- tbb-commits - lists.torproject.org

[tor-browser/tor-browser-78.1.0esr-10.0-1] Bug 40073: Disable remote Public Suffix List fetching
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit d2c3d8f23856de0a6d1057202ea75742790c60a9 Author: Alex Catarineu <acat(a)torproject.org> Date: Thu Aug 13 11:05:03 2020 +0200 Bug 40073: Disable remote Public Suffix List fetching In https://bugzilla.mozilla.org/show_bug.cgi?id=1563246 Firefox implemented fetching the Public Suffix List via RemoteSettings and replacing the default one at runtime, which we do not want. --- browser/components/BrowserGlue.jsm | 5 ----- 1 file changed, 5 deletions(-) diff --git a/browser/components/BrowserGlue.jsm b/browser/components/BrowserGlue.jsm index 43565440dd17..0d7de1dc7d4f 100644 --- a/browser/components/BrowserGlue.jsm +++ b/browser/components/BrowserGlue.jsm @@ -695,7 +695,6 @@ XPCOMUtils.defineLazyModuleGetters(this, { PluralForm: "resource://gre/modules/PluralForm.jsm", PrivateBrowsingUtils: "resource://gre/modules/PrivateBrowsingUtils.jsm", ProcessHangMonitor: "resource:///modules/ProcessHangMonitor.jsm", - PublicSuffixList: "resource://gre/modules/netwerk-dns/PublicSuffixList.jsm", RemoteSettings: "resource://services-settings/remote-settings.js", RemoteSecuritySettings: "resource://gre/modules/psm/RemoteSecuritySettings.jsm", @@ -2579,10 +2578,6 @@ BrowserGlue.prototype = { this._addBreachesSyncHandler(); }, - () => { - PublicSuffixList.init(); - }, - () => { RemoteSecuritySettings.init(); },

1 0

[tor-browser-build/master] Bug 40039: Remove version_path in nss project
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit e7d0ada804cff79b101a0b4b7517133c80f25f31 Author: Nicolas Vigier <boklm(a)torproject.org> Date: Thu Aug 13 09:47:06 2020 +0200 Bug 40039: Remove version_path in nss project Instead we generate the string from the version. --- projects/nss/config | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/projects/nss/config b/projects/nss/config index e2b875e..b260e77 100644 --- a/projects/nss/config +++ b/projects/nss/config @@ -3,8 +3,6 @@ filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/buil # The required versions for application-services can be found at the respective # commit in libs/build-all.sh version: 3.54 -# XXX: maybe that's extractable automatically from `version` somehow? -version_path: 3_54 nspr_version: 4.26 var: container: @@ -19,7 +17,7 @@ input_files: project: '[% c("var/compiler") %]' - name: ninja project: ninja - - URL: 'https://ftp.mozilla.org/pub/security/nss/releases/NSS_[% c("version_path") %]_RTM/src/nss-[% c("version") %]-with-nspr-[% c("nspr_version") %].tar.gz' + - URL: 'https://ftp.mozilla.org/pub/security/nss/releases/NSS_[% c("version") | replace("\\.", "_") %]_RTM/src/nss-[% c("version") %]-with-nspr-[% c("nspr_version") %].tar.gz' name: nss sha256sum: e0e81f0ff264d810f130d3cd9334722f7f883c752430483131d1ca5ac62d3f70 - filename: configure.patch

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] squash! TB3: Tor Browser's official .mozconfigs.
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit 618b2a814ab057f1cc94ed44072b395fd9fc2134 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Thu Aug 6 11:26:45 2020 -0400 squash! TB3: Tor Browser's official .mozconfigs. Bug 40061: Omit the Windows default browser agent from the build --- .mozconfig-mingw | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.mozconfig-mingw b/.mozconfig-mingw index 6a9d3749b2ec..29c58d8fdab2 100644 --- a/.mozconfig-mingw +++ b/.mozconfig-mingw @@ -28,4 +28,4 @@ ac_add_options --enable-proxy-bypass-protection # Disable telemetry ac_add_options MOZ_TELEMETRY_REPORTING= - +ac_add_options --disable-default-browser-agent

