- tbb-commits - lists.torproject.org

[builders/tor-browser-build] branch maint-11.5 updated: Bug 40626: Define the replacements for generic families on Linux
by gitolite role 20 Sep '22

20 Sep '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch maint-11.5 in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/maint-11.5 by this push: new ff0c0d0 Bug 40626: Define the replacements for generic families on Linux ff0c0d0 is described below commit ff0c0d00483cbe32b617a44913d50b6f62d63667 Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Tue Sep 20 09:19:57 2022 +0200 Bug 40626: Define the replacements for generic families on Linux FontConfig does not know much about our fonts, and falls back to the font version, when it cannot find any other criterion to decide which font to use. So, we want to make sure that at least sans-serif, serif and monospace are the fonts we want (currently, Arimo, Tinos and Cousine). --- .../Bundle-Data/linux/Data/fontconfig/fonts.conf | 35 +++++++++++++++++++++- 1 file changed, 34 insertions(+), 1 deletion(-) diff --git a/projects/tor-browser/Bundle-Data/linux/Data/fontconfig/fonts.conf b/projects/tor-browser/Bundle-Data/linux/Data/fontconfig/fonts.conf index ed236ac..f28857d 100644 --- a/projects/tor-browser/Bundle-Data/linux/Data/fontconfig/fonts.conf +++ b/projects/tor-browser/Bundle-Data/linux/Data/fontconfig/fonts.conf @@ -1,6 +1,11 @@ <?xml version="1.0"?> <!DOCTYPE fontconfig SYSTEM "fonts.dtd"> - +  + <match target="pattern"> + <test qual="any" name="family"> + <string>sans-serif</string> + </test> + <edit name="family" mode="assign" binding="same"> + <string>Arimo</string> + </edit> + </match> + <match target="pattern"> + <test qual="any" name="family"> + <string>serif</string> + </test> + <edit name="family" mode="assign" binding="same"> + <string>Tinos</string> + </edit> + </match> + <match target="pattern"> + <test qual="any" name="family"> + <string>monospace</string> + </test> + <edit name="family" mode="assign" binding="same"> + <string>Cousine</string> + </edit> + </match> +  <cachedir prefix="xdg">fontconfig</cachedir> -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-102.2.0esr-12.0-3 updated: fixup! Firefox preference overrides.
by gitolite role 20 Sep '22

