- tbb-commits - lists.torproject.org

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] fixup! BB 9173: Change the default Firefox profile directory to be relative.
by morgan (＠morgan) 28 Jul '26

28 Jul '26

morgan pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 88be53ba by Pier Angelo Vendrame at 2026-07-28T13:34:27+00:00 fixup! BB 9173: Change the default Firefox profile directory to be relative. BB 45074: Do not promote Tor Browser as a PDF viewer. This functionality does not work when in portable mode. - - - - - 1 changed file: - toolkit/actors/AboutPDFParent.sys.mjs Changes: ===================================== toolkit/actors/AboutPDFParent.sys.mjs ===================================== @@ -29,7 +29,14 @@ export class AboutPDFParent extends JSWindowActorParent { } #canSetDefaultPDFHandler() { - if (!ShellService || AppConstants.platform != "win") { + const xreDirProvider = Cc[ + "@mozilla.org/xre/directory-provider;1" + ].getService(Ci.nsIXREDirProvider); + if ( + !ShellService || + AppConstants.platform != "win" || + xreDirProvider.isPortableMode + ) { return false; } View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/88b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/88b… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! BB 9173: Change the default Firefox profile directory to be relative.
by morgan (＠morgan) 28 Jul '26

28 Jul '26

morgan pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 572ec37e by Pier Angelo Vendrame at 2026-07-28T13:33:06+00:00 fixup! BB 9173: Change the default Firefox profile directory to be relative. BB 45074: Do not promote Tor Browser as a PDF viewer. This functionality does not work when in portable mode. - - - - - 1 changed file: - toolkit/actors/AboutPDFParent.sys.mjs Changes: ===================================== toolkit/actors/AboutPDFParent.sys.mjs ===================================== @@ -29,7 +29,14 @@ export class AboutPDFParent extends JSWindowActorParent { } #canSetDefaultPDFHandler() { - if (!ShellService || AppConstants.platform != "win") { + const xreDirProvider = Cc[ + "@mozilla.org/xre/directory-provider;1" + ].getService(Ci.nsIXREDirProvider); + if ( + !ShellService || + AppConstants.platform != "win" || + xreDirProvider.isPortableMode + ) { return false; } View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/572ec37… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/572ec37… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] 6 commits: fixup! BB 41916: Letterboxing preferences UI
by henry (＠henry) 28 Jul '26

