- tbb-commits - lists.torproject.org

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.1.0esr-15.0-1] fixup! BB 40925: Implemented the Security Level component
by henry (＠henry) 30 Jul '25

30 Jul '25

henry pushed to branch mullvad-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: f9f53b49 by henry at 2025-07-30T17:32:14+01:00 fixup! BB 40925: Implemented the Security Level component TB 43844: Flip the security level shield icon for RTL. We also do some minor clean up in the areas we touch. (cherry picked from commit d116014b401543a20ff66efc0027c65a74cf9d16) Co-authored-by: Henry Wilkes <henry(a)torproject.org> - - - - - 5 changed files: - browser/components/securitylevel/content/securityLevel.js - browser/components/securitylevel/content/securityLevelButton.css - browser/components/securitylevel/content/securityLevelPanel.css - browser/components/securitylevel/content/securityLevelPanel.inc.xhtml - browser/components/securitylevel/content/securityLevelPreferences.css Changes: ===================================== browser/components/securitylevel/content/securityLevel.js ===================================== @@ -156,7 +156,6 @@ var SecurityLevelPanel = { _populateXUL() { this._elements = { panel: document.getElementById("securityLevel-panel"), - background: document.getElementById("securityLevel-background"), levelName: document.getElementById("securityLevel-level"), summary: document.getElementById("securityLevel-summary"), }; @@ -190,7 +189,7 @@ var SecurityLevelPanel = { const level = SecurityLevelPrefs.securityLevelSummary; // Descriptions change based on security level - this._elements.background.setAttribute("level", level); + this._elements.panel.setAttribute("level", level); let l10nIdLevel; let l10nIdSummary; switch (level) { ===================================== browser/components/securitylevel/content/securityLevelButton.css ===================================== @@ -1,12 +1,19 @@ -toolbarbutton#security-level-button[level="standard"] { +#security-level-button[level="standard"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard"); } -toolbarbutton#security-level-button[level="safer"] { + +#security-level-button[level="safer"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safer"); } -toolbarbutton#security-level-button[level="safest"] { + +#security-level-button[level="safest"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safest"); } -toolbarbutton#security-level-button[level="custom"] { + +#security-level-button[level="custom"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard_custom"); } + +#security-level-button:-moz-locale-dir(rtl) .toolbarbutton-icon { + transform: scaleX(-1); +} ===================================== browser/components/securitylevel/content/securityLevelPanel.css ===================================== @@ -3,40 +3,54 @@ #securityLevel-background { min-height: 10em; padding-inline: 16px; - padding-block: 16px 8px; - gap: 16px; - background-repeat: no-repeat; - background-position-y: top 0.4em; - /* Icon center should be in-line with end padding. - * We set the right-to-left position here, and the left-to-right position - * below. */ - --background-inline-offset: calc(16px - 4.5em); - background-position-x: left var(--background-inline-offset); - background-size: 9em 9em; + column-gap: 0.5em; + display: grid; + grid-template: + "top-pad icon" 16px + "title icon" auto + "body icon" auto + "learn-more icon" auto + "bottom-pad icon" minmax(8px, 1fr) + / auto auto; +} + +#securityLevel-background-image { + grid-area: icon; + --security-level-icon-size: 9em; + width: var(--security-level-icon-size); + height: var(--security-level-icon-size); + margin-block: 0.4em; + /* Middle of shield aligns with the panel padding: */ + margin-inline-end: calc(-0.5 * var(--security-level-icon-size)); + align-self: start; + justify-self: end; + /* This icon is meant to act as background, so disable dragging or interfering + * with clicks. */ + pointer-events: none; -moz-context-properties: fill, fill-opacity; fill-opacity: 1; fill: var(--border-color-card); } /* NOTE: Use ":dir" instead of ":-moz-locale-dir" when panel switches to HTML. */ -#securityLevel-background:-moz-locale-dir(ltr) { - background-position-x: right var(--background-inline-offset); +#securityLevel-background-image:-moz-locale-dir(rtl) { + transform: scaleX(-1); } -#securityLevel-background:is([level="standard"], [level="custom"]) { - background-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard"); +#securityLevel-panel:is([level="standard"], [level="custom"]) #securityLevel-background-image { + content: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard"); } -#securityLevel-background[level="safer"] { - background-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safer"); +#securityLevel-panel[level="safer"] #securityLevel-background-image { + content: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safer"); } -#securityLevel-background[level="safest"] { - background-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safest"); +#securityLevel-panel[level="safest"] #securityLevel-background-image { + content: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safest"); } #securityLevel-background p { - margin: 0; + margin-block: 0 16px; } /* Override margin in panelUI-shared.css */ @@ -47,13 +61,15 @@ #securityLevel-level { font-size: 1.25em; font-weight: 600; + grid-area: title; } #securityLevel-summary { - padding-inline-end: 5em; max-width: 20em; + grid-area: body; } #securityLevel-learnMore { align-self: start; + grid-area: learn-more; } ===================================== browser/components/securitylevel/content/securityLevelPanel.inc.xhtml ===================================== @@ -1,7 +1,7 @@ <panel id="securityLevel-panel" role="dialog" aria-labelledby="securityLevel-header" - aria-describedby="securityLevel-subheading securityLevel-summary" + aria-describedby="securityLevel-level securityLevel-summary" type="arrow" orient="vertical" class="cui-widget-panel panel-no-padding"> @@ -13,9 +13,7 @@ </box> <toolbarseparator id="securityLevel-separator"></toolbarseparator> <vbox id="securityLevel-background" class="panel-subview-body"> - <html:p id="securityLevel-subheading"> - <html:span id="securityLevel-level"></html:span> - </html:p> + <html:p id="securityLevel-level"></html:p> <html:p id="securityLevel-summary"></html:p> <html:a is="moz-support-link" @@ -23,6 +21,7 @@ tor-manual-page="security-settings" data-l10n-id="security-level-panel-learn-more-link" ></html:a> + <html:img id="securityLevel-background-image" alt="" /> </vbox> <html:moz-button-group class="panel-footer"> <button ===================================== browser/components/securitylevel/content/securityLevelPreferences.css ===================================== @@ -18,6 +18,10 @@ margin-inline-end: var(--space-large); } +:-moz-locale-dir(rtl) .security-level-icon { + transform: scaleX(-1); +} + .security-level-current-badge { grid-area: badge; align-self: center; View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/f9f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/f9f… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-140.1.0esr-15.0-1] fixup! BB 40925: Implemented the Security Level component
by henry (＠henry) 30 Jul '25

30 Jul '25

henry pushed to branch base-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 0d8bd916 by henry at 2025-07-30T16:29:07+00:00 fixup! BB 40925: Implemented the Security Level component TB 43844: Flip the security level shield icon for RTL. We also do some minor clean up in the areas we touch. (cherry picked from commit d116014b401543a20ff66efc0027c65a74cf9d16) Co-authored-by: Henry Wilkes <henry(a)torproject.org> - - - - - 5 changed files: - browser/components/securitylevel/content/securityLevel.js - browser/components/securitylevel/content/securityLevelButton.css - browser/components/securitylevel/content/securityLevelPanel.css - browser/components/securitylevel/content/securityLevelPanel.inc.xhtml - browser/components/securitylevel/content/securityLevelPreferences.css Changes: ===================================== browser/components/securitylevel/content/securityLevel.js ===================================== @@ -156,7 +156,6 @@ var SecurityLevelPanel = { _populateXUL() { this._elements = { panel: document.getElementById("securityLevel-panel"), - background: document.getElementById("securityLevel-background"), levelName: document.getElementById("securityLevel-level"), summary: document.getElementById("securityLevel-summary"), }; @@ -190,7 +189,7 @@ var SecurityLevelPanel = { const level = SecurityLevelPrefs.securityLevelSummary; // Descriptions change based on security level - this._elements.background.setAttribute("level", level); + this._elements.panel.setAttribute("level", level); let l10nIdLevel; let l10nIdSummary; switch (level) { ===================================== browser/components/securitylevel/content/securityLevelButton.css ===================================== @@ -1,12 +1,19 @@ -toolbarbutton#security-level-button[level="standard"] { +#security-level-button[level="standard"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard"); } -toolbarbutton#security-level-button[level="safer"] { + +#security-level-button[level="safer"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safer"); } -toolbarbutton#security-level-button[level="safest"] { + +#security-level-button[level="safest"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safest"); } -toolbarbutton#security-level-button[level="custom"] { + +#security-level-button[level="custom"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard_custom"); } + +#security-level-button:-moz-locale-dir(rtl) .toolbarbutton-icon { + transform: scaleX(-1); +} ===================================== browser/components/securitylevel/content/securityLevelPanel.css ===================================== @@ -3,40 +3,54 @@ #securityLevel-background { min-height: 10em; padding-inline: 16px; - padding-block: 16px 8px; - gap: 16px; - background-repeat: no-repeat; - background-position-y: top 0.4em; - /* Icon center should be in-line with end padding. - * We set the right-to-left position here, and the left-to-right position - * below. */ - --background-inline-offset: calc(16px - 4.5em); - background-position-x: left var(--background-inline-offset); - background-size: 9em 9em; + column-gap: 0.5em; + display: grid; + grid-template: + "top-pad icon" 16px + "title icon" auto + "body icon" auto + "learn-more icon" auto + "bottom-pad icon" minmax(8px, 1fr) + / auto auto; +} + +#securityLevel-background-image { + grid-area: icon; + --security-level-icon-size: 9em; + width: var(--security-level-icon-size); + height: var(--security-level-icon-size); + margin-block: 0.4em; + /* Middle of shield aligns with the panel padding: */ + margin-inline-end: calc(-0.5 * var(--security-level-icon-size)); + align-self: start; + justify-self: end; + /* This icon is meant to act as background, so disable dragging or interfering + * with clicks. */ + pointer-events: none; -moz-context-properties: fill, fill-opacity; fill-opacity: 1; fill: var(--border-color-card); } /* NOTE: Use ":dir" instead of ":-moz-locale-dir" when panel switches to HTML. */ -#securityLevel-background:-moz-locale-dir(ltr) { - background-position-x: right var(--background-inline-offset); +#securityLevel-background-image:-moz-locale-dir(rtl) { + transform: scaleX(-1); } -#securityLevel-background:is([level="standard"], [level="custom"]) { - background-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard"); +#securityLevel-panel:is([level="standard"], [level="custom"]) #securityLevel-background-image { + content: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard"); } -#securityLevel-background[level="safer"] { - background-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safer"); +#securityLevel-panel[level="safer"] #securityLevel-background-image { + content: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safer"); } -#securityLevel-background[level="safest"] { - background-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safest"); +#securityLevel-panel[level="safest"] #securityLevel-background-image { + content: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safest"); } #securityLevel-background p { - margin: 0; + margin-block: 0 16px; } /* Override margin in panelUI-shared.css */ @@ -47,13 +61,15 @@ #securityLevel-level { font-size: 1.25em; font-weight: 600; + grid-area: title; } #securityLevel-summary { - padding-inline-end: 5em; max-width: 20em; + grid-area: body; } #securityLevel-learnMore { align-self: start; + grid-area: learn-more; } ===================================== browser/components/securitylevel/content/securityLevelPanel.inc.xhtml ===================================== @@ -1,7 +1,7 @@ <panel id="securityLevel-panel" role="dialog" aria-labelledby="securityLevel-header" - aria-describedby="securityLevel-subheading securityLevel-summary" + aria-describedby="securityLevel-level securityLevel-summary" type="arrow" orient="vertical" class="cui-widget-panel panel-no-padding"> @@ -13,9 +13,7 @@ </box> <toolbarseparator id="securityLevel-separator"></toolbarseparator> <vbox id="securityLevel-background" class="panel-subview-body"> - <html:p id="securityLevel-subheading"> - <html:span id="securityLevel-level"></html:span> - </html:p> + <html:p id="securityLevel-level"></html:p> <html:p id="securityLevel-summary"></html:p> <html:a is="moz-support-link" @@ -23,6 +21,7 @@ tor-manual-page="security-settings" data-l10n-id="security-level-panel-learn-more-link" ></html:a> + <html:img id="securityLevel-background-image" alt="" /> </vbox> <html:moz-button-group class="panel-footer"> <button ===================================== browser/components/securitylevel/content/securityLevelPreferences.css ===================================== @@ -18,6 +18,10 @@ margin-inline-end: var(--space-large); } +:-moz-locale-dir(rtl) .security-level-icon { + transform: scaleX(-1); +} + .security-level-current-badge { grid-area: badge; align-self: center; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/0d8bd91… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/0d8bd91… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.1.0esr-15.0-1] fixup! BB 40925: Implemented the Security Level component
by henry (＠henry) 30 Jul '25

