November 2019 - tor-commits - lists.torproject.org

[torbutton/master] Bug 28746: Remove torbutton isolation and fp prefs sync
by gk＠torproject.org 04 Nov '19

04 Nov '19

commit 938997fa6de418e423186a5fe5c3e8adf4d82a38 Author: Alex Catarineu <acat(a)torproject.org> Date: Sun Jun 9 23:12:43 2019 +0200 Bug 28746: Remove torbutton isolation and fp prefs sync --- chrome/content/torbutton.js | 20 -------------------- 1 file changed, 20 deletions(-) diff --git a/chrome/content/torbutton.js b/chrome/content/torbutton.js index 72636125..1537c54d 100644 --- a/chrome/content/torbutton.js +++ b/chrome/content/torbutton.js @@ -100,11 +100,9 @@ var torbutton_unique_pref_observer = { this.forced_ua = false; m_tb_prefs.addObserver("extensions.torbutton", this, false); - m_tb_prefs.addObserver("network.cookie", this, false); m_tb_prefs.addObserver("browser.privatebrowsing.autostart", this, false); m_tb_prefs.addObserver("javascript", this, false); m_tb_prefs.addObserver("plugin.disable", this, false); - m_tb_prefs.addObserver("privacy.firstparty.isolate", this, false); m_tb_prefs.addObserver("privacy.resistFingerprinting", this, false); m_tb_prefs.addObserver("privacy.resistFingerprinting.letterboxing", this, false); @@ -116,11 +114,9 @@ var torbutton_unique_pref_observer = unregister: function() { m_tb_prefs.removeObserver("extensions.torbutton", this); - m_tb_prefs.removeObserver("network.cookie", this); m_tb_prefs.removeObserver("browser.privatebrowsing.autostart", this); m_tb_prefs.removeObserver("javascript", this); m_tb_prefs.removeObserver("plugin.disable", this); - m_tb_prefs.removeObserver("privacy.firstparty.isolate", this); m_tb_prefs.removeObserver("privacy.resistFingerprinting", this); m_tb_prefs.removeObserver("privacy.resistFingerprinting.letterboxing", this); @@ -175,9 +171,6 @@ var torbutton_unique_pref_observer = case "privacy.resistFingerprinting.letterboxing": torbutton_update_fingerprinting_prefs(); break; - case "privacy.firstparty.isolate": - torbutton_update_isolation_prefs(); - break; } } } @@ -1453,25 +1446,12 @@ function torbutton_update_disk_prefs() { function torbutton_update_fingerprinting_prefs() { var mode = m_tb_prefs.getBoolPref("privacy.resistFingerprinting"); var letterboxing = m_tb_prefs.getBoolPref("privacy.resistFingerprinting.letterboxing", false); - - m_tb_prefs.setBoolPref("webgl.disable-extensions", mode); - m_tb_prefs.setBoolPref("dom.enable_performance", !mode); - m_tb_prefs.setBoolPref("browser.zoom.siteSpecific", !mode); m_tb_prefs.setBoolPref("extensions.torbutton.resize_new_windows", mode && !letterboxing); // Force prefs to be synced to disk Services.prefs.savePrefFile(null); } -function torbutton_update_isolation_prefs() { - let isolate = m_tb_prefs.getBoolPref("privacy.firstparty.isolate"); - - m_tb_prefs.setBoolPref("security.enable_tls_session_tickets", !isolate); - - // Force prefs to be synced to disk - Services.prefs.savePrefFile(null); -} - // This function closes all XUL browser windows except this one. For this // window, it closes all existing tabs and creates one about:blank tab. function torbutton_close_tabs_on_new_identity() {

1 0

[torbutton/master] Remove cookie-jar-selector component
by gk＠torproject.org 04 Nov '19

