commit 1bfe1ef04e14d677555db8009544736c24ddf299 Author: Mike Perry mikeperry-git@torproject.org Date: Mon May 26 10:19:36 2014 -0700

fixup! Tor Browser's Firefox preference overrides.

Bug #11253: Turn on TLS 1.1 and 1.2.

Also disable a deprecated Audio API for safety. --- browser/app/profile/000-tor-browser.js | 7 +++++++ 1 file changed, 7 insertions(+)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index b6b9252..a6ff777 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -148,6 +148,13 @@ pref("javascript.options.baselinejit.content", false); pref("javascript.options.asmjs", false); pref("javascript.options.typeinference", false);

+// Audio_data is deprecated in future releases, but still present +// in FF24. This is a dangerous combination (spotted by iSec) +pref("media.audio_data.enabled", false); + +// Enable TLS 1.1 and 1.2: +// https://trac.torproject.org/projects/tor/ticket/11253 +pref("security.tls.version.max", 3);

// Version placeholder pref("torbrowser.version", "UNKNOWN");