28 Jul '26

henry pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 34750d3a by Henry Wilkes at 2026-07-28T13:15:52+00:00 fixup! BB 41916: Letterboxing preferences UI BB 44959: Swap about:manual link. - - - - - 1f471dc9 by Henry Wilkes at 2026-07-28T13:15:52+00:00 fixup! BB 40925: Implemented the Security Level component BB 44959: Swap about:manual link. - - - - - 2064e1c8 by Henry Wilkes at 2026-07-28T13:15:52+00:00 fixup! TB 11698: Incorporate Tor Browser Manual pages into Tor Browser TB 44959: Integrate the new manual. - - - - - 631c2c54 by Henry Wilkes at 2026-07-28T13:15:52+00:00 fixup! TB 30237: Add v3 onion services client authentication prompt TB 44959: Swap about:manual link. - - - - - da12add2 by Henry Wilkes at 2026-07-28T13:15:52+00:00 fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection TB 44959: Swap about:manual link. - - - - - 21d6cfe7 by Henry Wilkes at 2026-07-28T13:15:52+00:00 fixup! Add TorStrings module for localization TB 44959: Swap about:manual link. - - - - - 18 changed files: - browser/components/DesktopActorRegistry.sys.mjs - browser/components/about/AboutRedirector.cpp - + browser/components/aboutmanual/AboutManualChild.sys.mjs - + browser/components/aboutmanual/AboutManualParent.sys.mjs - + browser/components/aboutmanual/content/aboutManual.js - + browser/components/aboutmanual/jar.mn - + browser/components/aboutmanual/moz.build - browser/components/moz.build - browser/components/onionservices/content/authPopup.inc.xhtml - browser/components/preferences/config/passwords-autofill.mjs - browser/components/preferences/letterboxing.inc.xhtml - browser/components/securitylevel/content/securityLevelPanel.inc.xhtml - browser/components/securitylevel/content/securityLevelPreferences.inc.xhtml - browser/components/torpreferences/config/connection.mjs - browser/components/torpreferences/content/connectionPane.inc.xhtml - browser/components/torpreferences/content/provideBridgeDialog.xhtml - toolkit/content/aboutNetError.mjs - toolkit/modules/TorStrings.sys.mjs Changes: ===================================== browser/components/DesktopActorRegistry.sys.mjs ===================================== @@ -126,6 +126,23 @@ let JSWINDOWACTORS = { remoteTypes: ["privilegedabout"], }, + AboutManual: { + parent: { + esModuleURI: + "moz-src:///browser/components/aboutmanual/AboutManualParent.sys.mjs", + }, + child: { + esModuleURI: + "moz-src:///browser/components/aboutmanual/AboutManualChild.sys.mjs", + + events: { + ManualLocaleSelected: { wantUntrusted: true }, + }, + }, + + matches: ["about:manual"], + }, + AboutMessagePreview: { parent: { esModuleURI: "resource:///actors/AboutMessagePreviewParent.sys.mjs", ===================================== browser/components/about/AboutRedirector.cpp ===================================== @@ -212,52 +212,45 @@ static nsAutoCString GetAboutModuleName(nsIURI* aURI) { return path; } -static nsTHashSet<nsCStringHashKey> GetManualLocales() { - nsTHashSet<nsCStringHashKey> locales; - RefPtr<nsZipArchive> zip = Omnijar::GetReader(Omnijar::APP); - if (!zip) { - // Probably a local build started with ./mach run - return locales; - } - UniquePtr<nsZipFind> find; - const nsAutoCString prefix("chrome/browser/content/browser/manual/"); - nsAutoCString needle = prefix; - needle.Append("*.html"); - if (NS_SUCCEEDED(zip->FindInit(needle.get(), getter_Transfers(find)))) { - const char* entryName; - uint16_t entryNameLen; - while (NS_SUCCEEDED(find->FindNext(&entryName, &entryNameLen))) { - // 5 is to remove the final `.html` - const size_t length = entryNameLen - prefix.Length() - 5; - locales.Insert(nsAutoCString(entryName + prefix.Length(), length)); - } - } - return locales; -} - static nsAutoCString GetManualChromeURI() { - static nsTHashSet<nsCStringHashKey> locales = GetManualLocales(); - - nsAutoCString reqLocale; - intl::LocaleService::GetInstance()->GetAppLocaleAsBCP47(reqLocale); - // Check every time the URL is needed in case the locale has changed. - // It might help also if we start allowing to change language, e.g., with a - // get parameter (see tor-browser#42675). - if (!locales.Contains(reqLocale) && reqLocale.Length() > 2 && - reqLocale[2] == '-') { - // At the moment, codes in our manual output are either 2 letters (en) or - // 5 letters (pt-BR) - reqLocale.SetLength(2); + nsTArray<nsCString> availableLocales; + nsCString availableLocalesStr; + if (NS_SUCCEEDED(mozilla::Preferences::GetCString( + "torbrowser.manual.available-locales", availableLocalesStr)) && + availableLocalesStr.Length() > 0) { + for (const nsACString& locale : availableLocalesStr.Split(',')) { + availableLocales.AppendElement(locale); + } } - if (!locales.Contains(reqLocale)) { - reqLocale = "en"; + nsCString tryLocale; + if (!NS_SUCCEEDED(mozilla::Preferences::GetCString("torbrowser.manual.locale", + tryLocale)) || + !availableLocales.Contains(tryLocale)) { + nsTArray<nsCString> appLocales; + intl::LocaleService::GetInstance()->GetAppLocalesAsBCP47(appLocales); + bool found = false; + for (size_t i = 0; i < appLocales.Length(); i++) { + tryLocale = appLocales[i]; + if (availableLocales.Contains(tryLocale)) { + found = true; + break; + } else if (tryLocale.Length() > 3 && tryLocale[2] == '-') { + // Strip the region code and see if the lang matches. + tryLocale.SetLength(2); + if (availableLocales.Contains(tryLocale)) { + found = true; + break; + } + } + } + if (!found) { + tryLocale.AssignLiteral("en"); + } } - - // %s is the language - constexpr char model[] = "chrome://browser/content/manual/%s.html"; - nsAutoCString url; - url.AppendPrintf(model, reqLocale.get()); - return url; + nsAutoCString uri; + uri.AppendPrintf("chrome://browser/content/aboutmanual/aboutManual-%s.html", + tryLocale.get()); + return uri; } NS_IMETHODIMP ===================================== browser/components/aboutmanual/AboutManualChild.sys.mjs ===================================== @@ -0,0 +1,15 @@ +/** + * Actor child class for the about:manual page. + */ +export class AboutManualChild extends JSWindowActorChild { + handleEvent(event) { + switch (event.type) { + case "ManualLocaleSelected": { + const locale = event.detail; + if (typeof locale === "string") { + this.sendAsyncMessage("AboutManual:LocaleSelected", locale); + } + } + } + } +} ===================================== browser/components/aboutmanual/AboutManualParent.sys.mjs ===================================== @@ -0,0 +1,21 @@ +/** + * Actor parent class for the about:manual page. + */ +export class AboutManualParent extends JSWindowActorParent { + receiveMessage(message) { + switch (message.name) { + case "AboutManual:LocaleSelected": { + const locale = message.data; + if ( + Services.prefs + .getStringPref("torbrowser.manual.available-locales", "") + .split(",") + .includes(locale) + ) { + Services.prefs.setStringPref("torbrowser.manual.locale", locale); + this.browsingContext.reload(Ci.nsIWebNavigation.LOAD_FLAGS_NONE); + } + } + } + } +} ===================================== browser/components/aboutmanual/content/aboutManual.js ===================================== @@ -0,0 +1,67 @@ +"use strict"; + +function changePage(initialLoad) { + let page; + const hash = location.hash; + const id = hash.startsWith("#") ? hash.substr(1) : null; + let targetEl = null; + if (id) { + targetEl = document.getElementById(id); + page = targetEl?.closest(".olm-page"); + } + if (!page) { + if (!initialLoad) { + // Make no change. + return; + } + page = document.getElementById("index"); + } + const currPage = document.querySelector(".olm-page:not(.d-none)"); + if (currPage === page) { + // No change in page. + return; + } + + currPage?.classList.add("d-none"); + page.classList.remove("d-none"); + + // If we are targeting an element that is not a page element, we want to + // scroll it into view (the focus position should have already shifted to + // point to it). + // Otherwise, if we have no target or the target is a page, we want to scroll + // to the top of the document so that the header is visible. + const doScroll = () => { + const scrollEl = targetEl && targetEl !== page ? targetEl : document.body; + scrollEl.scrollIntoView({ + behavior: "instant", + block: "start", + inline: "start", + }); + }; + if (initialLoad) { + window.addEventListener("load", doScroll, { once: true }); + } else { + doScroll(); + } +} + +window.addEventListener("DOMContentLoaded", () => { + const langDropdown = document.getElementById("language-menu-dropdown"); + for (const langButton of langDropdown.querySelectorAll("button")) { + langButton.addEventListener("click", () => { + dispatchEvent( + new CustomEvent("ManualLocaleSelected", { + // The button's lang attribute is expected to match the locale's code. + detail: langButton.getAttribute("lang"), + bubbles: true, + }) + ); + }); + } + + changePage(true); +}); + +window.addEventListener("hashchange", () => { + changePage(false); +}); ===================================== browser/components/aboutmanual/jar.mn ===================================== @@ -0,0 +1,2 @@ +browser.jar: + content/browser/aboutmanual/aboutManual.js (content/aboutManual.js) ===================================== browser/components/aboutmanual/moz.build ===================================== @@ -0,0 +1,6 @@ +JAR_MANIFESTS += ["jar.mn"] + +MOZ_SRC_FILES += [ + "AboutManualChild.sys.mjs", + "AboutManualParent.sys.mjs", +] ===================================== browser/components/moz.build ===================================== @@ -26,6 +26,7 @@ with Files("controlcenter/**"): DIRS += [ "about", + "aboutmanual", "aboutlogins", "abouttor", "aboutwelcome", ===================================== browser/components/onionservices/content/authPopup.inc.xhtml ===================================== @@ -6,7 +6,7 @@ <label class="text-link popup-notification-learnmore-link" is="text-link" - href="about:manual#onion-services_onion-service-authentication" + href="about:manual#features__onion-services___onion-service-auth" useoriginprincipal="true" data-l10n-id="onion-site-authentication-prompt-learn-more" /> ===================================== browser/components/preferences/config/passwords-autofill.mjs ===================================== @@ -792,7 +792,7 @@ SettingGroupManager.registerGroups({ onionSiteAuthentication: { l10nId: "onion-site-authentication-group", headingLevel: 2, - supportPage: "tor-manual:onion-services_onion-service-authentication", + supportPage: "tor-manual:features__onion-services___onion-service-auth", items: [ { id: "onionSiteSavedKeys", ===================================== browser/components/preferences/letterboxing.inc.xhtml ===================================== @@ -10,7 +10,7 @@ <html:span data-l10n-id="letterboxing-overview"></html:span> <html:a is="moz-support-link" - support-page="tor-manual:anti-fingerprinting_letterboxing" + support-page="tor-manual:features__fingerprinting-protections___letterboxing" data-l10n-id="letterboxing-learn-more" ></html:a> </description> ===================================== browser/components/securitylevel/content/securityLevelPanel.inc.xhtml ===================================== @@ -18,7 +18,7 @@ <html:a is="moz-support-link" id="securityLevel-learnMore" - support-page="tor-manual:security-settings" + support-page="tor-manual:features__security-levels" data-l10n-id="security-level-panel-learn-more-link" ></html:a> <html:img id="securityLevel-background-image" alt="" /> ===================================== browser/components/securitylevel/content/securityLevelPreferences.inc.xhtml ===================================== @@ -13,7 +13,7 @@ ></html:span> <html:a is="moz-support-link" - support-page="tor-manual:security-settings" + support-page="tor-manual:features__security-levels" data-l10n-id="security-level-preferences-learn-more-link" ></html:a> </description> ===================================== browser/components/torpreferences/config/connection.mjs ===================================== @@ -13,7 +13,7 @@ SettingGroupManager.registerGroups({ connectionStatus: { inProgress: true, l10nId: "tor-connection-internet-status-group", - supportPage: "tor-manual:about", + supportPage: "tor-manual:getting-started__about-tor-browser", headingLevel: 2, items: [ { ===================================== browser/components/torpreferences/content/connectionPane.inc.xhtml ===================================== @@ -18,7 +18,7 @@ <label class="learnMore text-link" is="text-link" - href="about:manual#about" + href="about:manual#getting-started__about-tor-browser" useoriginprincipal="true" data-l10n-id="tor-connection-browser-learn-more-link" /> @@ -129,7 +129,7 @@ <label class="learnMore text-link" is="text-link" - href="about:manual#bridges" + href="about:manual#circumvention__unblocking-tor" useoriginprincipal="true" data-l10n-id="tor-bridges-learn-more-link" /> ===================================== browser/components/torpreferences/content/provideBridgeDialog.xhtml ===================================== @@ -37,7 +37,7 @@ <label is="text-link" class="learnMore text-link" - href="about:manual#bridges" + href="about:manual#circumvention__unblocking-tor" useoriginprincipal="true" data-l10n-id="user-provide-bridge-dialog-learn-more" /> ===================================== toolkit/content/aboutNetError.mjs ===================================== @@ -372,7 +372,7 @@ function initOnionError() { const learnMore = document.getElementById("learnMoreContainer"); learnMore.hidden = false; const learnMoreLink = document.getElementById("learnMoreLink"); - learnMoreLink.href = "about:manual#onion-services"; + learnMoreLink.href = "about:manual#features__onion-services"; setFocus("#netErrorButtonContainer > .try-again"); ===================================== toolkit/modules/TorStrings.sys.mjs ===================================== @@ -243,7 +243,7 @@ const Loader = { ); return { ...tsb.getStrings(strings), - learnMoreURL: "about:manual#onion-services", + learnMoreURL: "about:manual#features__onion-services", // XUL popups cannot open about: URLs, but we are online when showing the notification, so just use the online version learnMoreURLNotification: `https://tb-manual.torproject.org/${getLocale()}/onion-services/`, }; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/a527ea… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/a527ea… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! BB 44711: Hide unwanted setting controls in Base Browser.
by henry (＠henry) 28 Jul '26