04 Nov '19

commit 2dfa0e0c9cff7cfad93664e0b0b6cdc05b24b7f2 Author: Alex Catarineu <acat(a)torproject.org> Date: Sat Jun 8 15:10:01 2019 +0200 Remove cookie-jar-selector component --- chrome.manifest | 5 - chrome/content/torbutton.js | 18 +- components/cookie-jar-selector.js | 460 ------------------------------------ components/startup-observer.js | 18 ++ defaults/preferences/preferences.js | 2 - jar.mn | 5 - 6 files changed, 19 insertions(+), 489 deletions(-) diff --git a/chrome.manifest b/chrome.manifest index 13bef661..d1ffe6d6 100644 --- a/chrome.manifest +++ b/chrome.manifest @@ -143,9 +143,6 @@ contract @torproject.org/torbutton-extAppBlocker;1 {3da0269f-fc29-4e9e-a678-c3b1 component {06322def-6fde-4c06-aef6-47ae8e799629} components/startup-observer.js contract @torproject.org/startup-observer;1 {06322def-6fde-4c06-aef6-47ae8e799629} -component {e6204253-b690-4159-bfe8-d4eedab6b3be} components/cookie-jar-selector.js -contract @torproject.org/cookie-jar-selector;1 {e6204253-b690-4159-bfe8-d4eedab6b3be} - component {5d57312b-5d8c-4169-b4af-e80d6a28a72e} components/torCheckService.js contract @torproject.org/torbutton-torCheckService;1 {5d57312b-5d8c-4169-b4af-e80d6a28a72e} @@ -155,8 +152,6 @@ contract @torproject.org/torbutton-logger;1 {f36d72c9-9718-4134-b550-e109638331d component {e33fd6d4-270f-475f-a96f-ff3140279f68} components/domain-isolator.js contract @torproject.org/domain-isolator;1 {e33fd6d4-270f-475f-a96f-ff3140279f68} -category profile-after-change CookieJarSelector @torproject.org/cookie-jar-selector;1 - category profile-after-change StartupObserver @torproject.org/startup-observer;1 category profile-after-change DomainIsolator @torproject.org/domain-isolator;1 category profile-after-change DragDropFilter @torproject.org/torbutton-dragDropFilter;1 diff --git a/chrome/content/torbutton.js b/chrome/content/torbutton.js index 9846b864..72636125 100644 --- a/chrome/content/torbutton.js +++ b/chrome/content/torbutton.js @@ -1039,16 +1039,7 @@ async function torbutton_do_new_identity() { torbutton_log(3, "New Identity: Clearing Cookies and DOM Storage"); - if (m_tb_prefs.getBoolPref("extensions.torbutton.cookie_protections")) { - var selector = Cc["@torproject.org/cookie-jar-selector;1"] - .getService(Ci.nsISupports) - .wrappedJSObject; - // This emits "cookie-changed", "cleared", which kills DOM storage - // and the safe browsing API key - selector.clearUnprotectedCookies("tor"); - } else { - torbutton_clear_cookies(); - } + torbutton_clear_cookies(); torbutton_log(3, "New Identity: Closing open connections"); @@ -1558,13 +1549,6 @@ function torbutton_check_protections() document.getElementById("torbutton-checkForUpdate").hidden = false; } - var cookie_pref = m_tb_prefs.getBoolPref("extensions.torbutton.cookie_protections"); - document.getElementById("torbutton-cookie-protector").disabled = !cookie_pref; - - // XXX: Bug 14632: The cookie dialog is useless in private browsing mode in FF31ESR - // See https://trac.torproject.org/projects/tor/ticket/10353 for more info. - document.getElementById("torbutton-cookie-protector").hidden = m_tb_prefs.getBoolPref("browser.privatebrowsing.autostart"); - if (!m_tb_control_pass || (!m_tb_control_ipc_file && !m_tb_control_port)) { // TODO: Remove the Torbutton menu entry again once we have done our // security control redesign. diff --git a/components/cookie-jar-selector.js b/components/cookie-jar-selector.js deleted file mode 100644 index 79a66e8a..00000000 --- a/components/cookie-jar-selector.js +++ /dev/null @@ -1,460 +0,0 @@ -// Bug 1506 P1: This component is currently only used to protect -// user-selected cookies from deletion. Moreover, all the E4X code is -// deprecated and needs to be replaced with JSON. - -/************************************************************************* - * Cookie Jar Selector (JavaScript XPCOM component) - * Enables selection of separate cookie jars for (more) anonymous browsing. - * Designed as a component of FoxTor, http://cups.cs.cmu.edu/foxtor/ - * Copyright 2006, distributed under the same (open source) license as FoxTor - * - * Contributor(s): - * Collin Jackson <mozilla(a)collinjackson.com> - * - *************************************************************************/ - -// Module specific constants -const kMODULE_NAME = "Cookie Jar Selector"; -const kMODULE_CONTRACTID = "@torproject.org/cookie-jar-selector;1"; -const kMODULE_CID = Components.ID("e6204253-b690-4159-bfe8-d4eedab6b3be"); - -ChromeUtils.import("resource://torbutton/modules/default-prefs.js", {}) - .ensureDefaultPrefs(); - -const { Services } = ChromeUtils.import("resource://gre/modules/Services.jsm"); -const { XPCOMUtils } = ChromeUtils.import("resource://gre/modules/XPCOMUtils.jsm"); - -function Cookie(number,name,value,isDomain,host,rawHost,HttpOnly,path,isSecure,isSession, - expires,isProtected) { - this.number = number; - this.name = name; - this.value = value; - this.isDomain = isDomain; - this.host = host; - this.rawHost = rawHost; - this.isHttpOnly = HttpOnly; - this.path = path; - this.isSecure = isSecure; - this.isSession = isSession; - this.expires = expires; - this.isProtected = isProtected; -} - -function CookieJarSelector() { - this.logger = Cc["@torproject.org/torbutton-logger;1"] - .getService(Ci.nsISupports).wrappedJSObject; - - this.logger.log(3, "Component Load 5: New CookieJarSelector " + kMODULE_CONTRACTID); - - this.prefs = Services.prefs; - - var getProfileFile = function(filename) { - var loc = "ProfD"; // profile directory - var file = Services.dirsvc - .get(loc, Ci.nsIFile) - .clone(); - file.append(filename); - return file; - }; - - this.clearCookies = function() { - try { - Services.cookies.removeAll(); - } catch (e) { - this.logger.log(4, "Cookie clearing exception: " + e); - } - }; - - this._cookiesToJS = function(getSession) { - var cookieManager = Services.cookies; - var cookiesEnum = cookieManager.enumerator; - var cookiesAsJS = []; - var count = 0; - while (cookiesEnum.hasMoreElements()) { - var nextCookie = cookiesEnum.getNext().QueryInterface(Ci.nsICookie2); - var JSCookie = new Cookie(count++, nextCookie.name, nextCookie.value, nextCookie.isDomain, nextCookie.host, - (nextCookie.host.charAt(0)==".") ? nextCookie.host.substring(1,nextCookie.host.length) : nextCookie.host, - nextCookie.isHttpOnly, nextCookie.path, nextCookie.isSecure, nextCookie.isSession, nextCookie.expires, - false); - // Save either session or non-session cookies this time around: - if (JSCookie.isSession && getSession || - !JSCookie.isSession && !getSession) - cookiesAsJS.push(JSCookie); - } - return cookiesAsJS; - }; - - this._loadCookiesFromJS = function(cookiesAsJS) { - if (typeof(cookiesAsJS) == "undefined" || !cookiesAsJS) - return; - - var cookieManager = Services.cookies; - - for (var i = 0; i < cookiesAsJS.length; i++) { - var cookie = cookiesAsJS[i]; - //this.logger.log(2, "Loading