ma1 pushed to branch tor-browser-128.3.0esr-14.0-1 at The Tor Project / Applications / Tor Browser

Commits:

1 changed file:

Changes:

  • browser/app/profile/001-base-profile.js
    ... ... @@ -120,6 +120,8 @@ pref("dom.security.https_only_mode", true);
    120 120
     // The previous pref automatically sets this to true (see StaticPrefList.yaml),
    
    121 121
     // but set it anyway only as a defense-in-depth.
    
    122 122
     pref("dom.security.https_only_mode_pbm", true);
    
    123
    +// tor-browser#43197, defense in depth if ever https-only got disabled
    
    124
    +pref("dom.security.https_first_add_exception_on_failiure", false);
    
    123 125
     
    
    124 126
     // tor-browser#22320: Hide referer when comming from a .onion address
    
    125 127
     // We enable this here (rather than in Tor Browser) in case users of other