- tbb-commits - lists.torproject.org

[Git][tpo/applications/tor-browser][tor-browser-148.0a1-16.0-2] 2 commits: BB 44711: Hide unwanted setting controls.
by henry (＠henry) 03 Mar '26

03 Mar '26

henry pushed to branch tor-browser-148.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: baed8491 by Henry Wilkes at 2026-03-02T16:26:22+00:00 BB 44711: Hide unwanted setting controls. - - - - - 3848baf5 by Henry Wilkes at 2026-03-02T16:26:22+00:00 TB 44711: Hide unwanted setting controls. - - - - - 2 changed files: - browser/components/preferences/preferences.js - browser/components/preferences/preferences.xhtml Changes: ===================================== browser/components/preferences/preferences.js ===================================== @@ -242,11 +242,13 @@ const CONFIG_PANES = Object.freeze({ groupIds: ["containers"], }, dnsOverHttps: { + skip: true, // Skip DNS over HTTPS (DoH). tor-browser#41906. parent: "privacy", l10nId: "preferences-doh-header2", groupIds: ["dnsOverHttpsAdvanced"], }, managePayments: { + skip: true, parent: "privacy", l10nId: "autofill-payment-methods-manage-payments-title", groupIds: ["managePayments"], @@ -257,6 +259,7 @@ const CONFIG_PANES = Object.freeze({ groupIds: ["profilePane"], }, etp: { + skip: true, // Skip enhanced tracking protection. tor-browser#33848. parent: "privacy", l10nId: "preferences-etp-header", groupIds: ["etpBanner", "etpAdvanced"], @@ -267,11 +270,13 @@ const CONFIG_PANES = Object.freeze({ groupIds: ["etpReset", "etpCustomize"], }, manageAddresses: { + skip: true, parent: "privacy", l10nId: "autofill-addresses-manage-addresses-title", groupIds: ["manageAddresses"], }, translations: { + skip: true, // Skip translations. tor-browser#44710. parent: "general", l10nId: "settings-translations-subpage-header", groupIds: [ @@ -281,6 +286,7 @@ const CONFIG_PANES = Object.freeze({ iconSrc: "chrome://browser/skin/translations.svg", }, aiFeatures: { + skip: true, // Skip AI pane. tor-browser#44709. l10nId: "preferences-ai-features-header", groupIds: ["debugModelManagement", "aiFeatures", "aiWindowFeatures"], module: "chrome://browser/content/preferences/config/aiFeatures.mjs", @@ -346,6 +352,22 @@ function init_all() { register_module("paneContainers", gContainersPane); for (let [id, config] of Object.entries(CONFIG_PANES)) { + // Skip over configs we do not want, including all its children. + // See tor-browser#44711. + let skip = false; + let parentConfig = config; + while (parentConfig) { + skip = parentConfig.skip; + if (skip) { + break; + } + parentConfig = parentConfig.parent + ? CONFIG_PANES[parentConfig.parent] + : undefined; + } + if (skip) { + continue; + } SettingPaneManager.registerPane(id, config); } ===================================== browser/components/preferences/preferences.xhtml ===================================== @@ -175,8 +175,12 @@ <label class="category-name" flex="1" data-l10n-id="pane-sync-title3"></label> </richlistitem> +  <richlistitem id="category-ai-features" class="category" + hidden="true" value="paneAiFeatures" data-l10n-id="category-ai-features" data-l10n-attrs="tooltiptext" @@ -222,7 +226,9 @@ class="category hidden-category" value="paneProfiles"/> +  <richlistitem + hidden="true" class="category hidden-category" value="paneTranslations"/> View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/bfa83e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/bfa83e… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-147.0a1-16.0-2] fixup! BB 40925: Implemented the Security Level component
by henry (＠henry) 03 Mar '26

03 Mar '26

henry pushed to branch mullvad-browser-147.0a1-16.0-2 at The Tor Project / Applications / Mullvad Browser Commits: 232eea38 by Henry Wilkes at 2026-03-02T16:24:37+00:00 fixup! BB 40925: Implemented the Security Level component TB 44687: Expect javascript.options.asmjs to be `false` for all security levels. - - - - - 1 changed file: - toolkit/components/securitylevel/SecurityLevel.sys.mjs Changes: ===================================== toolkit/components/securitylevel/SecurityLevel.sys.mjs ===================================== @@ -271,7 +271,9 @@ const kSecuritySettings = { "gfx.font_rendering.graphite.enabled": [, false, false, false, true ], "gfx.font_rendering.opentype_svg.enabled": [, false, false, false, true ], "svg.disabled": [, true, false, false, false], - "javascript.options.asmjs": [, false, false, false, true ], + // Expect asmjs to be switched off for all levels. See tor-browser#44687. + // TODO: Stop tracking this preference entirely. See tor-browser#44712. + "javascript.options.asmjs": [, false, false, false, false], // tor-browser#44234, tor-browser#44242: this interferes with the correct // functioning of the browser. So, WASM is also handled by NoScript now. "javascript.options.wasm": [, true, true, true, true ], View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/232… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/232… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-148.0a1-16.0-2] fixup! BB 40925: Implemented the Security Level component
by henry (＠henry) 03 Mar '26