30 Jul '25

henry pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: d116014b by Henry Wilkes at 2025-07-30T16:08:38+01:00 fixup! BB 40925: Implemented the Security Level component TB 43844: Flip the security level shield icon for RTL. We also do some minor clean up in the areas we touch. - - - - - 5 changed files: - browser/components/securitylevel/content/securityLevel.js - browser/components/securitylevel/content/securityLevelButton.css - browser/components/securitylevel/content/securityLevelPanel.css - browser/components/securitylevel/content/securityLevelPanel.inc.xhtml - browser/components/securitylevel/content/securityLevelPreferences.css Changes: ===================================== browser/components/securitylevel/content/securityLevel.js ===================================== @@ -156,7 +156,6 @@ var SecurityLevelPanel = { _populateXUL() { this._elements = { panel: document.getElementById("securityLevel-panel"), - background: document.getElementById("securityLevel-background"), levelName: document.getElementById("securityLevel-level"), summary: document.getElementById("securityLevel-summary"), }; @@ -190,7 +189,7 @@ var SecurityLevelPanel = { const level = SecurityLevelPrefs.securityLevelSummary; // Descriptions change based on security level - this._elements.background.setAttribute("level", level); + this._elements.panel.setAttribute("level", level); let l10nIdLevel; let l10nIdSummary; switch (level) { ===================================== browser/components/securitylevel/content/securityLevelButton.css ===================================== @@ -1,12 +1,19 @@ -toolbarbutton#security-level-button[level="standard"] { +#security-level-button[level="standard"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard"); } -toolbarbutton#security-level-button[level="safer"] { + +#security-level-button[level="safer"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safer"); } -toolbarbutton#security-level-button[level="safest"] { + +#security-level-button[level="safest"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safest"); } -toolbarbutton#security-level-button[level="custom"] { + +#security-level-button[level="custom"] { list-style-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard_custom"); } + +#security-level-button:-moz-locale-dir(rtl) .toolbarbutton-icon { + transform: scaleX(-1); +} ===================================== browser/components/securitylevel/content/securityLevelPanel.css ===================================== @@ -3,40 +3,54 @@ #securityLevel-background { min-height: 10em; padding-inline: 16px; - padding-block: 16px 8px; - gap: 16px; - background-repeat: no-repeat; - background-position-y: top 0.4em; - /* Icon center should be in-line with end padding. - * We set the right-to-left position here, and the left-to-right position - * below. */ - --background-inline-offset: calc(16px - 4.5em); - background-position-x: left var(--background-inline-offset); - background-size: 9em 9em; + column-gap: 0.5em; + display: grid; + grid-template: + "top-pad icon" 16px + "title icon" auto + "body icon" auto + "learn-more icon" auto + "bottom-pad icon" minmax(8px, 1fr) + / auto auto; +} + +#securityLevel-background-image { + grid-area: icon; + --security-level-icon-size: 9em; + width: var(--security-level-icon-size); + height: var(--security-level-icon-size); + margin-block: 0.4em; + /* Middle of shield aligns with the panel padding: */ + margin-inline-end: calc(-0.5 * var(--security-level-icon-size)); + align-self: start; + justify-self: end; + /* This icon is meant to act as background, so disable dragging or interfering + * with clicks. */ + pointer-events: none; -moz-context-properties: fill, fill-opacity; fill-opacity: 1; fill: var(--border-color-card); } /* NOTE: Use ":dir" instead of ":-moz-locale-dir" when panel switches to HTML. */ -#securityLevel-background:-moz-locale-dir(ltr) { - background-position-x: right var(--background-inline-offset); +#securityLevel-background-image:-moz-locale-dir(rtl) { + transform: scaleX(-1); } -#securityLevel-background:is([level="standard"], [level="custom"]) { - background-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard"); +#securityLevel-panel:is([level="standard"], [level="custom"]) #securityLevel-background-image { + content: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#standard"); } -#securityLevel-background[level="safer"] { - background-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safer"); +#securityLevel-panel[level="safer"] #securityLevel-background-image { + content: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safer"); } -#securityLevel-background[level="safest"] { - background-image: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safest"); +#securityLevel-panel[level="safest"] #securityLevel-background-image { + content: url("chrome://browser/content/securitylevel/securityLevelIcon.svg#safest"); } #securityLevel-background p { - margin: 0; + margin-block: 0 16px; } /* Override margin in panelUI-shared.css */ @@ -47,13 +61,15 @@ #securityLevel-level { font-size: 1.25em; font-weight: 600; + grid-area: title; } #securityLevel-summary { - padding-inline-end: 5em; max-width: 20em; + grid-area: body; } #securityLevel-learnMore { align-self: start; + grid-area: learn-more; } ===================================== browser/components/securitylevel/content/securityLevelPanel.inc.xhtml ===================================== @@ -1,7 +1,7 @@ <panel id="securityLevel-panel" role="dialog" aria-labelledby="securityLevel-header" - aria-describedby="securityLevel-subheading securityLevel-summary" + aria-describedby="securityLevel-level securityLevel-summary" type="arrow" orient="vertical" class="cui-widget-panel panel-no-padding"> @@ -13,9 +13,7 @@ </box> <toolbarseparator id="securityLevel-separator"></toolbarseparator> <vbox id="securityLevel-background" class="panel-subview-body"> - <html:p id="securityLevel-subheading"> - <html:span id="securityLevel-level"></html:span> - </html:p> + <html:p id="securityLevel-level"></html:p> <html:p id="securityLevel-summary"></html:p> <html:a is="moz-support-link" @@ -23,6 +21,7 @@ tor-manual-page="security-settings" data-l10n-id="security-level-panel-learn-more-link" ></html:a> + <html:img id="securityLevel-background-image" alt="" /> </vbox> <html:moz-button-group class="panel-footer"> <button ===================================== browser/components/securitylevel/content/securityLevelPreferences.css ===================================== @@ -18,6 +18,10 @@ margin-inline-end: var(--space-large); } +:-moz-locale-dir(rtl) .security-level-icon { + transform: scaleX(-1); +} + .security-level-current-badge { grid-area: badge; align-self: center; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d116014… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d116014… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser-update-responses][main] 4 commits: alpha: new version, 15.0a1 (linux-x86_64)
by ma1 (＠ma1) 30 Jul '25

30 Jul '25

ma1 pushed to branch main at The Tor Project / Applications / mullvad-browser-update-responses Commits: 22ef5607 by hackademix at 2025-07-30T16:16:14+02:00 alpha: new version, 15.0a1 (linux-x86_64) - - - - - 39c1e506 by hackademix at 2025-07-30T16:16:14+02:00 alpha: new version, 15.0a1 (macos) - - - - - 6087003e by hackademix at 2025-07-30T16:16:15+02:00 alpha: new version, 15.0a1 (windows-x86_64) - - - - - df559cee by hackademix at 2025-07-30T16:16:15+02:00 alpha: new version, 15.0a1 - - - - - 31 changed files: - update_1/alpha/download-linux-x86_64.json - update_1/alpha/download-macos.json - update_1/alpha/download-windows-x86_64.json - update_1/alpha/downloads.json - update_1/alpha/linux-x86_64/.htaccess - − update_1/alpha/linux-x86_64/14.5a3-14.5a6-linux-x86_64.xml - − update_1/alpha/linux-x86_64/14.5a4-14.5a6-linux-x86_64.xml - − update_1/alpha/linux-x86_64/14.5a5-14.5a6-linux-x86_64.xml - − update_1/alpha/linux-x86_64/14.5a6-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-14.5a4-15.0a1-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-14.5a5-15.0a1-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-14.5a6-15.0a1-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-15.0a1-linux-x86_64.xml - update_1/alpha/macos/.htaccess - − update_1/alpha/macos/14.5a3-14.5a6-macos.xml - − update_1/alpha/macos/14.5a4-14.5a6-macos.xml - − update_1/alpha/macos/14.5a5-14.5a6-macos.xml - − update_1/alpha/macos/14.5a6-macos.xml - + update_1/alpha/macos/update-14.5a4-15.0a1-macos.xml - + update_1/alpha/macos/update-14.5a5-15.0a1-macos.xml - + update_1/alpha/macos/update-14.5a6-15.0a1-macos.xml - + update_1/alpha/macos/update-15.0a1-macos.xml - update_1/alpha/windows-x86_64/.htaccess - − update_1/alpha/windows-x86_64/14.5a3-14.5a6-windows-x86_64.xml - − update_1/alpha/windows-x86_64/14.5a4-14.5a6-windows-x86_64.xml - − update_1/alpha/windows-x86_64/14.5a5-14.5a6-windows-x86_64.xml - − update_1/alpha/windows-x86_64/14.5a6-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-14.5a4-15.0a1-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-14.5a5-15.0a1-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-14.5a6-15.0a1-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-15.0a1-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] 6 commits: alpha: new version, 15.0a1 (linux-i686)
by morgan (＠morgan) 30 Jul '25

30 Jul '25

morgan pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 7908070f by Morgan at 2025-07-30T13:16:44+00:00 alpha: new version, 15.0a1 (linux-i686) - - - - - 0ea6b430 by Morgan at 2025-07-30T13:16:44+00:00 alpha: new version, 15.0a1 (linux-x86_64) - - - - - 55e0aa50 by Morgan at 2025-07-30T13:16:44+00:00 alpha: new version, 15.0a1 (macos) - - - - - ce54652c by Morgan at 2025-07-30T13:16:45+00:00 alpha: new version, 15.0a1 (windows-i686) - - - - - 1d5dd3c0 by Morgan at 2025-07-30T13:16:45+00:00 alpha: new version, 15.0a1 (windows-x86_64) - - - - - 9029c1b9 by Morgan at 2025-07-30T13:16:45+00:00 alpha: new version, 15.0a1 - - - - - 47 changed files: - update_3/alpha/download-android-aarch64.json - update_3/alpha/download-android-armv7.json - update_3/alpha/download-android-x86.json - update_3/alpha/download-android-x86_64.json - update_3/alpha/download-linux-i686.json - update_3/alpha/download-linux-x86_64.json - update_3/alpha/download-macos.json - update_3/alpha/download-windows-i686.json - update_3/alpha/download-windows-x86_64.json - update_3/alpha/downloads.json - update_3/alpha/linux-i686/.htaccess - update_3/alpha/linux-i686/14.5a3-14.5a6-linux-i686.xml → update_3/alpha/linux-i686/update-14.5a4-15.0a1-linux-i686.xml - update_3/alpha/linux-i686/14.5a4-14.5a6-linux-i686.xml → update_3/alpha/linux-i686/update-14.5a5-15.0a1-linux-i686.xml - update_3/alpha/linux-i686/14.5a5-14.5a6-linux-i686.xml → update_3/alpha/linux-i686/update-14.5a6-15.0a1-linux-i686.xml - update_3/alpha/linux-i686/14.5a6-linux-i686.xml → update_3/alpha/linux-i686/update-15.0a1-linux-i686.xml - update_3/alpha/linux-x86_64/.htaccess - update_3/alpha/linux-x86_64/14.5a3-14.5a6-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-14.5a4-15.0a1-linux-x86_64.xml - update_3/alpha/linux-x86_64/14.5a4-14.5a6-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-14.5a5-15.0a1-linux-x86_64.xml - update_3/alpha/linux-x86_64/14.5a5-14.5a6-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-14.5a6-15.0a1-linux-x86_64.xml - update_3/alpha/linux-x86_64/14.5a6-linux-x86_64.xml → update_3/alpha/linux-x86_64/update-15.0a1-linux-x86_64.xml - update_3/alpha/macos/.htaccess - − update_3/alpha/macos/14.5a3-14.5a6-macos.xml - − update_3/alpha/macos/14.5a4-14.5a6-macos.xml - − update_3/alpha/macos/14.5a5-14.5a6-macos.xml - − update_3/alpha/macos/14.5a6-macos.xml - + update_3/alpha/macos/update-14.5a4-15.0a1-macos.xml - + update_3/alpha/macos/update-14.5a5-15.0a1-macos.xml - + update_3/alpha/macos/update-14.5a6-15.0a1-macos.xml - + update_3/alpha/macos/update-15.0a1-macos.xml - update_3/alpha/windows-i686/.htaccess - − update_3/alpha/windows-i686/14.5a3-14.5a6-windows-i686.xml - − update_3/alpha/windows-i686/14.5a4-14.5a6-windows-i686.xml - − update_3/alpha/windows-i686/14.5a5-14.5a6-windows-i686.xml - − update_3/alpha/windows-i686/14.5a6-windows-i686.xml - + update_3/alpha/windows-i686/update-14.5a4-15.0a1-windows-i686.xml - + update_3/alpha/windows-i686/update-14.5a5-15.0a1-windows-i686.xml - + update_3/alpha/windows-i686/update-14.5a6-15.0a1-windows-i686.xml - + update_3/alpha/windows-i686/update-15.0a1-windows-i686.xml - update_3/alpha/windows-x86_64/.htaccess - − update_3/alpha/windows-x86_64/14.5a3-14.5a6-windows-x86_64.xml - − update_3/alpha/windows-x86_64/14.5a4-14.5a6-windows-x86_64.xml - − update_3/alpha/windows-x86_64/14.5a5-14.5a6-windows-x86_64.xml - − update_3/alpha/windows-x86_64/14.5a6-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-14.5a4-15.0a1-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-14.5a5-15.0a1-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-14.5a6-15.0a1-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-15.0a1-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new branch tor-browser-141.0a1-16.0-2
by brizental (＠brizental) 30 Jul '25

30 Jul '25

brizental pushed new branch tor-browser-141.0a1-16.0-2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41527: Update libdmg-hfsplus and enable LZMA compression on dmgs.
by Pier Angelo Vendrame (＠pierov) 30 Jul '25