28 Jul '26

henry pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: a527ea6b by Henry Wilkes at 2026-07-28T13:13:39+00:00 fixup! BB 44711: Hide unwanted setting controls in Base Browser. BB 45156: Hide "Customize Firefox Home" in appearance settings. - - - - - 1 changed file: - browser/components/preferences/config/appearance.mjs Changes: ===================================== browser/components/preferences/config/appearance.mjs ===================================== @@ -90,6 +90,8 @@ Preferences.addSetting({ Preferences.addSetting({ id: "related-settings-home-link", + // Hide the "Customize Firefox Home" link. tor-browser#45156. + visible: () => false, onUserClick: e => { e.preventDefault(); window.gotoPref("paneHome"); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/a527ea6… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/a527ea6… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] fixup! MB 1: Mullvad Browser branding
by morgan (＠morgan) 28 Jul '26

28 Jul '26

morgan pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 94c9c37a by Pier Angelo Vendrame at 2026-07-28T11:58:42+00:00 fixup! MB 1: Mullvad Browser branding MB 563: Hide Firefox's icon in about:pdf promo. - - - - - 1 changed file: - toolkit/components/aboutpdf/content/aboutPDF.html Changes: ===================================== toolkit/components/aboutpdf/content/aboutPDF.html ===================================== @@ -72,8 +72,6 @@ id="promo" hidden data-l10n-id="about-pdf-promo" - imagesrc="chrome://global/skin/illustrations/kit-in-circle.svg" - imagealignment="start" > <moz-button id="set-default" View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/94c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/94c… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] fixup! BB 43322: Customize the font visibility lists.
by morgan (＠morgan) 28 Jul '26

28 Jul '26

morgan pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: d890f6b8 by Pier Angelo Vendrame at 2026-07-28T11:56:22+00:00 fixup! BB 43322: Customize the font visibility lists. BB 44257: Disable locale-based font rules. We already try to enable locale-specific font in all languages instead, as long as they are available, or we provide bundled fonts to replace them. And in any case, this is a defense-in-depth, as locale-specific fonts are exlcuded anyway in RFP. - - - - - 1 changed file: - gfx/thebes/StandardFonts-win10.inc Changes: ===================================== gfx/thebes/StandardFonts-win10.inc ===================================== @@ -278,7 +278,7 @@ static const FontSubstitute kFontSubstitutes[] = { #endif -#ifdef FontInclusionByLocaleRules +#if defined(FontInclusionByLocaleRules) && !defined(BASE_BROWSER_VERSION) FONT_RULE("arabic typesetting", {"ar", MatchSetting::StartsWith}, {"fa", MatchSetting::StartsWith}) View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/d89… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/d89… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! BB 43322: Customize the font visibility lists.
by morgan (＠morgan) 28 Jul '26

28 Jul '26

morgan pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 0513b462 by Pier Angelo Vendrame at 2026-07-28T11:35:49+00:00 fixup! BB 43322: Customize the font visibility lists. BB 44257: Disable locale-based font rules. We already try to enable locale-specific font in all languages instead, as long as they are available, or we provide bundled fonts to replace them. And in any case, this is a defense-in-depth, as locale-specific fonts are exlcuded anyway in RFP. - - - - - 1 changed file: - gfx/thebes/StandardFonts-win10.inc Changes: ===================================== gfx/thebes/StandardFonts-win10.inc ===================================== @@ -278,7 +278,7 @@ static const FontSubstitute kFontSubstitutes[] = { #endif -#ifdef FontInclusionByLocaleRules +#if defined(FontInclusionByLocaleRules) && !defined(BASE_BROWSER_VERSION) FONT_RULE("arabic typesetting", {"ar", MatchSetting::StartsWith}, {"fa", MatchSetting::StartsWith}) View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/0513b46… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/0513b46… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in...
by morgan (＠morgan) 28 Jul '26

