- tbb-commits - lists.torproject.org

[tor-browser-bundle/master] Bug 16730: Prevent NoScript from updating the default whitelist
by mikeperry＠torproject.org 06 Aug '15

06 Aug '15

commit 918455b0256f15b81c838fd1dd3600e87fecec15 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Aug 6 15:09:57 2015 -0700 Bug 16730: Prevent NoScript from updating the default whitelist --- .../Data/Browser/profile.default/preferences/extension-overrides.js | 1 + .../Data/Browser/profile.default/preferences/extension-overrides.js | 1 + .../Data/Browser/profile.default/preferences/extension-overrides.js | 1 + 3 files changed, 3 insertions(+) diff --git a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js index 7a95619..26b019c 100644 --- a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js @@ -45,6 +45,7 @@ pref("noscript.subscription.lastCheck", -142148139); pref("noscript.temp", ""); pref("noscript.untrusted", ""); pref("noscript.forbidMedia", false); +pref("noscript.allowWhitelistUpdates", false); // Now handled by plugins.click_to_play pref("noscript.forbidFlash", false); pref("noscript.forbidSilverlight", false); diff --git a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js index 7a95619..26b019c 100644 --- a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js @@ -45,6 +45,7 @@ pref("noscript.subscription.lastCheck", -142148139); pref("noscript.temp", ""); pref("noscript.untrusted", ""); pref("noscript.forbidMedia", false); +pref("noscript.allowWhitelistUpdates", false); // Now handled by plugins.click_to_play pref("noscript.forbidFlash", false); pref("noscript.forbidSilverlight", false); diff --git a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js index 976d71c..d92bd3b 100644 --- a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js @@ -45,6 +45,7 @@ pref("noscript.subscription.lastCheck", -142148139); pref("noscript.temp", ""); pref("noscript.untrusted", ""); pref("noscript.forbidMedia", false); +pref("noscript.allowWhitelistUpdates", false); // Now handled by plugins.click_to_play pref("noscript.forbidFlash", false); pref("noscript.forbidSilverlight", false);

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] fixup! Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent
by mikeperry＠torproject.org 06 Aug '15

06 Aug '15

commit c1273008b1e00a60ce51cec4aa68ed83363c9a20 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Wed Aug 5 10:40:47 2015 -0400 fixup! Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent Use ThreadsafeIsCallerChrome() instead of IsCallerChrome(). --- dom/events/KeyboardEvent.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dom/events/KeyboardEvent.cpp b/dom/events/KeyboardEvent.cpp index 76e6e39..6a68f96 100644 --- a/dom/events/KeyboardEvent.cpp +++ b/dom/events/KeyboardEvent.cpp @@ -14,7 +14,7 @@ namespace dom { static bool ResistFingerprinting() { return nsContentUtils::ResistFingerprinting() && - !nsContentUtils::IsCallerChrome(); + !nsContentUtils::ThreadsafeIsCallerChrome(); } KeyboardEvent::KeyboardEvent(EventTarget* aOwner,

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] fixup! Bug 6253: Add canvas image extraction prompt.
by mikeperry＠torproject.org 06 Aug '15

06 Aug '15

commit cce64292e7b2633016b2505da8a445b7af633fd5 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Wed Aug 5 10:36:30 2015 -0400 fixup! Bug 6253: Add canvas image extraction prompt. Use ThreadsafeIsCallerChrome() instead of IsCallerChrome(). --- dom/canvas/CanvasUtils.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dom/canvas/CanvasUtils.cpp b/dom/canvas/CanvasUtils.cpp index f1978ff..9883a52 100644 --- a/dom/canvas/CanvasUtils.cpp +++ b/dom/canvas/CanvasUtils.cpp @@ -55,7 +55,7 @@ bool IsImageExtractionAllowed(nsIDocument *aDocument, JSContext *aCx) return true; // Don't show canvas prompt for chrome scripts (e.g. Page Inspector) - if (nsContentUtils::IsCallerChrome()) + if (nsContentUtils::ThreadsafeIsCallerChrome()) return true; JS::AutoFilename scriptFile;

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] fixup! Bug 13016: Hide CSS -moz-osx-font-smoothing values.
by mikeperry＠torproject.org 06 Aug '15

06 Aug '15

commit 85bfd5df3fa1dff272e5f527d39e1b69cb3b746a Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Wed Aug 5 10:33:59 2015 -0400 fixup! Bug 13016: Hide CSS -moz-osx-font-smoothing values. Use ThreadsafeIsCallerChrome() instead of IsCallerChrome(). --- layout/style/nsComputedDOMStyle.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/layout/style/nsComputedDOMStyle.cpp b/layout/style/nsComputedDOMStyle.cpp index 257a1af..a8c30cc 100644 --- a/layout/style/nsComputedDOMStyle.cpp +++ b/layout/style/nsComputedDOMStyle.cpp @@ -1437,7 +1437,7 @@ nsComputedDOMStyle::DoGetFontSizeAdjust() CSSValue* nsComputedDOMStyle::DoGetOSXFontSmoothing() { - if (!nsContentUtils::IsCallerChrome()) + if (!nsContentUtils::ThreadsafeIsCallerChrome()) return nullptr; nsROCSSPrimitiveValue* val = new nsROCSSPrimitiveValue;