30 Jul '25

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 0bd556ab by Pier Angelo Vendrame at 2025-07-30T13:58:02+02:00 Bug 41527: Update libdmg-hfsplus and enable LZMA compression on dmgs. - - - - - 4 changed files: - projects/browser/ddmg.sh - projects/libdmg-hfsplus/config - tools/signing/ddmg.sh - tools/signing/gatekeeper-bundling.sh Changes: ===================================== projects/browser/ddmg.sh ===================================== @@ -37,7 +37,7 @@ hfsplus "$hfsfile" symlink /Applications /Applications # Show the volume icon hfsplus "$hfsfile" attr / C -dmg dmg "$hfsfile" [% c('dmg_out', { error_if_undef => 1 }) %] +dmg dmg --compression lzma --level 5 --run-sectors 2048 "$hfsfile" [% c('dmg_out', { error_if_undef => 1 }) %] popd rm -Rf "$dmg_tmpdir" ===================================== projects/libdmg-hfsplus/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' git_url: https://github.com/mozilla/libdmg-hfsplus -git_hash: a0a959bd25370c1c0a00c9ec525e3e78285adbf9 +git_hash: d6287b5afc2406b398de42f74eba432f2123b937 filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -10,6 +10,7 @@ var: - build-essential - zlib1g-dev - libbz2-dev + - liblzma-dev input_files: - project: container-image - name: cmake ===================================== tools/signing/ddmg.sh ===================================== @@ -57,7 +57,7 @@ hfsplus "$hfsfile" symlink /Applications /Applications # Show the volume icon hfsplus "$hfsfile" attr / C -dmg dmg "$hfsfile" "$dest_file" +dmg dmg --compression lzma --level 5 --run-sectors 2048 "$hfsfile" "$dest_file" echo "Finished: " $(basename $dest_file) ===================================== tools/signing/gatekeeper-bundling.sh ===================================== @@ -39,7 +39,7 @@ test -f $faketime_path || \ exit_error "$faketime_path is missing" test -d $macos_stapled_dir || \ exit_error "The stapled macos zip files should be placed in directory $macos_stapled_dir" -libdmg_file="$script_dir/../../out/libdmg-hfsplus/libdmg-hfsplus-a0a959bd2537-f2819c.tar.zst" +libdmg_file="$script_dir/../../out/libdmg-hfsplus/libdmg-hfsplus-d6287b5afc24-6f206c.tar.zst" test -f "$libdmg_file" || \ exit_error "$libdmg_file is missing." \ "You can build it with:" \ View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/0… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.1.0esr-15.0-1] fixup! MB 37: Customization for the about dialog
by Pier Angelo Vendrame (＠pierov) 30 Jul '25

30 Jul '25

Pier Angelo Vendrame pushed to branch mullvad-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 1a5441f6 by Pier Angelo Vendrame at 2025-07-30T11:53:50+02:00 fixup! MB 37: Customization for the about dialog MB 451: The restart to apply button doesn't work - - - - - 1 changed file: - browser/base/content/aboutDialog.xhtml Changes: ===================================== browser/base/content/aboutDialog.xhtml ===================================== @@ -104,12 +104,10 @@ <label id="version" class="update"/> <label id="releasenotes" is="text-link" hidden="true" data-l10n-id="releaseNotes-link"/> </hbox> -#ifndef MULLVAD_BROWSER - <description class="text-blurb"> + <description class="text-blurb" hidden="true"> <label id="aboutDialogHelpLink" is="text-link" data-l10n-id="aboutdialog-help-user"/> <label id="submit-feedback" is="text-link" data-l10n-id="aboutdialog-submit-feedback"/> </description> -#endif </vbox> #endif </hbox> View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/1a5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/1a5… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.1.0esr-15.0-1] fixup! BB 43322: Customize the font visibility lists.
by Pier Angelo Vendrame (＠pierov) 30 Jul '25

30 Jul '25

Pier Angelo Vendrame pushed to branch mullvad-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: ac53dfbf by Pier Angelo Vendrame at 2025-07-30T11:33:34+02:00 fixup! BB 43322: Customize the font visibility lists. BB 44046: Replace the macro we use in StandardFonts-win10.inc. For consistency with other changes in the same commit, we should use BASE_BROWSER_VERSION rather than BASE_BROWSER_UPDATE. - - - - - 1 changed file: - gfx/thebes/StandardFonts-win10.inc Changes: ===================================== gfx/thebes/StandardFonts-win10.inc ===================================== @@ -2,7 +2,7 @@ * License, v. 2.0. If a copy of the MPL was not distributed with this * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ -#ifndef BASE_BROWSER_UPDATE +#ifndef BASE_BROWSER_VERSION // List of standard font families installed as part of Windows 10 // from https://docs.microsoft.com/en-us/typography/fonts/windows_10_font_list // TODO: check whether we need to list legacy styled family names like "... Light". View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/ac5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/ac5… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-140.1.0esr-15.0-1] fixup! BB 43322: Customize the font visibility lists.
by Pier Angelo Vendrame (＠pierov) 30 Jul '25

30 Jul '25

Pier Angelo Vendrame pushed to branch base-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 6b8311e7 by Pier Angelo Vendrame at 2025-07-30T11:32:07+02:00 fixup! BB 43322: Customize the font visibility lists. BB 44046: Replace the macro we use in StandardFonts-win10.inc. For consistency with other changes in the same commit, we should use BASE_BROWSER_VERSION rather than BASE_BROWSER_UPDATE. - - - - - 1 changed file: - gfx/thebes/StandardFonts-win10.inc Changes: ===================================== gfx/thebes/StandardFonts-win10.inc ===================================== @@ -2,7 +2,7 @@ * License, v. 2.0. If a copy of the MPL was not distributed with this * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ -#ifndef BASE_BROWSER_UPDATE +#ifndef BASE_BROWSER_VERSION // List of standard font families installed as part of Windows 10 // from https://docs.microsoft.com/en-us/typography/fonts/windows_10_font_list // TODO: check whether we need to list legacy styled family names like "... Light". View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6b8311e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6b8311e… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.1.0esr-15.0-1] fixup! BB 43322: Customize the font visibility lists.
by Pier Angelo Vendrame (＠pierov) 30 Jul '25

30 Jul '25

Pier Angelo Vendrame pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: e4ee090b by Pier Angelo Vendrame at 2025-07-30T10:59:35+02:00 fixup! BB 43322: Customize the font visibility lists. BB 44046: Replace the macro we use in StandardFonts-win10.inc. For consistency with other changes in the same commit, we should use BASE_BROWSER_VERSION rather than BASE_BROWSER_UPDATE. - - - - - 1 changed file: - gfx/thebes/StandardFonts-win10.inc Changes: ===================================== gfx/thebes/StandardFonts-win10.inc ===================================== @@ -2,7 +2,7 @@ * License, v. 2.0. If a copy of the MPL was not distributed with this * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ -#ifndef BASE_BROWSER_UPDATE +#ifndef BASE_BROWSER_VERSION // List of standard font families installed as part of Windows 10 // from https://docs.microsoft.com/en-us/typography/fonts/windows_10_font_list // TODO: check whether we need to list legacy styled family names like "... Light". View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/e4ee090… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/e4ee090… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.1.0esr-15.0-1] fixup! TB 27476: Implement about:torconnect captive portal within Tor Browser
by henry (＠henry) 29 Jul '25

29 Jul '25

henry pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 44539ee4 by Henry Wilkes at 2025-07-29T16:01:24+00:00 fixup! TB 27476: Implement about:torconnect captive portal within Tor Browser TB 43832: Drop eslint-env - - - - - 1 changed file: - toolkit/components/torconnect/content/torConnectUrlbarButton.js Changes: ===================================== toolkit/components/torconnect/content/torConnectUrlbarButton.js ===================================== @@ -1,5 +1,3 @@ -/* eslint-env mozilla/browser-window */ - /** * A "Connect" button shown in the urlbar when not connected to tor and in tabs * other than about:torconnect. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/44539ee… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/44539ee… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.1.0esr-15.0-1] TB 43817: Add tests for Tor Browser
by brizental (＠brizental) 29 Jul '25

29 Jul '25

brizental pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 692f39dc by Beatriz Rizental at 2025-07-29T17:03:46+02:00 TB 43817: Add tests for Tor Browser This is a catch all commits for adding any tests or testing infrastructure that doesn't obviously fit any other commit. - - - - - 3 changed files: - testing/moz.build - + testing/tor/marionette.toml - + testing/tor/test_network_check.py Changes: ===================================== testing/moz.build ===================================== @@ -17,3 +17,5 @@ DIRS += ["mozbase", "mozharness"] PERFTESTS_MANIFESTS += [ "performance/perftest.toml", ] + +MARIONETTE_MANIFESTS += ["tor/marionette.toml"] ===================================== testing/tor/marionette.toml ===================================== @@ -0,0 +1,3 @@ +[DEFAULT] + +["test_network_check.py"] ===================================== testing/tor/test_network_check.py ===================================== @@ -0,0 +1,68 @@ +from marionette_driver import By, Wait, errors +from marionette_driver.localization import L10n +from marionette_harness import MarionetteTestCase + +NETWORK_CHECK_URL = "https://check.torproject.org/" +TOR_BOOTSTRAP_TIMEOUT = 30 # 30s + +STRINGS_LOCATION = "chrome://torbutton/locale/torConnect.properties" + + +class TestNetworkCheck(MarionetteTestCase): + def setUp(self): + MarionetteTestCase.setUp(self) + + self.l10n = L10n(self.marionette) + + def attemptConnection(self, tries=1): + if tries > 3: + self.assertTrue(False, "Failed to connect to Tor after 3 attempts") + + connectBtn = self.marionette.find_element(By.ID, "connectButton") + Wait(self.marionette, timeout=10).until( + lambda _: connectBtn.is_displayed(), + message="Timed out waiting for tor connect button to show up.", + ) + connectBtn.click() + + try: + + def check(m): + if not m.get_url().startswith("about:torconnect"): + # We have finished connecting and have been redirected. + return True + + try: + heading = self.marionette.find_element(By.ID, "tor-connect-heading") + except errors.NoSuchElementException: + # Page is probably redirecting. + return False + + if heading.text not in [ + self.l10n.localize_property( + [STRINGS_LOCATION], "torConnect.torConnecting" + ), + self.l10n.localize_property( + [STRINGS_LOCATION], "torConnect.torConnected" + ), + ]: + raise ValueError("Tor connect page is not connecting or connected") + + return False + + Wait(self.marionette, timeout=TOR_BOOTSTRAP_TIMEOUT).until(check) + except (errors.TimeoutException, ValueError): + cancelBtn = self.marionette.find_element(By.ID, "cancelButton") + if cancelBtn.is_displayed(): + cancelBtn.click() + + self.attemptConnection(tries + 1) + + def test_network_check(self): + self.attemptConnection() + self.marionette.navigate(NETWORK_CHECK_URL) + self.assertRegex( + self.marionette.title, + r"^Congratulations\.", + f"{NETWORK_CHECK_URL} should have the expected title.", + ) View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/692f39d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/692f39d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.1.0esr-15.0-1] fixup! BB 41581: Hide NoScript extension's toolbar button by default.
by morgan (＠morgan) 29 Jul '25