28 Jul '26

morgan pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 7bfb497b by Henry Wilkes at 2026-07-28T11:22:09+00:00 fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection TB 45125: Make sure observers are removed when the page in unloaded. Also remove a race condition between successive locale changes. - - - - - 1 changed file: - browser/components/torpreferences/content/bridgemoji/BridgeEmoji.js Changes: ===================================== browser/components/torpreferences/content/bridgemoji/BridgeEmoji.js ===================================== @@ -5,59 +5,89 @@ * Element to display a single bridge emoji, with a localized name. */ class BridgeEmoji extends HTMLElement { + /** + * The instances that are active (in the DOM). + * + * @type {Set<BridgeEmoji>} + */ static #activeInstances = new Set(); - static #observer(subject, topic) { - if (topic === "intl:app-locales-changed") { - BridgeEmoji.#updateEmojiLangCode(); - } - } - static #addActiveInstance(inst) { - if (this.#activeInstances.size === 0) { - Services.obs.addObserver(this.#observer, "intl:app-locales-changed"); - this.#updateEmojiLangCode(); - } - this.#activeInstances.add(inst); - } - - static #removeActiveInstance(inst) { - this.#activeInstances.delete(inst); - if (this.#activeInstances.size === 0) { - Services.obs.removeObserver(this.#observer, "intl:app-locales-changed"); - } - } + /** + * A promise that resolves with a list of emoji strings, in a specific + * order. Each BridgeEmoji instance has an `#index` in this list, which + * points to its corresponding emoji. + * + * @type {Promise<string[]>} + */ + static #emojiListPromise = fetch( + "chrome://browser/content/torpreferences/bridgemoji/bridge-emojis.json" + ).then(response => response.json()); /** - * The language code for emoji annotations. + * @typedef {{[key: string]: string}} EmojiAnnotations * - * null if unset. + * A map from an emoji's codepoint to a locale's annotation. + */ + /** + * A promise that resolves with a map from locales to their annotations. + * + * @type {Promise<{[key: string]: EmojiAnnotattions}>} + */ + static #annotationsPromise = fetch( + "chrome://browser/content/torpreferences/bridgemoji/annotations.json" + ).then(response => response.json()); + + /** + * @typedef {object} EmojiLocaleDetails * - * @type {string?} + * @property {string[]} [emojiList] - A list of emojis as strings, in a + * specific order. + * @property {EmojiAnnotations} [annotations] - The annotations for the + * locale. + * @property {string} [unknownString] - The string to use for emojis with + * undefined annotations. */ - static #emojiLangCode = null; /** - * A promise that resolves to two JSON structures for bridge-emojis.json and - * annotations.json, respectively. + * The cached locale details. * - * @type {Promise} + * @type {EmojiLocaleDetails} */ - static #emojiPromise = Promise.all([ - fetch( - "chrome://browser/content/torpreferences/bridgemoji/bridge-emojis.json" - ).then(response => response.json()), - fetch( - "chrome://browser/content/torpreferences/bridgemoji/annotations.json" - ).then(response => response.json()), - ]); + static #emojiLocaleDetails = {}; - static #unknownStringPromise = null; + /** + * A promise that resolves when the previous call to appLocalesChanged + * completes. + * + * @type {Promise?} + */ + static #prevAppLocalesChangedCall = null; /** - * Update #emojiLangCode. + * Update the locale used for bridge emoji widget. */ - static async #updateEmojiLangCode() { + static async appLocalesChanged() { + // Introduce a queue to ensure calls apply in the order they are invoked, + // so the last seen locale will eventually be the applied one. + const { promise, resolve } = Promise.withResolvers(); + const prevAppLocalesChangedCall = this.#prevAppLocalesChangedCall; + this.#prevAppLocalesChangedCall = promise; + try { + await prevAppLocalesChangedCall; + await this.#appLocalesChangedInternal(); + } finally { + resolve(); + } + } + + static async #appLocalesChangedInternal() { + let [emojiAnnotations, emojiList, unknownString] = await Promise.all([ + this.#annotationsPromise, + this.#emojiListPromise, + // Grab the string for the new locale. + document.l10n.formatValue("tor-bridges-emoji-unknown"), + ]); + let langCode; - const emojiAnnotations = (await BridgeEmoji.#emojiPromise)[1]; // Find the first desired locale we have annotations for. // Add "en" as a fallback. for (const bcp47 of [...Services.locale.appLocalesAsBCP47, "en"]) { @@ -71,14 +101,14 @@ break; } } - if (langCode !== this.#emojiLangCode) { - this.#emojiLangCode = langCode; - this.#unknownStringPromise = document.l10n.formatValue( - "tor-bridges-emoji-unknown" - ); - for (const inst of this.#activeInstances) { - inst.update(); - } + + this.#emojiLocaleDetails = { + emojiList, + annotations: emojiAnnotations[langCode], + unknownString, + }; + for (const inst of this.#activeInstances) { + inst.update(); } } @@ -86,22 +116,15 @@ * Update the bridge emoji to show their corresponding emoji with an * annotation that matches the current locale. */ - async update() { - if (!this.#active) { - return; - } + update() { + const { emojiList, annotations, unknownString } = + BridgeEmoji.#emojiLocaleDetails; - if (!BridgeEmoji.#emojiLangCode) { - // No lang code yet, wait until it is updated. + if (!this.#active || !emojiList || !annotations || !unknownString) { return; } const doc = this.ownerDocument; - const [unknownString, [emojiList, emojiAnnotations]] = await Promise.all([ - BridgeEmoji.#unknownStringPromise, - BridgeEmoji.#emojiPromise, - ]); - const emoji = emojiList[this.#index]; let emojiName; if (!emoji) { @@ -113,7 +136,7 @@ "src", `chrome://browser/content/torpreferences/bridgemoji/svgs/${cp}.svg` ); - emojiName = emojiAnnotations[BridgeEmoji.#emojiLangCode][cp]; + emojiName = annotations[cp]; } if (!emojiName) { doc.defaultView.console.error(`No emoji for index ${this.#index}`); @@ -157,13 +180,13 @@ } this.#active = true; - BridgeEmoji.#addActiveInstance(this); + BridgeEmoji.#activeInstances.add(this); this.update(); } disconnectedCallback() { this.#active = false; - BridgeEmoji.#removeActiveInstance(this); + BridgeEmoji.#activeInstances.delete(this); } /** @@ -196,4 +219,20 @@ } customElements.define("tor-bridge-emoji", BridgeEmoji); + + { + const appLocalesChanged = BridgeEmoji.appLocalesChanged.bind(BridgeEmoji); + Services.obs.addObserver(appLocalesChanged, "intl:app-locales-changed"); + window.addEventListener( + "unload", + () => { + Services.obs.removeObserver( + appLocalesChanged, + "intl:app-locales-changed" + ); + }, + { once: true } + ); + appLocalesChanged(); + } } View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7bfb497… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7bfb497… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/torbrowser-launcher][main] Update file org.torproject.torbrowser-launcher.png
by boklm (＠boklm) 27 Jul '26

27 Jul '26

boklm pushed to branch main at The Tor Project / Applications / torbrowser-launcher Commits: e99e2dfa by harpia at 2026-07-27T14:26:21+02:00 Update file org.torproject.torbrowser-launcher.png - - - - - 1 changed file: - share/icons/hicolor/128x128/apps/org.torproject.torbrowser-launcher.png Changes: ===================================== share/icons/hicolor/128x128/apps/org.torproject.torbrowser-launcher.png ===================================== Binary files a/share/icons/hicolor/128x128/apps/org.torproject.torbrowser-launcher.png and b/share/icons/hicolor/128x128/apps/org.torproject.torbrowser-launcher.png differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/commit… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/commit… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/torbrowser-launcher][main] Drop bad mirrors from mirrorlist
by boklm (＠boklm) 27 Jul '26

27 Jul '26

boklm pushed to branch main at The Tor Project / Applications / torbrowser-launcher Commits: 90ba4991 by Bernhard M. Wiedemann at 2026-07-27T14:15:22+02:00 Drop bad mirrors from mirrorlist tested with perl -ne 'chomp;print `curl -I ${_}torbrowser/15.0.14/tor-browser-linux-x86_64-15.0.14.tar.xz.asc`' share/torbrowser-launcher/mirrors.txt curl: (6) Could not resolve host: tor.127001.ovh curl: (6) Could not resolve host: mirror.torworld.org curl: (6) Could not resolve host: torproject.ph3x.at curl: (6) Could not resolve host: mirror.ntzk.de curl: (6) Could not resolve host: tor.ccc.de curl: (6) Could not resolve host: tormirror.snydernet.net curl: (6) Could not resolve host: tor.calyxinstitute.org curl: (6) Could not resolve host: torproject.mirror.metalgamer.eu https://108.248.87.242 hangs forever and 3 more have expired SSL certificates: https://tor.crazyhaze.de https://www.it-sicherheitschannel.de/dist/ https://sela.io/mirrors/torproject.org/dist/ - - - - - 1 changed file: - share/torbrowser-launcher/mirrors.txt Changes: ===================================== share/torbrowser-launcher/mirrors.txt ===================================== @@ -1,17 +1,12 @@ https://dist.torproject.org/ -https://tor.crazyhaze.de/dist/ https://creep.im/tor/dist/ https://tor.ybti.net/dist/ https://tor.0x3d.lu/dist/ -https://www.it-sicherheitschannel.de/dist/ https://mirror.freedif.org/TorProject/dist https://tor.secure.voyage/dist -https://tor.127001.ovh/dist/ https://mirror.oldsql.cc/tor/dist/ -https://mirror.torworld.org/dist/ https://tormirror.tb-itf-tor.de/dist/ https://tor.zilog.es/dist/ -https://torproject.ph3x.at/dist/ https://www.torservers.net/mirrors/torproject.org/dist/ https://tor.myrl.net/dist/ https://tor.stalkr.net/dist/ @@ -20,14 +15,7 @@ https://mirror.velcommuta.de/tor/dist/ https://tor.eff.org/dist/ https://tor.void.gr/dist/ https://www.moparisthebest.com/tor/dist/ -https://108.248.87.242/dist/ -https://mirror.ntzk.de/torproject.org/dist/ https://www.eprci.com/tor/dist/ -https://sela.io/mirrors/torproject.org/dist/ -https://tor.ccc.de/dist/ -https://tormirror.snydernet.net/dist/ -https://tor.calyxinstitute.org/dist/ -https://torproject.mirror.metalgamer.eu/dist/ https://nl.mirror.babylon.network/torproject/dist/ https://fr.mirror.babylon.network/torproject/dist/ https://cyberside.net.ee/sibul/dist/ View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/commit… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/commit… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/torbrowser-launcher][main] AppArmor: allow using glycin-loaders via bwrap
by boklm (＠boklm) 27 Jul '26

