Pier Angelo Vendrame pushed to branch mullvad-browser-150.0a1-16.0-2 at The Tor Project / Applications / Mullvad Browser Commits: 8ac56cce by Pier Angelo Vendrame at 2026-04-28T08:52:55+02:00 fixup! Firefox preference overrides. BB 44521: Disable widget.wayland.fractional-scale.enabled. It introduces fingerprinting opportunities to users who manually enabled Wayland, so disable it until we decide to make Wayland the default also for our browsers. - - - - - 775f0ef3 by Pier Angelo Vendrame at 2026-04-28T08:53:06+02:00 fixup! BB 44772: Disable efficient randomization for canvases. BB 44895: Revert "BB 44772: Disable efficient randomization for canvases." This reverts commit ced1d9a35c7d8cbb727d8c1c450b2dce62cd7289. We have investigated this issue more, and this change was not needed after all, therefore we can just revert this patch. - - - - - 2 changed files: - browser/app/profile/001-base-profile.js - dom/canvas/CanvasUtils.cpp Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -585,6 +585,9 @@ pref("widget.wayland.vsync.enabled", false); // marked with a specific rating is loaded or not. pref("security.restrict_to_adults.always", false); pref("security.restrict_to_adults.respect_platform", false); +// tor-browser#44521: Disable Wayland fractional scaling at least until we keep +// Xwayland as the default. +pref("widget.wayland.fractional-scale.enabled", false); // tor-browser#41943: defense-in-depth, but do not lock anymore (enabled in Firefox 119, http://bugzil.la/1851162) pref("javascript.options.spectre.disable_for_isolated_content", false); ===================================== dom/canvas/CanvasUtils.cpp ===================================== @@ -381,9 +381,14 @@ ImageExtraction ImageExtractionResult(dom::HTMLCanvasElement* aCanvasElement, return ImageExtraction::Placeholder; } - if ((ownerDoc->ShouldResistFingerprinting( - RFPTarget::EfficientCanvasRandomization) || - ownerDoc->ShouldResistFingerprinting(RFPTarget::CanvasRandomization) || + if (ownerDoc->ShouldResistFingerprinting( + RFPTarget::EfficientCanvasRandomization) && + GetCanvasExtractDataPermission(aPrincipal) != + nsIPermissionManager::ALLOW_ACTION) { + return ImageExtraction::EfficientRandomize; + } + + if ((ownerDoc->ShouldResistFingerprinting(RFPTarget::CanvasRandomization) || ownerDoc->ShouldResistFingerprinting(RFPTarget::WebGLRandomization)) && GetCanvasExtractDataPermission(aPrincipal) != nsIPermissionManager::ALLOW_ACTION) { View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/c33... -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/c33... You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help