|
|
1
|
+Tor Browser 14.0 - October 17 2024
|
|
|
2
|
+ * All Platforms
|
|
|
3
|
+ * Bug 30543: compat: make spoofed orientation reflect spoofed screen dimensions [1607032 + 1918202] [tor-browser]
|
|
|
4
|
+ * Bug 30862: 10ms time precision via EXSLT date-time function [tor-browser]
|
|
|
5
|
+ * Bug 41328: Follow firefox ESMify for Bug 1308512 [tor-browser]
|
|
|
6
|
+ * Bug 42054: ESR128: investigate - thorin's list [tor-browser]
|
|
|
7
|
+ * Bug 42220: Flip all the possible preferences to prevent any automatic download [tor-browser]
|
|
|
8
|
+ * Bug 42255: pdfjs.disabled used to be part of RFP until Bug 1838415; lock pref to false in stable [tor-browser]
|
|
|
9
|
+ * Bug 42356: Review 000-tor-browser.js and 001-base-profile.js for 128 [tor-browser]
|
|
|
10
|
+ * Bug 42601: Check Bug 1894779: Allow font-face urls to be resource:// urls and relax CORS for resource:// URLs [tor-browser]
|
|
|
11
|
+ * Bug 42611: Set clipboard.imageAsFile.enabled to false [tor-browser]
|
|
|
12
|
+ * Bug 42646: Drop patch for tor-browser#40166 [tor-browser]
|
|
|
13
|
+ * Bug 42683: Create script to generate issue triage csv's from bugzilla query and git scraping [tor-browser]
|
|
|
14
|
+ * Bug 42684: Disable network prefetch [tor-browser]
|
|
|
15
|
+ * Bug 42685: compat: ESR128: enable textmetrics [tor-browser]
|
|
|
16
|
+ * Bug 42716: Disable unwanted about:* pages [tor-browser]
|
|
|
17
|
+ * Bug 42730: Make RemoteSettings use only local dumps [tor-browser]
|
|
|
18
|
+ * Bug 42746: Extend prefers-contrast rules to include forced-colors [tor-browser]
|
|
|
19
|
+ * Bug 42759: CI: remove localization file names that are in neither 14.0 nor 13.5 branches [tor-browser]
|
|
|
20
|
+ * Bug 42814: Opt out from Firefox relay by default. [tor-browser]
|
|
|
21
|
+ * Bug 42830: Enable WebAudio APIs [tor-browser]
|
|
|
22
|
+ * Bug 42831: Remove the shopping components [tor-browser]
|
|
|
23
|
+ * Bug 42867: Disable contentRelevancy component [tor-browser]
|
|
|
24
|
+ * Bug 43011: Ship only one copy of the MIT license, like upstream. [tor-browser]
|
|
|
25
|
+ * Bug 43012: Mixed content: browser requests HTTPS images from onion domain accessed via HTTP [tor-browser]
|
|
|
26
|
+ * Bug 43013: security.mixed_content.upgrade_display_content.image is true by default [tor-browser]
|
|
|
27
|
+ * Bug 43054: check bounceTrackingProtection in PB mode does not persist to disk [tor-browser]
|
|
|
28
|
+ * Bug 43074: Pass the browser to TorDomainIsolator.newCircuitForBrowser [tor-browser]
|
|
|
29
|
+ * Bug 43144: Ensure non-privacy browsing also sets the GPC header [tor-browser]
|
|
|
30
|
+ * Bug 43163: Disable offscreen canvas until verified it is not fingerprintable [tor-browser]
|
|
|
31
|
+ * Bug 43170: Disable user-agent spoofing in HTTP header [tor-browser]
|
|
|
32
|
+ * Bug 43178: Audit fingerprinting overrides (MozBug 1834274) [tor-browser]
|
|
|
33
|
+ * Bug 43184: Backport Bugzilla 1922294: RFP: fixup square spoofed orientation [tor-browser]
|
|
|
34
|
+ * Bug 43197: Disable automatic exception for HTTPS-First [tor-browser]
|
|
|
35
|
+ * Windows + macOS + Linux
|
|
|
36
|
+ * Updated Firefox to 128.3.0esr
|
|
|
37
|
+ * Updated NoScript to 11.4.42
|
|
|
38
|
+ * Bug 40147: Re-enable Picture-in-Picture mode [tor-browser]
|
|
|
39
|
+ * Bug 41309: Re-enable screenshots component [tor-browser]