27 Jul '26

boklm pushed to branch main at The Tor Project / Applications / torbrowser-launcher Commits: 79192073 by intrigeri at 2026-06-01T12:17:47+00:00 AppArmor: allow using glycin-loaders via bwrap Closes tpo/applications/torbrowser-launcher#50 - - - - - 1 changed file: - apparmor/torbrowser.Browser.firefox Changes: ===================================== apparmor/torbrowser.Browser.firefox ===================================== @@ -12,6 +12,7 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} { #include <abstractions/opencl> #include if exists <abstractions/vulkan> #include if exists <abstractions/dbus-session-strict> + #include if exists <abstractions/glycin> userns, View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/commit… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/commit… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! [android] Disable features and functionality
by clairehurst (＠clairehurst) 24 Jul '26

24 Jul '26

clairehurst pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 0dd25373 by clairehurst at 2026-07-23T12:24:25-06:00 fixup! [android] Disable features and functionality Bug 45139: Update old security pref migration removal comment - - - - - 1 changed file: - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/utils/Settings.kt Changes: ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/utils/Settings.kt ===================================== @@ -617,7 +617,7 @@ class Settings( ) /** - * Remove in 15.0 release. + * Remove after 16.0 release (i.e. 17.0 release cycle) tor-browser#45139 */ private fun migrateTorSecurityLevel(): Int? { return when { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/0dd2537… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/0dd2537… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-update-responses][main] 6 commits: alpha: new version, 16.0a9 (linux-aarch64)
by Pier Angelo Vendrame (＠pierov) 23 Jul '26

23 Jul '26

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: a0e0e8a6 by Pier Angelo Vendrame at 2026-07-23T12:28:51+02:00 alpha: new version, 16.0a9 (linux-aarch64) - - - - - 0b4e8d20 by Pier Angelo Vendrame at 2026-07-23T12:28:55+02:00 alpha: new version, 16.0a9 (linux-x86_64) - - - - - 0497a72c by Pier Angelo Vendrame at 2026-07-23T12:28:55+02:00 alpha: new version, 16.0a9 (macos) - - - - - 8189a1f9 by Pier Angelo Vendrame at 2026-07-23T12:28:56+02:00 alpha: new version, 16.0a9 (windows-i686) - - - - - eb495432 by Pier Angelo Vendrame at 2026-07-23T12:28:56+02:00 alpha: new version, 16.0a9 (windows-x86_64) - - - - - 88de4df3 by Pier Angelo Vendrame at 2026-07-23T12:28:56+02:00 alpha: new version, 16.0a9 - - - - - 53 changed files: - update_3/alpha/download-android-aarch64.json - update_3/alpha/download-android-armv7.json - update_3/alpha/download-android-x86_64.json - update_3/alpha/download-linux-aarch64.json - update_3/alpha/download-linux-x86_64.json - update_3/alpha/download-macos.json - update_3/alpha/download-windows-i686.json - update_3/alpha/download-windows-x86_64.json - update_3/alpha/downloads.json - update_3/alpha/linux-aarch64/.htaccess - − update_3/alpha/linux-aarch64/update-16.0a5-16.0a8-linux-aarch64.xml - − update_3/alpha/linux-aarch64/update-16.0a6-16.0a8-linux-aarch64.xml - + update_3/alpha/linux-aarch64/update-16.0a6-16.0a9-linux-aarch64.xml - − update_3/alpha/linux-aarch64/update-16.0a7-16.0a8-linux-aarch64.xml - + update_3/alpha/linux-aarch64/update-16.0a7-16.0a9-linux-aarch64.xml - + update_3/alpha/linux-aarch64/update-16.0a8-16.0a9-linux-aarch64.xml - − update_3/alpha/linux-aarch64/update-16.0a8-linux-aarch64.xml - + update_3/alpha/linux-aarch64/update-16.0a9-linux-aarch64.xml - update_3/alpha/linux-x86_64/.htaccess - − update_3/alpha/linux-x86_64/update-16.0a5-16.0a8-linux-x86_64.xml - − update_3/alpha/linux-x86_64/update-16.0a6-16.0a8-linux-x86_64.xml - + update_3/alpha/linux-x86_64/update-16.0a6-16.0a9-linux-x86_64.xml - − update_3/alpha/linux-x86_64/update-16.0a7-16.0a8-linux-x86_64.xml - + update_3/alpha/linux-x86_64/update-16.0a7-16.0a9-linux-x86_64.xml - + update_3/alpha/linux-x86_64/update-16.0a8-16.0a9-linux-x86_64.xml - − update_3/alpha/linux-x86_64/update-16.0a8-linux-x86_64.xml - + update_3/alpha/linux-x86_64/update-16.0a9-linux-x86_64.xml - update_3/alpha/macos/.htaccess - − update_3/alpha/macos/update-16.0a5-16.0a8-macos.xml - − update_3/alpha/macos/update-16.0a6-16.0a8-macos.xml - + update_3/alpha/macos/update-16.0a6-16.0a9-macos.xml - − update_3/alpha/macos/update-16.0a7-16.0a8-macos.xml - + update_3/alpha/macos/update-16.0a7-16.0a9-macos.xml - + update_3/alpha/macos/update-16.0a8-16.0a9-macos.xml - − update_3/alpha/macos/update-16.0a8-macos.xml - update_3/alpha/windows-i686/update-16.0a8-windows-i686.xml → update_3/alpha/macos/update-16.0a9-macos.xml - update_3/alpha/windows-i686/.htaccess - − update_3/alpha/windows-i686/update-16.0a5-16.0a8-windows-i686.xml - − update_3/alpha/windows-i686/update-16.0a6-16.0a8-windows-i686.xml - + update_3/alpha/windows-i686/update-16.0a6-16.0a9-windows-i686.xml - − update_3/alpha/windows-i686/update-16.0a7-16.0a8-windows-i686.xml - + update_3/alpha/windows-i686/update-16.0a7-16.0a9-windows-i686.xml - + update_3/alpha/windows-i686/update-16.0a8-16.0a9-windows-i686.xml - + update_3/alpha/windows-i686/update-16.0a9-windows-i686.xml - update_3/alpha/windows-x86_64/.htaccess - − update_3/alpha/windows-x86_64/update-16.0a5-16.0a8-windows-x86_64.xml - − update_3/alpha/windows-x86_64/update-16.0a6-16.0a8-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-16.0a6-16.0a9-windows-x86_64.xml - − update_3/alpha/windows-x86_64/update-16.0a7-16.0a8-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-16.0a7-16.0a9-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-16.0a8-16.0a9-windows-x86_64.xml - − update_3/alpha/windows-x86_64/update-16.0a8-windows-x86_64.xml - + update_3/alpha/windows-x86_64/update-16.0a9-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser-update-responses][main] 5 commits: alpha: new version, 16.0a9 (linux-aarch64)
by ma1 (＠ma1) 23 Jul '26