03 Mar '26

henry pushed to branch tor-browser-148.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: bfa83e89 by Henry Wilkes at 2026-03-02T13:15:00+00:00 fixup! BB 40925: Implemented the Security Level component TB 44687: Expect javascript.options.asmjs to be `false` for all security levels. - - - - - 1 changed file: - toolkit/components/securitylevel/SecurityLevel.sys.mjs Changes: ===================================== toolkit/components/securitylevel/SecurityLevel.sys.mjs ===================================== @@ -259,7 +259,9 @@ const kSecuritySettings = { "gfx.font_rendering.graphite.enabled": [, false, false, false, true ], "gfx.font_rendering.opentype_svg.enabled": [, false, false, false, true ], "svg.disabled": [, true, false, false, false], - "javascript.options.asmjs": [, false, false, false, true ], + // Expect asmjs to be switched off for all levels. See tor-browser#44687. + // TODO: Stop tracking this preference entirely. See tor-browser#44712. + "javascript.options.asmjs": [, false, false, false, false], // tor-browser#44234, tor-browser#44242: this interferes with the correct // functioning of the browser. So, WASM is also handled by NoScript now. "javascript.options.wasm": [, true, true, true, true ], View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bfa83e8… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/bfa83e8… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][main] 2 commits: Bug 41743: Make an error if gradle-dependencies-list is missing in input_files
by boklm (＠boklm) 02 Mar '26

02 Mar '26

boklm pushed to branch main at The Tor Project / Applications / tor-browser-build Commits: 455d80c0 by Nicolas Vigier at 2026-02-27T12:23:35+01:00 Bug 41743: Make an error if gradle-dependencies-list is missing in input_files - - - - - 01344e2f by Nicolas Vigier at 2026-02-27T12:24:05+01:00 Bug 41743: Add missing gradle-dependencies-list in input_files - - - - - 2 changed files: - projects/geckoview/config - rbm.conf Changes: ===================================== projects/geckoview/config ===================================== @@ -98,6 +98,8 @@ steps: name: glean pkg_type: build enable: '[% !c("var/generate_gradle_dependencies_list") %]' + - filename: gradle-dependencies-list.txt + name: gradle-dependencies-list - filename: 'gradle-dependencies-[% c("var/gradle_dependencies_version") %]' name: gradle-dependencies exec: '[% INCLUDE "fetch-gradle-dependencies" %]' ===================================== rbm.conf ===================================== @@ -300,7 +300,7 @@ var: # be enabled in rbm.local.conf. dev_artifacts: 0 - gradle_dependencies_version: '[% c("input_files_ids_by_name/gradle-dependencies-list").split(":").1.substr(0, 15) %]' + gradle_dependencies_version: '[% c("input_files_ids_by_name/gradle-dependencies-list", { error_if_undef => 1 }).split(":").1.substr(0, 15) %]' targets: notarget: linux-x86_64 View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/compare/… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/torbrowser-launcher][main] 3 commits: AppArmor: generalize rule
by asciiwolf (＠asciiwolf) 01 Mar '26

01 Mar '26

asciiwolf pushed to branch main at The Tor Project / Applications / torbrowser-launcher Commits: 7ff7c438 by intrigeri at 2026-02-17T13:38:00+00:00 AppArmor: generalize rule The auto-generated app name varies across GNOME (and perhaps systemd) versions, let's simplify and allow read access to `cpu.max` everywhere relevant. - - - - - ab081741 by intrigeri at 2026-02-17T13:38:59+00:00 AppArmor: allow newly needed access Sadly, I could not figure out which code needs this. But it seems pretty harmless. - - - - - 4bfb2021 by asciiwolf at 2026-02-28T20:02:09+00:00 Merge branch 'apparmor-fixes-2026-02-edition' into 'main' AppArmor: fixes for recent Debian sid See merge request tpo/applications/torbrowser-launcher!43 - - - - - 1 changed file: - apparmor/torbrowser.Browser.firefox Changes: ===================================== apparmor/torbrowser.Browser.firefox ===================================== @@ -124,10 +124,11 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} { @{sys}/devices/pci[0-9]*/**/irq r, /sys/devices/system/cpu/ r, /sys/devices/system/cpu/present r, + @{sys}/devices/system/cpu/cpu[0-9]*/cpu_capacity r, /sys/devices/system/node/ r, /sys/devices/system/node/node[0-9]*/meminfo r, /sys/fs/cgroup/cpu,cpuacct/{,user.slice/}cpu.cfs_quota_us r, - /sys/fs/cgroup/user.slice/user-[0-9]*.slice/user@[0-9]*.service/app.slice/app-gnome-torbrowser-[0-9]*.scope/cpu.max r, + @{sys}/fs/cgroup/**/cpu.max r, deny /sys/class/input/ r, deny /sys/devices/virtual/block/*/uevent r, View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/compar… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/torbrowser-launcher/-/compar… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-148.0a1-16.0-2] TB 31951: [Android] Disable Scroll to hide toolbar
by clairehurst (＠clairehurst) 27 Feb '26

