- tbb-commits - lists.torproject.org

[tor-browser-build/master] Bump tor version for next alpha release
by gk＠torproject.org 03 Nov '19

03 Nov '19

commit 3dcafda784e82992408a634b788ba485166e6b5d Author: Georg Koppen <gk(a)torproject.org> Date: Sun Nov 3 21:07:52 2019 +0000 Bump tor version for next alpha release --- projects/tor/config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/projects/tor/config b/projects/tor/config index ae2ef16..97e93fb 100644 --- a/projects/tor/config +++ b/projects/tor/config @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -version: 0.4.2.2-alpha +version: 0.4.2.3-alpha git_hash: 'tor-[% c("version") %]' git_url: https://git.torproject.org/tor.git git_submodule: 1

1 0

[tor-browser-build/master] Bumping build to -build2
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit 2d0fe1979fd45b29c48a3924354be8ba35aba0bb Author: Georg Koppen <gk(a)torproject.org> Date: Fri Nov 1 21:34:37 2019 +0000 Bumping build to -build2 --- rbm.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rbm.conf b/rbm.conf index 0f2e76f..76ef27f 100644 --- a/rbm.conf +++ b/rbm.conf @@ -25,7 +25,7 @@ buildconf: var: torbrowser_version: '9.5a2' - torbrowser_build: 'build1' + torbrowser_build: 'build2' torbrowser_incremental_from: - 9.5a1 project_name: tor-browser

1 0

[tor-browser-build/master] Fix up Changelog
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit b1c7becc865282fd12e38e806752d936d8f5cdbe Author: Georg Koppen <gk(a)torproject.org> Date: Fri Nov 1 21:33:30 2019 +0000 Fix up Changelog And, no, the release preparations concerned 9.5a2 and not 9.5a1 --- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 83c170e..6e82c81 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,4 +1,4 @@ -Tor Browser 9.5a.2 -- November 5 2019 +Tor Browser 9.5a2 -- November 5 2019 * All Platforms * Update NoScript to 11.0.4 * Bug 21004: Don't block JavaScript on onion services on medium security

1 0

[tor-browser-build/master] Release preparations for 9.5a1
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit aec5ee918c493f0a6b7fba168f30ed1be2f90d89 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Nov 1 21:30:19 2019 +0000 Release preparations for 9.5a1 Changelog update and versions bump --- projects/firefox/config | 2 +- .../tor-browser/Bundle-Data/Docs/ChangeLog.txt | 25 ++++++++++++++++++++++ projects/tor-launcher/config | 2 +- rbm.conf | 6 +++--- 4 files changed, 30 insertions(+), 5 deletions(-) diff --git a/projects/firefox/config b/projects/firefox/config index de83467..1af3014 100644 --- a/projects/firefox/config +++ b/projects/firefox/config @@ -1,7 +1,7 @@ # vim: filetype=yaml sw=2 version: '[% c("abbrev") %]' filename: 'firefox-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build2' +git_hash: 'tor-browser-[% c("var/firefox_version") %]-[% c("var/torbrowser_branch") %]-1-build3' tag_gpg_id: 1 git_url: https://git.torproject.org/tor-browser.git git_submodule: 1 diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index d44272c..83c170e 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,28 @@ +Tor Browser 9.5a.2 -- November 5 2019 + * All Platforms + * Update NoScript to 11.0.4 + * Bug 21004: Don't block JavaScript on onion services on medium security + * Bug 27307: NoScript marks HTTP onions as not secure + * Bug 30783: Fundraising banner for EOY 2019 campain + * Bug 32321: Don't ping Mozilla for Man-in-the-Middle-detection + * Bug 32318: Backport Mozilla's fix for bug 1534339 + * Bug 32250: Backport enhanced letterboxing support (bug 1546832 and 1556017) + * Bug 27268: Preferences clean-up + * Windows + OS X + Linux + * Update Tor Launcher to 0.2.20.2 + * Bug 32164: Trim each received log line from tor + * Translations update + * Bug 31803: Replaced about:debugging logo with flat version + * Bug 31764: Fix for error when navigating via 'Paste and go' + * Bug 32169: Fix TB9 Wikipedia address bar search + * Bug 32210: Hide the tor pane when using a system tor + * Bug 31658: Use builtin --panel-disabled-color for security level text + * Bug 32188: Fix localization on about:preferences#tor + * Bug 32184: Red dot is shown while downloading an update + * Bug 27604: Fix broken Tor Browser after moving it to a different directory + * Android + * Bug 32342: Crash when changing the browser locale + Tor Browser 9.5a1 -- October 23 2019 * All Platforms * Update Firefox to 68.2.0esr diff --git a/projects/tor-launcher/config b/projects/tor-launcher/config index c4010e7..5eef2e2 100644 --- a/projects/tor-launcher/config +++ b/projects/tor-launcher/config @@ -1,5 +1,5 @@ # vim: filetype=yaml sw=2 -version: 0.2.20.1 +version: 0.2.20.2 git_url: https://git.torproject.org/tor-launcher.git git_hash: '[% c("version") %]' gpg_keyring: torbutton.gpg diff --git a/rbm.conf b/rbm.conf index 6fe1010..0f2e76f 100644 --- a/rbm.conf +++ b/rbm.conf @@ -24,10 +24,10 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '9.5a1' - torbrowser_build: 'build2' + torbrowser_version: '9.5a2' + torbrowser_build: 'build1' torbrowser_incremental_from: - - 9.0a8 + - 9.5a1 project_name: tor-browser multi_lingual: 0 build_mar: 1