29 Jul '25

morgan pushed to branch mullvad-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 1168363d by Henry Wilkes at 2025-07-29T13:02:04+00:00 fixup! BB 41581: Hide NoScript extension's toolbar button by default. TB 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140. - - - - - 2 changed files: - browser/base/content/browser-addons.js - browser/themes/shared/addons/unified-extensions.css Changes: ===================================== browser/base/content/browser-addons.js ===================================== @@ -2026,13 +2026,13 @@ var gUnifiedExtensions = { // extension.hideUnifiedWhenEmpty, which can effect the visibility of the // unified-extensions-button. // See tor-browser#41581. - this._hideNoScriptObserver = () => this._updateVisibility(); + this._hideNoScriptObserver = () => this._updateHideEmpty(); Services.prefs.addObserver(HIDE_NO_SCRIPT_PREF, this._hideNoScriptObserver); Services.prefs.addObserver( HIDE_UNIFIED_WHEN_EMPTY_PREF, this._hideNoScriptObserver ); - this._updateVisibility(); + this._updateHideEmpty(); // Will trigger updateButtonVisibility; this._initialized = true; }, @@ -2071,10 +2071,14 @@ var gUnifiedExtensions = { }, onAppMenuShowing() { + // Only show the extension menu item if the extension button is not pinned + // and the extension popup is not empty. + // NOTE: This condition is different than _shouldShowButton. + const hideExtensionItem = this.buttonAlwaysVisible || this._hideEmpty; document.getElementById("appMenu-extensions-themes-button").hidden = - !this.buttonAlwaysVisible; + !hideExtensionItem; document.getElementById("appMenu-unified-extensions-button").hidden = - this.buttonAlwaysVisible; + hideExtensionItem; }, onLocationChange(browser, webProgress, _request, _uri, flags) { @@ -2089,9 +2093,14 @@ var gUnifiedExtensions = { }, updateButtonVisibility() { + if (this._hideEmpty === null) { + return; + } // TODO: Bug 1778684 - Auto-hide button when there is no active extension. + // Hide the extension button when it is empty. See tor-browser#41581. + // Likely will conflict with mozilla's Bug 1778684. See tor-browser#42635. let shouldShowButton = - this.buttonAlwaysVisible || + this._shouldShowButton || // If anything is anchored to the button, keep it visible. this._button.open || // Button will be open soon - see ensureButtonShownBeforeAttachingPanel. @@ -2117,7 +2126,7 @@ var gUnifiedExtensions = { }, ensureButtonShownBeforeAttachingPanel(panel) { - if (!this.buttonAlwaysVisible && !this._button.open) { + if (!this._shouldShowButton && !this._button.open) { // When the panel is anchored to the button, its "open" attribute will be // set, which visually renders as a "button pressed". Until we get there, // we need to make sure that the button is visible so that it can serve @@ -2131,7 +2140,7 @@ var gUnifiedExtensions = { if (this._button.open) { this._buttonShownBeforeButtonOpen = false; } - if (!this.buttonAlwaysVisible && !this._button.open) { + if (!this._shouldShowButton && !this._button.open) { this.updateButtonVisibility(); } }, @@ -2261,18 +2270,35 @@ var gUnifiedExtensions = { }, /** - * Potentially hide the unified-extensions-button if it would be empty. + * Whether the extension button should be hidden because it is empty. Or + * `null` when uninitialised. + * + * @type {?boolean} */ - // See tor-browser#41581. - // The behaviour overlaps with a proposal in mozilla Bug 1778684, which has - // not yet been implemented as of June 2024 (start of ESR 128). - // See tor-browser#42635 - _updateVisibility() { - this.button.classList.toggle( - "hide-empty", + _hideEmpty: null, + + /** + * Update the _hideEmpty attribute when the preference or hasExtensionsInPanel + * value may have changed. + */ + _updateHideEmpty() { + const prevHideEmpty = this._hideEmpty; + this._hideEmpty = Services.prefs.getBoolPref(HIDE_UNIFIED_WHEN_EMPTY_PREF, true) && - !this.hasExtensionsInPanel() - ); + !this.hasExtensionsInPanel(); + if (this._hideEmpty !== prevHideEmpty) { + this.updateButtonVisibility(); + } + }, + + /** + * Whether we should show the extension button, regardless of whether it is + * needed as a popup anchor, etc. + * + * @type {boolean} + */ + get _shouldShowButton() { + return this.buttonAlwaysVisible && !this._hideEmpty; }, /** @@ -2860,15 +2886,18 @@ var gUnifiedExtensions = { }, onWidgetRemoved() { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); }, onWidgetDestroyed() { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); }, onWidgetAdded(aWidgetId, aArea) { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); // When we pin a widget to the toolbar from a narrow window, the widget // will be overflowed directly. In this case, we do not want to change the @@ -2885,7 +2914,8 @@ var gUnifiedExtensions = { }, onWidgetOverflow(aNode) { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); // We register a CUI listener for each window so we make sure that we // handle the event for the right window here. @@ -2897,7 +2927,8 @@ var gUnifiedExtensions = { }, onWidgetUnderflow(aNode) { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); // We register a CUI listener for each window so we make sure that we // handle the event for the right window here. ===================================== browser/themes/shared/addons/unified-extensions.css ===================================== @@ -294,21 +294,3 @@ unified-extensions-item.unified-extensions-item { } } } - -/* Extra rule for tor-browser. See tor-browser#41581. - * We want to hide the unified-extensions-button when it is empty. - * However, this button is needed as an anchor for addon notifications. E.g. - * when installing another addon and permissions pop up. - * If we simply marked it as "hidden" then it would not be used as an anchor, so - * the popup would fall back to using the identity button as an anchor instead. - * So instead, we use "visibility: collapse" whilst it is empty *and* it is not - * being used as an anchor (the open attribute is missing). */ -#unified-extensions-button.hide-empty:not([open]) { - visibility: collapse; - /* Ensure getBoundingClientRect().width returns 0. - * Even though this button is collapsed, and therefore should not take up any - * layout space, getBoundingClientRect will still measure the padding. - * If this was not zero, OverflowableToolbar#getOverflowInfo would - * over-measure the children width and would always overflow. */ - padding-inline: 0; -} View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/116… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/116… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-140.1.0esr-15.0-1] fixup! BB 41581: Hide NoScript extension's toolbar button by default.
by morgan (＠morgan) 29 Jul '25

29 Jul '25

morgan pushed to branch base-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: e4587c0b by Henry Wilkes at 2025-07-29T13:00:05+00:00 fixup! BB 41581: Hide NoScript extension's toolbar button by default. TB 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140. - - - - - 2 changed files: - browser/base/content/browser-addons.js - browser/themes/shared/addons/unified-extensions.css Changes: ===================================== browser/base/content/browser-addons.js ===================================== @@ -2026,13 +2026,13 @@ var gUnifiedExtensions = { // extension.hideUnifiedWhenEmpty, which can effect the visibility of the // unified-extensions-button. // See tor-browser#41581. - this._hideNoScriptObserver = () => this._updateVisibility(); + this._hideNoScriptObserver = () => this._updateHideEmpty(); Services.prefs.addObserver(HIDE_NO_SCRIPT_PREF, this._hideNoScriptObserver); Services.prefs.addObserver( HIDE_UNIFIED_WHEN_EMPTY_PREF, this._hideNoScriptObserver ); - this._updateVisibility(); + this._updateHideEmpty(); // Will trigger updateButtonVisibility; this._initialized = true; }, @@ -2071,10 +2071,14 @@ var gUnifiedExtensions = { }, onAppMenuShowing() { + // Only show the extension menu item if the extension button is not pinned + // and the extension popup is not empty. + // NOTE: This condition is different than _shouldShowButton. + const hideExtensionItem = this.buttonAlwaysVisible || this._hideEmpty; document.getElementById("appMenu-extensions-themes-button").hidden = - !this.buttonAlwaysVisible; + !hideExtensionItem; document.getElementById("appMenu-unified-extensions-button").hidden = - this.buttonAlwaysVisible; + hideExtensionItem; }, onLocationChange(browser, webProgress, _request, _uri, flags) { @@ -2089,9 +2093,14 @@ var gUnifiedExtensions = { }, updateButtonVisibility() { + if (this._hideEmpty === null) { + return; + } // TODO: Bug 1778684 - Auto-hide button when there is no active extension. + // Hide the extension button when it is empty. See tor-browser#41581. + // Likely will conflict with mozilla's Bug 1778684. See tor-browser#42635. let shouldShowButton = - this.buttonAlwaysVisible || + this._shouldShowButton || // If anything is anchored to the button, keep it visible. this._button.open || // Button will be open soon - see ensureButtonShownBeforeAttachingPanel. @@ -2117,7 +2126,7 @@ var gUnifiedExtensions = { }, ensureButtonShownBeforeAttachingPanel(panel) { - if (!this.buttonAlwaysVisible && !this._button.open) { + if (!this._shouldShowButton && !this._button.open) { // When the panel is anchored to the button, its "open" attribute will be // set, which visually renders as a "button pressed". Until we get there, // we need to make sure that the button is visible so that it can serve @@ -2131,7 +2140,7 @@ var gUnifiedExtensions = { if (this._button.open) { this._buttonShownBeforeButtonOpen = false; } - if (!this.buttonAlwaysVisible && !this._button.open) { + if (!this._shouldShowButton && !this._button.open) { this.updateButtonVisibility(); } }, @@ -2261,18 +2270,35 @@ var gUnifiedExtensions = { }, /** - * Potentially hide the unified-extensions-button if it would be empty. + * Whether the extension button should be hidden because it is empty. Or + * `null` when uninitialised. + * + * @type {?boolean} */ - // See tor-browser#41581. - // The behaviour overlaps with a proposal in mozilla Bug 1778684, which has - // not yet been implemented as of June 2024 (start of ESR 128). - // See tor-browser#42635 - _updateVisibility() { - this.button.classList.toggle( - "hide-empty", + _hideEmpty: null, + + /** + * Update the _hideEmpty attribute when the preference or hasExtensionsInPanel + * value may have changed. + */ + _updateHideEmpty() { + const prevHideEmpty = this._hideEmpty; + this._hideEmpty = Services.prefs.getBoolPref(HIDE_UNIFIED_WHEN_EMPTY_PREF, true) && - !this.hasExtensionsInPanel() - ); + !this.hasExtensionsInPanel(); + if (this._hideEmpty !== prevHideEmpty) { + this.updateButtonVisibility(); + } + }, + + /** + * Whether we should show the extension button, regardless of whether it is + * needed as a popup anchor, etc. + * + * @type {boolean} + */ + get _shouldShowButton() { + return this.buttonAlwaysVisible && !this._hideEmpty; }, /** @@ -2860,15 +2886,18 @@ var gUnifiedExtensions = { }, onWidgetRemoved() { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); }, onWidgetDestroyed() { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); }, onWidgetAdded(aWidgetId, aArea) { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); // When we pin a widget to the toolbar from a narrow window, the widget // will be overflowed directly. In this case, we do not want to change the @@ -2885,7 +2914,8 @@ var gUnifiedExtensions = { }, onWidgetOverflow(aNode) { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); // We register a CUI listener for each window so we make sure that we // handle the event for the right window here. @@ -2897,7 +2927,8 @@ var gUnifiedExtensions = { }, onWidgetUnderflow(aNode) { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); // We register a CUI listener for each window so we make sure that we // handle the event for the right window here. ===================================== browser/themes/shared/addons/unified-extensions.css ===================================== @@ -294,21 +294,3 @@ unified-extensions-item.unified-extensions-item { } } } - -/* Extra rule for tor-browser. See tor-browser#41581. - * We want to hide the unified-extensions-button when it is empty. - * However, this button is needed as an anchor for addon notifications. E.g. - * when installing another addon and permissions pop up. - * If we simply marked it as "hidden" then it would not be used as an anchor, so - * the popup would fall back to using the identity button as an anchor instead. - * So instead, we use "visibility: collapse" whilst it is empty *and* it is not - * being used as an anchor (the open attribute is missing). */ -#unified-extensions-button.hide-empty:not([open]) { - visibility: collapse; - /* Ensure getBoundingClientRect().width returns 0. - * Even though this button is collapsed, and therefore should not take up any - * layout space, getBoundingClientRect will still measure the padding. - * If this was not zero, OverflowableToolbar#getOverflowInfo would - * over-measure the children width and would always overflow. */ - padding-inline: 0; -} View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/e4587c0… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/e4587c0… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.1.0esr-15.0-1] fixup! BB 41581: Hide NoScript extension's toolbar button by default.
by henry (＠henry) 29 Jul '25