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] squash! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit f86772d1641216abb98128dd3870928c8c1c1d7c Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Thu Aug 6 11:22:27 2020 -0400 squash! TB4: Tor Browser's Firefox preference overrides. Bug 40061: Omit the Windows default browser agent from the build --- browser/app/profile/000-tor-browser.js | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index eae29579ded6..7e29c788b720 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -90,6 +90,11 @@ pref("datareporting.policy.dataSubmissionEnabled", false); pref("toolkit.telemetry.unified", false); pref("toolkit.telemetry.enabled", false); pref("toolkit.telemetry.updatePing.enabled", false); // Make sure updater telemetry is disabled; see #25909. +#ifdef XP_WIN +// Defense-in-depth: ensure that the Windows default browser agent will +// not ping Mozilla if it is somehow present (we omit it at build time). +pref("default-browser-agent.enabled", false); +#endif pref("identity.fxaccounts.enabled", false); // Disable sync by default pref("services.sync.engine.prefs", false); // Never sync prefs, addons, or tabs with other browsers pref("services.sync.engine.addons", false);

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] Merge remote-tracking branch 'gitlab/merge-requests/29' into tor-browser-78.1.0esr-10.0-1
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit 236b57124c5bad238ff78d91c62d734cf387aca3 Merge: 8ebe00420de7 bad0647c6b70 Author: Georg Koppen <gk(a)torproject.org> Date: Thu Aug 13 08:46:51 2020 +0000 Merge remote-tracking branch 'gitlab/merge-requests/29' into tor-browser-78.1.0esr-10.0-1 browser/app/profile/000-tor-browser.js | 48 ++++++++++++++++++++++++++- mobile/android/app/000-tor-browser-android.js | 3 ++ 2 files changed, 50 insertions(+), 1 deletion(-)

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] fixup! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 13 Aug '20

13 Aug '20

commit bad0647c6b70b20a336f8c643a57e80fc3e62cf2 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Thu Aug 6 10:12:51 2020 -0400 fixup! TB4: Tor Browser's Firefox preference overrides. --- browser/app/profile/000-tor-browser.js | 48 ++++++++++++++++++++++++++- mobile/android/app/000-tor-browser-android.js | 3 ++ 2 files changed, 50 insertions(+), 1 deletion(-) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 3be6e460b628..eae29579ded6 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -100,13 +100,50 @@ pref("browser.search.region", "US"); // The next two prefs disable GeoIP search pref("browser.search.geoip.url", ""); pref("browser.fixup.alternate.enabled", false); // Bug #16783: Prevent .onion fixups // Make sure there is no Tracking Protection active in Tor Browser, see: #17898. +pref("privacy.trackingprotection.enabled", false); pref("privacy.trackingprotection.pbmode.enabled", false); +pref("privacy.trackingprotection.annotate_channels", false); +pref("privacy.trackingprotection.cryptomining.enabled", false); +pref("privacy.trackingprotection.fingerprinting.enabled", false); +pref("privacy.trackingprotection.socialtracking.enabled", false); +pref("privacy.socialtracking.block_cookies.enabled", false); +pref("privacy.annotate_channels.strict_list.enabled", false); + // Disable the Pocket extension (Bug #18886 and #31602) pref("extensions.pocket.enabled", false); pref("network.http.referer.hideOnionSource", true); -// Disable ServiceWorkers by default +// Disable use of WiFi location information +pref("browser.region.network.scan", false); +pref("browser.region.network.url", ""); + +// Don't load Mozilla domains in a separate tab process +pref("browser.tabs.remote.separatedMozillaDomains", ""); + +// Avoid DNS lookups on search terms +pref("browser.urlbar.dnsResolveSingleWordsAfterSearch", 0); + +// Disable about:newtab and "first run" experiments +pref("messaging-system.rsexperimentloader.enabled", false); +pref("trailhead.firstrun.branches", ""); + +// Clear the list of trusted recursive resolver services +pref("network.trr.resolvers", ""); + +// Disable crlite +pref("security.pki.crlite_mode", 0); + +// Disable website password breach alerts +pref("signon.management.page.breach-alerts.enabled", false); +pref("extensions.fxmonitor.enabled", false); + +// Remove mobile app tracking URLs +pref("signon.management.page.mobileAndroidURL", ""); +pref("signon.management.page.mobileAppleURL", ""); + +// Disable ServiceWorkers and push notifications by default pref("dom.serviceWorkers.enabled", false); +pref("dom.push.enabled", false); // Fingerprinting pref("webgl.disable-extensions", true); @@ -298,6 +335,15 @@ pref("browser.download.panel.shown", true); // Treat .onions as secure pref("dom.securecontext.whitelist_onions", true); +// Disable special URL bar behaviors +pref("browser.urlbar.suggest.topsites", false); +pref("browser.urlbar.update1.interventions", false); +pref("browser.urlbar.update1.searchTips", false); + +// Skip checking omni.ja and other files for corruption since the result +// is only reported via telemetry (which is disabled). +pref("corroborator.enabled", false); + // Onboarding. pref("browser.onboarding.tourset-version", 5); pref("browser.onboarding.newtour", "welcome,privacy,tor-network-9.0,circuit-display,security,expect-differences,onion-services,learn-more"); diff --git a/mobile/android/app/000-tor-browser-android.js b/mobile/android/app/000-tor-browser-android.js index 23fd39beac77..61c8a0cd7fa1 100644 --- a/mobile/android/app/000-tor-browser-android.js +++ b/mobile/android/app/000-tor-browser-android.js @@ -30,6 +30,9 @@ pref("media.realtime_decoder.enabled", false); // Enable touch events on Android (highlighting text, etc) pref("dom.w3c_touch_events.enabled", 2); +// Ensure that pointer events are disabled +pref("dom.w3c_pointer_events.multiprocess.android.enabled", false); + // No HLS support for now due to browser freezing, see: #29859. pref("media.hls.enabled", false);