cookie: "+host+":"+cname+" until: "+expiry); - cookieManager.add(cookie.host, cookie.path, cookie.name, cookie.value, - cookie.isSecure, cookie.isHttpOnly, cookie.isSession, - cookie.expires); - } - }; - - this._cookiesToFile = function(name) { - var file = getProfileFile("cookies-" + name + ".json"); - var foStream = Cc["@mozilla.org/network/file-output-stream;1"] - .createInstance(Ci.nsIFileOutputStream); - foStream.init(file, 0x02 | 0x08 | 0x20, 0o666, 0); - var data = JSON.stringify(this["cookiesobj-" + name]); - foStream.write(data, data.length); - foStream.close(); - }; - - // Start1506 - this._protectedCookiesToFile = function(name) { - var file = getProfileFile("protected-" + name + ".json"); - var foStream = Cc["@mozilla.org/network/file-output-stream;1"] - .createInstance(Ci.nsIFileOutputStream); - foStream.init(file, 0x02 | 0x08 | 0x20, 0o666, 0); - var data = JSON.stringify(this["protected-" + name]); - foStream.write(data, data.length); - foStream.close(); - }; - - this.addProtectedCookie = function(cookie) { - var name = "tor"; - var cookies = this.getProtectedCookies(name); - - if (typeof(cookies) == "undefined" || cookies == null - || cookies.length == 0) - cookies = []; - - if (cookie.isSession) { - // session cookies get fucked up expiry. Give it 1yr if - // the user wants to save their session cookies - cookie.expires = Date.now()/1000 + 365*24*60*60; - } - - cookies.push(cookie); - this["protected-" + name] = cookies; - - if (!this.prefs.getBoolPref("browser.privatebrowsing.autostart")) { - // save protected cookies to file - this._protectedCookiesToFile(name); - } else { - try { - var file = getProfileFile("protected-" + name + ".json"); - if (file.exists()) { - file.remove(false); - } - } catch(e) { - this.logger.log(5, "Can't remove "+name+" cookie file: "+e); - } - } - }; - - this.getProtectedCookies = function(name) { - var file = getProfileFile("protected-" + name + ".json"); - if (!file.exists()) { - return this["protected-" + name]; - } - var data = ""; - var fstream = Cc["@mozilla.org/network/file-input-stream;1"] - .createInstance(Ci.nsIFileInputStream); - var sstream = Cc["@mozilla.org/scriptableinputstream;1"] - .createInstance(Ci.nsIScriptableInputStream); - fstream.init(file, -1, 0, 0); - sstream.init(fstream); - - var str = sstream.read(4096); - while (str.length > 0) { - data += str; - str = sstream.read(4096); - } - - sstream.close(); - fstream.close(); - try { - var ret = JSON.parse(data); - } catch(e) { // file has been corrupted; XXX: handle error differently - this.logger.log(5, "Cookies corrupted: "+e); - try { - file.remove(false); //XXX: is it necessary to remove it ? - var ret = null; - } catch(e2) { - this.logger.log(5, "Can't remove file "+e); - } - } - return ret; - }; - - this.protectCookies = function(cookies) { - var name = "tor"; - this._writeProtectCookies(cookies,name); - if (!this.prefs.getBoolPref("browser.privatebrowsing.autostart")) { - // save protected cookies to file - this._protectedCookiesToFile(name); - } else { - try { - var file = getProfileFile("protected-" + name + ".json"); - if (file.exists()) { - file.remove(false); - } - } catch(e) { - this.logger.log(5, "Can't remove "+name+" cookie file: "+e); - } - } - }; - - this._writeProtectCookies = function(cookies, name) { - for (var i = 0; i < cookies.length; i++) { - if (cookies[i].isSession) { - // session cookies get fucked up expiry. Give it 1yr if - // the user wants to save their session cookies - cookies[i].expires = Date.now()/1000 + 365*24*60*60; - } - cookies[i].isProtected = true; - } - this["protected-" + name] = cookies; - }; - // End1506 - - this._cookiesFromFile = function(name) { - var file = getProfileFile("cookies-" + name + ".json"); - if (!file.exists()) - return null; - var data = ""; - var fstream = Cc["@mozilla.org/network/file-input-stream;1"] - .createInstance(Ci.nsIFileInputStream); - var sstream = Cc["@mozilla.org/scriptableinputstream;1"] - .createInstance(Ci.nsIScriptableInputStream); - fstream.init(file, -1, 0, 0); - sstream.init(fstream); - - var str = sstream.read(4096); - while (str.length > 0) { - data += str; - str = sstream.read(4096); - } - - sstream.close(); - fstream.close(); - try { - var ret = JSON.parse(data); - } catch(e) { // file has been corrupted; XXX: handle error differently - this.logger.log(5, "Cookies corrupted: "+e); - try { - file.remove(false); //XXX: is it necessary to remove it ? - var ret = null; - } catch(e2) { - this.logger.log(5, "Can't remove file "+e); - } - } - return ret; - }; - - this.saveCookies = function(name) { - // transition removes old tor-style cookie file - try { - var oldCookieFile = getProfileFile("cookies-"+name+".xml"); - if (oldCookieFile.exists()) { - oldCookieFile.remove(false); - } - } catch(e) { - this.logger.log(5, "Can't remove old "+name+" file "+e); - } - - // save cookies to JS objects - this["session-cookiesobj-" + name] = this._cookiesToJS(true); - this["cookiesobj-" + name] = this._cookiesToJS(false); - - if (!this.prefs.getBoolPref("browser.privatebrowsing.autostart")) { - // save cookies to file - this._cookiesToFile(name); - } else { - // Clear the old file - try { - var file = getProfileFile("cookies-" + name + ".json"); - if (file.exists()) { - file.remove(false); - } - } catch(e) { - this.logger.log(5, "Can't remove "+name+" cookie file "+e); - } - } - - // ok, everything's fine - this.logger.log(2, "Cookies saved"); - }; - - // Start1506 - this.clearUnprotectedCookies = function(name) { - try { - var protCookies = this.getProtectedCookies(name); - if (protCookies == null || typeof(protCookies) == "undefined" - || protCookies.length == 0) { - //file does not exist - no protected cookies. Clear them all. - this.logger.log(3, "No protected cookies. Clearing all cookies."); - this.clearCookies(); - return; - } - var cookiemanager = Services.cookies; - - var enumerator = cookiemanager.enumerator; - var count = 0; - var protcookie = false; - - while (enumerator.hasMoreElements()) { - var nextCookie = enumerator.getNext(); - if (!nextCookie) break; - - nextCookie = nextCookie.QueryInterface(Ci.nsICookie); - for (var i = 0; i < protCookies.length; i++) { - protcookie = protcookie || (nextCookie.host == protCookies[i].host && - nextCookie.name == protCookies[i].name && - nextCookie.path == protCookies[i].path); - } - - if (!protcookie) { - cookiemanager.remove(nextCookie.host, - nextCookie.name, - nextCookie.path, false); - } else { - this.logger.log(3, "Found protected cookie for "+nextCookie.host); - } - protcookie = false; - } - // Emit cookie-changed event. This instructs other components to clear their identifiers - // (Specifically DOM storage and safe browsing, but possibly others) - var obsSvc = Services.obs; - obsSvc.notifyObservers(this, "cookie-changed", "cleared"); - } catch (e) { - this.logger.log(5, "Error