekly_downloads": 7325 + "weekly_downloads": 7459 }, "notes": null }, @@ -2749,7 +2750,7 @@ "picture_url": null } ], - "average_daily_users": 153133, + "average_daily_users": 153972, "categories": { "android": [ "performance", @@ -2763,18 +2764,18 @@ "contributions_url": "", "created": "2011-07-15T10:42:41Z", "current_version": { - "id": 5522766, + "id": 5625141, "compatibility": { "firefox": { - "min": "48.0", + "min": "113.0", "max": "*" }, "android": { - "min": "48.0", + "min": "113.0", "max": "*" } }, - "edit_url": "https://addons.mozilla.org/en-US/developers/addon/youtube-high-definition/v…", + "edit_url": "https://addons.mozilla.org/en-US/developers/addon/youtube-high-definition/v…", "is_strict_compatibility_enabled": false, "license": { "id": 12, @@ -2785,33 +2786,30 @@ "url": "http://www.gnu.org/licenses/lgpl-3.0.html" }, "release_notes": { - "en-US": "AMO GUID added" + "en-US": "Manifest v3 Support" }, - "reviewed": "2023-02-09T15:16:44Z", - "version": "109.0.0", + "reviewed": "2023-09-21T07:50:10Z", + "version": "118.0.5", "files": [ { - "id": 4067111, - "created": "2023-02-06T12:44:20Z", - "hash": "sha256:bdda70d2ad5bfc5065844b76008ac731341b46be0d43ab9de535f28206ea3c59", + "id": 4169481, + "created": "2023-09-18T12:22:43Z", + "hash": "sha256:66d24520820ea01056219751f4c42bf49cb7c0a295eb53e63cf28d603ea42d50", "is_restart_required": false, "is_webextension": true, "is_mozilla_signed_extension": false, "platform": "all", - "size": 234450, + "size": 216452, "status": "public", - "url": "https://addons.mozilla.org/firefox/downloads/file/4067111/youtube_high_defi…", + "url": "https://addons.mozilla.org/firefox/downloads/file/4169481/youtube_high_defi…", "permissions": [ - "tabs", "storage", - "cookies", - "webRequest", - "webRequestBlocking", - "<all_urls>", "*://*.youtube.com/*" ], "optional_permissions": [], - "host_permissions": [] + "host_permissions": [ + "<all_urls>" + ] } ] }, @@ -2835,7 +2833,7 @@ }, "is_disabled": false, "is_experimental": false, - "last_updated": "2023-02-09T15:16:44Z", + "last_updated": "2023-09-21T07:50:10Z", "name": { "en-US": "YouTube High Definition", "zh-TW": "YouTube High Definition" @@ -2864,10 +2862,10 @@ "category": "recommended" }, "ratings": { - "average": 3.8981, - "bayesian_average": 3.8938714538391337, - "count": 1158, - "text_count": 410 + "average": 3.9009, + "bayesian_average": 3.8966720604333664, + "count": 1161, + "text_count": 412 }, "ratings_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/revi…", "requires_payment": false, @@ -2886,7 +2884,7 @@ "type": "extension", "url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/", "versions_url": "https://addons.mozilla.org/en-US/firefox/addon/youtube-high-definition/vers…", - "weekly_downloads": 1939 + "weekly_downloads": 1510 }, "notes": null } ===================================== projects/firefox-android/config ===================================== @@ -16,7 +16,7 @@ container: var: fenix_version: 115.2.1 browser_branch: 13.0-1 - browser_build: 2 + browser_build: 4 variant: Beta # This should be updated when the list of gradle dependencies is changed. gradle_dependencies_version: 1 ===================================== projects/firefox/config ===================================== @@ -14,7 +14,7 @@ container: use_container: 1 var: - firefox_platform_version: 115.2.1 + firefox_platform_version: 115.3.0 firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '13.0' browser_branch: '[% c("var/browser_series") %]-1' @@ -86,7 +86,7 @@ targets: mullvadbrowser: git_url: https://gitlab.torproject.org/tpo/applications/mullvad-browser.git var: - browser_build: 1 + browser_build: 3 branding_directory_prefix: 'mb' gitlab_project: https://gitlab.torproject.org/tpo/applications/mullvad-browser updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' ===================================== projects/geckoview/config ===================================== @@ -14,7 +14,7 @@ container: use_container: 1 var: - geckoview_version: 115.2.1esr + geckoview_version: 115.3.0esr browser_branch: 13.0-1 browser_build: 2 copyright_year: '[% exec("git show -s --format=%ci").remove("-.*") %]' ===================================== projects/manual/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # To update, see doc/how-to-update-the-manual.txt # Remember to update also the package's hash, with the version! -version: 88998 +version: 102408 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -23,6 +23,6 @@ input_files: - project: container-image - URL: 'https://people.torproject.org/~richard/tbb_files/manual_[% c("version") %].zip' name: manual - sha256sum: 1be6cf35a3c9f243998b7611e9531d4a99591cc257cb55f3924f504b9ead71a7 + sha256sum: f9c24f300f188276ee6ec7b8eb2f7e000ec49c9bb3651b4bd4468075885a9eef - filename: packagemanual.py name: package_script ===================================== projects/openssl/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 3.0.10 +version: 3.0.11 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -33,4 +33,4 @@ input_files: - name: '[% c("var/compiler") %]' project: '[% c("var/compiler") %]' - URL: 'https://www.openssl.org/source/openssl-[% c("version") %].tar.gz' - sha256sum: 1761d4f5b13a1028b9b6f3d4b8e17feb0cedc9370f6afe61d7193d2cdce83323 + sha256sum: b3425d3bb4a2218d0697eb41f7fc0cdede016ed19ca49d168b78e8d947887f55 ===================================== projects/tor/config ===================================== @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' -version: 0.4.8.5 +version: 0.4.8.6 git_hash: 'tor-[% c("version") %]' git_url: https://gitlab.torproject.org/tpo/core/tor.git git_submodule: 1 ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: f91c2d76b73fb0d8d4429d6ec76c4e6ab622fc8e + git_hash: b7a2b2cde8e814640554e14520b6b81693810bbd targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: f083661b479d9b456e8e3ad894f1ea1131f95ca6 + git_hash: a899ebbc621f7fa7d8896248f5cb8a4866d0b2ae targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 8a98bcc4f466a6cd61c121c502898affc5b96141 + git_hash: d9587ecce92356c23dc491fdee45dcd72e03bbed compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -81,12 +81,13 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '13.0a4' + torbrowser_version: '13.0a5' torbrowser_build: 'build1' torbrowser_incremental_from: - '13.0a1' - '13.0a2' - '13.0a3' + - '13.0a4' updater_enabled: 1 build_mar: 1 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android] Pushed new tag firefox-android-115.2.1-13.0-1-build4
by Dan Ballard (＠dan) 22 Sep '23