1 0

[tor-browser/tor-browser-68.2.0esr-9.5-1] fixup! Pick up latest Torbutton code
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit 3bee6f819310e489725b2419c9900c2a437a40bb Author: Georg Koppen <gk(a)torproject.org> Date: Fri Nov 1 21:07:16 2019 +0000 fixup! Pick up latest Torbutton code --- toolkit/torproject/torbutton | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/toolkit/torproject/torbutton b/toolkit/torproject/torbutton index c0438bdcd482..73a43f2f4d84 160000 --- a/toolkit/torproject/torbutton +++ b/toolkit/torproject/torbutton @@ -1 +1 @@ -Subproject commit c0438bdcd48215fb73425f448ee1e5e9f5e4dbe3 +Subproject commit 73a43f2f4d846b2870757d7aa18a1b33643ba2b5

1 0

[torbutton/maint-9.0] Bug 27268: Preference clean up
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit 09e3050265303eff776ba540861c533d5cab2254 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Oct 11 10:23:22 2019 +0000 Bug 27268: Preference clean up --- chrome/content/torbutton.js | 2 -- 1 file changed, 2 deletions(-) diff --git a/chrome/content/torbutton.js b/chrome/content/torbutton.js index 3ecc2b24..9846b864 100644 --- a/chrome/content/torbutton.js +++ b/chrome/content/torbutton.js @@ -1464,9 +1464,7 @@ function torbutton_update_fingerprinting_prefs() { var letterboxing = m_tb_prefs.getBoolPref("privacy.resistFingerprinting.letterboxing", false); m_tb_prefs.setBoolPref("webgl.disable-extensions", mode); - m_tb_prefs.setBoolPref("dom.network.enabled", !mode); m_tb_prefs.setBoolPref("dom.enable_performance", !mode); - m_tb_prefs.setBoolPref("plugin.expose_full_path", !mode); m_tb_prefs.setBoolPref("browser.zoom.siteSpecific", !mode); m_tb_prefs.setBoolPref("extensions.torbutton.resize_new_windows", mode && !letterboxing);

1 0

[torbutton/master] Bug 27268: Preference clean up
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit 73a43f2f4d846b2870757d7aa18a1b33643ba2b5 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Oct 11 10:23:22 2019 +0000 Bug 27268: Preference clean up --- chrome/content/torbutton.js | 2 -- 1 file changed, 2 deletions(-) diff --git a/chrome/content/torbutton.js b/chrome/content/torbutton.js index 3ecc2b24..9846b864 100644 --- a/chrome/content/torbutton.js +++ b/chrome/content/torbutton.js @@ -1464,9 +1464,7 @@ function torbutton_update_fingerprinting_prefs() { var letterboxing = m_tb_prefs.getBoolPref("privacy.resistFingerprinting.letterboxing", false); m_tb_prefs.setBoolPref("webgl.disable-extensions", mode); - m_tb_prefs.setBoolPref("dom.network.enabled", !mode); m_tb_prefs.setBoolPref("dom.enable_performance", !mode); - m_tb_prefs.setBoolPref("plugin.expose_full_path", !mode); m_tb_prefs.setBoolPref("browser.zoom.siteSpecific", !mode); m_tb_prefs.setBoolPref("extensions.torbutton.resize_new_windows", mode && !letterboxing);