1 0

[tor-browser-build/master] Bug 40017: Enable stripping again on Windows
by gk＠torproject.org 11 Aug '20

11 Aug '20

commit cc88f7409ca972802f70a6d0d3ec4effc3486828 Author: Georg Koppen <gk(a)torproject.org> Date: Tue Aug 11 09:46:23 2020 +0000 Bug 40017: Enable stripping again on Windows Mozilla fixed the regression in bug 1651680. --- projects/firefox/mozconfig-windows-i686 | 1 + projects/firefox/mozconfig-windows-x86_64 | 1 + 2 files changed, 2 insertions(+) diff --git a/projects/firefox/mozconfig-windows-i686 b/projects/firefox/mozconfig-windows-i686 index f32db84..3708dd7 100644 --- a/projects/firefox/mozconfig-windows-i686 +++ b/projects/firefox/mozconfig-windows-i686 @@ -23,6 +23,7 @@ export MOZILLA_OFFICIAL=1 ac_add_options --disable-debug ac_add_options --enable-optimize +ac_add_options --enable-strip ac_add_options --enable-official-branding ac_add_options --enable-tor-browser-update diff --git a/projects/firefox/mozconfig-windows-x86_64 b/projects/firefox/mozconfig-windows-x86_64 index 8dac1e8..52956e2 100644 --- a/projects/firefox/mozconfig-windows-x86_64 +++ b/projects/firefox/mozconfig-windows-x86_64 @@ -23,6 +23,7 @@ export MOZILLA_OFFICIAL=1 ac_add_options --disable-debug ac_add_options --enable-optimize +ac_add_options --enable-strip ac_add_options --enable-official-branding ac_add_options --enable-tor-browser-update

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] Bug 1651680 - Replace PKG_SKIP_STRIP with PKG_STRIP. r=nalexander
by gk＠torproject.org 11 Aug '20