deleting unprotected cookies: " + e); - } - }; - // End1506 - - this.loadCookies = function(name, deleteSavedCookieJar) { - // remove cookies before loading old ones - this.clearCookies(); - - if (!this.prefs.getBoolPref("browser.privatebrowsing.autostart")) { - // load cookies from file - this["cookiesobj-" + name] = this._cookiesFromFile(name); - } - - //delete file if needed - if (deleteSavedCookieJar) { - try { - var file = getProfileFile("cookies-" + name + ".json"); - if (file.exists()) - file.remove(false); - } catch(e) { - this.logger.log(5, "Can't remove saved "+name+" file "+e); - } - } - - // load cookies from JS objects - this._loadCookiesFromJS(this["cookiesobj-"+name]); - this._loadCookiesFromJS(this["session-cookiesobj-"+name]); - - // XXX: send a profile-do-change event? - - // ok, everything's fine - this.logger.log(2, "Cookies reloaded"); - }; - - // This JSObject is exported directly to chrome - this.wrappedJSObject = this; - - // This timer is done so that in the event of a crash, we at least - // have recent cookies in a jar to reload from. - var jarThis = this; - this.timerCallback = { - cookie_changed: false, - - QueryInterface: ChromeUtils.generateQI(["nsITimer"]), - notify() { - // this refers to timerCallback object. use jarThis to reference - // CookieJarSelector object. - if(!this.cookie_changed) { - jarThis.logger.log(2, "Got timer update, but no cookie change."); - return; - } - jarThis.logger.log(3, "Got timer update. Saving changed cookies to jar."); - - this.cookie_changed = false; - - jarThis.saveCookies("tor"); - jarThis.logger.log(2, "Timer done. Cookies saved"); - } - }; - -} - -const nsIClassInfo = Ci.nsIClassInfo; -const nsIObserver = Ci.nsIObserver; -const nsITimer = Ci.nsITimer; - -// Start1506: You may or may not care about this: -CookieJarSelector.prototype = -{ - QueryInterface: ChromeUtils.generateQI(["nsIClassInfo", "nsIObserver"]), - - wrappedJSObject: null, // Initialized by constructor - - // make this an nsIClassInfo object - flags: nsIClassInfo.DOM_OBJECT, - - _xpcom_categories: [{category:"profile-after-change"}], - classID: kMODULE_CID, - contractID: kMODULE_CONTRACTID, - classDescription: "CookieJarSelector", - - // method of nsIClassInfo - getInterfaces: function(count) { - var interfaceList = [nsIClassInfo]; - count.value = interfaceList.length; - return interfaceList; - }, - - // method of nsIClassInfo - getHelperForLanguage: function(count) { return null; }, - - // method of nsIObserver - observe : function(aSubject, aTopic, aData) { - switch(aTopic) { - case "cookie-changed": - var prefs = Services.prefs; - this.timerCallback.cookie_changed = true; - - if (aData == "added" - && prefs.getBoolPref("extensions.torbutton.cookie_auto_protect") - && !prefs.getBoolPref("extensions.torbutton.tor_memory_jar")) { - this.addProtectedCookie(aSubject.QueryInterface(Ci.nsICookie2));// protect the new cookie! - } - break; - case "profile-after-change": - var obsSvc = Services.obs; - obsSvc.addObserver(this, "cookie-changed"); - // after profil loading, initialize a timer to call timerCallback - // at a specified interval - this.timer.initWithCallback(this.timerCallback, 60 * 1000, nsITimer.TYPE_REPEATING_SLACK); // 1 minute - this.logger.log(3, "Cookie jar selector got profile-after-change"); - break; - } - }, - - timer: Cc["@mozilla.org/timer;1"].createInstance(nsITimer), - -} - -/** -* XPCOMUtils.generateNSGetFactory was introduced in Mozilla 2 (Firefox 4). -* XPCOMUtils.generateNSGetModule is for Mozilla 1.9.2 (Firefox 3.6). -*/ -if (XPCOMUtils.generateNSGetFactory) - var NSGetFactory = XPCOMUtils.generateNSGetFactory([CookieJarSelector]); -else - var NSGetModule = XPCOMUtils.generateNSGetModule([CookieJarSelector]); - -// End1506 diff --git a/components/startup-observer.js b/components/startup-observer.js index bf2f0f48..008134f8 100644 --- a/components/startup-observer.js +++ b/components/startup-observer.js @@ -29,6 +29,22 @@ const kMODULE_NAME = "Startup"; const kMODULE_CONTRACTID = "@torproject.org/startup-observer;1"; const kMODULE_CID = Components.ID("06322def-6fde-4c06-aef6-47ae8e799629"); +function cleanupCookies() { + const migratedPref = "extensions.torbutton.cookiejar_migrated"; + if (!Services.prefs.getBoolPref(migratedPref, false)) { + // Cleanup stored cookie-jar-selector json files + const profileFolder = Services.dirsvc.get("ProfD", Ci.nsIFile).clone(); + for (const file of profileFolder.directoryEntries) { + if (file.leafName.match(/^(cookies|protected)-.*[.]json$/)) { + try { + file.remove(false); + } catch (e) {} + } + } + Services.prefs.setBoolPref(migratedPref, true); + } +} + function StartupObserver() { this.logger = Cc["@torproject.org/torbutton-logger;1"] .getService(Ci.nsISupports).wrappedJSObject; @@ -62,6 +78,8 @@ function StartupObserver() { this.logger.log(4, "Early proxy change failed. Will try again at profile load. Error: "+e); } + cleanupCookies(); + // Using all possible locales so that we do not have to change this list every time we support // a new one. const allLocales = [ diff --git a/defaults/preferences/preferences.js b/defaults/preferences/preferences.js index acea0a3d..2d1bd99f 100644 --- a/defaults/preferences/preferences.js +++ b/defaults/preferences/preferences.js @@ -26,8 +26,6 @@ pref("extensions.torbutton.inserted_security_level",false); pref("extensions.torbutton.maximize_warnings_remaining", 3); // Security prefs: -pref("extensions.torbutton.cookie_protections",true); -pref("extensions.torbutton.cookie_auto_protect",false); pref("extensions.torbutton.clear_http_auth",true); pref("extensions.torbutton.close_newnym",true); pref("extensions.torbutton.resize_new_windows",false); diff --git a/jar.mn b/jar.mn index 6697b543..8b6cbcf7 100644 --- a/jar.mn +++ b/jar.mn @@ -97,9 +97,6 @@ torbutton.jar: % component {06322def-6fde-4c06-aef6-47ae8e799629} %components/startup-observer.js % contract @torproject.org/startup-observer;1 {06322def-6fde-4c06-aef6-47ae8e799629} -% component {e6204253-b690-4159-bfe8-d4eedab6b3be} %components/cookie-jar-selector.js -% contract @torproject.org/cookie-jar-selector;1 {e6204253-b690-4159-bfe8-d4eedab6b3be} - % component {5d57312b-5d8c-4169-b4af-e80d6a28a72e} %components/torCheckService.js % contract @torproject.org/torbutton-torCheckService;1 {5d57312b-5d8c-4169-b4af-e80d6a28a72e} @@ -109,8 +106,6 @@ torbutton.jar: % component {e33fd6d4-270f-475f-a96f-ff3140279f68} %components/domain-isolator.js % contract @torproject.org/domain-isolator;1 {e33fd6d4-270f-475f-a96f-ff3140279f68} -% category profile-after-change CookieJarSelector @torproject.org/cookie-jar-selector;1 - % category profile-after-change StartupObserver @torproject.org/startup-observer;1 % category profile-after-change DomainIsolator @torproject.org/domain-isolator;1 % category profile-after-change DragDropFilter @torproject.org/torbutton-dragDropFilter;1