1 0

[tor-browser/tor-browser-68.2.0esr-9.0-1] fixup! Regression tests for TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit 479630e18d3c184846f94e2e1e53f6d4df1c5cbc Author: Georg Koppen <gk(a)torproject.org> Date: Fri Oct 11 17:55:29 2019 +0000 fixup! Regression tests for TB4: Tor Browser's Firefox preference overrides. --- tbb-tests/browser_tor_TB4.js | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/tbb-tests/browser_tor_TB4.js b/tbb-tests/browser_tor_TB4.js index 3ce02a5301c4..c1f748a3338f 100644 --- a/tbb-tests/browser_tor_TB4.js +++ b/tbb-tests/browser_tor_TB4.js @@ -27,7 +27,6 @@ let expectedPrefs = [ ["dom.indexedDB.enabled", false], ["permissions.memory_only", true], ["network.cookie.lifetimePolicy", 2], - ["browser.download.manager.retention", 1], ["security.nocertdb", true], // Disk activity: TBB Directory Isolation @@ -47,11 +46,8 @@ let expectedPrefs = [ ["geo.enabled", false], ["geo.wifi.uri", ""], ["browser.search.suggest.enabled", false], - ["browser.safebrowsing.enabled", false], ["browser.safebrowsing.malware.enabled", false], - ["browser.download.manager.scanWhenDone", false], // prevents AV remote reporting of downloads ["extensions.ui.lastCategory", "addons://list/extension"], - ["datareporting.healthreport.service.enabled", false], // Yes, all three of these must be set ["datareporting.healthreport.uploadEnabled", false], ["datareporting.policy.dataSubmissionEnabled", false], ["security.mixed_content.block_active_content", false], // Disable until https://bugzilla.mozilla.org/show_bug.cgi?id=878890 is patched @@ -65,7 +61,6 @@ let expectedPrefs = [ ["webgl.min_capability_mode", true], ["webgl.disable-extensions", true], ["dom.battery.enabled", false], // fingerprinting due to differing OS implementations - ["dom.network.enabled",false], // fingerprinting due to differing OS implementations ["browser.display.max_font_attempts",10], ["browser.display.max_font_count",10], ["gfx.downloadable_fonts.fallback_delay", -1], @@ -81,10 +76,6 @@ let expectedPrefs = [ ["general.useragent.vendorSub", ""], ["dom.enable_performance", false], ["browser.zoom.siteSpecific", false], - ["intl.charset.default", "windows-1252"], - //["intl.accept_languages", "en-us, en"], // Set by Torbutton - //["intl.accept_charsets", "iso-8859-1,*,utf-8"], // Set by Torbutton - //["intl.charsetmenu.browser.cache", "UTF-8"], // Set by Torbutton // Third party stuff ["network.cookie.cookieBehavior", 1], @@ -155,10 +146,6 @@ let expectedPrefs = [ ["javascript.options.asmjs", false], ["javascript.options.typeinference", false], - // Audio_data is deprecated in future releases, but still present - // in FF24. This is a dangerous combination (spotted by iSec) - ["media.audio_data.enabled", false], - // Enable TLS 1.1 and 1.2: // https://trac.torproject.org/projects/tor/ticket/11253 ["security.tls.version.max", 3], @@ -168,9 +155,6 @@ let expectedPrefs = [ ]; - - - let getPref = function (prefName) { let type = gPrefService.getPrefType(prefName); if (type === gPrefService.PREF_INT) return gPrefService.getIntPref(prefName);

1 0

[tor-browser/tor-browser-68.2.0esr-9.5-1] fixup! Regression tests for TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit 1762a2a4ba9eb9eca76f9d522f456dd262a99f84 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Oct 11 17:55:29 2019 +0000 fixup! Regression tests for TB4: Tor Browser's Firefox preference overrides. --- tbb-tests/browser_tor_TB4.js | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/tbb-tests/browser_tor_TB4.js b/tbb-tests/browser_tor_TB4.js index 3ce02a5301c4..c1f748a3338f 100644 --- a/tbb-tests/browser_tor_TB4.js +++ b/tbb-tests/browser_tor_TB4.js @@ -27,7 +27,6 @@ let expectedPrefs = [ ["dom.indexedDB.enabled", false], ["permissions.memory_only", true], ["network.cookie.lifetimePolicy", 2], - ["browser.download.manager.retention", 1], ["security.nocertdb", true], // Disk activity: TBB Directory Isolation @@ -47,11 +46,8 @@ let expectedPrefs = [ ["geo.enabled", false], ["geo.wifi.uri", ""], ["browser.search.suggest.enabled", false], - ["browser.safebrowsing.enabled", false], ["browser.safebrowsing.malware.enabled", false], - ["browser.download.manager.scanWhenDone", false], // prevents AV remote reporting of downloads ["extensions.ui.lastCategory", "addons://list/extension"], - ["datareporting.healthreport.service.enabled", false], // Yes, all three of these must be set ["datareporting.healthreport.uploadEnabled", false], ["datareporting.policy.dataSubmissionEnabled", false], ["security.mixed_content.block_active_content", false], // Disable until https://bugzilla.mozilla.org/show_bug.cgi?id=878890 is patched @@ -65,7 +61,6 @@ let expectedPrefs = [ ["webgl.min_capability_mode", true], ["webgl.disable-extensions", true], ["dom.battery.enabled", false], // fingerprinting due to differing OS implementations - ["dom.network.enabled",false], // fingerprinting due to differing OS implementations ["browser.display.max_font_attempts",10], ["browser.display.max_font_count",10], ["gfx.downloadable_fonts.fallback_delay", -1], @@ -81,10 +76,6 @@ let expectedPrefs = [ ["general.useragent.vendorSub", ""], ["dom.enable_performance", false], ["browser.zoom.siteSpecific", false], - ["intl.charset.default", "windows-1252"], - //["intl.accept_languages", "en-us, en"], // Set by Torbutton - //["intl.accept_charsets", "iso-8859-1,*,utf-8"], // Set by Torbutton - //["intl.charsetmenu.browser.cache", "UTF-8"], // Set by Torbutton // Third party stuff ["network.cookie.cookieBehavior", 1], @@ -155,10 +146,6 @@ let expectedPrefs = [ ["javascript.options.asmjs", false], ["javascript.options.typeinference", false], - // Audio_data is deprecated in future releases, but still present - // in FF24. This is a dangerous combination (spotted by iSec) - ["media.audio_data.enabled", false], - // Enable TLS 1.1 and 1.2: // https://trac.torproject.org/projects/tor/ticket/11253 ["security.tls.version.max", 3], @@ -168,9 +155,6 @@ let expectedPrefs = [ ]; - - - let getPref = function (prefName) { let type = gPrefService.getPrefType(prefName); if (type === gPrefService.PREF_INT) return gPrefService.getIntPref(prefName);