11 Aug '20

commit 904d2bbec4fa8984cc29e27478ddcf69c4ba9594 Author: Mike Hommey <mh+mozilla(a)glandium.org> Date: Tue Aug 11 02:44:17 2020 +0000 Bug 1651680 - Replace PKG_SKIP_STRIP with PKG_STRIP. r=nalexander Differential Revision: https://phabricator.services.mozilla.com/D86648 --- moz.configure | 8 +------- python/mozbuild/mozpack/executables.py | 2 +- testing/testsuite-targets.mk | 2 +- toolkit/mozapps/installer/l10n-repack.py | 2 +- toolkit/mozapps/installer/strip.py | 2 +- toolkit/mozapps/installer/unpack.py | 2 +- 6 files changed, 6 insertions(+), 12 deletions(-) diff --git a/moz.configure b/moz.configure index e86018b1e814..f22c7185f300 100755 --- a/moz.configure +++ b/moz.configure @@ -682,13 +682,7 @@ set_config('ENABLE_STRIP', True, when='--enable-strip') js_option('--disable-install-strip', when=may_strip, help='Enable stripping of libs & executables when packaging') -# The nested depends is because depending on --enable-install-strip needs the -# `when=may_strip`, but we also need to test when may_strip is False. -@depends(depends('--enable-install-strip', when=may_strip)(lambda x: x), may_strip) -def pkg_skip_strip(install_strip, may_strip): - return not install_strip or not may_strip - -set_config('PKG_SKIP_STRIP', True, when=pkg_skip_strip) +set_config('PKG_STRIP', True, when='--enable-install-strip') @depends('--enable-strip', '--enable-install-strip', when=may_strip) diff --git a/python/mozbuild/mozpack/executables.py b/python/mozbuild/mozpack/executables.py index da12ab0aa33f..593a2e571a94 100644 --- a/python/mozbuild/mozpack/executables.py +++ b/python/mozbuild/mozpack/executables.py @@ -86,7 +86,7 @@ def may_strip(path): Return whether strip() should be called ''' from buildconfig import substs - return not substs.get('PKG_SKIP_STRIP') + return bool(substs.get('PKG_STRIP')) def strip(path): diff --git a/testing/testsuite-targets.mk b/testing/testsuite-targets.mk index 39a69c662ad0..157c030a09c3 100644 --- a/testing/testsuite-targets.mk +++ b/testing/testsuite-targets.mk @@ -195,7 +195,7 @@ stage-jstests: make-stage-dir ifdef OBJCOPY ifneq ($(OBJCOPY), :) # see build/autoconf/toolchain.m4:102 for why this is necessary -ifndef PKG_SKIP_STRIP +ifdef PKG_STRIP STRIP_COMPILED_TESTS := 1 endif endif diff --git a/toolkit/mozapps/installer/l10n-repack.py b/toolkit/mozapps/installer/l10n-repack.py index cf1b83dfe2c4..fbdadd0718a1 100644 --- a/toolkit/mozapps/installer/l10n-repack.py +++ b/toolkit/mozapps/installer/l10n-repack.py @@ -49,7 +49,7 @@ def main(): args = parser.parse_args() buildconfig.substs['USE_ELF_HACK'] = False - buildconfig.substs['PKG_SKIP_STRIP'] = True + buildconfig.substs['PKG_STRIP'] = False l10n.repack(args.build, args.l10n, extra_l10n=dict(args.extra_l10n), non_resources=args.non_resource, non_chrome=NON_CHROME) diff --git a/toolkit/mozapps/installer/strip.py b/toolkit/mozapps/installer/strip.py index d6e81f280bfa..734d6c8fa5a3 100644 --- a/toolkit/mozapps/installer/strip.py +++ b/toolkit/mozapps/installer/strip.py @@ -14,7 +14,7 @@ def strip(dir): copier = FileCopier() # The FileFinder will give use ExecutableFile instances for files # that can be stripped, and copying ExecutableFiles defaults to - # stripping them unless buildconfig.substs['PKG_SKIP_STRIP'] is set. + # stripping them when buildconfig.substs['PKG_STRIP'] is set. for p, f in FileFinder(dir, find_executables=True): copier.add(p, f) copier.copy(dir) diff --git a/toolkit/mozapps/installer/unpack.py b/toolkit/mozapps/installer/unpack.py index f7e9e00622a0..03af61b7b93c 100644 --- a/toolkit/mozapps/installer/unpack.py +++ b/toolkit/mozapps/installer/unpack.py @@ -18,7 +18,7 @@ def main(): options = parser.parse_args(sys.argv[1:]) buildconfig.substs['USE_ELF_HACK'] = False - buildconfig.substs['PKG_SKIP_STRIP'] = True + buildconfig.substs['PKG_STRIP'] = False unpack(options.directory, options.omnijar) if __name__ == "__main__":