1 0

[metrics-web/master] Add @type annotation for HS v3.
by karsten＠torproject.org 04 Nov '19

04 Nov '19

commit 66a657078b697e719cd9f5863fef62bdcb4d890a Author: Karsten Loesing <karsten.loesing(a)gmx.net> Date: Mon Nov 4 12:24:38 2019 +0100 Add @type annotation for HS v3. Also update to latest metrics-base/-lib. Implements #31481. --- src/build | 2 +- src/main/resources/web/jsps/collector.jsp | 18 ++++++++++++++++++ src/submods/metrics-lib | 2 +- 3 files changed, 20 insertions(+), 2 deletions(-) diff --git a/src/build b/src/build index 62a964a..eb16cb3 160000 --- a/src/build +++ b/src/build @@ -1 +1 @@ -Subproject commit 62a964a7702086ca6ba0e2307809d4f983163b47 +Subproject commit eb16cb359db41722e6089bafb1e26808df4338df diff --git a/src/main/resources/web/jsps/collector.jsp b/src/main/resources/web/jsps/collector.jsp index 102bcab..3bb0768 100644 --- a/src/main/resources/web/jsps/collector.jsp +++ b/src/main/resources/web/jsps/collector.jsp @@ -152,6 +152,11 @@ <td><code>@type hidden-service-descriptor 1.0</code></td> <td></td> </tr> +<tr> + <td><a href="#type-hidden-service-descriptor-3">Hidden Service Descriptors v3</a></td> + <td><code>@type hidden-service-descriptor-3 1.0</code></td> + <td></td> +</tr> <tr class="tableHeadline"> <td colspan="3"><b><a href="#bridge-pool-assignments">BridgeDB's Bridge Pool Assignments</a></b></td> </tr> @@ -553,6 +558,19 @@ Despite the version number being 1.0, these descriptors are part of the version 2 hidden service protocol. </p> +<h3 id="type-hidden-service-descriptor-3" class="hover">Hidden Service Descriptors v3 +<small><code>@type hidden-service-descriptor-3 1.0</code></small> +<a href="#type-hidden-service-descriptor-3" class="anchor">#</a> +</h3> + +<p> +Hidden service descriptors contain details required to connect to version +3 hidden service. +Despite the version number being 1.0, these descriptors are part of the +<a href="https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt">version +3 hidden service protocol</a>. +</p> + <br> <h2 id="bridge-pool-assignments" class="hover">BridgeDB's Bridge Pool Assignments <a href="#bridge-pool-assignments" class="anchor">#</a> diff --git a/src/submods/metrics-lib b/src/submods/metrics-lib index 8e2f671..8763af4 160000 --- a/src/submods/metrics-lib +++ b/src/submods/metrics-lib @@ -1 +1 @@ -Subproject commit 8e2f67107f1e6add0db3fa209cb89c3b69f7bf06 +Subproject commit 8763af44465445b2257f9740d4ce341f8334eead