|
|
|
40
|
+ * Bug 41811: Primary buttons that result in a connection attempt should be purple [tor-browser]
|
|
|
41
|
+ * Bug 41817: Add more color aliases that take dark mode into account [tor-browser]
|
|
|
42
|
+ * Bug 41820: Downloads warning styling improvements (use moz-message-bar) [tor-browser]
|
|
|
43
|
+ * Bug 42070: Backport Bugzilla 1834307 and hide smooth-scroll UX [tor-browser]
|
|
|
44
|
+ * Bug 42212: Fluent migration: onion services [tor-browser]
|
|
|
45
|
+ * Bug 42362: "New window" missing from File menu [tor-browser]
|
|
|
46
|
+ * Bug 42441: Evaluate RR version-by-RR version rebases instead of ESR-to-ESR [tor-browser]
|
|
|
47
|
+ * Bug 42488: ESR 128: Remove role="code" from tor circuit panel [tor-browser]
|
|
|
48
|
+ * Bug 42603: Remove safebrowsing URLs [tor-browser]
|
|
|
49
|
+ * Bug 42612: Re-implement moz-toggle customizations for ESR 128 [tor-browser]
|
|
|
50
|
+ * Bug 42617: Restore the HTML form on DDG when using safest in 128 [tor-browser]
|
|
|
51
|
+ * Bug 42629: Tweak `isOnNewTabPage` patch [tor-browser]
|
|
|
52
|
+ * Bug 42630: Review LaterRun in 128 [tor-browser]
|
|
|
53
|
+ * Bug 42640: Disable Firefox Flame button due to unknown interactions with New Identity [tor-browser]
|
|
|
54
|
+ * Bug 42641: Move from panel-footer class to moz-button-group [tor-browser]
|
|
|
55
|
+ * Bug 42643: downloads panel separator has mismatched margin [tor-browser]
|
|
|
56
|
+ * Bug 42644: toolbar rules in panelUI-shared.css are unneccessary [tor-browser]
|
|
|
57
|
+ * Bug 42647: "Switching to a new device" regressed on 128 [tor-browser]
|
|
|
58
|
+ * Bug 42653: The Neterror page has a checkbox to report iframe origin errors to TPO [tor-browser]
|
|
|
59
|
+ * Bug 42662: Use data-hidden-from-search for hiding the firefox connection settings [tor-browser]
|
|
|
60
|
+ * Bug 42663: Tor Browser "Connection" settings missing a tooltip [tor-browser]
|
|
|
61
|
+ * Bug 42665: Drop "Learn More" spacing [tor-browser]
|
|
|
62
|
+ * Bug 42667: Add description-deemphasized class to our additions to about:preferences [tor-browser]
|
|
|
63
|
+ * Bug 42679: Use a more robust approach to hide the "tracking protection" urlbar button [tor-browser]
|
|
|
64
|
+ * Bug 42687: Disable Privacy-Preserving Attribution [tor-browser]
|
|
|
65
|
+ * Bug 42695: Use `--arrowpanel-` variables for tor circuit panel spacing [tor-browser]
|
|
|
66
|
+ * Bug 42698: Bridge card background contrast is low for bridge-moji [tor-browser]
|
|
|
67
|
+ * Bug 42699: Drop level="top" attribute from panels [tor-browser]
|
|
|
68
|
+ * Bug 42700: Remove !nodes condition from gTorCircuitPanel._updateCurrentBrowser [tor-browser]
|
|
|
69
|
+ * Bug 42704: Drop the badged="true" attribute from security level button [tor-browser]
|
|
|
70
|
+ * Bug 42705: Update our preferences to account for new line height [tor-browser]
|
|
|
71
|
+ * Bug 42713: Some --in-content CSS variables were renamed/removed [tor-browser]
|
|
|
72
|
+ * Bug 42718: Remove the firefox-view button from UI, even when always-on private-browsing mode is disabled [tor-browser]
|
|
|
73
|
+ * Bug 42735: Disable recent search suggestions [tor-browser]
|
|
|
74
|
+ * Bug 42740: Stop trying to hide "Restore previous session" [tor-browser]
|
|
|
75
|