27 Feb '26

clairehurst pushed to branch tor-browser-148.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: f35a834a by clairehurst at 2026-02-26T19:58:28-07:00 TB 31951: [Android] Disable Scroll to hide toolbar - - - - - 4 changed files: - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/settings/CustomizationFragment.kt - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/utils/Settings.kt - mobile/android/fenix/app/src/main/res/values/preference_keys.xml - mobile/android/fenix/app/src/main/res/xml/customization_preferences.xml Changes: ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/settings/CustomizationFragment.kt ===================================== @@ -256,10 +256,6 @@ class CustomizationFragment : PreferenceFragmentCompat() { isChecked = context.settings().isPullToRefreshEnabledInBrowser onPreferenceChangeListener = SharedPreferenceUpdater() } - requirePreference<SwitchPreference>(R.string.pref_key_dynamic_toolbar).apply { - isChecked = context.settings().isDynamicToolbarEnabled - onPreferenceChangeListener = SharedPreferenceUpdater() - } requirePreference<SwitchPreference>(R.string.pref_key_swipe_toolbar_switch_tabs).apply { isChecked = context.settings().isSwipeToolbarToSwitchTabsEnabled isVisible = isSwipeToolbarToSwitchTabsVisible @@ -278,9 +274,6 @@ class CustomizationFragment : PreferenceFragmentCompat() { resources.getString(R.string.pref_key_website_pull_to_refresh) -> { PullToRefreshInBrowser.enabled.set(requireContext().settings().isPullToRefreshEnabledInBrowser) } - resources.getString(R.string.pref_key_dynamic_toolbar) -> { - CustomizationSettings.dynamicToolbar.set(requireContext().settings().isDynamicToolbarEnabled) - } } return super.onPreferenceTreeClick(preference) } ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/utils/Settings.kt ===================================== @@ -2033,10 +2033,7 @@ class Settings( (isTabStripEligible(appContext) || FxNimbus.features.tabStrip.value().allowOnAllDevices), ) - var isDynamicToolbarEnabled by booleanPreference( - appContext.getPreferenceKey(R.string.pref_key_dynamic_toolbar), - default = true, - ) + var isDynamicToolbarEnabled = false var useNewDynamicToolbarBehaviour by booleanPreference( appContext.getPreferenceKey(R.string.pref_key_use_scroll_data_for_dynamic_toolbar), ===================================== mobile/android/fenix/app/src/main/res/values/preference_keys.xml ===================================== @@ -203,7 +203,6 @@ <string name="pref_key_website_pull_to_refresh" translatable="false">pref_key_website_pull_to_refresh</string> <string name="pref_key_tab_strip_show" translatable="false">pref_key_tab_strip_show</string> <string name="pref_key_tab_strip_message" translatable="false">pref_key_tab_strip_message</string> - <string name="pref_key_dynamic_toolbar" translatable="false">pref_key_dynamic_toolbar</string> <string name="pref_key_use_scroll_data_for_dynamic_toolbar" translatable="false">pref_key_use_scroll_data_for_dynamic_toolbar</string> <string name="pref_key_swipe_toolbar_switch_tabs" translatable="false">pref_key_swipe_toolbar_switch_tabs</string> <string name="pref_key_swipe_toolbar_show_tabs" translatable="false">pref_key_swipe_toolbar_show_tabs</string> ===================================== mobile/android/fenix/app/src/main/res/xml/customization_preferences.xml ===================================== @@ -98,9 +98,6 @@ android:key="@string/pref_key_website_pull_to_refresh" android:title="@string/preference_gestures_website_pull_to_refresh" app:isPreferenceVisible="false" /> - <androidx.preference.SwitchPreference - android:key="@string/pref_key_dynamic_toolbar" - android:title="@string/preference_gestures_dynamic_toolbar" /> <androidx.preference.SwitchPreference android:key="@string/pref_key_swipe_toolbar_switch_tabs" android:title="@string/preference_gestures_swipe_toolbar_switch_tabs_2" /> View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f35a834… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f35a834… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-148.0a1-16.0-2] fixup! BB 4234: Use the Firefox Update Process for Base Browser.
by Pier Angelo Vendrame (＠pierov) 26 Feb '26

