June 2017 - tor-commits - lists.torproject.org

[orbot/master] use this as the base manifest
by n8fr8＠torproject.org 09 Jun '17

09 Jun '17

commit b1ff4d5271e356e14136dff45d54b836105ef402 Author: n8fr8 <nathan(a)freitas.net> Date: Fri Jun 9 06:07:43 2017 -0400 use this as the base manifest --- app/src/main/AndroidManifest.xml | 7 ------- 1 file changed, 7 deletions(-) diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml index 4389408..8369083 100644 --- a/app/src/main/AndroidManifest.xml +++ b/app/src/main/AndroidManifest.xml @@ -3,9 +3,6 @@ package="org.torproject.android" android:installLocation="auto"> - <uses-sdk - android:minSdkVersion="16" - android:targetSdkVersion="25" /> <!-- <permission android:name="org.torproject.android.MANAGE_TOR" android:label="@string/permission_manage_tor_label" @@ -18,10 +15,6 @@ <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" /> <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" /> <uses-permission android:name="android.permission.ACCESS_SUPERUSER" /> - <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" /> - <uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE" /> - <uses-permission android:name="android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS" /> - <uses-permission android:name="android.permission.READ_PHONE_STATE" /> <application android:name=".OrbotApp"

1 0

[orbot/master] don't build jni/ndk inside of this project
by n8fr8＠torproject.org 09 Jun '17

09 Jun '17

commit c874e70fa6a1f84ee10b26220c541989cc189d36 Author: n8fr8 <nathan(a)freitas.net> Date: Fri Jun 9 06:08:05 2017 -0400 don't build jni/ndk inside of this project --- orbotservice/build.gradle | 1 + 1 file changed, 1 insertion(+) diff --git a/orbotservice/build.gradle b/orbotservice/build.gradle index 5b033ec..e46037f 100644 --- a/orbotservice/build.gradle +++ b/orbotservice/build.gradle @@ -7,6 +7,7 @@ android { sourceSets { main { jni.srcDirs = [] + } }

1 0

[orbot/master] add link for builds
by n8fr8＠torproject.org 09 Jun '17

09 Jun '17

commit 132c00a2240778bf9a9a345f9c4dde5f3abdcfa1 Author: n8fr8 <nathan(a)freitas.net> Date: Fri Jun 9 06:07:13 2017 -0400 add link for builds --- orbotservice/src/main/jniLibs | 1 + 1 file changed, 1 insertion(+) diff --git a/orbotservice/src/main/jniLibs b/orbotservice/src/main/jniLibs new file mode 120000 index 0000000..4dc6caa --- /dev/null +++ b/orbotservice/src/main/jniLibs @@ -0,0 +1 @@ +libs \ No newline at end of file

1 0

[tor-browser-bundle/maint-7.0] Release preparations for 7.0.1
by gk＠torproject.org 09 Jun '17

09 Jun '17

commit 2a8b3159e9cda30e63e4e333aee20c604dbe3956 Author: Georg Koppen <gk(a)torproject.org> Date: Fri Jun 9 07:14:39 2017 +0000 Release preparations for 7.0.1 Version bumps, changelog update, and config.yml update --- Bundle-Data/Docs/ChangeLog.txt | 9 +++++++++ gitian/versions | 10 +++++----- tools/update-responses/config.yml | 9 +++++---- 3 files changed, 19 insertions(+), 9 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 9a830c3..09497e7 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,12 @@ +Tor Browser 7.0.1 -- June 13 2017 + * All Platforms + * Update Firefox to 52.2.0esr + * Update Tor to 0.3.0.8 + * Update Torbutton to 1.9.7.4 + * Bug 22542: Security Settings window too small on macOS 10.12 + * Update HTTPS-Everywhere to 5.2.18 + * Bug 22362: NoScript's XSS filter freezes the browser + Tor Browser 7.0 -- June 7 2017 * All Platforms * Update Firefox to 52.1.2esr diff --git a/gitian/versions b/gitian/versions index 86156ea..ae21121 100755 --- a/gitian/versions +++ b/gitian/versions @@ -10,15 +10,15 @@ DATA_OUTSIDE_APP_DIR=1 VERIFY_TAGS=1 -FIREFOX_VERSION=52.1.2esr +FIREFOX_VERSION=52.2.0esr TORBROWSER_UPDATE_CHANNEL=release -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-7.0-1-build2 -TOR_TAG=tor-0.3.0.7 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-7.0-1-build1 +TOR_TAG=tor-0.3.0.8 TORLAUNCHER_TAG=0.2.12.2 -TORBUTTON_TAG=1.9.7.3 -HTTPSE_TAG=5.2.17 +TORBUTTON_TAG=1.9.7.4 +HTTPSE_TAG=5.2.18 NSIS_TAG=v0.3.1 ZLIB_TAG=v1.2.8 LIBEVENT_TAG=release-2.0.22-stable diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 8b98b8e..9dfedd3 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -20,13 +20,14 @@ build_targets: osx64: Darwin_x86_64-gcc3 channels: alpha: 7.0a4 - release: 7.0 + release: 7.0.1 versions: - 7.0: - platformVersion: 52.1.2 - detailsURL: https://blog.torproject.org/blog/tor-browser-70-released + 7.0.1: + platformVersion: 52.2.0 + detailsURL: https://blog.torproject.org/blog/tor-browser-701-released incremental_from: - 6.5.2 + - 7.0 migrate_archs: osx32: osx64 migrate_langs:

1 0

[torbutton/master] Version bump and CHANGELOG update
by gk＠torproject.org 09 Jun '17

09 Jun '17

commit 52a33a0d7cec4117464ae502ef2bd0a4e0d1c4fa Author: Georg Koppen <gk(a)torproject.org> Date: Fri Jun 9 06:52:37 2017 +0000 Version bump and CHANGELOG update --- src/CHANGELOG | 3 +++ src/install.rdf | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/src/CHANGELOG b/src/CHANGELOG index 1dce5c2..775884c 100644 --- a/src/CHANGELOG +++ b/src/CHANGELOG @@ -1,3 +1,6 @@ +1.9.7.4 + * Bug 22542: Security Settings window too small on macOS 10.12 + 1.9.7.3 * Bug 22104: Adjust our content policy whitelist for ff52-esr * Bug 22457: Allow resources loaded by view-source:// diff --git a/src/install.rdf b/src/install.rdf index 8c28f40..868faea 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ <em:name>Torbutton</em:name> <em:creator>Mike Perry</em:creator> <em:id>torbutton(a)torproject.org</em:id> - <em:version>1.9.7.3</em:version> + <em:version>1.9.7.4</em:version> <em:multiprocessCompatible>true</em:multiprocessCompatible> <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL>

1 0

[torbutton/master] Bug 22542: Security Settings window too small on macOS 10.12
by gk＠torproject.org 08 Jun '17

08 Jun '17

commit 6febc86aaca26984131b541e185323070de88ea7 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Thu Jun 8 10:29:10 2017 -0400 Bug 22542: Security Settings window too small on macOS 10.12 Increase the height of the security slider description area to avoid a scrollbar on macOS 10.12 (previously, the text associated with the "High" level required a scrollbar). --- src/chrome/content/preferences.xul | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/chrome/content/preferences.xul b/src/chrome/content/preferences.xul index 554312c..9bd8ae3 100644 --- a/src/chrome/content/preferences.xul +++ b/src/chrome/content/preferences.xul @@ -26,7 +26,7 @@ <caption label="&torbutton.prefs.sec_caption;"/> <hbox id="torbutton_slider_settings" flex="1" align="stretch" hidden="false"> <vbox> - <hbox height="200"> + <hbox height="220"> <vbox> <scale id="torbutton_sec_slider" flex="1" min="1" max="3" movetoclick="true" orient="vertical"

1 0

[tor-browser-bundle/maint-7.0] Bug 22362: NoScript's XSS filter freezes the browser
by gk＠torproject.org 08 Jun '17

08 Jun '17

commit f0584bcbec0f5c15ad510368df5088ce64ec48b6 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Jun 7 11:58:21 2017 +0000 Bug 22362: NoScript's XSS filter freezes the browser Due to a bug in NoScript's XSS filter Tor Browser freezes on some websites. We disable that filter for now while waiting on a NoScript update. --- .../Data/Browser/profile.default/preferences/extension-overrides.js | 4 ++++ .../Data/Browser/profile.default/preferences/extension-overrides.js | 4 ++++ .../Data/Browser/profile.default/preferences/extension-overrides.js | 4 ++++ 3 files changed, 12 insertions(+) diff --git a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js index 6ef2c45..a34fb36 100644 --- a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js @@ -55,3 +55,7 @@ pref("noscript.restrictSubdocScripting", true); pref("noscript.showVolatilePrivatePermissionsToggle", false); pref("noscript.volatilePrivatePermissions", true); pref("noscript.clearClick", 0); +// Workaround for bug 22362: Disable XSS filter for now as it freezes the +// browser in some circumstances. +pref("noscript.filterXGet", false); +pref("noscript.filterXPost", false); diff --git a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js index 6ef2c45..a34fb36 100644 --- a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js @@ -55,3 +55,7 @@ pref("noscript.restrictSubdocScripting", true); pref("noscript.showVolatilePrivatePermissionsToggle", false); pref("noscript.volatilePrivatePermissions", true); pref("noscript.clearClick", 0); +// Workaround for bug 22362: Disable XSS filter for now as it freezes the +// browser in some circumstances. +pref("noscript.filterXGet", false); +pref("noscript.filterXPost", false); diff --git a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js index 6ef2c45..a34fb36 100644 --- a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js @@ -55,3 +55,7 @@ pref("noscript.restrictSubdocScripting", true); pref("noscript.showVolatilePrivatePermissionsToggle", false); pref("noscript.volatilePrivatePermissions", true); pref("noscript.clearClick", 0); +// Workaround for bug 22362: Disable XSS filter for now as it freezes the +// browser in some circumstances. +pref("noscript.filterXGet", false); +pref("noscript.filterXPost", false);