+ * Bug 42742: Inconsistent use of "New private window" vs "New window" [tor-browser]
|
|
|
76
|
+ * Bug 42743: Invalid onion sites are shown as secure in the page info window [tor-browser]
|
|
|
77
|
+ * Bug 42744: Light theme override for "about:tor" is inherited by chrome error pages. [tor-browser]
|
|
|
78
|
+ * Bug 42745: Remove some residuals from update scripts [tor-browser]
|
|
|
79
|
+ * Bug 42764: Unconditionally disable find-bar transition animation [tor-browser]
|
|
|
80
|
+ * Bug 42777: Remove 'Website Privacy Preferences' and ensure sensible default prefs [tor-browser]
|
|
|
81
|
+ * Bug 42803: Lost focus styling for built-in bridges radio options [tor-browser]
|
|
|
82
|
+ * Bug 42806: Use the `lh` CSS unit [tor-browser]
|
|
|
83
|
+ * Bug 42872: Disable translations until audited and solved the UX problems [tor-browser]
|
|
|
84
|
+ * Bug 43015: Missing region-name-skr fluent entry when fetching TorConnect country names [tor-browser]
|
|
|
85
|
+ * Bug 43067: Use html:link rather than xml-stylesheet in our dialogs [tor-browser]
|
|
|
86
|
+ * Bug 43071: Make sure "tor-button" elements that are also "primary" still use the tor colors [tor-browser]
|
|
|
87
|
+ * Bug 43072: moz-message-bar does not get announced on Orca screen-reader [tor-browser]
|
|
|
88
|
+ * Bug 43075: Should we drop link spacing in about:tor [tor-browser]
|
|
|
89
|
+ * Bug 43081: Remove hard-coded CSS `line-height` [tor-browser]
|
|
|
90
|
+ * Bug 43082: Search engine icon is not shown while typing in the address bar [tor-browser]
|
|
|
91
|
+ * Bug 43083: Backport fix for Mozilla 1436462 [tor-browser]
|
|
|
92
|
+ * Bug 43087: Onion pattern on about:torconnect needs a dark theme asset [tor-browser]
|
|
|
93
|
+ * Bug 43103: Verify whether an update is unsupported before choosing one [tor-browser]
|
|
|
94
|
+ * Bug 43104: Local files and extensions can't be loaded in new windows before bootstrap [tor-browser]
|
|
|
95
|
+ * Bug 43105: Migrating Disconnect is not needed anymore [tor-browser]
|
|
|
96
|
+ * Bug 43109: Remove mention of Firefox Relay from settings [tor-browser]
|
|
|
97
|
+ * Bug 43115: Height of search bar has collapsed on about:tor [tor-browser]
|
|
|
98
|
+ * Bug 43117: Hide 'Always underline links' option [tor-browser]
|
|
|
99
|
+ * Bug 43118: hide CFR [tor-browser]
|
|
|
100
|
+ * Bug 43131: Reduce layout jank when loading about:tor [tor-browser]
|
|
|
101
|
+ * Bug 43134: Backport Bugzilla 1436226 Hardcode VP8/VP9 [tor-browser]
|
|
|
102
|
+ * Bug 43164: Prevent search-bar from being auto-hidden when not used for awhile [tor-browser]
|
|
|
103
|
+ * Bug 43169: compat: align userAgent in navigator + HTTP Header [tor-browser]
|
|
|
104
|
+ * Bug 43174: Issue with custom home page on local filesystem [tor-browser]
|
|
|
105
|
+ * Bug 43209: UI freezes when clipboard is empty after screen lock [tor-browser]
|
|
|
106
|
+ * Bug 43217: Fullscreen videos have rounded letterboxing corners [tor-browser]
|
|
|
107
|
+ * Bug 43218: Switch to browser.reload, since Browser:Reload signal was dropped upstream [tor-browser]
|
|
|
108
|
+ * Bug 41248: Check and update bundled font versions [tor-browser-build]
|
|
|
109
|
+ * Windows + macOS
|
|
|
110
|
+ * Bug 43021: Revert the OS deprecation notification introduced in #42347 [tor-browser]
|
|
|
111
|
+ * macOS + Linux
|
|
|
112
|