26 Feb '26

Pier Angelo Vendrame pushed to branch tor-browser-148.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: 8f159297 by Pier Angelo Vendrame at 2026-02-26T13:18:16+01:00 fixup! BB 4234: Use the Firefox Update Process for Base Browser. BB 44668: Allow to replace detailsURL with unsupportedURL. We perform unsupported detection locally, rather than with a server-side logic, that is what Mozilla does. So, we send unsupported users to the details of the actual update, rather than sending them to a page with details of why they are unsupported. With this patch, we can distinguish those cases, and send user to a more appropriate page when needed. - - - - - 2 changed files: - toolkit/.eslintrc.mjs - toolkit/mozapps/update/UpdateService.sys.mjs Changes: ===================================== toolkit/.eslintrc.mjs ===================================== @@ -7,7 +7,7 @@ export default [ rules: { // XXX Bug 1326071 - This should be reduced down - probably to 20 or to // be removed & synced with the mozilla/recommended value. - complexity: ["error", 47], + complexity: ["error", 49], }, }, ]; ===================================== toolkit/mozapps/update/UpdateService.sys.mjs ===================================== @@ -2491,6 +2491,13 @@ class Update { this.elevationFailure = false; } + if (this.unsupported && update.hasAttribute("unsupportedURL")) { + // Override the detailsURL with the dedicated link for the EOL. + // Otherwise it will point to the release blog post for the wrong version. + // See tor-browser#44668. + this.detailsURL = update.getAttribute("unsupportedURL"); + } + if (!this.detailsURL) { try { // Try using a default details URL supplied by the distribution View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/8f15929… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/8f15929… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-148.0a1-16.0-2] fixup! BB 31740: Remove some unnecessary RemoteSettings instances
by Pier Angelo Vendrame (＠pierov) 26 Feb '26

26 Feb '26

Pier Angelo Vendrame pushed to branch tor-browser-148.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: ce7f1a1f by Pier Angelo Vendrame at 2026-02-26T13:16:56+01:00 fixup! BB 31740: Remove some unnecessary RemoteSettings instances BB 44701: Remove unexpected changes on url-classifier's components.conf. - - - - - 1 changed file: - netwerk/url-classifier/components.conf Changes: ===================================== netwerk/url-classifier/components.conf ===================================== @@ -18,6 +18,9 @@ Classes = [ 'contract_ids': ['@mozilla.org/url-classifier/exception-list-service;1'], 'esModule': 'resource://gre/modules/UrlClassifierExceptionListService.sys.mjs', 'constructor': 'UrlClassifierExceptionListService', + 'categories': { + 'idle-daily': 'UrlClassifierExceptionListService' + } }, { 'cid': '{8753A413-3ED6-4A61-A1DC-B31A7E69B796}', View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ce7f1a1… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ce7f1a1… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-148.0a1-16.0-2] fixup! TB 40933: Add tor-launcher functionality
by Pier Angelo Vendrame (＠pierov) 26 Feb '26

26 Feb '26

Pier Angelo Vendrame pushed to branch tor-browser-148.0a1-16.0-2 at The Tor Project / Applications / Tor Browser Commits: ba070404 by Pier Angelo Vendrame at 2026-02-26T08:22:46+01:00 fixup! TB 40933: Add tor-launcher functionality TB 44682: Fix the subprocess object whose pid is printed. - - - - - 1 changed file: - toolkit/components/tor-launcher/TorProcess.sys.mjs Changes: ===================================== toolkit/components/tor-launcher/TorProcess.sys.mjs ===================================== @@ -200,7 +200,7 @@ export class TorProcess { lazy.TorLauncherUtil.log( exitCode !== 0 ? "PARENT-WARN" : "PARENT-INFO", - `The tor process with pid ${this.#subprocess.pid} exited with code ${exitCode}.` + `The tor process with pid ${watched.pid} exited with code ${exitCode}.` ); if (watched !== this.#subprocess) { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ba07040… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ba07040… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag base-browser-148.0a1-16.0-2-build1
by Dan Ballard (＠dan) 26 Feb '26

26 Feb '26

Dan Ballard pushed new tag base-browser-148.0a1-16.0-2-build1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/base-brow… You're receiving this email because of your account on gitlab.torproject.org.

1 0