20 Sep '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-102.2.0esr-12.0-3 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-102.2.0esr-12.0-3 by this push: new 5bee9df56ac4e fixup! Firefox preference overrides. 5bee9df56ac4e is described below commit 5bee9df56ac4e1fe3097338854003f748ba47190 Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Tue Sep 20 09:39:42 2022 +0200 fixup! Firefox preference overrides. Bug 41307: Fix some font whitelist typos on Windows and macOS --- browser/app/profile/001-base-profile.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/browser/app/profile/001-base-profile.js b/browser/app/profile/001-base-profile.js index 3cfdc30c5564b..af76a7359fb33 100644 --- a/browser/app/profile/001-base-profile.js +++ b/browser/app/profile/001-base-profile.js @@ -394,7 +394,7 @@ pref("dom.audiochannel.mediaControl", false); pref("gfx.bundled-fonts.activate", 1); #ifdef XP_MACOSX -pref("font.system.whitelist", "AppleGothic, Apple Color Emoji, Arial, Courier, Geneva, Georgia, Heiti TC, Helvetica, Helvetica Neue, .Helvetica Neue DeskInterface, Hiragino Kaku Gothic ProN, Kailasa, Lucida Grande, Menlo, Monaco, STHeiti, Tahoma, Thonburi, Times, Times New Roman, Verdana, STIX Math, Noto Sans Adlam, Noto Sans Balinese, Noto Sans Bamum, Noto Sans Bassa Vah, Noto Sans Batak, Noto Sans Bengali, Noto Sans Buginese, Noto Sans Buhid, Noto Sans Canadian Aboriginal, Noto Sans Ch [...] +pref("font.system.whitelist", "AppleGothic, Apple Color Emoji, Arial, Courier, Geneva, Georgia, Heiti TC, Helvetica, Helvetica Neue, .Helvetica Neue DeskInterface, Hiragino Kaku Gothic ProN, Kailasa, Lucida Grande, Menlo, Monaco, STHeiti, Tahoma, Thonburi, Times, Times New Roman, Verdana, STIX Math, Noto Sans Adlam, Noto Sans Armenian, Noto Sans Balinese, Noto Sans Bamum, Noto Sans Bassa Vah, Noto Sans Batak, Noto Sans Bengali, Noto Sans Buginese, Noto Sans Buhid, Noto Sans Canadian Abor [...] // Armenian pref("font.name-list.serif.x-armn", "Noto Serif Armenian, Times, Times New Roman"); @@ -472,7 +472,7 @@ pref("font.name-list.monospace.x-unicode", "Menlo, Courier New, Noto Sans Baline #endif #ifdef XP_WIN -pref("font.system.whitelist", "Arial, Cambria Math, Consolas, Courier New, Georgia, Lucida Console, MS Gothic, ＭＳゴシック, MS PGothic, ＭＳＰゴシック, MV Boli, Malgun Gothic, Mangal, Microsoft Himalaya, Microsoft JhengHei, Microsoft YaHei, 微软雅黑, MingLiU, 細明體, PMingLiU, 新細明體, Segoe UI, SimSun, 宋体, Sylfaen, Tahoma, Times New Roman, Verdana, Twemoji Mozilla, Noto Sans Adlam, Noto Sans Balinese, Noto Sans Bamum, Noto Sans Bassa Vah, Noto Sans Batak, Noto Sans Bengali, Noto Sans Buginese, Noto Sans Bu [...] +pref("font.system.whitelist", "Arial, Cambria Math, Consolas, Courier New, Georgia, Lucida Console, MS Gothic, ＭＳゴシック, MS PGothic, ＭＳＰゴシック, MV Boli, Malgun Gothic, Mangal, Microsoft Himalaya, Microsoft JhengHei, Microsoft YaHei, 微软雅黑, MingLiU, 細明體, PMingLiU, 新細明體, Segoe UI, SimSun, 宋体, Sylfaen, Tahoma, Times New Roman, Verdana, Twemoji Mozilla, Noto Sans Adlam, Noto Sans Balinese, Noto Sans Bamum, Noto Sans Bassa Vah, Noto Sans Batak, Noto Sans Bengali, Noto Sans Buginese, Noto Sans Bu [...] // Arabic pref("font.name-list.serif.ar", "Times New Roman, Noto Naskh Arabic"); -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Bug 40626: Define the replacements for generic families on Linux
by gitolite role 20 Sep '22

20 Sep '22

This is an automated email from the git hooks/post-receive script. pierov pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new 97e9d52 Bug 40626: Define the replacements for generic families on Linux 97e9d52 is described below commit 97e9d5297c4cae0af30a8be255c1ca6e1b0d98b5 Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Tue Sep 20 09:19:57 2022 +0200 Bug 40626: Define the replacements for generic families on Linux FontConfig does not know much about our fonts, and falls back to the font version, when it cannot find any other criterion to decide which font to use. So, we want to make sure that at least sans-serif, serif and monospace are the fonts we want (currently, Arimo, Tinos and Cousine). --- .../Bundle-Data/linux/Data/fontconfig/fonts.conf | 35 +++++++++++++++++++++- 1 file changed, 34 insertions(+), 1 deletion(-) diff --git a/projects/browser/Bundle-Data/linux/Data/fontconfig/fonts.conf b/projects/browser/Bundle-Data/linux/Data/fontconfig/fonts.conf index ed236ac..f28857d 100644 --- a/projects/browser/Bundle-Data/linux/Data/fontconfig/fonts.conf +++ b/projects/browser/Bundle-Data/linux/Data/fontconfig/fonts.conf @@ -1,6 +1,11 @@ <?xml version="1.0"?> <!DOCTYPE fontconfig SYSTEM "fonts.dtd"> - +  + <match target="pattern"> + <test qual="any" name="family"> + <string>sans-serif</string> + </test> + <edit name="family" mode="assign" binding="same"> + <string>Arimo</string> + </edit> + </match> + <match target="pattern"> + <test qual="any" name="family"> + <string>serif</string> + </test> + <edit name="family" mode="assign" binding="same"> + <string>Tinos</string> + </edit> + </match> + <match target="pattern"> + <test qual="any" name="family"> + <string>monospace</string> + </test> + <edit name="family" mode="assign" binding="same"> + <string>Cousine</string> + </edit> + </match> +  <cachedir prefix="xdg">fontconfig</cachedir> -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Update rbm for rbm#40010 and rbm#40009
by gitolite role 20 Sep '22