1 0

[tor-browser-bundle/master] Bug 22362: NoScript's XSS filter freezes the browser
by gk＠torproject.org 08 Jun '17

08 Jun '17

commit e8178d1373d6ce2599ef58eca4d52d1b6817263f Author: Georg Koppen <gk(a)torproject.org> Date: Wed Jun 7 11:58:21 2017 +0000 Bug 22362: NoScript's XSS filter freezes the browser Due to a bug in NoScript's XSS filter Tor Browser freezes on some websites. We disable that filter for now while waiting on a NoScript update. --- .../Data/Browser/profile.default/preferences/extension-overrides.js | 4 ++++ .../Data/Browser/profile.default/preferences/extension-overrides.js | 4 ++++ .../Data/Browser/profile.default/preferences/extension-overrides.js | 4 ++++ 3 files changed, 12 insertions(+) diff --git a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js index 6ef2c45..a34fb36 100644 --- a/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/linux/Data/Browser/profile.default/preferences/extension-overrides.js @@ -55,3 +55,7 @@ pref("noscript.restrictSubdocScripting", true); pref("noscript.showVolatilePrivatePermissionsToggle", false); pref("noscript.volatilePrivatePermissions", true); pref("noscript.clearClick", 0); +// Workaround for bug 22362: Disable XSS filter for now as it freezes the +// browser in some circumstances. +pref("noscript.filterXGet", false); +pref("noscript.filterXPost", false); diff --git a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js index 6ef2c45..a34fb36 100644 --- a/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/mac/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js @@ -55,3 +55,7 @@ pref("noscript.restrictSubdocScripting", true); pref("noscript.showVolatilePrivatePermissionsToggle", false); pref("noscript.volatilePrivatePermissions", true); pref("noscript.clearClick", 0); +// Workaround for bug 22362: Disable XSS filter for now as it freezes the +// browser in some circumstances. +pref("noscript.filterXGet", false); +pref("noscript.filterXPost", false); diff --git a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js index 6ef2c45..a34fb36 100644 --- a/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js +++ b/Bundle-Data/windows/Data/Browser/profile.default/preferences/extension-overrides.js @@ -55,3 +55,7 @@ pref("noscript.restrictSubdocScripting", true); pref("noscript.showVolatilePrivatePermissionsToggle", false); pref("noscript.volatilePrivatePermissions", true); pref("noscript.clearClick", 0); +// Workaround for bug 22362: Disable XSS filter for now as it freezes the +// browser in some circumstances. +pref("noscript.filterXGet", false); +pref("noscript.filterXPost", false);

1 0

[tor/release-0.2.8] Merge branch 'maint-0.2.5' into maint-0.2.6
by nickm＠torproject.org 08 Jun '17

08 Jun '17

commit eb92d11f53dd2245f4cfd618bde3996e76b498cf Merge: 95a88f7 1a7af74 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 8 14:05:59 2017 -0400 Merge branch 'maint-0.2.5' into maint-0.2.6 "ours" merge to avoid version bump.

1 0

[tor/release-0.2.8] Merge branch 'maint-0.2.4' into maint-0.2.5
by nickm＠torproject.org 08 Jun '17

08 Jun '17

commit 1a7af7470fdd6173f1b876fc6fee2b171174b4ff Merge: f3804f5 ec3ce77 Author: Nick Mathewson <nickm(a)torproject.org> Date: Thu Jun 8 14:05:37 2017 -0400 Merge branch 'maint-0.2.4' into maint-0.2.5 "ours" merge to avoid version bump.

1 0