+ * Bug 42467: Make OS HTTP User-Agent OS spoofing configurable by pref [tor-browser]
|
|
|
113
|
+ * Windows
|
|
|
114
|
+ * Bug 43051: windows: remove UI for "open Tor Browser automatically when computer starts" [tor-browser]
|
|
|
115
|
+ * macOS
|
|
|
116
|
+ * Bug 42494: mac: add Arial Black and Arial Narrow to allowlist [tor-browser]
|
|
|
117
|
+ * Linux
|
|
|
118
|
+ * Bug 42702: Cannot access the clipboard for the crypto address check (wayland) [tor-browser]
|
|
|
119
|
+ * Bug 42773: Replace ~ with the original HOME [tor-browser]
|
|
|
120
|
+ * Bug 43092: Disable Wayland by default in 14.0 [tor-browser]
|
|
|
121
|
+ * Bug 43101: Security features warning links to Firefox installation support page with incomplete info [tor-browser]
|
|
|
122
|
+ * Bug 43141: Hardcode Arimo as a system-ui font [tor-browser]
|
|
|
123
|
+ * Bug 43196: Remove the vendor name from the "is playing media" notification on Linux [tor-browser]
|
|
|
124
|
+ * Bug 41237: Add some aliases to our Linux font config for compatibility [tor-browser-build]
|
|
|
125
|
+ * Android
|
|
|
126
|
+ * Updated GeckoView to 128.3.0esr
|
|
|
127
|
+ * Bug 41550: Remove unused extensions from Tor Browser for Android [tor-browser]
|
|
|
128
|
+ * Bug 42386: Remove unused assets to reduce APK size [tor-browser]
|
|
|
129
|
+ * Bug 42590: “Tor browser” text in top left of home fragment/new tab view gets cut off with larger text sizes [tor-browser]
|
|
|
130
|
+ * Bug 42655: Implement "New circuit for this site" on Android [tor-browser]
|
|
|
131
|
+ * Bug 42660: Review the patch on Android's ProxySelector [tor-browser]
|
|
|
132
|
+ * Bug 42731: Verify `privacy.spoof_english` still works once we have Android builds [tor-browser]
|
|
|
133
|
+ * Bug 42954: Remove product recommendation API integration (Review Mozilla 1857215) [tor-browser]
|
|
|
134
|
+ * Bug 43006: Disable RFP for Font Visibility on Android [tor-browser]
|
|
|
135
|
+ * Bug 43016: Re-disable Nimbus [tor-browser]
|
|
|
136
|
+ * Bug 43043: Remove credit card autofill UI elements from menu [tor-browser]
|
|
|
137
|
+ * Bug 43048: Firefox logo on splash [tor-browser]
|
|
|
138
|
+ * Bug 43050: Center text in connect buttons [tor-browser]
|
|
|
139
|
+ * Bug 43052: Remove non private tabs icon and "other device tabs" from tab view [tor-browser]
|
|
|
140
|
+ * Bug 43057: fenix/.../search/list.json failing linting [tor-browser]
|
|
|
141
|
+ * Bug 43078: Disable Sharing Links to TBA [tor-browser]
|
|
|
142
|
+ * Bug 43088: Query stripping is disabled on Android [tor-browser]
|
|
|
143
|
+ * Bug 43094: Remove "Open in regular tab" button [tor-browser]
|
|
|
144
|
+ * Bug 43097: NoScript fails to install on Android [tor-browser]
|
|
|
145
|
+ * Bug 43102: Android notifications tell to make Firefox your default browser [tor-browser]
|
|
|
146
|
+ * Bug 43108: Backport Android fullscreen notifications refactoring on ESR128 [tor-browser]
|
|
|
147
|
+ * Bug 43114: Reader view uses the catch-all circuit on Android [tor-browser]
|
|
|
148
|
+ * Bug 43116: The lack of GeoIP databases produces a lot of spam in the console on Android [tor-browser]
|
|
|
149
|
+ * Bug 43128: Use DuckDuckGo HTML on the Safest security level for Android [tor-browser]
|
|
|
150
|
+ * Bug 43129: about:neterror cannot display SVG on Android with Security Level Safest [tor-browser]
|