20 Sep '22

This is an automated email from the git hooks/post-receive script. boklm pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new 97cd534 Update rbm for rbm#40010 and rbm#40009 97cd534 is described below commit 97cd534bb5aecbd087b5b17fcf822d0fbc8d19af Author: Nicolas Vigier <boklm(a)torproject.org> AuthorDate: Tue Sep 20 11:49:52 2022 +0200 Update rbm for rbm#40010 and rbm#40009 --- rbm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rbm b/rbm index c485326..8ed3aa1 160000 --- a/rbm +++ b/rbm @@ -1 +1 @@ -Subproject commit c48532692f8c5a412da891b3d43bd46a24cd179e +Subproject commit 8ed3aa1c0b65c711947df2f0d483215510514253 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/rbm] branch master updated (c485326 -> 8ed3aa1)
by gitolite role 20 Sep '22

20 Sep '22

This is an automated email from the git hooks/post-receive script. boklm pushed a change to branch master in repository builders/rbm. from c485326 Bug 40043: container: add rbm to /etc/hosts by default add e7b453d Bug 40009: Add git_depth option add 8ed3aa1 Bug 40010: Add git_branch option No new revisions were added by this update. Summary of changes: doc/options_tar.asc | 11 +++++++++++ lib/RBM.pm | 29 ++++++++++++++++++----------- 2 files changed, 29 insertions(+), 11 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/rbm] branch main updated (c485326 -> 8ed3aa1)
by gitolite role 20 Sep '22

20 Sep '22

This is an automated email from the git hooks/post-receive script. boklm pushed a change to branch main in repository builders/rbm. from c485326 Bug 40043: container: add rbm to /etc/hosts by default new e7b453d Bug 40009: Add git_depth option new 8ed3aa1 Bug 40010: Add git_branch option The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: doc/options_tar.asc | 11 +++++++++++ lib/RBM.pm | 29 ++++++++++++++++++----------- 2 files changed, 29 insertions(+), 11 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 2

[tor-browser] branch tor-browser-102.2.0esr-12.0-3 updated: Bug 41125: stop proxy bypass in ServiceRequest.fetch by gating with checking MOZ_PROXY_BYPASS_PROTECTION and network.proxy.allow_bypass
by gitolite role 19 Sep '22

19 Sep '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-102.2.0esr-12.0-3 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-102.2.0esr-12.0-3 by this push: new 22b494ed36131 Bug 41125: stop proxy bypass in ServiceRequest.fetch by gating with checking MOZ_PROXY_BYPASS_PROTECTION and network.proxy.allow_bypass 22b494ed36131 is described below commit 22b494ed36131f2195cae9b11fc0772cf2b500e9 Author: Dan Ballard <dan(a)mindstab.net> AuthorDate: Tue Sep 6 11:34:24 2022 -0700 Bug 41125: stop proxy bypass in ServiceRequest.fetch by gating with checking MOZ_PROXY_BYPASS_PROTECTION and network.proxy.allow_bypass --- services/settings/Utils.jsm | 3 +++ toolkit/modules/AppConstants.jsm | 7 +++++++ 2 files changed, 10 insertions(+) diff --git a/services/settings/Utils.jsm b/services/settings/Utils.jsm index 31ad77d28678a..bab0e078ea14e 100644 --- a/services/settings/Utils.jsm +++ b/services/settings/Utils.jsm @@ -220,6 +220,9 @@ var Utils = { function fallbackOrReject(err) { if ( // At most one recursive Utils.fetch call (bypassProxy=false to true). + // if allowed by network.proxy.allow_bypass + AppConstants.MOZ_PROXY_BYPASS_PROTECTION || + !Services.prefs.getBoolPref("network.proxy.allow_bypass", false) || bypassProxy || Services.startup.shuttingDown || Utils.isOffline || diff --git a/toolkit/modules/AppConstants.jsm b/toolkit/modules/AppConstants.jsm index 64695e4c996d6..3ebe8b69bfdc2 100644 --- a/toolkit/modules/AppConstants.jsm +++ b/toolkit/modules/AppConstants.jsm @@ -482,6 +482,13 @@ this.AppConstants = Object.freeze({ false, #endif + MOZ_PROXY_BYPASS_PROTECTION: +#ifdef MOZ_PROXY_BYPASS_PROTECTION + true, +#else + false, +#endif + // Returns true for CN region build when distibution id set as 'MozillaOnline' isChinaRepack() { return ( -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[builders/tor-browser-build] branch main updated: Bug 40624: Use port 80 for placeholder bridge addresses.
by gitolite role 19 Sep '22