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 04 Nov '19

04 Nov '19

commit 3e84db193ac1dd3fedcd279101e1bda2503ac8a2 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 4 09:23:24 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+nl.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/contents+nl.po b/contents+nl.po index 37ef7def4..f8103ceeb 100644 --- a/contents+nl.po +++ b/contents+nl.po @@ -8211,7 +8211,7 @@ msgstr "" #: lego/templates/banner.html:2 lego/templates/banner.html:4 #: templates/banner.html:2 templates/banner.html:4 msgid "Close banner" -msgstr "Banier sluiten" +msgstr "Banner sluiten" #: lego/templates/banner.html:10 templates/banner.html:10 msgid "Tracking, surveillance, and censorship are widespread online."

1 0

[tor-browser-build/master] Picking up latest tor alpha version
by gk＠torproject.org 04 Nov '19

04 Nov '19

commit 8cfaa5111b6cac7ea8788d1dd2e1b96b488a970c Author: Georg Koppen <gk(a)torproject.org> Date: Mon Nov 4 07:02:56 2019 +0000 Picking up latest tor alpha version --- projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt | 3 ++- rbm.conf | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt index 6e82c81..6240fdc 100644 --- a/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt +++ b/projects/tor-browser/Bundle-Data/Docs/ChangeLog.txt @@ -1,4 +1,4 @@ -Tor Browser 9.5a2 -- November 5 2019 +Tor Browser 9.5a2 -- November 6 2019 * All Platforms * Update NoScript to 11.0.4 * Bug 21004: Don't block JavaScript on onion services on medium security @@ -9,6 +9,7 @@ Tor Browser 9.5a2 -- November 5 2019 * Bug 32250: Backport enhanced letterboxing support (bug 1546832 and 1556017) * Bug 27268: Preferences clean-up * Windows + OS X + Linux + * Update Tor to 0.4.2.3-alpha * Update Tor Launcher to 0.2.20.2 * Bug 32164: Trim each received log line from tor * Translations update diff --git a/rbm.conf b/rbm.conf index 76ef27f..8bd5805 100644 --- a/rbm.conf +++ b/rbm.conf @@ -25,7 +25,7 @@ buildconf: var: torbrowser_version: '9.5a2' - torbrowser_build: 'build2' + torbrowser_build: 'build3' torbrowser_incremental_from: - 9.5a1 project_name: tor-browser

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 04 Nov '19

04 Nov '19

commit cedd06a8b88c8fc0695de7ee27951763936b6778 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 4 04:53:10 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+tr.po | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/contents+tr.po b/contents+tr.po index c67641a9a..6e2ac9c9d 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -5812,7 +5812,7 @@ msgstr "Bazı trafikleri süzen çıkış aktarıcıları bu kapsam dışında k #: https//support.torproject.org/operators/outgoing-firewall/ #: (content/operators/outgoing-firewall/contents+en.lrquestion.description) msgid "Tor promotes free network access without interference." -msgstr "" +msgstr "Tor, herhangi bir engelleme olmadan özgür ağ erişimini hedefler." #: https//support.torproject.org/operators/outgoing-firewall/ #: (content/operators/outgoing-firewall/contents+en.lrquestion.description) @@ -5820,6 +5820,8 @@ msgid "" "Exit relays must not filter the traffic that passes through them to the " "internet." msgstr "" +"Çıkış aktarıcılarının, üzerlerinden geçip İnternete çıkan trafiği süzmemesi " +"gerekir. " #: https//support.torproject.org/operators/outgoing-firewall/ #: (content/operators/outgoing-firewall/contents+en.lrquestion.description) @@ -5828,6 +5830,9 @@ msgid "" "[BadExit](https://community.torproject.org/relay/community-resources/bad-" "relays/) flag once detected." msgstr "" +"Trafiği süzdüğü anlaşılan çıkış aktarıcıları [Kötü Çıkış " +"(BadExit)](https://community.torproject.org/relay/community-resources/bad-" +"relays/) aktarıcısı olarak işaretlenir." #: https//support.torproject.org/operators/packaged-tor/ #: (content/operators/packaged-tor/contents+en.lrquestion.title)

1 0

[translation/liveusb-creator_completed] https://gitweb.torproject.org/translation.git/commit/?h=liveusb-creator_completed
by translation＠torproject.org 04 Nov '19

04 Nov '19

commit 535c3876454b05dfd5f3b8093e9efac9e9419b41 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 4 04:46:18 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=liveusb-creator_com… --- es/es.po | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/es/es.po b/es/es.po index 75e78e7d5..6b9cfc7ad 100644 --- a/es/es.po +++ b/es/es.po @@ -3,7 +3,7 @@ # This file is distributed under the same license as the PACKAGE package. # # Translators: -# Adolfo Jayme-Barrientos, 2014 +# Fito JB, 2014 # Adrián Sandí <asandi.sagot(a)gmail.com>, 2013 # dark_yoshi <angelargi(a)yahoo.es>, 2014 # BL <tresemes3(a)gmail.com>, 2014