|
|
151
|
+ * Bug 43132: Enable extensions installation on Tor Browser 14 for Android. [tor-browser]
|
|
|
152
|
+ * Bug 43146: Update the icon of DuckDuckGo onion search engine on Android [tor-browser]
|
|
|
153
|
+ * Bug 43147: Remove unused search plugins from the apk files [tor-browser]
|
|
|
154
|
+ * Bug 43151: MOZ_DATA_REPORTING, MOZ_TELEMETRY_REPORTING, MOZ_CRASHREPORTER, and MOZ_BACKGROUNDTASKS enabled on Android [tor-browser]
|
|
|
155
|
+ * Bug 43172: remove remote settings and SERPTelemetry [tor-browser]
|
|
|
156
|
+ * Bug 43202: Extensions page unnecessarily fetches recommended addons on Android [tor-browser]
|
|
|
157
|
+ * Bug 43223: Hide option to open bookmarks in non-private tabs on Android [tor-browser]
|
|
|
158
|
+ * Bug 43225: Hide non-private tab settings and history search on Android [tor-browser]
|
|
|
159
|
+ * Bug 43227: Hide the Firefox Suggest label above search suggestions on Android [tor-browser]
|
|
|
160
|
+ * Bug 43228: Fix the "What's new" URL and text on Android [tor-browser]
|
|
|
161
|
+ * Bug 41223: Tor Browser Alpha version not displayed correctly [tor-browser-build]
|
|
|
162
|
+ * Build System
|
|
|
163
|
+ * All Platforms
|
|
|
164
|
+ * Updated Go to 1.22.8
|
|
|
165
|
+ * Bug 42722: clang-format and localization linters are not running [tor-browser]
|
|
|
166
|
+ * Bug 42799: Do not run lint pipelines on new tag [tor-browser]
|
|
|
167
|
+ * Bug 43014: Add purgecaches to the dev build [tor-browser]
|
|
|
168
|
+ * Bug 43156: Update translation CI to account for the extended 13.5 release [tor-browser]
|
|
|
169
|
+ * Bug 43157: Move tb-dev to base-browser [tor-browser]
|
|
|
170
|
+ * Bug 43181: Run translation CI if there is a change in a string.xml file [tor-browser]
|
|
|
171
|
+ * Bug 41013: Add a README to each project [tor-browser-build]
|
|
|
172
|
+ * Bug 41096: Set SOURCE_DATE_EPOCH in the default env variables [tor-browser-build]
|
|
|
173
|
+ * Bug 41155: Update toolchains for ESR128 [tor-browser-build]
|
|
|
174
|
+ * Bug 41156: Split the Rust configuration options [tor-browser-build]
|
|
|
175
|
+ * Bug 41180: Some files do not need to be copied when building tor-expert-bundle [tor-browser-build]
|
|
|
176
|
+ * Bug 41188: Upgrade binutils to 2.41 [tor-browser-build]
|
|
|
177
|
+ * Bug 41189: Add matzfan to list of downstream projects in alpha release-prep template [tor-browser-build]
|
|
|
178
|
+ * Bug 41195: Update Go to 1.22 [tor-browser-build]
|
|
|
179
|
+ * Bug 41198: Update release-prep issue template to include notifiying anti-censorship team of package name changes for GetTor distributor [tor-browser-build]
|
|
|
180
|
+ * Bug 41203: Tor Blog generation script uses the wrong url scheme for alpha releases [tor-browser-build]
|
|
|
181
|
+ * Bug 41236: Remove binutils when not needed [tor-browser-build]
|
|
|
182
|
+ * Bug 41273: relprep.py: bump Firefox and GV to a (yet) non-existing tag when the last one does not match HEAD [tor-browser-build]
|
|
|
183
|
+ * Bug 41274: Improve fetch_changelogs.py for major releases [tor-browser-build]
|
|
|
184
|
+ * Bug 40078: Update tools/tb-build-06-start-nightly-build after tor-browser-build#40829 [tor-browser-bundle-testsuite]
|
|
|
185
|
+ * Windows + macOS + Linux
|
|
|
186
|
+ * Bug 42668: Drop torconnect rule in eslint-plugin-mozilla [tor-browser]