29 Jul '25

henry pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: cf9b46aa by Henry Wilkes at 2025-07-29T12:33:19+01:00 fixup! BB 41581: Hide NoScript extension's toolbar button by default. TB 43874: Incorporate our unified extension button hiding logic into mozilla's changes for ESR 140. - - - - - 2 changed files: - browser/base/content/browser-addons.js - browser/themes/shared/addons/unified-extensions.css Changes: ===================================== browser/base/content/browser-addons.js ===================================== @@ -2026,13 +2026,13 @@ var gUnifiedExtensions = { // extension.hideUnifiedWhenEmpty, which can effect the visibility of the // unified-extensions-button. // See tor-browser#41581. - this._hideNoScriptObserver = () => this._updateVisibility(); + this._hideNoScriptObserver = () => this._updateHideEmpty(); Services.prefs.addObserver(HIDE_NO_SCRIPT_PREF, this._hideNoScriptObserver); Services.prefs.addObserver( HIDE_UNIFIED_WHEN_EMPTY_PREF, this._hideNoScriptObserver ); - this._updateVisibility(); + this._updateHideEmpty(); // Will trigger updateButtonVisibility; this._initialized = true; }, @@ -2071,10 +2071,14 @@ var gUnifiedExtensions = { }, onAppMenuShowing() { + // Only show the extension menu item if the extension button is not pinned + // and the extension popup is not empty. + // NOTE: This condition is different than _shouldShowButton. + const hideExtensionItem = this.buttonAlwaysVisible || this._hideEmpty; document.getElementById("appMenu-extensions-themes-button").hidden = - !this.buttonAlwaysVisible; + !hideExtensionItem; document.getElementById("appMenu-unified-extensions-button").hidden = - this.buttonAlwaysVisible; + hideExtensionItem; }, onLocationChange(browser, webProgress, _request, _uri, flags) { @@ -2089,9 +2093,14 @@ var gUnifiedExtensions = { }, updateButtonVisibility() { + if (this._hideEmpty === null) { + return; + } // TODO: Bug 1778684 - Auto-hide button when there is no active extension. + // Hide the extension button when it is empty. See tor-browser#41581. + // Likely will conflict with mozilla's Bug 1778684. See tor-browser#42635. let shouldShowButton = - this.buttonAlwaysVisible || + this._shouldShowButton || // If anything is anchored to the button, keep it visible. this._button.open || // Button will be open soon - see ensureButtonShownBeforeAttachingPanel. @@ -2117,7 +2126,7 @@ var gUnifiedExtensions = { }, ensureButtonShownBeforeAttachingPanel(panel) { - if (!this.buttonAlwaysVisible && !this._button.open) { + if (!this._shouldShowButton && !this._button.open) { // When the panel is anchored to the button, its "open" attribute will be // set, which visually renders as a "button pressed". Until we get there, // we need to make sure that the button is visible so that it can serve @@ -2131,7 +2140,7 @@ var gUnifiedExtensions = { if (this._button.open) { this._buttonShownBeforeButtonOpen = false; } - if (!this.buttonAlwaysVisible && !this._button.open) { + if (!this._shouldShowButton && !this._button.open) { this.updateButtonVisibility(); } }, @@ -2261,18 +2270,35 @@ var gUnifiedExtensions = { }, /** - * Potentially hide the unified-extensions-button if it would be empty. + * Whether the extension button should be hidden because it is empty. Or + * `null` when uninitialised. + * + * @type {?boolean} */ - // See tor-browser#41581. - // The behaviour overlaps with a proposal in mozilla Bug 1778684, which has - // not yet been implemented as of June 2024 (start of ESR 128). - // See tor-browser#42635 - _updateVisibility() { - this.button.classList.toggle( - "hide-empty", + _hideEmpty: null, + + /** + * Update the _hideEmpty attribute when the preference or hasExtensionsInPanel + * value may have changed. + */ + _updateHideEmpty() { + const prevHideEmpty = this._hideEmpty; + this._hideEmpty = Services.prefs.getBoolPref(HIDE_UNIFIED_WHEN_EMPTY_PREF, true) && - !this.hasExtensionsInPanel() - ); + !this.hasExtensionsInPanel(); + if (this._hideEmpty !== prevHideEmpty) { + this.updateButtonVisibility(); + } + }, + + /** + * Whether we should show the extension button, regardless of whether it is + * needed as a popup anchor, etc. + * + * @type {boolean} + */ + get _shouldShowButton() { + return this.buttonAlwaysVisible && !this._hideEmpty; }, /** @@ -2860,15 +2886,18 @@ var gUnifiedExtensions = { }, onWidgetRemoved() { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); }, onWidgetDestroyed() { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); }, onWidgetAdded(aWidgetId, aArea) { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); // When we pin a widget to the toolbar from a narrow window, the widget // will be overflowed directly. In this case, we do not want to change the @@ -2885,7 +2914,8 @@ var gUnifiedExtensions = { }, onWidgetOverflow(aNode) { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); // We register a CUI listener for each window so we make sure that we // handle the event for the right window here. @@ -2897,7 +2927,8 @@ var gUnifiedExtensions = { }, onWidgetUnderflow(aNode) { - this._updateVisibility(); + // hasExtensionsInPanel may have changed. + this._updateHideEmpty(); // We register a CUI listener for each window so we make sure that we // handle the event for the right window here. ===================================== browser/themes/shared/addons/unified-extensions.css ===================================== @@ -294,21 +294,3 @@ unified-extensions-item.unified-extensions-item { } } } - -/* Extra rule for tor-browser. See tor-browser#41581. - * We want to hide the unified-extensions-button when it is empty. - * However, this button is needed as an anchor for addon notifications. E.g. - * when installing another addon and permissions pop up. - * If we simply marked it as "hidden" then it would not be used as an anchor, so - * the popup would fall back to using the identity button as an anchor instead. - * So instead, we use "visibility: collapse" whilst it is empty *and* it is not - * being used as an anchor (the open attribute is missing). */ -#unified-extensions-button.hide-empty:not([open]) { - visibility: collapse; - /* Ensure getBoundingClientRect().width returns 0. - * Even though this button is collapsed, and therefore should not take up any - * layout space, getBoundingClientRect will still measure the padding. - * If this was not zero, OverflowableToolbar#getOverflowInfo would - * over-measure the children width and would always overflow. */ - padding-inline: 0; -} View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/cf9b46a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/cf9b46a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-15.0a1-build1
by morgan (＠morgan) 29 Jul '25

29 Jul '25

morgan pushed new tag mb-15.0a1-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-15.0a1-build1
by morgan (＠morgan) 29 Jul '25

29 Jul '25

morgan pushed new tag tbb-15.0a1-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41439,41440: Release Prep Tor,Mullvad Browser 15.0a1
by morgan (＠morgan) 29 Jul '25

29 Jul '25

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 47f95213 by Morgan at 2025-07-29T10:54:45+00:00 Bug 41439,41440: Release Prep Tor,Mullvad Browser 15.0a1 - - - - - 11 changed files: - projects/application-services/config - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/manual/config - projects/openssl/config - projects/translation/config - rbm.conf Changes: ===================================== projects/application-services/config ===================================== @@ -16,7 +16,7 @@ container: use_container: 1 var: - build_number: 2 + build_number: 3 # This should be updated when the list of gradle dependencies is changed. gradle_dependencies_version: 12 gradle_version: 8.13 ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,57 @@ +Mullvad Browser 15.0a1 - July 29 2025 + * All Platforms + * Updated Firefox to 140.1.0esr + * Updated NoScript to 13.0.8 + * Updated uBlock Origin to 1.65.0 + * Bug 457: Rebase Mullvad Browser Alpha onto 140.1esr [mullvad-browser] + * Bug 42738: Tidy up the commit structure for browser updates UI [tor-browser] + * Bug 43397: Click to play should override "Any capability blocked in the top document must be blocked in its subdocuments too" [tor-browser] + * Bug 43590: Move letterboxing rules out of browser/base/content/browser.css [tor-browser] + * Bug 43610: Use newer CSS variable names for ESR 140 [tor-browser] + * Bug 43629: All migrations in _migrateUIBB are run for new profiles [tor-browser] + * Bug 43635: Console noise due to the x-load capability not being localized [tor-browser] + * Bug 43638: Fix up our `<command>` elements [tor-browser] + * Bug 43772: Do not use official branding for BB/TB/MB [tor-browser] + * Bug 43776: Set branding files for l10n merging [tor-browser] + * Bug 43886: Fix new tab for ESR 140 [tor-browser] + * Bug 43905: base-browser.ftl missing from about:addons [tor-browser] + * Bug 43906: Extension.sys.mjs change in the wrong commit [tor-browser] + * Bug 43929: two about:tor pages opened after update [tor-browser] + * Bug 43947: Console error from ContentBlockingPrefs.init [tor-browser] + * Bug 43989: Switch off AI chatbot preference [tor-browser] + * Bug 43993: Backport Security Fixes from Firefox 141 [tor-browser] + * Windows + * Bug 440: Make abseil use win32 thread model on mingw [mullvad-browser] + * Build System + * All Platforms + * Bug 43777: Disable ./mach telemetry [tor-browser] + * Bug 43891: Update the translation CI to use the new mozilla versions [tor-browser] + * Bug 34434: Remove unused variables from rbm.conf [tor-browser-build] + * Bug 40994: Add support in do-all-signing to sign release for some archs only [tor-browser-build] + * Bug 41227: Update projects/common/list_toolchain_updates-common-firefox-geckoview to include check for binutils [tor-browser-build] + * Bug 41435: Skip update-responses update entries for versions without incremental or full update mar [tor-browser-build] + * Bug 41444: Build artifacts to support artifact builds of Tor/Muillvad/Base Browser [tor-browser-build] + * Bug 41448: Update toolchains for Firefox ESR 140 [tor-browser-build] + * Bug 41449: Add prefix to update-responses xml files [tor-browser-build] + * Bug 41451: When update-responses contains multiple versions, .htaccess only has one no-update.xml redirect [tor-browser-build] + * Bug 41452: Skip update-responses xml files for versions which don't have incrementals [tor-browser-build] + * Bug 41457: Set mar IDs as env variables in tor-browser-build [tor-browser-build] + * Bug 41459: Update taskcluster/ci paths in README and comments [tor-browser-build] + * Bug 41460: Add brizental to the list of people who can sign Tor Browser and Mullvad Browser tags [tor-browser-build] + * Bug 41465: Disable development artifacts generation by default, keep it enabled for nightly builds [tor-browser-build] + * Bug 41467: Remove list_toolchain_updates-firefox-android from Makefile [tor-browser-build] + * Bug 41477: Update keyring/boklm.gpg for new subkeys (2025) [tor-browser-build] + * Bug 41478: Add vim and others missing basic tools to base container image [tor-browser-build] + * Bug 41496: Clean up unused projects [tor-browser-build] + * Bug 41498: Update keyring/morgan.gpg with updated public key [tor-browser-build] + * Bug 41501: cargo_vendor generated archive maintains timestamps [tor-browser-build] + * Bug 40084: Always use bash for the debug terminal [rbm] + * macOS + * Bug 41503: Error 403 when downloading macOS SDK [tor-browser-build] + * Linux + * Bug 41458: Ship geckodriver only on Linux [tor-browser-build] + * Bug 41488: Disable sys/random.h for Node.js [tor-browser-build] + Mullvad Browser 14.5a6 - April 08 2025 * All Platforms * Updated Firefox to 128.9.0esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,99 @@ +Tor Browser 15.0a1 - July 29 2025 + * All Platforms + * Updated NoScript to 13.0.8 + * Updated OpenSSL to 3.5.1 + * Bug 43397: Click to play should override "Any capability blocked in the top document must be blocked in its subdocuments too" [tor-browser] + * Bug 43772: Do not use official branding for BB/TB/MB [tor-browser] + * Bug 43783: Tighten up the SecurityLevel module to enforce new UX flow [tor-browser] + * Bug 43784: Get confirmation from NoScript that settings are applied [tor-browser] + * Bug 43853: DomainFrontedRequests: setData is no longer a function [tor-browser] + * Bug 43880: Update moat's domain front url [tor-browser] + * Bug 43993: Backport Security Fixes from Firefox 141 [tor-browser] + * Bug 44000: Rebase Tor Browse Alpha onto 140.1.0esr [tor-browser] + * Bug 41502: Application services build is failing on isNetworkAllowed() [tor-browser-build] + * Bug 41508: Switch built-in meek bridge to meek-unredacted [tor-browser-build] + * Bug 41515: Bump version of Conjure to include P173 improvements [tor-browser-build] + * Windows + macOS + Linux + * Updated Firefox to 140.1.0esr + * Bug 42738: Tidy up the commit structure for browser updates UI [tor-browser] + * Bug 43590: Move letterboxing rules out of browser/base/content/browser.css [tor-browser] + * Bug 43610: Use newer CSS variable names for ESR 140 [tor-browser] + * Bug 43629: All migrations in _migrateUIBB are run for new profiles [tor-browser] + * Bug 43635: Console noise due to the x-load capability not being localized [tor-browser] + * Bug 43638: Fix up our `<command>` elements [tor-browser] + * Bug 43765: Temporarily disable Lox [tor-browser] + * Bug 43766: Only save the relevant TorSettings changes to preferences. [tor-browser] + * Bug 43776: Set branding files for l10n merging [tor-browser] + * Bug 43782: Add new UX flow for changing security level (Desktop) [tor-browser] + * Bug 43879: tor-branding.css declarations are overwritten [tor-browser] + * Bug 43886: Fix new tab for ESR 140 [tor-browser] + * Bug 43905: base-browser.ftl missing from about:addons [tor-browser] + * Bug 43906: Extension.sys.mjs change in the wrong commit [tor-browser] + * Bug 43913: Bizarre right-clicking issues: menu items blanked out and/or not working; too many items in the right-click menu; different right-clicking menu displayed initially for links [tor-browser] + * Bug 43929: two about:tor pages opened after update [tor-browser] + * Bug 43930: Onionize toggle not centre aligned in about:tor [tor-browser] + * Bug 43947: Console error from ContentBlockingPrefs.init [tor-browser] + * Bug 43989: Switch off AI chatbot preference [tor-browser] + * Android + * Updated GeckoView to 140.1.0esr + * Bug 43577: Flush settings fails on Android [tor-browser] + * Bug 43786: Add new UX flow for changing security level (Android) [tor-browser] + * Bug 43855: brand.properties merging on Android is broken in 140 [tor-browser] + * Bug 44029: Search/url bar doesn't work on android after ESR 140 [tor-browser] + * Bug 44036: Crash on opening "Search Settings" on android [tor-browser] + * Bug 41494: Update GeckoView build scripts for ESR140 [tor-browser-build] + * Build System + * All Platforms + * Bug 43615: Add Gitlab Issue and Merge request templates [tor-browser] + * Bug 43616: Customize Gitlab Issue and Merge templates [tor-browser] + * Bug 43777: Disable ./mach telemetry [tor-browser] + * Bug 43891: Update the translation CI to use the new mozilla versions [tor-browser] + * Bug 43954: Update tb-dev to handle lightweight tags [tor-browser] + * Bug 43962: update tb-dev auto-fixup for git 2.50 [tor-browser] + * Bug 34434: Remove unused variables from rbm.conf [tor-browser-build] + * Bug 40994: Add support in do-all-signing to sign release for some archs only [tor-browser-build] + * Bug 41227: Update projects/common/list_toolchain_updates-common-firefox-geckoview to include check for binutils [tor-browser-build] + * Bug 41432: Bump OpenSSL to >= 3.5.0 [tor-browser-build] + * Bug 41434: Go updates shouldn't target all platforms until macOS is on legacy in the changelogs [tor-browser-build] + * Bug 41435: Skip update-responses update entries for versions without incremental or full update mar [tor-browser-build] + * Bug 41444: Build artifacts to support artifact builds of Tor/Muillvad/Base Browser [tor-browser-build] + * Bug 41448: Update toolchains for Firefox ESR 140 [tor-browser-build] + * Bug 41449: Add prefix to update-responses xml files [tor-browser-build] + * Bug 41451: When update-responses contains multiple versions, .htaccess only has one no-update.xml redirect [tor-browser-build] + * Bug 41459: Update taskcluster/ci paths in README and comments [tor-browser-build] + * Bug 41460: Add brizental to the list of people who can sign Tor Browser and Mullvad Browser tags [tor-browser-build] + * Bug 41465: Disable development artifacts generation by default, keep it enabled for nightly builds [tor-browser-build] + * Bug 41467: Remove list_toolchain_updates-firefox-android from Makefile [tor-browser-build] + * Bug 41477: Update keyring/boklm.gpg for new subkeys (2025) [tor-browser-build] + * Bug 41478: Add vim and others missing basic tools to base container image [tor-browser-build] + * Bug 41486: Track bundletool and osslicenses-plugin versions in list_toolchain_updates_checks [tor-browser-build] + * Bug 41496: Clean up unused projects [tor-browser-build] + * Bug 41498: Update keyring/morgan.gpg with updated public key [tor-browser-build] + * Bug 41501: cargo_vendor generated archive maintains timestamps [tor-browser-build] + * Bug 41514: Remove var/build_go_lib from projects/go/config [tor-browser-build] + * Bug 40084: Always use bash for the debug terminal [rbm] + * Windows + macOS + Linux + * Bug 41452: Skip update-responses xml files for versions which don't have incrementals [tor-browser-build] + * Bug 41457: Set mar IDs as env variables in tor-browser-build [tor-browser-build] + * Windows + Linux + Android + * Updated Go to 1.23.11 + * macOS + * Bug 41503: Error 403 when downloading macOS SDK [tor-browser-build] + * Linux + * Bug 41458: Ship geckodriver only on Linux [tor-browser-build] + * Bug 41488: Disable sys/random.h for Node.js [tor-browser-build] + * Android + * Bug 43984: Update android build scripts and docs for ESR 140 [tor-browser] + * Bug 43987: 140 Android is not reproducible [tor-browser] + * Bug 41280: download-android-<arch>.json does not get updated for android-only releases [tor-browser-build] + * Bug 41453: Update application-services and uniffi-rs for ESR140 [tor-browser-build] + * Bug 41483: geckoview_example-withGeckoBinaries-....apk doesn't exist anymore in Firefox 140 [tor-browser-build] + * Bug 41484: Create a fork of application-services [tor-browser-build] + * Bug 41499: Android nightly builds are broken [tor-browser-build] + * Bug 41500: Optimize tor and its dependencies for size on Android [tor-browser-build] + * Bug 41506: Use appilcation-services branch for nightlies builds [tor-browser-build] + * Bug 41507: Single-arch build fails because artifacts don't have arch subdirectories [tor-browser-build] + Tor Browser 14.5a6 - April 08 2025 * All Platforms * Updated Tor to 0.4.9.2-alpha ===================================== projects/browser/config ===================================== @@ -113,12 +113,12 @@ input_files: enable: '[% ! c("var/android") %]' - filename: dmg-root enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4411102/noscript-12.1.1.x… + - URL: https://addons.mozilla.org/firefox/downloads/file/4497468/noscript-13.0.8.x… name: noscript - sha256sum: f9639e63ffcfc352036de00e4ff6694bb0ca65a0bb8fbd103bd08f32dc1ff31a - - URL: https://addons.mozilla.org/firefox/downloads/file/4458450/ublock_origin-1.6… + sha256sum: 9d978cfe083cb9cce120b5ee41e8933d752d7ab4680bf517c5ec4b29c4cfd2dc + - URL: https://addons.mozilla.org/firefox/downloads/file/4531307/ublock_origin-1.6… name: ublock-origin - sha256sum: d93176cef4dc042e41ba500aa2a90e5d57b5be77449cbd522111585e3a0cd158 + sha256sum: 3e73c96a29a933866065f0756fe032984bf5b254af8dd1afd7a7f7e0668a33cf enable: '[% c("var/mullvad-browser") %]' - URL: https://cdn.mullvad.net/browser-extension/0.9.4/mullvad-browser-extension-0… name: mullvad-extension ===================================== projects/firefox/config ===================================== @@ -21,7 +21,7 @@ var: browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 3 copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser @@ -115,6 +115,7 @@ targets: mar_id_prefix: 'mullvadbrowser-mullvad' nightly_updates_publish_dir_prefix: mullvadbrowser- + browser_build: 1 linux-x86_64: var: arch_deps: ===================================== projects/geckoview/config ===================================== @@ -23,7 +23,7 @@ var: browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 3 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.23.8' +version: '1.23.11' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: 0ca1f1e37ea255e3ce283af3f4e628502fb444587da987a5bb96d6c6f15930d4 + source_sha256: 296381607a483a8a8667d7695331752f94a1f231c204e2527d2f22e1e3d1247d no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/manual/config ===================================== @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 # To update, see doc/how-to-update-the-manual.txt # Remember to update also the package's hash, with the version! -version: 263551 +version: 295391 filename: 'manual-[% c("version") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -23,6 +23,6 @@ input_files: - project: container-image - URL: 'https://build-sources.tbb.torproject.org/manual_[% c("version") %].zip' name: manual - sha256sum: f8d312081457b1cab3e8fcafda1d0e534852b5d3c3cb1bd32100f13298cb7839 + sha256sum: feff63a5611438ae31c8237c9ce5cb463ec96cab07bd71f51a80ac5020d4e465 - filename: packagemanual.py name: package_script ===================================== projects/openssl/config ===================================== @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 3.5.0 +version: 3.5.1 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 @@ -33,5 +33,5 @@ input_files: - name: '[% c("var/compiler") %]' project: '[% c("var/compiler") %]' - URL: 'https://github.com/openssl/openssl/releases/download/openssl-[% c("version") %]/openssl-[% c("version") %].tar.gz' - sha256sum: 344d0a79f1a9b08029b0744e2cc401a43f9c90acd1044d09a530b4885a8e9fc0 + sha256sum: 529043b15cffa5f36077a4d0af83f3de399807181d607441d734196d889b641f name: openssl ===================================== projects/translation/config ===================================== @@ -12,19 +12,19 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: b54e21b36db35ad390c4f385b76cbd293a58cbc6 + git_hash: 96a559c7c1f7b9231db2b5cece7ecae980ae835d targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 94aae5dcdfa2e99b516acb6a834a54f7de76e54f + git_hash: 3becb908fbf68aa77accc1f2e03e2c29f4fe40e2 targets: nightly: git_hash: 'tor-browser' mullvad-browser: mullvad-browser: '[% INCLUDE build %]' - git_hash: 34b45a7417145b1f26784825ef6c873497cbda0a + git_hash: bf09d9c070f72ad3aee24c54cb154bab2570247b targets: nightly: git_hash: 'mullvad-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: b5bc0929fbfff8343a8c57e26ffa70ea4d38c2ce + git_hash: 674a3f4d2d75b9688a54e5f1a0139feb617339d3 compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -78,7 +78,7 @@ var: torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2025/04/08 17:53:31' + browser_release_date: '2025/07/29 10:33:44' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: alpha browser_platforms: @@ -128,9 +128,9 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 14.5a6 - 14.5a5 - 14.5a4 - - 14.5a3 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/4… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/4… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-140.1.0esr-15.0-1-build3
by morgan (＠morgan) 29 Jul '25

