commit 659e0bdad18e5f4550cb7de8b4248354af5870c9 Author: Georg Koppen gk@torproject.org Date: Fri Apr 22 08:49:32 2016 +0000

fixup! TB4: Tor Browser's Firefox preference overrides.

We disable `media.navigator.enabled` as a defense-in-depth to avoid media devices getting exposed. (bug 16328) --- browser/app/profile/000-tor-browser.js | 3 +++ 1 file changed, 3 insertions(+)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index fbe6fb4..b2beff5 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -175,6 +175,9 @@ pref("plugin.state.flash", 1); pref("plugins.hide_infobar_for_missing_plugin", true); pref("plugins.hideMissingPluginsNotification", true); pref("media.peerconnection.enabled", false); // Disable WebRTC interfaces +// Disables media devices but only if `media.peerconnection.enabled` is set to +// `false` as well. (see bug 16328 for this defense-in-depth measure) +pref("media.navigator.enabled", false); // GMPs: We make sure they don't show up on the Add-on panel and confuse users. // And the external update/donwload server must not get pinged. We apply a // clever solution for https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769716.