1 0

[tor-browser/tor-browser-78.1.0esr-10.0-1] Bug 1651680 - Support --enable-strip/--enable-install-strip on mingw. r=nalexander
by gk＠torproject.org 11 Aug '20

11 Aug '20

commit 8ebe00420de77ac6b8814359f6377e133f403494 Author: Mike Hommey <mh+mozilla(a)glandium.org> Date: Tue Aug 11 02:53:34 2020 +0000 Bug 1651680 - Support --enable-strip/--enable-install-strip on mingw. r=nalexander Differential Revision: https://phabricator.services.mozilla.com/D86649 --- moz.configure | 25 +++++++++++++++++-------- 1 file changed, 17 insertions(+), 8 deletions(-) diff --git a/moz.configure b/moz.configure index f22c7185f300..9b0e78460113 100755 --- a/moz.configure +++ b/moz.configure @@ -671,21 +671,30 @@ add_old_configure_assignment( 'MOZ_DISABLE_ICF', '1', when=depends('--enable-icf')(lambda x: not x)) -@depends(compile_environment, target) -def may_strip(compile_environment, target): - return compile_environment and target.kernel != 'WINNT' +js_option('--enable-strip', when=compile_environment, + help='Enable stripping of libs & executables') -js_option('--enable-strip', when=may_strip, help='Enable stripping of libs & executables') +# This should be handled as a `when` once bug 1617793 is fixed. +@depends('--enable-strip', c_compiler, when=compile_environment) +def enable_strip(strip, c_compiler): + if strip and c_compiler.type != 'clang-cl': + return True -set_config('ENABLE_STRIP', True, when='--enable-strip') +set_config('ENABLE_STRIP', enable_strip) -js_option('--disable-install-strip', when=may_strip, +js_option('--disable-install-strip', when=compile_environment, help='Enable stripping of libs & executables when packaging') -set_config('PKG_STRIP', True, when='--enable-install-strip') +# This should be handled as a `when` once bug 1617793 is fixed. +@depends('--enable-install-strip', c_compiler, when=compile_environment) +def enable_install_strip(strip, c_compiler): + if strip and c_compiler.type != 'clang-cl': + return True + +set_config('PKG_STRIP', enable_install_strip) -@depends('--enable-strip', '--enable-install-strip', when=may_strip) +@depends('--enable-strip', '--enable-install-strip', when=compile_environment) def strip(strip, install_strip): return strip or install_strip

1 0

[tor-browser-build/master] Merge remote-tracking branch 'gkgl/bug_40037_v2'
by sysrqb＠torproject.org 10 Aug '20

10 Aug '20

commit 0de43304b95255095b66a93fe326f82f818dca6a Merge: 01cb89f 99c1bd0 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Mon Aug 10 17:17:27 2020 +0000 Merge remote-tracking branch 'gkgl/bug_40037_v2' projects/{clang => clang-source}/43909.patch | 0 projects/clang-source/build | 31 ++++ projects/clang-source/config | 32 ++++ projects/clang/build | 18 +- projects/clang/config | 23 +-- projects/fenix-clang/build | 18 +- projects/fenix-clang/config | 23 +-- projects/macosx-toolchain/43909.patch | 252 --------------------------- projects/macosx-toolchain/build | 30 +--- projects/macosx-toolchain/config | 25 +-- projects/mingw-w64-clang/build | 39 ++--- projects/mingw-w64-clang/config | 17 +- 12 files changed, 100 insertions(+), 408 deletions(-)

1 0