29 Jul '25

morgan pushed new tag tor-browser-140.1.0esr-15.0-1-build3 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bump Firefox version to 140.1.0esr for nightly builds
by morgan (＠morgan) 28 Jul '25

28 Jul '25

morgan pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: d186157f by Morgan at 2025-07-28T20:27:01+00:00 Bump Firefox version to 140.1.0esr for nightly builds - - - - - 2 changed files: - projects/firefox/config - projects/geckoview/config Changes: ===================================== projects/firefox/config ===================================== @@ -16,7 +16,7 @@ container: use_container: 1 var: - firefox_platform_version: '140.0' + firefox_platform_version: '140.1.0' firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 ===================================== projects/geckoview/config ===================================== @@ -18,7 +18,7 @@ container: build_apk: 1 var: - firefox_platform_version: '140.0' + firefox_platform_version: '140.1.0' geckoview_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-140.1.0esr-15.0-1-build1
by morgan (＠morgan) 28 Jul '25

28 Jul '25

morgan pushed new tag mullvad-browser-140.1.0esr-15.0-1-build1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-14.5] Bug 41515: Remove projects/conjure/conjure-pr-267.patch
by Pier Angelo Vendrame (＠pierov) 28 Jul '25

28 Jul '25

Pier Angelo Vendrame pushed to branch maint-14.5 at The Tor Project / Applications / tor-browser-build Commits: a4bb31a5 by Nicolas Vigier at 2025-07-28T18:08:52+02:00 Bug 41515: Remove projects/conjure/conjure-pr-267.patch With the latest conjure update, github.com/refraction-networking/conjure version has been updated from v0.7.10 to v0.9.1. The patch conjure-pr-267.patch was included in v0.7.11 according to https://github.com/refraction-networking/conjure/issues/287. - - - - - 3 changed files: - projects/conjure/build - projects/conjure/config - − projects/conjure/conjure-pr-267.patch Changes: ===================================== projects/conjure/build ===================================== @@ -19,11 +19,6 @@ tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.[% c('compress_ta cd /var/tmp/build/[% project %]-[% c('version') %] tar -xf $rootdir/[% c('input_files_by_name/go_vendor') %] -[% IF c("var/windows") -%] - pushd vendor/github.com/refraction-networking/conjure - patch -p1 < $rootdir/conjure-pr-267.patch - popd -[% END -%] cd client go build -ldflags '-s[% IF c("var/android") %] -checklinkname=0[% END %]' -tags 'protoreflect' ===================================== projects/conjure/config ===================================== @@ -22,9 +22,5 @@ steps: sha256sum: d43631d17d8b6f78152bb4341f867bb22ad4444fec5573be1d34dac968202cda target_replace: '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64' - # https://github.com/refraction-networking/conjure/pull/267 - # Remove this once the depdency is updated. - - filename: conjure-pr-267.patch - enable: '[% c("var/windows") %]' - name: go-licenses project: go-licenses ===================================== projects/conjure/conjure-pr-267.patch deleted ===================================== @@ -1,79 +0,0 @@ -From e5968e71e3ce40e24a5108d2dea7a9bc1d050559 Mon Sep 17 00:00:00 2001 -From: Rod Hynes <rod-hynes(a)users.noreply.github.com> -Date: Mon, 29 Jan 2024 13:34:44 -0500 -Subject: [PATCH] Fix Windows build - ---- - pkg/transports/connecting/dtls/nat.go | 5 ++--- - pkg/transports/connecting/dtls/setsockopt_other.go | 12 ++++++++++++ - pkg/transports/connecting/dtls/setsockopt_windows.go | 12 ++++++++++++ - 3 files changed, 26 insertions(+), 3 deletions(-) - create mode 100644 pkg/transports/connecting/dtls/setsockopt_other.go - create mode 100644 pkg/transports/connecting/dtls/setsockopt_windows.go - -diff --git a/pkg/transports/connecting/dtls/nat.go b/pkg/transports/connecting/dtls/nat.go -index 8860316b..ab3716b9 100644 ---- a/pkg/transports/connecting/dtls/nat.go -+++ b/pkg/transports/connecting/dtls/nat.go -@@ -5,7 +5,6 @@ import ( - "fmt" - "net" - "os" -- "syscall" - "time" - - "github.com/pion/stun" -@@ -58,7 +57,7 @@ func openUDPLimitTTL(ctx context.Context, laddr, addr string, dialer dialFunc) e - defer fd.Close() - - // Set the TTL -- err = syscall.SetsockoptInt(int(fd.Fd()), syscall.IPPROTO_IP, syscall.IP_TTL, ttl) -+ err = setSocketTTL(fd, ttl) - if err != nil { - return err - } -@@ -70,7 +69,7 @@ func openUDPLimitTTL(ctx context.Context, laddr, addr string, dialer dialFunc) e - } - - // reset TTL -- err = syscall.SetsockoptInt(int(fd.Fd()), syscall.IPPROTO_IP, syscall.IP_TTL, defaultTTL) -+ err = setSocketTTL(fd, defaultTTL) - if err != nil { - return err - } -diff --git a/pkg/transports/connecting/dtls/setsockopt_other.go b/pkg/transports/connecting/dtls/setsockopt_other.go -new file mode 100644 -index 00000000..eeba1ed6 ---- /dev/null -+++ b/pkg/transports/connecting/dtls/setsockopt_other.go -@@ -0,0 +1,12 @@ -+//go:build !windows -+ -+package dtls -+ -+import ( -+ "os" -+ "syscall" -+) -+ -+func setSocketTTL(f *os.File, ttl int) error { -+ return syscall.SetsockoptInt(int(f.Fd()), syscall.IPPROTO_IP, syscall.IP_TTL, ttl) -+} -diff --git a/pkg/transports/connecting/dtls/setsockopt_windows.go b/pkg/transports/connecting/dtls/setsockopt_windows.go -new file mode 100644 -index 00000000..6ab835ea ---- /dev/null -+++ b/pkg/transports/connecting/dtls/setsockopt_windows.go -@@ -0,0 +1,12 @@ -+//go:build windows -+ -+package dtls -+ -+import ( -+ "os" -+ "syscall" -+) -+ -+func setSocketTTL(f *os.File, ttl int) error { -+ return syscall.SetsockoptInt(syscall.Handle(f.Fd()), syscall.IPPROTO_IP, syscall.IP_TTL, ttl) -+} View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41515: Remove projects/conjure/conjure-pr-267.patch
by Pier Angelo Vendrame (＠pierov) 28 Jul '25