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] fixup! Bug 4755: Return client window coordinates for mouse event screenX/Y
by mikeperry＠torproject.org 06 Aug '15

06 Aug '15

commit 5282caeb91c9458ddb26edc2684a8b76ee53eb42 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Wed Aug 5 10:29:19 2015 -0400 fixup! Bug 4755: Return client window coordinates for mouse event screenX/Y Use ThreadsafeIsCallerChrome() instead of IsCallerChrome(). --- dom/events/Event.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dom/events/Event.cpp b/dom/events/Event.cpp index 066fc0b..c92d2c9 100644 --- a/dom/events/Event.cpp +++ b/dom/events/Event.cpp @@ -882,7 +882,7 @@ Event::GetScreenCoords(nsPresContext* aPresContext, WidgetEvent* aEvent, LayoutDeviceIntPoint aPoint) { - if (!nsContentUtils::IsCallerChrome()) { + if (!nsContentUtils::ThreadsafeIsCallerChrome()) { // For non-chrome callers, return client coordinates instead. // For some events, the result will be zero; specifically, for dragend // events (there is no widget associated with dragend events, which

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] Merge remote-tracking branch 'brade/bug16715-01' into tor-browser-38.1.0esr-5.0-1
by mikeperry＠torproject.org 06 Aug '15

06 Aug '15

commit 2cdcdb2535957a79a2e6577188e25c9f783d3634 Merge: bfdfccc c127300 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Thu Aug 6 14:37:02 2015 -0700 Merge remote-tracking branch 'brade/bug16715-01' into tor-browser-38.1.0esr-5.0-1 dom/canvas/CanvasUtils.cpp | 2 +- dom/events/Event.cpp | 2 +- dom/events/KeyboardEvent.cpp | 2 +- layout/style/nsComputedDOMStyle.cpp | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-)

1 0

[torbutton/master] Bug 16731: TBB 5.0 a3/a4 fails to download a file on right click
by gk＠torproject.org 06 Aug '15

06 Aug '15

commit 97796d37738679b232a226f039e9b407b1a47c98 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Wed Aug 5 15:02:19 2015 -0400 Bug 16731: TBB 5.0 a3/a4 fails to download a file on right click Account for an nsIExternalHelperAppService.idl interface change (the parameters to the doContent() method were changed between ESR31 and ESR38). See Mozilla bug #903022. --- src/components/external-app-blocker.js | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/components/external-app-blocker.js b/src/components/external-app-blocker.js index cabd72b..b349ab4 100644 --- a/src/components/external-app-blocker.js +++ b/src/components/external-app-blocker.js @@ -191,7 +191,8 @@ ExternalWrapper.prototype = return result; }, - doContent: function(aMimeContentType, aRequest, aWindowContext, aForceSave) { + doContent: function(aMimeContentType, aRequest, aContentContext, + aForceSave, aWindowContext) { if(this.blockApp()) { var check = {value: false}; var result = this._confirmLaunch(aRequest.name, check); @@ -201,7 +202,8 @@ ExternalWrapper.prototype = } } - return this._external().doContent(aMimeContentType, aRequest, aWindowContext, aForceSave); + return this._external().doContent(aMimeContentType, aRequest, + aContentContext, aForceSave, aWindowContext); }, observe: function(subject, topic, data) {

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] fixup! Bug 13670.1: Isolate favicon requests by first party.
by gk＠torproject.org 06 Aug '15

06 Aug '15

commit bfdfcccae99d1af38b3320eb7409377bd0ebc154 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Wed Aug 5 11:16:12 2015 -0400 fixup! Bug 13670.1: Isolate favicon requests by first party. Fix debug build error: Inside nsContentUtils::LoadImage(), remove the NS_PRECONDITION() call that references the aLoadingDocument parameter (which had been removed). --- dom/base/nsContentUtils.cpp | 1 - 1 file changed, 1 deletion(-) diff --git a/dom/base/nsContentUtils.cpp b/dom/base/nsContentUtils.cpp index 0ce2095..6b7461a 100644 --- a/dom/base/nsContentUtils.cpp +++ b/dom/base/nsContentUtils.cpp @@ -2997,7 +2997,6 @@ nsContentUtils::LoadImage(nsIURI* aURI, nsINode* aLoadingNode, uint32_t aContentPolicyType) { NS_PRECONDITION(aURI, "Must have a URI"); - NS_PRECONDITION(aLoadingDocument, "Must have a document"); NS_PRECONDITION(aLoadingPrincipal, "Must have a principal"); NS_PRECONDITION(aRequest, "Null out param");

