August 2025 - tor-commits - lists.torproject.org

[Git][tpo/applications/tor-browser][base-browser-140.1.0esr-15.0-1] 2 commits: fixup! BB 40925: Implemented the Security Level component
by Pier Angelo Vendrame (＠pierov) 11 Aug '25

11 Aug '25

Pier Angelo Vendrame pushed to branch base-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 53783e5a by Pier Angelo Vendrame at 2025-08-11T11:38:18+02:00 fixup! BB 40925: Implemented the Security Level component BB 44090: Add CSP to our XUL XHTML documents. - - - - - 2c208832 by Pier Angelo Vendrame at 2025-08-11T11:38:20+02:00 fixup! BB 40926: Implemented the New Identity feature BB 44090: Add CSP to our XUL XHTML documents. - - - - - 2 changed files: - browser/components/newidentity/content/newIdentityDialog.xhtml - browser/components/securitylevel/content/securityLevelDialog.xhtml Changes: ===================================== browser/components/newidentity/content/newIdentityDialog.xhtml ===================================== @@ -6,6 +6,8 @@  +<?csp default-src chrome: ?> + <window id="newIdentityDialogWindow" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" ===================================== browser/components/securitylevel/content/securityLevelDialog.xhtml ===================================== @@ -1,5 +1,7 @@ <?xml version="1.0"?> +<?csp default-src chrome: ?> + <window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" xmlns:html="http://www.w3.org/1999/xhtml" View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/cdc07e… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/cdc07e… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.1.0esr-15.0-1] 2 commits: fixup! BB 40925: Implemented the Security Level component
by Pier Angelo Vendrame (＠pierov) 11 Aug '25

11 Aug '25

Pier Angelo Vendrame pushed to branch mullvad-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: ab307a98 by Pier Angelo Vendrame at 2025-08-11T11:37:38+02:00 fixup! BB 40925: Implemented the Security Level component BB 44090: Add CSP to our XUL XHTML documents. - - - - - 0fcb2e0f by Pier Angelo Vendrame at 2025-08-11T11:37:40+02:00 fixup! BB 40926: Implemented the New Identity feature BB 44090: Add CSP to our XUL XHTML documents. - - - - - 2 changed files: - browser/components/newidentity/content/newIdentityDialog.xhtml - browser/components/securitylevel/content/securityLevelDialog.xhtml Changes: ===================================== browser/components/newidentity/content/newIdentityDialog.xhtml ===================================== @@ -6,6 +6,8 @@  +<?csp default-src chrome: ?> + <window id="newIdentityDialogWindow" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" ===================================== browser/components/securitylevel/content/securityLevelDialog.xhtml ===================================== @@ -1,5 +1,7 @@ <?xml version="1.0"?> +<?csp default-src chrome: ?> + <window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" xmlns:html="http://www.w3.org/1999/xhtml" View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/5a… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/5a… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.1.0esr-15.0-1] 4 commits: fixup! BB 40925: Implemented the Security Level component
by Pier Angelo Vendrame (＠pierov) 11 Aug '25