|
|
|
187
|
+ * Bug 41247: Adapt tools/update-responses/update_responses to support multiple versions in the same xml files [tor-browser-build]
|
|
|
188
|
+ * Bug 41256: tools/signing/upload-update_responses-to-staticiforme should regenerate update-responses when it already exists [tor-browser-build]
|
|
|
189
|
+ * Bug 41259: Don't try to generate incrementals for versions which don't set incremental_from [tor-browser-build]
|
|
|
190
|
+ * Bug 41270: Add updater rewriterules to make 13.5.7 a watershed [tor-browser-build]
|
|
|
191
|
+ * Windows + macOS
|
|
|
192
|
+ * Bug 41197: Modify update-responses to prevent upgrades on unsupported Windows and macOS versions [tor-browser-build]
|
|
|
193
|
+ * Windows
|
|
|
194
|
+ * Bug 29318: Drop mingw-w64/gcc toolchain [tor-browser-build]
|
|
|
195
|
+ * Bug 29320: Use mingw-w64/clang toolchain to build Rust [tor-browser-build]
|
|
|
196
|
+ * Bug 41185: Drop Windows 7 support for 14.0 from build tools [tor-browser-build]
|
|
|
197
|
+ * Bug 41201: Bump the Windows version checked by the installer [tor-browser-build]
|
|
|
198
|
+ * macOS
|
|
|
199
|
+ * Bug 41267: Go dropping support for macOS <= 11.0 in Go 1.23 [tor-browser-build]
|
|
|
200
|
+ * Android
|
|
|
201
|
+ * Bug 42480: Use translation CI in android [tor-browser]
|
|
|
202
|
+ * Bug 40544: Bump Java 8 version to something more recent [tor-browser-build]
|
|
|
203
|
+ * Bug 41106: Non matching builds after application-services not being rebuilt in a long time [tor-browser-build]
|
|
|
204
|
+ * Bug 41123: Drop the firefox-android project [tor-browser-build]
|
|
|
205
|
+ * Bug 41171: Switch Android containers to Debian bookworm [tor-browser-build]
|
|
|
206
|
+ * Bug 41172: Refactor the android-toolchain project [tor-browser-build]
|
|
|
207
|
+ * Bug 41178: Force IPv4 when downloading in fix_gradle_deps.py [tor-browser-build]
|
|
|
208
|
+ * Bug 41200: Remove allowed_addons.json and the related tools [tor-browser-build]
|
|
|
209
|
+ * Bug 41210: Use tor-expert-bundle-aar in geckoview/build_apk [tor-browser-build]
|
|
|
210
|
+ * Bug 41211: The Android license file is not deterministic anymore [tor-browser-build]
|
|
|
211
|
+ * Bug 41214: Update geckoview/config to be more like firefox/config [tor-browser-build]
|
|
|
212
|
+ * Bug 41217: Update realprep.py script to handle Firefox 128-based Tor Browser Android [tor-browser-build]
|
|
|
213
|
+ * Bug 41224: Do not ship Conjure and GeoIP databases on Android x86, x86-64 to save some space [tor-browser-build]
|
|
|
214
|
+ * Bug 41232: Re-implement single-arch builds after the monorepo migration [tor-browser-build]
|
|
|
215
|
+ * Bug 41234: More dependencies are needed when building Android as a release [tor-browser-build]
|
|
|
216
|
+ * Bug 41261: Use an uncompressed NoScript xpi file to improve apk compression [tor-browser-build]
|
|
|
217
|
+
|
|
|
218
|
+Tor Browser 13.5.8 - October 14 2024
|
|
|
219
|
+ * Android
|
|
|
220
|
+ * Updated NoScript to 11.4.42
|
|
|
221
|
+ * Bug 43099: YEC 2024 Takeover for Android Stable [tor-browser]
|
|
|
222
|
+ * Bug 43173: Backport security fixes from Firefox 131 [tor-browser]
|
|
|
223
|
+
|
|
1
|
224
|
Tor Browser 14.0a9 - October 08 2024
|
|
2
|
225
|
* All Platforms
|
|
3
|
226
|
* Bug 43197: Disable automatic exception for HTTPS-First [tor-browser]
|