22 Sep '23

Dan Ballard pushed new tag firefox-android-115.2.1-13.0-1-build4 at The Tor Project / Applications / firefox-android -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/tree/firef… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android][firefox-android-115.2.1-13.0-1] fixup! Bug 42089: Remove ability to submit site support requests
by Dan Ballard (＠dan) 22 Sep '23

22 Sep '23

Dan Ballard pushed to branch firefox-android-115.2.1-13.0-1 at The Tor Project / Applications / firefox-android Commits: 296e0aaa by Dan Ballard at 2023-09-21T17:27:09-07:00 fixup! Bug 42089: Remove ability to submit site support requests bug 42089: remove comments, glean is sad, and this code will never be referenced - - - - - 2 changed files: - fenix/app/metrics.yaml - fenix/app/pings.yaml Changes: ===================================== fenix/app/metrics.yaml ===================================== @@ -7738,62 +7738,62 @@ cookie_banners: metadata: tags: - Privacy&Security -# report_site_domain: -# type: url -# description: | -# A user can report a site domain(Ex. for https://edition.cnn.com/ -# site domain will be cnn.com) when the cookie banner reducer is not -# working from the cookie banner details panel. -# lifetime: ping -# send_in_pings: -# - cookie-banner-report-site -# bugs: -# - https://bugzilla.mozilla.org/show_bug.cgi?id=1805450 -# data_reviews: -# - https://github.com/mozilla-mobile/firefox-android/pull/1298#pullrequestrevi… -# data_sensitivity: -# - technical -# - interaction -# notification_emails: -# - android-probes(a)mozilla.com -# expires: 119 -# metadata: -# tags: -# - Privacy&Security -# report_site_cancel_button: -# type: event -# description: | -# The user has pressed the report site domain cancel button -# from the cookie banner reducer details panel. -# bugs: -# - https://bugzilla.mozilla.org/show_bug.cgi?id=1805450 -# data_reviews: -# - https://github.com/mozilla-mobile/firefox-android/pull/1298#pullrequestrevi… -# data_sensitivity: -# - interaction -# notification_emails: -# - android-probes(a)mozilla.com -# expires: 119 -# metadata: -# tags: -# - Privacy&Security -# report_domain_site_button: -# type: event -# description: | -# The user has pressed the report site domain button -# from the cookie banner reducer details panel. -# bugs: -# - https://bugzilla.mozilla.org/show_bug.cgi?id=1805450 -# data_reviews: -# - https://github.com/mozilla-mobile/firefox-android/pull/1298#pullrequestrevi… -# data_sensitivity: -# - interaction -# notification_emails: -# - android-probes(a)mozilla.com -# expires: 119 -# metadata: -# tags: -# - Privacy&Security + report_site_domain: + type: url + description: | + A user can report a site domain(Ex. for https://edition.cnn.com/ + site domain will be cnn.com) when the cookie banner reducer is not + working from the cookie banner details panel. + lifetime: ping + send_in_pings: + - cookie-banner-report-site + bugs: + - https://bugzilla.mozilla.org/show_bug.cgi?id=1805450 + data_reviews: + - https://github.com/mozilla-mobile/firefox-android/pull/1298#pullrequestrevi… + data_sensitivity: + - technical + - interaction + notification_emails: + - android-probes(a)mozilla.com + expires: 119 + metadata: + tags: + - Privacy&Security + report_site_cancel_button: + type: event + description: | + The user has pressed the report site domain cancel button + from the cookie banner reducer details panel. + bugs: + - https://bugzilla.mozilla.org/show_bug.cgi?id=1805450 + data_reviews: + - https://github.com/mozilla-mobile/firefox-android/pull/1298#pullrequestrevi… + data_sensitivity: + - interaction + notification_emails: + - android-probes(a)mozilla.com + expires: 119 + metadata: + tags: + - Privacy&Security + report_domain_site_button: + type: event + description: | + The user has pressed the report site domain button + from the cookie banner reducer details panel. + bugs: + - https://bugzilla.mozilla.org/show_bug.cgi?id=1805450 + data_reviews: + - https://github.com/mozilla-mobile/firefox-android/pull/1298#pullrequestrevi… + data_sensitivity: + - interaction + notification_emails: + - android-probes(a)mozilla.com + expires: 119 + metadata: + tags: + - Privacy&Security site_permissions: prompt_shown: ===================================== fenix/app/pings.yaml ===================================== @@ -65,15 +65,15 @@ spoc: notification_emails: - android-probes(a)mozilla.com -#cookie-banner-report-site: -# description: | -# This ping is needed when the cookie banner reducer doesn't work on -# a website, and the user wants to report the site. -# This ping doesn't include a client id. -# include_client_id: false -# bugs: -# - https://bugzilla.mozilla.org/show_bug.cgi?id=1805450 -# data_reviews: -# - https://github.com/mozilla-mobile/firefox-android/pull/1298#pullrequestrevi… -# notification_emails: -# - android-probes(a)mozilla.com +cookie-banner-report-site: + description: | + This ping is needed when the cookie banner reducer doesn't work on + a website, and the user wants to report the site. + This ping doesn't include a client id. + include_client_id: false + bugs: + - https://bugzilla.mozilla.org/show_bug.cgi?id=1805450 + data_reviews: + - https://github.com/mozilla-mobile/firefox-android/pull/1298#pullrequestrevi… + notification_emails: + - android-probes(a)mozilla.com View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/296… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/296… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android][firefox-android-115.2.1-13.0-1] 2 commits: fixup! Modify UI/UX
by Dan Ballard (＠dan) 22 Sep '23