23 Jul '26

ma1 pushed to branch main at The Tor Project / Applications / mullvad-browser-update-responses Commits: 35bcdd10 by hackademix at 2026-07-23T10:43:40+02:00 alpha: new version, 16.0a9 (linux-aarch64) - - - - - 87cc127f by hackademix at 2026-07-23T10:43:42+02:00 alpha: new version, 16.0a9 (linux-x86_64) - - - - - 27728ba3 by hackademix at 2026-07-23T10:43:44+02:00 alpha: new version, 16.0a9 (macos) - - - - - cc0f96be by hackademix at 2026-07-23T10:43:45+02:00 alpha: new version, 16.0a9 (windows-x86_64) - - - - - dd70b448 by hackademix at 2026-07-23T10:43:48+02:00 alpha: new version, 16.0a9 - - - - - 41 changed files: - update_1/alpha/download-linux-aarch64.json - update_1/alpha/download-linux-x86_64.json - update_1/alpha/download-macos.json - update_1/alpha/download-windows-x86_64.json - update_1/alpha/downloads.json - update_1/alpha/linux-aarch64/.htaccess - − update_1/alpha/linux-aarch64/update-16.0a5-16.0a8-linux-aarch64.xml - − update_1/alpha/linux-aarch64/update-16.0a6-16.0a8-linux-aarch64.xml - + update_1/alpha/linux-aarch64/update-16.0a6-16.0a9-linux-aarch64.xml - − update_1/alpha/linux-aarch64/update-16.0a7-16.0a8-linux-aarch64.xml - + update_1/alpha/linux-aarch64/update-16.0a7-16.0a9-linux-aarch64.xml - + update_1/alpha/linux-aarch64/update-16.0a8-16.0a9-linux-aarch64.xml - − update_1/alpha/linux-aarch64/update-16.0a8-linux-aarch64.xml - + update_1/alpha/linux-aarch64/update-16.0a9-linux-aarch64.xml - update_1/alpha/linux-x86_64/.htaccess - − update_1/alpha/linux-x86_64/update-16.0a5-16.0a8-linux-x86_64.xml - − update_1/alpha/linux-x86_64/update-16.0a6-16.0a8-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-16.0a6-16.0a9-linux-x86_64.xml - − update_1/alpha/linux-x86_64/update-16.0a7-16.0a8-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-16.0a7-16.0a9-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-16.0a8-16.0a9-linux-x86_64.xml - − update_1/alpha/linux-x86_64/update-16.0a8-linux-x86_64.xml - + update_1/alpha/linux-x86_64/update-16.0a9-linux-x86_64.xml - update_1/alpha/macos/.htaccess - − update_1/alpha/macos/update-16.0a5-16.0a8-macos.xml - − update_1/alpha/macos/update-16.0a6-16.0a8-macos.xml - + update_1/alpha/macos/update-16.0a6-16.0a9-macos.xml - − update_1/alpha/macos/update-16.0a7-16.0a8-macos.xml - + update_1/alpha/macos/update-16.0a7-16.0a9-macos.xml - + update_1/alpha/macos/update-16.0a8-16.0a9-macos.xml - − update_1/alpha/macos/update-16.0a8-macos.xml - + update_1/alpha/macos/update-16.0a9-macos.xml - update_1/alpha/windows-x86_64/.htaccess - − update_1/alpha/windows-x86_64/update-16.0a5-16.0a8-windows-x86_64.xml - − update_1/alpha/windows-x86_64/update-16.0a6-16.0a8-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-16.0a6-16.0a9-windows-x86_64.xml - − update_1/alpha/windows-x86_64/update-16.0a7-16.0a8-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-16.0a7-16.0a9-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-16.0a8-16.0a9-windows-x86_64.xml - − update_1/alpha/windows-x86_64/update-16.0a8-windows-x86_64.xml - + update_1/alpha/windows-x86_64/update-16.0a9-windows-x86_64.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] 3 commits: fixup! Firefox preference overrides.
by brizental (＠brizental) 23 Jul '26

23 Jul '26

brizental pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: d88f3275 by Beatriz Rizental at 2026-07-22T22:46:50-03:00 fixup! Firefox preference overrides. Bug 45120: Disable smartwindow feature - - - - - 622b3fe0 by Beatriz Rizental at 2026-07-22T22:46:51-03:00 fixup! BB 44045: Disable ML features. Bug 45120: Disable smartwindow feature Even when disabled, this feature still was using the EngineProcess to download models. I have made this conditional, because trying to use that was causing a runtime error preventing initialization to complete successfully and whenever a new window was opened e.g. through "Open Link In New Window", the browser crashed completely. - - - - - f851d77f by Beatriz Rizental at 2026-07-22T22:46:52-03:00 BB 45120: Add tests for Base Browser - - - - - 4 changed files: - browser/app/profile/001-base-profile.js - browser/components/aiwindow/ui/modules/AIWindow.sys.mjs - + testing/base-browser/manifest.toml - + testing/base-browser/test_new_window.py Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -383,6 +383,8 @@ pref("pdfjs.enableAltTextModelDownload", false, locked); pref("browser.urlbar.quicksuggest.mlEnabled", false, locked); // Disable SemanticHistory search. tor-browser#44045. pref("places.semanticHistory.featureGate", false, locked); +// tor-browser#45120: Disable AIWindow +pref("browser.smartwindow.enabled", false); // tor-browser#41945 - disable automatic cookie banners dismissal until ===================================== browser/components/aiwindow/ui/modules/AIWindow.sys.mjs ===================================== @@ -131,7 +131,11 @@ export const AIWindow = { Services.obs.addObserver(this, lazy.ONLOGOUT_NOTIFICATION); Services.obs.addObserver(this, "tabstrip-orientation-change"); lazy.SmartWindowTelemetry.init(); - lazy.getAllModelsData(); // loads model data into cache for about:preferences + if (this.isAIWindowEnabled()) { + // Depends on the ml component, which tor-browser#44045 excludes from + // the build, so only touch it when AI Window is actually enabled. + lazy.getAllModelsData(); // loads model data into cache for about:preferences + } lazy.NimbusFeatures.smartWindow.onUpdate(this.onNimbusUpdate); this._initialized = true; ===================================== testing/base-browser/manifest.toml ===================================== @@ -0,0 +1,4 @@ +[DEFAULT] +tags = "base-browser" + +["test_new_window.py"] ===================================== testing/base-browser/test_new_window.py ===================================== @@ -0,0 +1,25 @@ +from marionette_harness import MarionetteTestCase, WindowManagerMixin + + +class TestNewWindow(WindowManagerMixin, MarionetteTestCase): + def tearDown(self): + self.close_all_windows() + super().tearDown() + + def test_open_new_window(self): + with self.marionette.using_context("chrome"): + new_window = self.open_window() + + self.assertEqual( + len(self.marionette.chrome_window_handles), + len(self.start_windows) + 1, + "A new browser window should have been opened.", + ) + + self.marionette.switch_to_window(new_window) + self.marionette.navigate("about:blank") + self.assertEqual( + self.marionette.get_url(), + "about:blank", + "Should be able to navigate in the newly opened window.", + ) View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/a8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/a8… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] 3 commits: fixup! Firefox preference overrides.
by brizental (＠brizental) 22 Jul '26