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 04 Nov '19

04 Nov '19

commit 346c23a84db95f695cc46a60edb9bb81ec0360df Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 4 04:23:07 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+tr.po | 56 +++++++++++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 53 insertions(+), 3 deletions(-) diff --git a/contents+tr.po b/contents+tr.po index c7d856557..c67641a9a 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -5444,16 +5444,23 @@ msgid "" "Understanding and Improving Entry Guard Selection in " "Tor](http://freehaven.net/anonbib/#wpes12-cogs)." msgstr "" +"Ayrıntılı bilgi almak için [şu günlük " +"yazısına](https://blog.torproject.org/blog/lifecycle-of-a-new-relay) ya da " +"[Changing of the Guards: A Framework for Understanding and Improving Entry " +"Guard Selection in Tor](http://freehaven.net/anonbib/#wpes12-cogs) " +"makalesine bakabilirsiniz." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.title) msgid "How do offline ed25519 identity keys work? What do I need to know?" msgstr "" +"Çevrimdışı ed25519 kimlik doğrulama anahtarları nasıl çalışır? Neleri bilmem" +" gerekir?" #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) msgid "In simple words, it works like this:" -msgstr "" +msgstr "Basit olarak çalışması şöyle anlatılabilir:" #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5461,6 +5468,8 @@ msgid "" "* There is a master ed25519 identity secret key file named " "\"ed25519_master_id_secret_key\"." msgstr "" +"* \"ed25519_master_id_secret_key\" olarak adlandırılmış bir ana ed25519 " +"kimlik doğrulama anahtarı vardır." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5468,6 +5477,9 @@ msgid "" "This is the most important one, so make sure you keep a backup in a secure " "place - the file is sensitive and should be protected." msgstr "" +"Bu en önemlisidir. O yüzden güvenli bir yere yedeğini aldığınızdan emin " +"olun. Bu dosyanın başkalarının eline geçmemesi önemlidir ve korunması " +"gerekir." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5475,6 +5487,8 @@ msgid "" "Tor could encrypt it for you if you generate it manually and enter a " "password when asked." msgstr "" +"Anahtarı el ile üretip, sorulduğunda bir parola yazarsanız Tor bu dosyayı " +"sizin için şifreleyebilir." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5482,6 +5496,8 @@ msgid "" "* A medium term signing key named \"ed25519_signing_secret_key\" is " "generated for Tor to use." msgstr "" +"* Tor tarafından kullanılması için \"ed25519_signing_secret_key\" orta " +"vadeli imzalama anahtarı üretilir." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5490,6 +5506,9 @@ msgid "" "signed by the master identity secret key and confirms that the medium term " "signing key is valid for a certain period of time." msgstr "" +"Ayrıca ana kimlik doğrulama anahtarı tarafından imzalanmış " +"\"ed25519_signing_cert\" adında bir sertifika üretilir ve orta vadeli " +"imzalama anahtarının belirli bir süre için geçerli olması sağlanır." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5497,6 +5516,9 @@ msgid "" "The default validity is 30 days, but this can be customized by setting " "\"SigningKeyLifetime N days|weeks|months\" in torrc." msgstr "" +"Varsayılan geçerlilik süresi 30 gündür. Bu süre torrc dosyasındaki " +"\"SigningKeyLifetime N days|weeks|months\" ayarı kullanılarak " +"değiştirilebilir." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5504,6 +5526,8 @@ msgid "" "* There is also a master public key named \"ed25519_master_id_public_key, " "which is the actual identity of the relay advertised in the network." msgstr "" +"* Ayrıca aktarıcının ağa yayınlanan gerçek kimliği olan " +"\"ed25519_master_id_public_key\" adında herkese açık bir ana anahtar vardır." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5511,6 +5535,8 @@ msgid "" "This one is not sensitive and can be easily computed from " "\"ed5519_master_id_secret_key\"." msgstr "" +"Bu anahtarın başkalarının eline geçmesi önemli değildir ve " +"\"ed5519_master_id_secret_key\" anahtarından kolayca hesaplanabilir." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5519,6 +5545,10 @@ msgid "" "long as they are valid, so the master identity secret key can be kept " "outside DataDirectory/keys, on a storage media or a different computer." msgstr "" +"Geçerli oldukları sürece, Tor tarafından yalnız orta vadeli imzalama " +"anahtarına ve sertifikaya erişilmesi gereklidir. Bu nedenle ana kimlik " +"doğrulama gizli anahtarı DataDirectory/keys klasörü dışına alınarak başka " +"bir bilgisayarın depolama alanında ya da bilgisayarda tutulabilir." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5527,11 +5557,15 @@ msgid "" "before they expire otherwise the Tor process on the relay will exit upon " "expiration." msgstr "" +"Orta vadeli imzalama anahtarını ve sertifikayı süresi dolmadan önce el ile " +"yenilemeniz gerekir. Yoksa süre dolduktan sonra aktarıcı üzerindeki Tor " +"işleminden çıkılır." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) msgid "This feature is optional, you don't need to use it unless you want to." msgstr "" +"Bu özellik isteğe bağlıdır. Kullanmak istemiyorsanız kullanmayabilirsiniz." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5541,6 +5575,11 @@ msgid "" "leave the master identity secret key in DataDirectory/keys, just make a " "backup in case you'll need to reinstall it." msgstr "" +"Orta vadeli imzalama anahtarı yenileme işlemini düzenli olarak el ile yapmak" +" yerine aktarıcınızın dokunulmadan daha uzun süre çalışmasını istiyorsanız, " +"ana kimlik doğrulama gizli anahtarını DataDirectory/keys klasöründe " +"bırakabilirsiniz. Yalnız yeniden kurabilmek için anahtarın bir yedeğini " +"almayı unutmayın." #: https//support.torproject.org/operators/offline-ed25519/ #: (content/operators/offline-ed25519/contents+en.lrquestion.description) @@ -5549,6 +5588,9 @@ msgid "" "guide](https://trac.torproject.org/projects/tor/wiki/doc/TorRelaySecurity/O…" " on the topic." msgstr "" +"Bu özelliği kullanmak isterseniz, bu konudaki [ayrıntılı " +"rehber](https://trac.torproject.org/projects/tor/wiki/doc/TorRelaySecurity/…" +" bölümüne bakabilirsiniz." #: https//support.torproject.org/operators/operators-1/ #: (content/operators/operators-1/contents+en.lrquestion.title) @@ -5738,7 +5780,7 @@ msgstr "" #: https//support.torproject.org/operators/outgoing-firewall/ #: (content/operators/outgoing-firewall/contents+en.lrquestion.title) msgid "How should I configure the outgoing filters on my relay?" -msgstr "" +msgstr "Aktarıcım üzerindeki çıkış süzgeçlerini nasıl yapılandırmalıyım?" #: https//support.torproject.org/operators/outgoing-firewall/ #: (content/operators/outgoing-firewall/contents+en.lrquestion.description) @@ -5746,6 +5788,8 @@ msgid "" "All outgoing connections must be allowed, so that each relay can communicate" " with every other relay." msgstr "" +"Tüm çıkış bağlantılarına izin verilmelidir. Böylece her aktarıcı diğer " +"aktarıcıların tümü ile iletişim kurabilir." #: https//support.torproject.org/operators/outgoing-firewall/ #: (content/operators/outgoing-firewall/contents+en.lrquestion.description) @@ -5754,12 +5798,16 @@ msgid "" " common carrier regulations that prevent internet service providers from " "being held liable for third-party content that passes through their network." msgstr "" +"Birçok yargı alanında, Tor aktarıcı işletmecileri, internet servis " +"sağlayıcılarının ağlarından geçen üçüncü taraf içeriğinden sorumlu " +"tutulmalarını önleyen ortak taşıyıcı düzenlemeleri ile yasal olarak " +"korunmaktadır." #: https//support.torproject.org/operators/outgoing-firewall/ #: (content/operators/outgoing-firewall/contents+en.lrquestion.description) msgid "" "Exit relays that filter some traffic would likely forfeit those protections." -msgstr "" +msgstr "Bazı trafikleri süzen çıkış aktarıcıları bu kapsam dışında kalabilir." #: https//support.torproject.org/operators/outgoing-firewall/ #: (content/operators/outgoing-firewall/contents+en.lrquestion.description) @@ -6138,6 +6186,8 @@ msgid "" "* If you are looking to run a relay with minimal effort, fast guard relays " "are also very useful" msgstr "" +"* En az çaba ile bir aktarıcı işletmek istiyorsanız, hızlı koruma " +"aktarıcıları da çok kullanışlıdır" #: https//support.torproject.org/operators/what-type-of-relays-are-most-needed/ #: (content/operators/what-type-of-relays-are-most-needed/contents+en.lrquestion.description)