19 Sep '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch main in repository builders/tor-browser-build. The following commit(s) were added to refs/heads/main by this push: new 55f8975 Bug 40624: Use port 80 for placeholder bridge addresses. 55f8975 is described below commit 55f89756330a060cc65456000acf75226c545a42 Author: David Fifield <david(a)bamsoftware.com> AuthorDate: Wed Sep 14 21:57:14 2022 -0600 Bug 40624: Use port 80 for placeholder bridge addresses. This makes meek-azure and Snowflake work when "This computer goes through a firewall that only allows connections to certain ports" is set. https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snow… --- projects/common/bridges_list.meek-azure.txt | 2 +- projects/common/bridges_list.snowflake.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/projects/common/bridges_list.meek-azure.txt b/projects/common/bridges_list.meek-azure.txt index 14de202..ca46158 100644 --- a/projects/common/bridges_list.meek-azure.txt +++ b/projects/common/bridges_list.meek-azure.txt @@ -1 +1 @@ -meek_lite 192.0.2.2:2 97700DFE9F483596DDA6264C4D7DF7641E1E39CE url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com +meek_lite 192.0.2.2:80 97700DFE9F483596DDA6264C4D7DF7641E1E39CE url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com diff --git a/projects/common/bridges_list.snowflake.txt b/projects/common/bridges_list.snowflake.txt index a3266fd..99a6904 100644 --- a/projects/common/bridges_list.snowflake.txt +++ b/projects/common/bridges_list.snowflake.txt @@ -1 +1 @@ -snowflake 192.0.2.3:1 2B280B23E1107BB62ABFC40DDCC8824814F80A72 +snowflake 192.0.2.3:80 2B280B23E1107BB62ABFC40DDCC8824814F80A72 -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-102.2.0esr-12.0-3 updated: Bug 41116: Normalize system fonts.
by gitolite role 19 Sep '22

19 Sep '22

This is an automated email from the git hooks/post-receive script. richard pushed a commit to branch tor-browser-102.2.0esr-12.0-3 in repository tor-browser. The following commit(s) were added to refs/heads/tor-browser-102.2.0esr-12.0-3 by this push: new 582fab63ef3b9 Bug 41116: Normalize system fonts. 582fab63ef3b9 is described below commit 582fab63ef3b94801cc9f53fefc5e4e25988e29e Author: Pier Angelo Vendrame <pierov(a)torproject.org> AuthorDate: Mon Sep 19 12:57:40 2022 +0200 Bug 41116: Normalize system fonts. System fonts are an enormous fingerprinting vector. Even with font allow lists and with our custom configuration on Linux, which counter metrics measurements, getComputedStyle leaks several details. This patch counters both these kinds of attacks. --- widget/nsXPLookAndFeel.cpp | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/widget/nsXPLookAndFeel.cpp b/widget/nsXPLookAndFeel.cpp index 3cc2c561dbc54..8791038a2a3f0 100644 --- a/widget/nsXPLookAndFeel.cpp +++ b/widget/nsXPLookAndFeel.cpp @@ -1000,6 +1000,17 @@ widget::LookAndFeelFont nsXPLookAndFeel::StyleToLookAndFeelFont( bool nsXPLookAndFeel::GetFontValue(FontID aID, nsString& aName, gfxFontStyle& aStyle) { + if (nsContentUtils::ShouldResistFingerprinting()) { +#ifdef XP_MACOSX + aName = u"-apple-system"_ns; +#else + aName = u"sans-serif"_ns; +#endif + aStyle = gfxFontStyle(); + aStyle.size = 12; + return true; + } + if (const LookAndFeelFont* cached = sFontCache.Get(aID)) { return LookAndFeelFontToStyle(*cached, aName, aStyle); } -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 0

[tor-browser] branch tor-browser-102.2.0esr-12.0-3 updated (ff839fde49f3c -> cd000078e5f91)
by gitolite role 19 Sep '22

19 Sep '22

This is an automated email from the git hooks/post-receive script. richard pushed a change to branch tor-browser-102.2.0esr-12.0-3 in repository tor-browser. from ff839fde49f3c fixup! Bug 40925: Implemented the Security Level component new f6a93bb092169 fixup! Bug 40926: Implemented the New Identity feature new cd000078e5f91 fixup! Bug 40925: Implemented the Security Level component The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: .../components/newidentity/content/newidentity.js | 24 ++++----- .../securitylevel/content/securityLevel.js | 58 ++++++++++------------ 2 files changed, 38 insertions(+), 44 deletions(-) -- To stop receiving notification emails like this one, please contact the administrator of this repository.

1 2