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] fixup! Bug #13749.2: Regression tests for first-party isolation of cache
by mikeperry＠torproject.org 04 Aug '15

04 Aug '15

commit 7a73984f8e8f394417d850284578f2b97fed6120 Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Mon Jul 13 16:14:56 2015 -0700 fixup! Bug #13749.2: Regression tests for first-party isolation of cache --- netwerk/test/browser/browser.ini | 2 ++ netwerk/test/browser/browser_cacheFirstParty.js | 2 +- netwerk/test/browser/thirdPartyChild.iframe.html | 1 + netwerk/test/browser/thirdPartyChild.worker.js | 3 +++ netwerk/test/browser/thirdPartyChild.worker.xhr.html | 8 ++++++++ 5 files changed, 15 insertions(+), 1 deletion(-) diff --git a/netwerk/test/browser/browser.ini b/netwerk/test/browser/browser.ini index aaf0def..ca711b7 100644 --- a/netwerk/test/browser/browser.ini +++ b/netwerk/test/browser/browser.ini @@ -10,6 +10,8 @@ support-files = thirdPartyChild.embed.png thirdPartyChild.img.png thirdPartyChild.object.png + thirdPartyChild.worker.js + thirdPartyChild.worker.xhr.html thirdPartyChild.xhr.html thirdPartyChild.track.vtt diff --git a/netwerk/test/browser/browser_cacheFirstParty.js b/netwerk/test/browser/browser_cacheFirstParty.js index 9795539..c23f669 100644 --- a/netwerk/test/browser/browser_cacheFirstParty.js +++ b/netwerk/test/browser/browser_cacheFirstParty.js @@ -106,7 +106,7 @@ let privacyPref = "privacy.thirdparty.isolate", // We will check cache for example.net content from // iframe, link, script, img, object, embed, xhr, audio, video, track suffixes = ["iframe.html", "link.css", "script.js", "img.png", "object.png", - "embed.png", "xhr.html", "audio.ogg", "video.ogv", "track.vtt" ]; + "embed.png", "xhr.html", "worker.xhr.html", "audio.ogg", "video.ogv", "track.vtt" ]; // __checkCachePopulation(pref, numberOfDomains)__. // Check if the number of entries found in the cache for each diff --git a/netwerk/test/browser/thirdPartyChild.iframe.html b/netwerk/test/browser/thirdPartyChild.iframe.html index f7b7531..bbd6043 100644 --- a/netwerk/test/browser/thirdPartyChild.iframe.html +++ b/netwerk/test/browser/thirdPartyChild.iframe.html @@ -8,6 +8,7 @@ var xhr = new XMLHttpRequest(); xhr.open("GET", "http://example.net/browser/netwerk/test/browser/thirdPartyChild.xhr.html", true); xhr.send(); + var worker = new Worker("http://example.net/browser/netwerk/test/browser/thirdPartyChild.worker.js"); </script> </body> </html> diff --git a/netwerk/test/browser/thirdPartyChild.worker.js b/netwerk/test/browser/thirdPartyChild.worker.js new file mode 100644 index 0000000..49154b7 --- /dev/null +++ b/netwerk/test/browser/thirdPartyChild.worker.js @@ -0,0 +1,3 @@ +var xhr = new XMLHttpRequest(); +xhr.open("GET", "http://example.net/browser/netwerk/test/browser/thirdPartyChild.worker.xhr.…", true); +xhr.send(); diff --git a/netwerk/test/browser/thirdPartyChild.worker.xhr.html b/netwerk/test/browser/thirdPartyChild.worker.xhr.html new file mode 100644 index 0000000..1f18646 --- /dev/null +++ b/netwerk/test/browser/thirdPartyChild.worker.xhr.html @@ -0,0 +1,8 @@ +<!DOCTYPE html> +<html> +<meta content="text/html;charset=utf-8" http-equiv="Content-Type"> + +<body> +<div>thirdPartyChild.worker.xhr.html</div> +</body> +</html>

1 0

[tor-browser/tor-browser-38.1.0esr-5.0-1] Merge remote-tracking branch 'arthur/16572' into tor-browser-38.1.0esr-5.0-1
by mikeperry＠torproject.org 04 Aug '15

04 Aug '15

commit da7faed2de78d7a0a5c84a0d8c508b9499b7bf54 Merge: 522558c 7a73984 Author: Mike Perry <mikeperry-git(a)torproject.org> Date: Tue Aug 4 13:38:34 2015 -0700 Merge remote-tracking branch 'arthur/16572' into tor-browser-38.1.0esr-5.0-1 netwerk/test/browser/browser.ini | 2 ++ netwerk/test/browser/browser_cacheFirstParty.js | 2 +- netwerk/test/browser/thirdPartyChild.iframe.html | 1 + netwerk/test/browser/thirdPartyChild.worker.js | 3 +++ netwerk/test/browser/thirdPartyChild.worker.xhr.html | 8 ++++++++ 5 files changed, 15 insertions(+), 1 deletion(-)

1 0