22 Sep '23

Dan Ballard pushed to branch firefox-android-115.2.1-13.0-1 at The Tor Project / Applications / firefox-android Commits: 4df8127b by Dan Ballard at 2023-09-21T17:07:18-07:00 fixup! Modify UI/UX Bug 42122: fix crash due to bad android deprecation and APIs - - - - - 6a381e88 by Dan Ballard at 2023-09-21T17:07:18-07:00 fixup! Bug 41878: Add standalone Tor Bootstrap delete unused import - - - - - 1 changed file: - fenix/app/src/main/java/org/mozilla/fenix/HomeActivity.kt Changes: ===================================== fenix/app/src/main/java/org/mozilla/fenix/HomeActivity.kt ===================================== @@ -34,7 +34,6 @@ import androidx.annotation.VisibleForTesting.Companion.PROTECTED import androidx.appcompat.app.ActionBar import androidx.appcompat.widget.Toolbar import androidx.core.app.NotificationManagerCompat -import androidx.core.content.ContentProviderCompat.requireContext import androidx.lifecycle.lifecycleScope import androidx.navigation.NavDestination import androidx.navigation.NavDirections @@ -81,6 +80,7 @@ import mozilla.components.support.utils.BootUtils import mozilla.components.support.utils.ManufacturerCodes import mozilla.components.support.utils.SafeIntent import mozilla.components.support.utils.TorUtils +import mozilla.components.support.utils.ext.getParcelableExtraCompat import mozilla.components.support.utils.toSafeIntent import mozilla.components.support.webextensions.WebExtensionPopupFeature import mozilla.telemetry.glean.private.NoExtras @@ -681,7 +681,7 @@ open class HomeActivity : LocaleAwareAppCompatActivity(), NavHostActivity { } open fun handleNewIntent(intent: Intent) { - val startIntent = intent.getParcelableExtra(TorUtils.TORBROWSER_START_ACTIVITY_PROMPT, PendingIntent::class.java); // getParcelableExtra<PendingIntent>(TorUtils.TORBROWSER_START_ACTIVITY_PROMPT) + val startIntent = intent.getParcelableExtraCompat(TorUtils.TORBROWSER_START_ACTIVITY_PROMPT, PendingIntent::class.java) if (startIntent != null) { if (startIntent.creatorPackage == applicationContext.packageName) { val dialog = getOrCreateDialog() View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/compare/84… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/compare/84… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/firefox-android] Pushed new tag firefox-android-115.2.1-13.0-1-build3
by richard (＠richard) 21 Sep '23

21 Sep '23

richard pushed new tag firefox-android-115.2.1-13.0-1-build3 at The Tor Project / Applications / firefox-android -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/tree/firef… You're receiving this email because of your account on gitlab.torproject.org.

1 0