22 Jul '26

brizental pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 79698505 by Beatriz Rizental at 2026-07-22T23:28:57+02:00 fixup! Firefox preference overrides. Bug 45120: Disable smartwindow feature - - - - - e693976e by Beatriz Rizental at 2026-07-22T23:28:57+02:00 fixup! BB 44045: Disable ML features. Bug 45120: Disable smartwindow feature Even when disabled, this feature still was using the EngineProcess to download models. I have made this conditional, because trying to use that was causing a runtime error preventing initialization to complete successfully and whenever a new window was opened e.g. through "Open Link In New Window", the browser crashed completely. - - - - - d5e898a5 by Beatriz Rizental at 2026-07-22T23:28:57+02:00 BB 45120: Add tests for Base Browser - - - - - 4 changed files: - browser/app/profile/001-base-profile.js - browser/components/aiwindow/ui/modules/AIWindow.sys.mjs - + testing/base-browser/manifest.toml - + testing/base-browser/test_new_window.py Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -383,6 +383,8 @@ pref("pdfjs.enableAltTextModelDownload", false, locked); pref("browser.urlbar.quicksuggest.mlEnabled", false, locked); // Disable SemanticHistory search. tor-browser#44045. pref("places.semanticHistory.featureGate", false, locked); +// tor-browser#45120: Disable AIWindow +pref("browser.smartwindow.enabled", false); // tor-browser#41945 - disable automatic cookie banners dismissal until ===================================== browser/components/aiwindow/ui/modules/AIWindow.sys.mjs ===================================== @@ -131,7 +131,11 @@ export const AIWindow = { Services.obs.addObserver(this, lazy.ONLOGOUT_NOTIFICATION); Services.obs.addObserver(this, "tabstrip-orientation-change"); lazy.SmartWindowTelemetry.init(); - lazy.getAllModelsData(); // loads model data into cache for about:preferences + if (this.isAIWindowEnabled()) { + // Depends on the ml component, which tor-browser#44045 excludes from + // the build, so only touch it when AI Window is actually enabled. + lazy.getAllModelsData(); // loads model data into cache for about:preferences + } lazy.NimbusFeatures.smartWindow.onUpdate(this.onNimbusUpdate); this._initialized = true; ===================================== testing/base-browser/manifest.toml ===================================== @@ -0,0 +1,4 @@ +[DEFAULT] +tags = "base-browser" + +["test_new_window.py"] ===================================== testing/base-browser/test_new_window.py ===================================== @@ -0,0 +1,25 @@ +from marionette_harness import MarionetteTestCase, WindowManagerMixin + + +class TestNewWindow(WindowManagerMixin, MarionetteTestCase): + def tearDown(self): + self.close_all_windows() + super().tearDown() + + def test_open_new_window(self): + with self.marionette.using_context("chrome"): + new_window = self.open_window() + + self.assertEqual( + len(self.marionette.chrome_window_handles), + len(self.start_windows) + 1, + "A new browser window should have been opened.", + ) + + self.marionette.switch_to_window(new_window) + self.marionette.navigate("about:blank") + self.assertEqual( + self.marionette.get_url(), + "about:blank", + "Should be able to navigate in the newly opened window.", + ) View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/3e9c57… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/3e9c57… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! [android] Disable features and functionality
by Dan Ballard (＠dan) 22 Jul '26

22 Jul '26

Dan Ballard pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 3e9c57c8 by Dan Ballard at 2026-07-22T13:28:45-06:00 fixup! [android] Disable features and functionality TB 44758: Disable email mask feature - - - - - 2 changed files: - mobile/android/fenix/app/nimbus.fml.yaml - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/utils/Settings.kt Changes: ===================================== mobile/android/fenix/app/nimbus.fml.yaml ===================================== @@ -1095,7 +1095,7 @@ features: enabled: description: If true, Email Mask feature is enabled. type: Boolean - default: true + default: false ip-protection: description: Feature to enable IP Protection (VPN) for users on Firefox on Android. ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/utils/Settings.kt ===================================== @@ -2735,7 +2735,7 @@ class Settings( */ var isEmailMaskSuggestionEnabled by booleanPreference( key = appContext.getPreferenceKey(R.string.pref_key_email_mask_suggestion), - default = true, + default = false, ) /** @@ -2743,7 +2743,7 @@ class Settings( */ var shouldShowEmailMaskCfr by booleanPreference( key = appContext.getPreferenceKey(R.string.pref_key_should_show_email_mask_cfr), - default = true, + default = false, ) /** View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3e9c57c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/3e9c57c… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser][tor-browser-153.0esr-16.0-1] fixup! [android] Disable features and functionality
by Pier Angelo Vendrame (＠pierov) 22 Jul '26

22 Jul '26

Pier Angelo Vendrame pushed to branch tor-browser-153.0esr-16.0-1 at The Tor Project / Applications / Tor Browser Commits: 47260100 by Pier Angelo Vendrame at 2026-07-22T18:40:13+02:00 fixup! [android] Disable features and functionality BB 45137: Define TELEMETRY and CRASH_REPORTING once on Android. - - - - - 1 changed file: - mobile/android/fenix/app/build.gradle Changes: ===================================== mobile/android/fenix/app/build.gradle ===================================== @@ -348,8 +348,8 @@ androidComponents { // ------------------------------------------------------------------------------------------------- android.defaultConfig.with { - buildConfigField 'boolean', 'CRASH_REPORTING', 'true' - buildConfigField 'boolean', 'TELEMETRY', 'true' + buildConfigField 'boolean', 'CRASH_REPORTING', 'false' + buildConfigField 'boolean', 'TELEMETRY', 'false' // Reading the sentry token from a local file (if it exists). In a release task on taskcluster it will be available. buildConfigField 'String', 'SENTRY_TOKEN', 'null' @@ -357,8 +357,6 @@ android.defaultConfig.with { def token = new File("${rootDir}/.sentry_token").text.trim() buildConfigField 'String', 'SENTRY_TOKEN', '"' + token + '"' } catch (FileNotFoundException ignored) {} - buildConfigField 'boolean', 'CRASH_REPORTING', 'false' - buildConfigField 'boolean', 'TELEMETRY', 'false' // Setting buildDate with every build ID changes the generated BuildConfig and slows down the // build, so debug builds (overridden below) use a fixed string instead. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/4726010… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/4726010… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser] Pushed new branch tor-browser-154.0a1-17.0-1
by Pier Angelo Vendrame (＠pierov) 22 Jul '26

22 Jul '26

Pier Angelo Vendrame pushed new branch tor-browser-154.0a1-17.0-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-16.0a9-build1
by Pier Angelo Vendrame (＠pierov) 22 Jul '26

22 Jul '26

Pier Angelo Vendrame pushed new tag mb-16.0a9-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-16.0a9-build1
by Pier Angelo Vendrame (＠pierov) 22 Jul '26

22 Jul '26

Pier Angelo Vendrame pushed new tag tbb-16.0a9-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser-build][main] Bug 41833&41834: Prepare Tor&Mullvad Browser 16.0a9
by Pier Angelo Vendrame (＠pierov) 22 Jul '26