28 Jul '25

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: dfb52888 by Nicolas Vigier at 2025-07-28T11:57:07+02:00 Bug 41515: Remove projects/conjure/conjure-pr-267.patch With the latest conjure update, github.com/refraction-networking/conjure version has been updated from v0.7.10 to v0.9.1. The patch conjure-pr-267.patch was included in v0.7.11 according to https://github.com/refraction-networking/conjure/issues/287. - - - - - 3 changed files: - projects/conjure/build - projects/conjure/config - − projects/conjure/conjure-pr-267.patch Changes: ===================================== projects/conjure/build ===================================== @@ -19,11 +19,6 @@ tar -C /var/tmp/build -xf [% project %]-[% c('version') %].tar.[% c('compress_ta cd /var/tmp/build/[% project %]-[% c('version') %] tar -xf $rootdir/[% c('input_files_by_name/go_vendor') %] -[% IF c("var/windows") -%] - pushd vendor/github.com/refraction-networking/conjure - patch -p1 < $rootdir/conjure-pr-267.patch - popd -[% END -%] cd client go build -ldflags '-s[% IF c("var/android") %] -checklinkname=0[% END %]' -tags 'protoreflect' ===================================== projects/conjure/config ===================================== @@ -22,9 +22,5 @@ steps: sha256sum: d43631d17d8b6f78152bb4341f867bb22ad4444fec5573be1d34dac968202cda target_replace: '^torbrowser-(?!testbuild).*': 'torbrowser-linux-x86_64' - # https://github.com/refraction-networking/conjure/pull/267 - # Remove this once the depdency is updated. - - filename: conjure-pr-267.patch - enable: '[% c("var/windows") %]' - name: go-licenses project: go-licenses ===================================== projects/conjure/conjure-pr-267.patch deleted ===================================== @@ -1,79 +0,0 @@ -From e5968e71e3ce40e24a5108d2dea7a9bc1d050559 Mon Sep 17 00:00:00 2001 -From: Rod Hynes <rod-hynes(a)users.noreply.github.com> -Date: Mon, 29 Jan 2024 13:34:44 -0500 -Subject: [PATCH] Fix Windows build - ---- - pkg/transports/connecting/dtls/nat.go | 5 ++--- - pkg/transports/connecting/dtls/setsockopt_other.go | 12 ++++++++++++ - pkg/transports/connecting/dtls/setsockopt_windows.go | 12 ++++++++++++ - 3 files changed, 26 insertions(+), 3 deletions(-) - create mode 100644 pkg/transports/connecting/dtls/setsockopt_other.go - create mode 100644 pkg/transports/connecting/dtls/setsockopt_windows.go - -diff --git a/pkg/transports/connecting/dtls/nat.go b/pkg/transports/connecting/dtls/nat.go -index 8860316b..ab3716b9 100644 ---- a/pkg/transports/connecting/dtls/nat.go -+++ b/pkg/transports/connecting/dtls/nat.go -@@ -5,7 +5,6 @@ import ( - "fmt" - "net" - "os" -- "syscall" - "time" - - "github.com/pion/stun" -@@ -58,7 +57,7 @@ func openUDPLimitTTL(ctx context.Context, laddr, addr string, dialer dialFunc) e - defer fd.Close() - - // Set the TTL -- err = syscall.SetsockoptInt(int(fd.Fd()), syscall.IPPROTO_IP, syscall.IP_TTL, ttl) -+ err = setSocketTTL(fd, ttl) - if err != nil { - return err - } -@@ -70,7 +69,7 @@ func openUDPLimitTTL(ctx context.Context, laddr, addr string, dialer dialFunc) e - } - - // reset TTL -- err = syscall.SetsockoptInt(int(fd.Fd()), syscall.IPPROTO_IP, syscall.IP_TTL, defaultTTL) -+ err = setSocketTTL(fd, defaultTTL) - if err != nil { - return err - } -diff --git a/pkg/transports/connecting/dtls/setsockopt_other.go b/pkg/transports/connecting/dtls/setsockopt_other.go -new file mode 100644 -index 00000000..eeba1ed6 ---- /dev/null -+++ b/pkg/transports/connecting/dtls/setsockopt_other.go -@@ -0,0 +1,12 @@ -+//go:build !windows -+ -+package dtls -+ -+import ( -+ "os" -+ "syscall" -+) -+ -+func setSocketTTL(f *os.File, ttl int) error { -+ return syscall.SetsockoptInt(int(f.Fd()), syscall.IPPROTO_IP, syscall.IP_TTL, ttl) -+} -diff --git a/pkg/transports/connecting/dtls/setsockopt_windows.go b/pkg/transports/connecting/dtls/setsockopt_windows.go -new file mode 100644 -index 00000000..6ab835ea ---- /dev/null -+++ b/pkg/transports/connecting/dtls/setsockopt_windows.go -@@ -0,0 +1,12 @@ -+//go:build windows -+ -+package dtls -+ -+import ( -+ "os" -+ "syscall" -+) -+ -+func setSocketTTL(f *os.File, ttl int) error { -+ return syscall.SetsockoptInt(syscall.Handle(f.Fd()), syscall.IPPROTO_IP, syscall.IP_TTL, ttl) -+} View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.1.0esr-15.0-1] 25 commits: Add CI for Mullvad Browser
by ma1 (＠ma1) 28 Jul '25

