morgan pushed to branch mullvad-browser-153.2.0esr-16.0-1 at The Tor Project / Applications / Mullvad Browser Commits: a7a830cb by Pier Angelo Vendrame at 2026-09-08T12:14:22+00:00 fixup! Firefox preference overrides. BB 45278: Disable WebXR as a defense-in-depth. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -552,6 +552,8 @@ pref("media.devices.enumerate.legacy.enabled", false); pref("apz.overscroll.enabled", false); #endif pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now +// tor-browser#45278: Disable WebXR as a defense-in-depth +pref("dom.vr.webxr.enabled", false); pref("security.webauth.webauthn", false); // Bug 26614: Disable Web Authentication API for now // Disable SAB, no matter if the sites are cross-origin isolated. pref("dom.postMessage.sharedArrayBuffer.withCOOP_COEP", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/a7a8... -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/a7a8... You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help