1 0

[translation/support-portal] https://gitweb.torproject.org/translation.git/commit/?h=support-portal
by translation＠torproject.org 04 Nov '19

04 Nov '19

commit 7a472df4d54d6ec3cbe1db5fb4fcac9b4c4de820 Author: Translation commit bot <translation(a)torproject.org> Date: Mon Nov 4 03:53:01 2019 +0000 https://gitweb.torproject.org/translation.git/commit/?h=support-portal --- contents+tr.po | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/contents+tr.po b/contents+tr.po index b15e5ec1a..c7d856557 100644 --- a/contents+tr.po +++ b/contents+tr.po @@ -5422,6 +5422,8 @@ msgstr "" #: (content/operators/my-relay-got-guard-flag-traffic-dropped/contents+en.lrquestion.title) msgid "My relay recently got the Guard flag and traffic dropped by half." msgstr "" +"Aktarıcım geçenlerde Koruma aktarıcısı olarak işaretlendi ve trafiği yarıya " +"düştü." #: https//support.torproject.org/operators/my-relay-got-guard-flag-traffic-dropped/ #: (content/operators/my-relay-got-guard-flag-traffic-dropped/contents+en.lrquestion.description) @@ -5430,6 +5432,9 @@ msgid "" "not many clients have rotated their existing guards out to use it as a guard" " yet." msgstr "" +"Artık bir koruma aktarıcısı olduğundan, diğer konumlardaki istemciler " +"aktarıcınızı daha az kullanıyor, ancak çoğu kullanıcı henüz var olan koruma " +"aktarıcılarını değiştirmemiş." #: https//support.torproject.org/operators/my-relay-got-guard-flag-traffic-dropped/ #: (content/operators/my-relay-got-guard-flag-traffic-dropped/contents+en.lrquestion.description)

1 0

[tor-browser-build/master] Bump tor version for next alpha release
by gk＠torproject.org 03 Nov '19

03 Nov '19

commit 3dcafda784e82992408a634b788ba485166e6b5d Author: Georg Koppen <gk(a)torproject.org> Date: Sun Nov 3 21:07:52 2019 +0000 Bump tor version for next alpha release --- projects/tor/config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/projects/tor/config b/projects/tor/config index ae2ef16..97e93fb 100644 --- a/projects/tor/config +++ b/projects/tor/config @@ -1,6 +1,6 @@ # vim: filetype=yaml sw=2 filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %]' -version: 0.4.2.2-alpha +version: 0.4.2.3-alpha git_hash: 'tor-[% c("version") %]' git_url: https://git.torproject.org/tor.git git_submodule: 1

1 0