28 Jul '25

ma1 pushed to branch mullvad-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 8ff5c536 by Henry Wilkes at 2025-07-24T08:36:17+02:00 Add CI for Mullvad Browser - - - - - 00e62fe9 by Pier Angelo Vendrame at 2025-07-24T08:36:19+02:00 MB 38: Mullvad Browser configuration - - - - - 9f6edf42 by Pier Angelo Vendrame at 2025-07-24T08:59:14+02:00 MB 1: Mullvad Browser branding See also: mullvad-browser#5: Product name and directory customization mullvad-browser#12: Create new branding directories and integrate Mullvad icons+branding mullvad-browser#14: Remove Default Built-in bookmarks mullvad-browser#35: Add custom PDF icons for Windows builds mullvad-browser#48: Replace Mozilla copyright and legal trademarks in mullvadbrowser.exe metadata mullvad-browser#51: Update trademark string mullvad-browser#104: Update shipped dll metadata copyright/licensing info mullvad-browser#107: Add alpha and nightly icons - - - - - 783a94fe by Henry Wilkes at 2025-07-24T08:59:16+02:00 Mullvad Browser strings This commit adds strings needed by the following Mullvad Browser patches. - - - - - fef5b36e by Pier Angelo Vendrame at 2025-07-24T08:59:18+02:00 MB 20: Allow packaged-addons in PBM. We install a few addons from the distribution directory, but they are not automatically enabled for PBM mode. This commit modifies the code that installs them to also add the PBM permission to the known ones. - - - - - d9863f7b by Pier Angelo Vendrame at 2025-07-24T08:59:20+02:00 MB 63: Customize some about pages for Mullvad Browser Also: mullvad-browser#57: Purge unneeded about: pages - - - - - aad952c1 by Pier Angelo Vendrame at 2025-07-24T08:59:22+02:00 MB 37: Customization for the about dialog - - - - - bc5f07ab by Henry Wilkes at 2025-07-24T08:59:25+02:00 MB 39: Add home page about:mullvad-browser - - - - - d6ee9f15 by Henry Wilkes at 2025-07-24T09:22:40+02:00 fixup! MB 39: Add home page about:mullvad-browser TB 43886: Set homepage to about:mullvad-browser. - - - - - f9997593 by Henry Wilkes at 2025-07-24T09:22:42+02:00 fixup! MB 39: Add home page about:mullvad-browser TB 43929: Update about:mullvad-browser override page logic for ESR 140. TB 42738: Move these changes to the about:mullvad-browser commit. - - - - - 7ba0a51d by hackademix at 2025-07-24T09:22:44+02:00 MB 97: Remove UI cues to install new extensions. - - - - - 553591ee by hackademix at 2025-07-24T09:22:47+02:00 MB 47: uBlock Origin customization - - - - - 279c7f08 by Pier Angelo Vendrame at 2025-07-24T09:22:49+02:00 MB 21: Disable the password manager This commit disables the about:login page and removes the "Login and Password" section of about:preferences. We do not do anything to the real password manager of Firefox, that is in toolkit: it contains C++ parts that make it difficult to actually prevent it from being built.. Finally, we modify the the function that opens about:login to report an error in the console so that we can quickly get a backtrace to the code that tries to use it. - - - - - 81aedff1 by Pier Angelo Vendrame at 2025-07-24T10:06:13+02:00 MB 112: Updater customization for Mullvad Browser MB 71: Set the updater base URL to Mullvad domain - - - - - 9fb4b07c by Nicolas Vigier at 2025-07-24T10:06:26+02:00 MB 79: Add Mullvad Browser MAR signing keys MB 256: Add mullvad-browser nightly mar signing key - - - - - 67e125c1 by Pier Angelo Vendrame at 2025-07-24T10:06:28+02:00 MB 34: Hide unsafe and unwanted preferences UI about:preferences allow to override some of our defaults, that could be fingeprintable or have some other unwanted consequences. - - - - - 1697115d by Pier Angelo Vendrame at 2025-07-24T10:06:30+02:00 MB 160: Disable the cookie exceptions button Besides disabling the "Delete on close checkbox", disable also the "Manage Exceptions" button when always using PBM. - - - - - 615a3774 by hackademix at 2025-07-24T10:06:33+02:00 MB 163: prevent uBlock Origin from being uninstalled/disabled - - - - - 21301ef5 by Richard Pospesel at 2025-07-24T10:06:35+02:00 MB 188: Customize Gitlab Issue and Merge templates - - - - - 499904e7 by rui hildt at 2025-07-24T10:06:38+02:00 MB 213: Customize the search engines list MB 328: Refactor the search engine patch. Upstream switched to a completely different search engine configuration between ESR 115 and ESR 128. We moved our configuration to a couple of JSON files that do not follow upstream's schemas, as they are overcomplicated for our needs. Also, we keep the old search engine extensions for now, as upstream also kept them, and planned of removing them with Bug 1885953. - - - - - e3d39b52 by hackademix at 2025-07-24T10:06:40+02:00 MB 214: Enable cross-tab identity leak protection in "quiet" mode - - - - - 6233b87e by Pier Angelo Vendrame at 2025-07-24T10:06:43+02:00 MB 80: Enable Mullvad Browser as a default browser - - - - - fa5da3df by Pier Angelo Vendrame at 2025-07-24T10:06:45+02:00 MB 320: Temporarily disable WebRTC and WDBA on Windows. WebRTC should be re-enabled when tor-browser#42758 is resolved, and and the default browser agent when in general we make this feature work again. - - - - - f3d6f9f8 by Henry Wilkes at 2025-07-24T10:06:47+02:00 MB 329: Customize toolbar for mullvad-browser. - - - - - 33409cbe by Henry Wilkes at 2025-07-24T10:06:49+02:00 MB 419: Mullvad Browser migration procedures. This commit implements the the Mullvad Browser's version of _migrateUI. - - - - - 270 changed files: - .gitlab/ci/jobs/update-translations.yml - .gitlab/issue_templates/000 Bug Report.md - .gitlab/issue_templates/010 Proposal.md - .gitlab/issue_templates/020 Web Compatibility.md - .gitlab/issue_templates/030 Test.md - .gitlab/issue_templates/040 Feature.md - .gitlab/issue_templates/060 Rebase - Alpha.md - .gitlab/issue_templates/061 Rebase - Stable.md - .gitlab/issue_templates/063 Rebase - Rapid.md - .gitlab/issue_templates/090 Emergency Security Issue.md - + .gitlab/issue_templates/Rebase Browser - Alpha.md - + .gitlab/issue_templates/Rebase Browser - Rapid.md - + .gitlab/issue_templates/Rebase Browser - Stable.md - .gitlab/merge_request_templates/Default.md - + .gitlab/merge_request_templates/Rebase.md - browser/app/Makefile.in - browser/app/macbuild/Contents/Info.plist.in - browser/app/module.ver - browser/app/firefox.exe.manifest → browser/app/mullvadbrowser.exe.manifest - + browser/app/profile/000-mullvad-browser.js - browser/app/profile/001-base-profile.js - browser/base/content/aboutDialog.xhtml - browser/base/content/appmenu-viewcache.inc.xhtml - browser/base/content/browser-menubar.inc - browser/base/content/browser-places.js - browser/base/content/browser.js - browser/base/content/default-bookmarks.html - browser/base/content/nsContextMenu.sys.mjs - browser/base/content/overrides/app-license.html - browser/base/content/pageinfo/pageInfo.xhtml - browser/base/content/utilityOverlay.js - browser/branding/branding-common.mozbuild - + browser/branding/mb-alpha/VisualElements_150.png - + browser/branding/mb-alpha/VisualElements_70.png - + browser/branding/mb-alpha/configure.sh - + browser/branding/mb-alpha/content/about-logo.png - + browser/branding/mb-alpha/content/about-logo.svg - + browser/branding/mb-alpha/content/about-logo(a)2x.png - + browser/branding/mb-alpha/content/about-wordmark.svg - + browser/branding/mb-alpha/content/about.png - + browser/branding/mb-alpha/content/aboutDialog.css - + browser/branding/mb-alpha/content/firefox-wordmark.svg - + browser/branding/mb-alpha/content/icon128.png - + browser/branding/mb-alpha/content/icon16.png - + browser/branding/mb-alpha/content/icon256.png - + browser/branding/mb-alpha/content/icon32.png - + browser/branding/mb-alpha/content/icon48.png - + browser/branding/mb-alpha/content/icon64.png - + browser/branding/mb-alpha/content/jar.mn - + browser/branding/mb-alpha/content/moz.build - + browser/branding/mb-alpha/content/mullvad-branding.css - + browser/branding/mb-alpha/default128.png - + browser/branding/mb-alpha/default16.png - + browser/branding/mb-alpha/default22.png - + browser/branding/mb-alpha/default24.png - + browser/branding/mb-alpha/default256.png - + browser/branding/mb-alpha/default32.png - + browser/branding/mb-alpha/default48.png - + browser/branding/mb-alpha/default64.png - + browser/branding/mb-alpha/document.icns - + browser/branding/mb-alpha/document.ico - + browser/branding/mb-alpha/document_pdf.ico - + browser/branding/mb-alpha/firefox.icns - + browser/branding/mb-alpha/firefox.ico - + browser/branding/mb-alpha/firefox.svg - + browser/branding/mb-alpha/locales/en-US/brand.ftl - + browser/branding/mb-alpha/locales/en-US/brand.properties - + browser/branding/mb-alpha/locales/jar.mn - + browser/branding/mb-alpha/locales/moz.build - + browser/branding/mb-alpha/locales/mullvad-about-wordmark-en.ftl - + browser/branding/mb-alpha/moz.build - + browser/branding/mb-alpha/mullvadbrowser.VisualElementsManifest.xml - + browser/branding/mb-alpha/newtab.ico - + browser/branding/mb-alpha/newwindow.ico - + browser/branding/mb-alpha/pbmode.ico - + browser/branding/mb-alpha/pref/firefox-branding.js - + browser/branding/mb-nightly/VisualElements_150.png - + browser/branding/mb-nightly/VisualElements_70.png - + browser/branding/mb-nightly/configure.sh - + browser/branding/mb-nightly/content/about-logo.png - + browser/branding/mb-nightly/content/about-logo.svg - + browser/branding/mb-nightly/content/about-logo(a)2x.png - + browser/branding/mb-nightly/content/about-wordmark.svg - + browser/branding/mb-nightly/content/about.png - + browser/branding/mb-nightly/content/aboutDialog.css - + browser/branding/mb-nightly/content/firefox-wordmark.svg - + browser/branding/mb-nightly/content/icon128.png - + browser/branding/mb-nightly/content/icon16.png - + browser/branding/mb-nightly/content/icon256.png - + browser/branding/mb-nightly/content/icon32.png - + browser/branding/mb-nightly/content/icon48.png - + browser/branding/mb-nightly/content/icon64.png - + browser/branding/mb-nightly/content/jar.mn - + browser/branding/mb-nightly/content/moz.build - + browser/branding/mb-nightly/content/mullvad-branding.css - + browser/branding/mb-nightly/default128.png - + browser/branding/mb-nightly/default16.png - + browser/branding/mb-nightly/default22.png - + browser/branding/mb-nightly/default24.png - + browser/branding/mb-nightly/default256.png - + browser/branding/mb-nightly/default32.png - + browser/branding/mb-nightly/default48.png - + browser/branding/mb-nightly/default64.png - + browser/branding/mb-nightly/document.icns - + browser/branding/mb-nightly/document.ico - + browser/branding/mb-nightly/document_pdf.ico - + browser/branding/mb-nightly/firefox.icns - + browser/branding/mb-nightly/firefox.ico - + browser/branding/mb-nightly/firefox.svg - + browser/branding/mb-nightly/locales/en-US/brand.ftl - + browser/branding/mb-nightly/locales/en-US/brand.properties - + browser/branding/mb-nightly/locales/jar.mn - + browser/branding/mb-nightly/locales/moz.build - + browser/branding/mb-nightly/locales/mullvad-about-wordmark-en.ftl - + browser/branding/mb-nightly/moz.build - + browser/branding/mb-nightly/mullvadbrowser.VisualElementsManifest.xml - + browser/branding/mb-nightly/newtab.ico - + browser/branding/mb-nightly/newwindow.ico - + browser/branding/mb-nightly/pbmode.ico - + browser/branding/mb-nightly/pref/firefox-branding.js - + browser/branding/mb-release/VisualElements_150.png - + browser/branding/mb-release/VisualElements_70.png - + browser/branding/mb-release/configure.sh - + browser/branding/mb-release/content/about-logo.png - + browser/branding/mb-release/content/about-logo.svg - + browser/branding/mb-release/content/about-logo(a)2x.png - + browser/branding/mb-release/content/about-wordmark.svg - + browser/branding/mb-release/content/about.png - + browser/branding/mb-release/content/aboutDialog.css - + browser/branding/mb-release/content/firefox-wordmark.svg - + browser/branding/mb-release/content/icon128.png - + browser/branding/mb-release/content/icon16.png - + browser/branding/mb-release/content/icon256.png - + browser/branding/mb-release/content/icon32.png - + browser/branding/mb-release/content/icon48.png - + browser/branding/mb-release/content/icon64.png - + browser/branding/mb-release/content/jar.mn - + browser/branding/mb-release/content/moz.build - + browser/branding/mb-release/content/mullvad-branding.css - + browser/branding/mb-release/default128.png - + browser/branding/mb-release/default16.png - + browser/branding/mb-release/default22.png - + browser/branding/mb-release/default24.png - + browser/branding/mb-release/default256.png - + browser/branding/mb-release/default32.png - + browser/branding/mb-release/default48.png - + browser/branding/mb-release/default64.png - + browser/branding/mb-release/document.icns - + browser/branding/mb-release/document.ico - + browser/branding/mb-release/document_pdf.ico - + browser/branding/mb-release/firefox.icns - + browser/branding/mb-release/firefox.ico - + browser/branding/mb-release/firefox.svg - + browser/branding/mb-release/locales/en-US/brand.ftl - + browser/branding/mb-release/locales/en-US/brand.properties - + browser/branding/mb-release/locales/jar.mn - + browser/branding/mb-release/locales/moz.build - + browser/branding/mb-release/locales/mullvad-about-wordmark-en.ftl - + browser/branding/mb-release/moz.build - + browser/branding/mb-release/mullvadbrowser.VisualElementsManifest.xml - + browser/branding/mb-release/newtab.ico - + browser/branding/mb-release/newwindow.ico - + browser/branding/mb-release/pbmode.ico - + browser/branding/mb-release/pref/firefox-branding.js - browser/components/BrowserContentHandler.sys.mjs - browser/components/BrowserGlue.sys.mjs - browser/components/DesktopActorRegistry.sys.mjs - browser/components/about/AboutRedirector.cpp - browser/components/about/components.conf - browser/components/customizableui/CustomizableUI.sys.mjs - browser/components/moz.build - + browser/components/mullvad-browser/AboutMullvadBrowserChild.sys.mjs - + browser/components/mullvad-browser/AboutMullvadBrowserParent.sys.mjs - + browser/components/mullvad-browser/content/2728-sparkles.svg - + browser/components/mullvad-browser/content/aboutMullvadBrowser.css - + browser/components/mullvad-browser/content/aboutMullvadBrowser.html - + browser/components/mullvad-browser/content/aboutMullvadBrowser.js - + browser/components/mullvad-browser/jar.mn - + browser/components/mullvad-browser/moz.build - browser/components/preferences/home.inc.xhtml - browser/components/preferences/main.js - browser/components/preferences/preferences.xhtml - browser/components/preferences/privacy.inc.xhtml - browser/components/preferences/privacy.js - browser/components/preferences/search.inc.xhtml - + browser/components/search/extensions/brave/favicon.svg - + browser/components/search/extensions/brave/manifest.json - + browser/components/search/extensions/ddg-html/favicon.ico - + browser/components/search/extensions/ddg-html/manifest.json - browser/components/search/extensions/ddg/manifest.json - + browser/components/search/extensions/metager/favicon.ico - + browser/components/search/extensions/metager/manifest.json - + browser/components/search/extensions/mojeek/favicon.ico - + browser/components/search/extensions/mojeek/manifest.json - + browser/components/search/extensions/mullvad-leta/favicon.svg - + browser/components/search/extensions/mullvad-leta/manifest.json - + browser/components/search/extensions/startpage/favicon.png - + browser/components/search/extensions/startpage/manifest.json - browser/components/shell/ShellService.sys.mjs - browser/components/shell/WindowsDefaultBrowser.cpp - browser/components/shell/nsWindowsShellService.cpp - browser/config/mozconfigs/base-browser - + browser/config/mozconfigs/mullvad-browser - browser/installer/package-manifest.in - browser/installer/windows/nsis/updater_append.ini - browser/locales/l10n.toml - browser/modules/HomePage.sys.mjs - browser/moz.build - browser/moz.configure - config/create_rc.py - devtools/client/aboutdebugging/src/actions/runtimes.js - devtools/client/aboutdebugging/src/components/sidebar/Sidebar.js - devtools/client/jar.mn - devtools/client/themes/images/aboutdebugging-firefox-aurora.svg - devtools/client/themes/images/aboutdebugging-firefox-beta.svg - devtools/client/themes/images/aboutdebugging-firefox-logo.svg - devtools/client/themes/images/aboutdebugging-firefox-nightly.svg - devtools/client/themes/images/aboutdebugging-firefox-release.svg - + devtools/client/themes/images/aboutdebugging-mullvadbrowser-logo.svg - docshell/base/nsAboutRedirector.cpp - docshell/build/components.conf - moz.configure - mozconfig-linux-aarch64 - mozconfig-linux-aarch64-dev - mozconfig-linux-x86_64 - mozconfig-linux-x86_64-asan - mozconfig-linux-x86_64-dev - mozconfig-macos - mozconfig-macos-dev - mozconfig-windows-x86_64 - + other-licenses/nsis/Contrib/ApplicationID/Makefile - other-licenses/nsis/Contrib/ApplicationID/Set.cpp - + other-licenses/nsis/Contrib/CityHash/Makefile - toolkit/components/extensions/child/ext-storage.js - toolkit/components/extensions/parent/ext-storage.js - toolkit/components/passwordmgr/LoginHelper.sys.mjs - toolkit/components/search/AppProvidedSearchEngine.sys.mjs - toolkit/components/search/SearchService.sys.mjs - + toolkit/components/search/content/brave.svg - + toolkit/components/search/content/duckduckgo.ico - + toolkit/components/search/content/metager.ico - + toolkit/components/search/content/mojeek.ico - + toolkit/components/search/content/mullvad-leta.svg - + toolkit/components/search/content/mullvadBrowserSearchEngineIcons.json - + toolkit/components/search/content/mullvadBrowserSearchEngines.json - + toolkit/components/search/content/startpage.png - + toolkit/components/search/jar.mn - toolkit/components/search/moz.build - toolkit/components/securitylevel/SecurityLevel.sys.mjs - + toolkit/content/aboutRightsMullvad.xhtml - + toolkit/content/aboutTelemetryMullvad.xhtml - toolkit/content/jar.mn - toolkit/content/widgets/moz-support-link/moz-support-link.mjs - + toolkit/locales/en-US/toolkit/global/mullvad-browser.ftl - toolkit/mozapps/defaultagent/EventLog.h - toolkit/mozapps/defaultagent/SetDefaultBrowser.cpp - toolkit/mozapps/extensions/AddonManager.sys.mjs - toolkit/mozapps/extensions/content/aboutaddons.css - toolkit/mozapps/extensions/internal/XPIDatabase.sys.mjs - toolkit/mozapps/extensions/internal/XPIProvider.sys.mjs - toolkit/mozapps/update/updater/nightly_aurora_level3_primary.der - toolkit/mozapps/update/updater/nightly_aurora_level3_secondary.der - toolkit/mozapps/update/updater/release_primary.der - toolkit/mozapps/update/updater/release_secondary.der - + toolkit/themes/shared/icons/mullvadbrowser.png - toolkit/themes/shared/minimal-toolkit.jar.inc.mn - toolkit/xre/nsAppRunner.cpp - tools/lint/fluent-lint/exclusions.yml - widget/windows/WinTaskbar.cpp - widget/windows/moz.build The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/6c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/6c… You're receiving this email because of your account on gitlab.torproject.org.

1 0