1 0

[tor-browser/tor-browser-68.2.0esr-9.5-1] Bug 1534339 - make OriginAttributes deserializable; r=baku
by gk＠torproject.org 01 Nov '19

01 Nov '19

commit 6dfcb949b8375614b588a191035c5cc36fa3e943 Author: Liang-Heng Chen <xeonchen(a)gmail.com> Date: Wed Oct 23 14:10:19 2019 +0000 Bug 1534339 - make OriginAttributes deserializable; r=baku `CreateSuffix` is irreversible by `PopulateFromSuffix` because it uses a multi-to-one mapping. Since only ':' will happen in a IPv6 format, we can make it a 1-to-1 mapping so that the `firstPartyDomain` is consistent after `CreateSuffix` and `PopulateFromSuffix`. Differential Revision: https://phabricator.services.mozilla.com/D47910 --HG-- extra : moz-landing-system : lando --- caps/OriginAttributes.cpp | 10 +++++++--- caps/tests/gtest/TestOriginAttributes.cpp | 2 ++ 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/caps/OriginAttributes.cpp b/caps/OriginAttributes.cpp index 0737bce36321..e987f0e4fc2e 100644 --- a/caps/OriginAttributes.cpp +++ b/caps/OriginAttributes.cpp @@ -13,6 +13,9 @@ #include "nsIURI.h" #include "nsURLHelper.h" +static const char kSourceChar = ':'; +static const char kSanitizedChar = '+'; + namespace mozilla { using dom::URLParams; @@ -158,8 +161,7 @@ void OriginAttributes::CreateSuffix(nsACString& aStr) const { if (!mFirstPartyDomain.IsEmpty()) { nsAutoString sanitizedFirstPartyDomain(mFirstPartyDomain); - sanitizedFirstPartyDomain.ReplaceChar( - dom::quota::QuotaManager::kReplaceChars, '+'); + sanitizedFirstPartyDomain.ReplaceChar(kSourceChar, kSanitizedChar); params.Set(NS_LITERAL_STRING("firstPartyDomain"), sanitizedFirstPartyDomain); @@ -246,7 +248,9 @@ class MOZ_STACK_CLASS PopulateFromSuffixIterator final if (aName.EqualsLiteral("firstPartyDomain")) { MOZ_RELEASE_ASSERT(mOriginAttributes->mFirstPartyDomain.IsEmpty()); - mOriginAttributes->mFirstPartyDomain.Assign(aValue); + nsAutoString firstPartyDomain(aValue); + firstPartyDomain.ReplaceChar(kSanitizedChar, kSourceChar); + mOriginAttributes->mFirstPartyDomain.Assign(firstPartyDomain); return true; } diff --git a/caps/tests/gtest/TestOriginAttributes.cpp b/caps/tests/gtest/TestOriginAttributes.cpp index 582de8c1c9d3..e86c5248689d 100644 --- a/caps/tests/gtest/TestOriginAttributes.cpp +++ b/caps/tests/gtest/TestOriginAttributes.cpp @@ -26,6 +26,8 @@ static void TestFPD(const nsAString& spec, const nsAString& fpd) { ASSERT_EQ(NS_NewURI(getter_AddRefs(url), spec), NS_OK); attrs.SetFirstPartyDomain(true, url); EXPECT_TRUE(attrs.mFirstPartyDomain.Equals(fpd)); + + TestSuffix(attrs); } TEST(OriginAttributes, Suffix_default)

1 0