22 Jul '26

Pier Angelo Vendrame pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 7dd751cf by Pier Angelo Vendrame at 2026-07-22T15:48:58+02:00 Bug 41833&41834: Prepare Tor&Mullvad Browser 16.0a9 - - - - - 8 changed files: - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/translation/config - rbm.conf Changes: ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,25 @@ +Mullvad Browser 16.0a9 - July 23 2026 + * All Platforms + * Updated Firefox to 153.0esr + * Updated NoScript to 13.6.30.90201984 + * Updated uBlock Origin to 1.72.2 + * Bug 559: about:preferences is broken in 153 nightlies [mullvad-browser] + * Bug 561: Rebase Mullvad Browser onto 153.0esr [mullvad-browser] + * Bug 44439: Remove translate action from urlbar [tor-browser] + * Bug 44811: Remove the lock on pdfjs.disable. [tor-browser] + * Bug 45110: Disable the settings redesign until ready for us [tor-browser] + * Bug 45131: Security level is using an unsafe getBoolPref [tor-browser] + * Bug 45132: nsAppFileLocationProvider.cpp: use of undeclared identifier 'XRE_EXECUTABLE_FILE' [tor-browser] + * Windows + * Bug 555: Fix our wchar_t to char conversion in desktop_capture_utils.cc [mullvad-browser] + * macOS + * Bug 45108: Artifact generation fails due to missing .DS_Store in the branding directories [tor-browser] + * Build System + * All Platforms + * Bug 41838: Update personal_access_tokens URL in tools/fetch_changelogs.py [tor-browser-build] + * Windows + * Bug 41819: Fix windows-rs URL in projects/firefox/config [tor-browser-build] + Mullvad Browser 16.0a8 - July 01 2026 * All Platforms * Updated Firefox to 152.0a1 ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,42 @@ +Tor Browser 16.0a9 - July 23 2026 + * All Platforms + * Updated NoScript to 13.6.30.90201984 + * Bug 43819: Show custom security level on android [tor-browser] + * Bug 44748: Revert Funding the Commons Implementations [tor-browser] + * Bug 44811: Remove the lock on pdfjs.disable. [tor-browser] + * Bug 45101: Rebase Tor Browser onto 153.0esr [tor-browser] + * Bug 45131: Security level is using an unsafe getBoolPref [tor-browser] + * Bug 41831: Update libevent to 2.1.13 [tor-browser-build] + * Windows + macOS + Linux + * Updated Firefox to 153.0esr + * Bug 44439: Remove translate action from urlbar [tor-browser] + * Bug 44883: Remove urlbar quick action for labs [tor-browser] + * Bug 45029: Convert connection status settings to new design and config approach [tor-browser] + * Bug 45055: Rename --color-gray-05 to --color-gray-0 [tor-browser] + * Bug 45081: Use the new "Acorn" icons on desktop [tor-browser] + * Bug 45110: Disable the settings redesign until ready for us [tor-browser] + * Bug 45112: Missing CSS border tokens in 153 [tor-browser] + * Bug 45132: nsAppFileLocationProvider.cpp: use of undeclared identifier 'XRE_EXECUTABLE_FILE' [tor-browser] + * Bug 41800: Create a script that adapts the Tor Browser manual HTMLs to work in Tor Browser [tor-browser-build] + * macOS + * Bug 45108: Artifact generation fails due to missing .DS_Store in the branding directories [tor-browser] + * Android + * Updated GeckoView to 153.0esr + * Bug 43820: Use SecurityLevel integration on android [tor-browser] + * Bug 44157: Remove secret setting toggle for Tab Management Redesign [tor-browser] + * Bug 45045: Remove moz asset in Downloads screen [tor-browser] + * Bug 45103: Disable broken "tab management" [tor-browser] + * Bug 45109: No value passed for parameter 'jsEnabled' [tor-browser] + * Bug 45118: Audit and disable Mozilla VPN promo [tor-browser] + * Bug 45130: Clean up TorHomePage padding [tor-browser] + * Build System + * All Platforms + * Bug 41838: Update personal_access_tokens URL in tools/fetch_changelogs.py [tor-browser-build] + * Windows + Linux + Android + * Updated Go to 1.26.5 + * Windows + * Bug 41819: Fix windows-rs URL in projects/firefox/config [tor-browser-build] + Tor Browser 16.0a8 - July 01 2026 * All Platforms * Updated NoScript to 13.6.25.90301984 ===================================== projects/browser/config ===================================== @@ -87,12 +87,12 @@ input_files: enable: '[% !c("var/android") %]' - filename: dmg-root enable: '[% c("var/macos") %]' - - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.25.90301984.x… + - URL: https://dist.torproject.org/torbrowser/noscript/noscript-13.6.30.90201984.x… name: noscript - sha256sum: 1449e39c15bf00493c274697486fc5f520124d52901fcae696c05083b2c7e921 - - URL: https://addons.mozilla.org/firefox/downloads/file/4814095/ublock_origin-1.7… + sha256sum: ef7b48702916f86d44f0578fcc18dcd4ed4a013481abafca96891e10af1bcf85 + - URL: https://addons.mozilla.org/firefox/downloads/file/4888680/ublock_origin-1.7… name: ublock-origin - sha256sum: 47f788a1fc2c014830b30bb0ef9588615701b98c5265fb19b8cf4ba779849feb + sha256sum: 40c315b0da7871868155ecfae7a50a58dfa0920aebd865e008214986f1b7c578 enable: '[% c("var/mullvad-browser") %]' - URL: https://cdn.mullvad.net/browser-extension/0.9.10/mullvad-browser-extension-… name: mullvad-extension ===================================== projects/firefox/config ===================================== @@ -23,7 +23,7 @@ var: browser_series: '16.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 2 upstream_firefox_commit: FIREFOX_NIGHTLY_153_END copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' ===================================== projects/geckoview/config ===================================== @@ -26,7 +26,7 @@ var: browser_series: '16.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 1 + browser_build: 2 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.26.4' +version: '1.26.5' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: 4f668a32fbfc1132e6a881fb968c2f1dada631492a339211735fbb255a42602d + source_sha256: 495be4bc87176ac567392e5b4116abd98466d33d7b49d41e764ccc6976b2dc42 no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: f214fa73196b8b4ecfd2141ff373ddcbb5edf6b8 + git_hash: 7bd0a8e7226bbf29f16d477ff92d0024b1d48a7c targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: f1579ea805d3d1af56d394893d26561a2945824c + git_hash: 43635f68f04d7e5645e5b28bbab7cd7f0fc2ffa5 targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 925fa40ece33f0c66b11c41b856fc71a1f8bf25c + git_hash: f3757f734f6d08ff5aecc18f9f4b05e35c9bcbc4 compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -81,11 +81,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '16.0a8' - torbrowser_build: 'build3' + torbrowser_version: '16.0a9' + torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2026/07/01 08:30:00' + browser_release_date: '2026/07/22 13:30:00' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: alpha browser_platforms: @@ -131,9 +131,9 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - 16.0a8 - 16.0a7 - 16.0a6 - - 16.0a5 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' # By default, we sort the list of installed packages. This allows sharing View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/7… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/7… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-153.0esr-16.0-1-build2
by Pier Angelo Vendrame (＠pierov) 22 Jul '26

22 Jul '26

Pier Angelo Vendrame pushed new tag mullvad-browser-153.0esr-16.0-1-build2 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-153.0esr-16.0-1-build2
by Pier Angelo Vendrame (＠pierov) 22 Jul '26

22 Jul '26

Pier Angelo Vendrame pushed new tag tor-browser-153.0esr-16.0-1-build2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-153.0esr-16.0-1] fixup! BB 40925: Implemented the Security Level component
by Pier Angelo Vendrame (＠pierov) 22 Jul '26

22 Jul '26

Pier Angelo Vendrame pushed to branch mullvad-browser-153.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: a8a167fe by Pier Angelo Vendrame at 2026-07-22T15:28:09+02:00 fixup! BB 40925: Implemented the Security Level component BB 45131: Avoid the unsafe getBoolPref in the security level. In the security level we use getBoolPref without a default value. Therefore it might throw during the initialization of the security level. This case should not happen normally for us, but it might happen if upstream removes a preference default, and in that case the security level initialization will fail at startup. It seems better to handle the case (but add a console warning, so that we notice it and investigate it). - - - - - 1 changed file: - toolkit/components/securitylevel/SecurityLevel.sys.mjs Changes: ===================================== toolkit/components/securitylevel/SecurityLevel.sys.mjs ===================================== @@ -348,14 +348,22 @@ var read_setting_from_prefs = function (prefNames) { // For the given settingIndex, check if all current pref values // match the setting. for (const prefName of prefNames) { - const wanted = kSecuritySettings[prefName][settingIndex]; - const actual = Services.prefs.getBoolPref(prefName); - if (wanted !== actual) { - possibleSetting = false; - logger.debug( - `${prefName} does not match level ${settingIndex}: ${actual}, should be ${wanted}!` - ); - break; + try { + const wanted = kSecuritySettings[prefName][settingIndex]; + const actual = Services.prefs.getBoolPref(prefName); + if (wanted !== actual) { + possibleSetting = false; + logger.debug( + `${prefName} does not match level ${settingIndex}: ${actual}, should be ${wanted}!` + ); + break; + } + } catch (e) { + // All the relevant prefs must have a defined default. + // If we get here, a preference might have been dropped upstream, + // therefore it makes sense to ignore it to determine the security + // level, but warn so that we have a look at what went wrong. + logger.warn(`Cannot get the value for ${prefName}`, e); } } if (possibleSetting) { View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/a8a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/a8a… You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help

1 0