11 Aug '25

Pier Angelo Vendrame pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: d68f1d0a by Pier Angelo Vendrame at 2025-08-11T11:31:57+02:00 fixup! BB 40925: Implemented the Security Level component BB 44090: Add CSP to our XUL XHTML documents. - - - - - 7a4c6fc9 by Pier Angelo Vendrame at 2025-08-11T11:32:06+02:00 fixup! BB 40926: Implemented the New Identity feature BB 44090: Add CSP to our XUL XHTML documents. - - - - - bdec800c by Pier Angelo Vendrame at 2025-08-11T11:32:06+02:00 fixup! TB 30237: Add v3 onion services client authentication prompt BB 44090: Add CSP to our XUL XHTML documents. - - - - - 70a4871e by Pier Angelo Vendrame at 2025-08-11T11:32:07+02:00 fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection BB 44090: Add CSP to our XUL XHTML documents. - - - - - 11 changed files: - browser/components/newidentity/content/newIdentityDialog.xhtml - browser/components/onionservices/content/savedKeysDialog.xhtml - browser/components/securitylevel/content/securityLevelDialog.xhtml - browser/components/torpreferences/content/bridgeQrDialog.xhtml - browser/components/torpreferences/content/builtinBridgeDialog.xhtml - browser/components/torpreferences/content/connectionSettingsDialog.xhtml - browser/components/torpreferences/content/loxInviteDialog.xhtml - browser/components/torpreferences/content/provideBridgeDialog.xhtml - browser/components/torpreferences/content/requestBridgeDialog.xhtml - browser/components/torpreferences/content/torLogDialog.xhtml - dom/security/nsContentSecurityUtils.cpp Changes: ===================================== browser/components/newidentity/content/newIdentityDialog.xhtml ===================================== @@ -6,6 +6,8 @@  +<?csp default-src chrome: ?> + <window id="newIdentityDialogWindow" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" ===================================== browser/components/onionservices/content/savedKeysDialog.xhtml ===================================== @@ -1,6 +1,8 @@ <?xml version="1.0"?>  +<?csp default-src chrome: ?> + <window id="onionservices-savedkeys-dialog" windowtype="OnionServices:SavedKeys" ===================================== browser/components/securitylevel/content/securityLevelDialog.xhtml ===================================== @@ -1,5 +1,7 @@ <?xml version="1.0"?> +<?csp default-src chrome: ?> + <window xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" xmlns:html="http://www.w3.org/1999/xhtml" ===================================== browser/components/torpreferences/content/bridgeQrDialog.xhtml ===================================== @@ -1,5 +1,7 @@ <?xml version="1.0" encoding="UTF-8"?> +<?csp default-src chrome: ?> + <window type="child" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" ===================================== browser/components/torpreferences/content/builtinBridgeDialog.xhtml ===================================== @@ -1,5 +1,7 @@ <?xml version="1.0" encoding="UTF-8"?> +<?csp default-src chrome: ?> + <window type="child" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" ===================================== browser/components/torpreferences/content/connectionSettingsDialog.xhtml ===================================== @@ -1,5 +1,7 @@ <?xml version="1.0" encoding="UTF-8"?> +<?csp default-src chrome: ?> + <window type="child" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" ===================================== browser/components/torpreferences/content/loxInviteDialog.xhtml ===================================== @@ -1,5 +1,7 @@ <?xml version="1.0" encoding="UTF-8"?> +<?csp default-src chrome: ?> + <window type="child" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" ===================================== browser/components/torpreferences/content/provideBridgeDialog.xhtml ===================================== @@ -1,5 +1,7 @@ <?xml version="1.0" encoding="UTF-8"?> +<?csp default-src chrome: ?> + <window type="child" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" ===================================== browser/components/torpreferences/content/requestBridgeDialog.xhtml ===================================== @@ -1,5 +1,7 @@ <?xml version="1.0" encoding="UTF-8"?> +<?csp default-src chrome:; img-src data: ?> + <window type="child" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" ===================================== browser/components/torpreferences/content/torLogDialog.xhtml ===================================== @@ -1,5 +1,7 @@ <?xml version="1.0" encoding="UTF-8"?> +<?csp default-src chrome: ?> + <window type="child" xmlns="http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul" ===================================== dom/security/nsContentSecurityUtils.cpp ===================================== @@ -1361,6 +1361,7 @@ static nsLiteralCString sImgSrcDataBlobAllowList[] = { "chrome://devtools/content/webconsole/index.html"_ns, "chrome://global/content/alerts/alert.xhtml"_ns, "chrome://global/content/print.html"_ns, + "chrome://browser/content/torpreferences/requestBridgeDialog.xhtml"_ns, }; // img-src https: static nsLiteralCString sImgSrcHttpsAllowList[] = { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/cca7d6… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/cca7d6… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.1.0esr-15.0-1] 4 commits: fixup! TB 40041 [android]: Implement Tor Network Settings
by henry (＠henry) 11 Aug '25

11 Aug '25

henry pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 048a9ee4 by Henry Wilkes at 2025-08-11T08:06:43+00:00 fixup! TB 40041 [android]: Implement Tor Network Settings TB 44069: Update meek name. TB 44083: Capitalise Snowflake name. - - - - - c387352e by Henry Wilkes at 2025-08-11T08:06:43+00:00 fixup! [android] TBA strings TB 44069: Update meek name. TB 44083: Capitalise Snowflake name. - - - - - 308bfd2a by Henry Wilkes at 2025-08-11T08:06:43+00:00 fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection TB 44069: Update built-in meek name and description. Also change the radio options strings to have their .label point directly to the corresponding bridge type name string. - - - - - cca7d67e by Henry Wilkes at 2025-08-11T08:06:43+00:00 fixup! Tor Browser strings TB 44069: Update the meek name and description. Update the radio option strings to point their .label directly to the name strings. - - - - - 5 changed files: - browser/components/torpreferences/content/builtinBridgeDialog.xhtml - browser/components/torpreferences/content/connectionPane.js - mobile/android/fenix/app/src/main/res/values/torbrowser_strings.xml - mobile/android/fenix/app/src/main/res/xml/tor_bridge_config_preferences.xml - toolkit/locales/en-US/toolkit/global/tor-browser.ftl Changes: ===================================== browser/components/torpreferences/content/builtinBridgeDialog.xhtml ===================================== @@ -33,7 +33,7 @@ - only the latter description should contribute. --> <radio value="obfs4" - data-l10n-id="built-in-dialog-obfs4-radio-option" + data-l10n-id="built-in-dialog-obfs4-radio-option2" /> <html:span class="bridge-status-badge"> <html:div class="bridge-status-icon"></html:div> @@ -54,7 +54,7 @@ <hbox> <radio value="snowflake" - data-l10n-id="built-in-dialog-snowflake-radio-option" + data-l10n-id="built-in-dialog-snowflake-radio-option2" /> <html:span class="bridge-status-badge"> <html:div class="bridge-status-icon"></html:div> @@ -75,7 +75,7 @@ <hbox> <radio value="meek-azure" - data-l10n-id="built-in-dialog-meek-azure-radio-option" + data-l10n-id="built-in-dialog-meek-radio-option2" /> <html:span class="bridge-status-badge"> <html:div class="bridge-status-icon"></html:div> @@ -88,7 +88,7 @@ </hbox> <html:div class="indent builtin-bridges-option-description" - data-l10n-id="tor-bridges-built-in-meek-azure-description" + data-l10n-id="tor-bridges-built-in-meek-description" > </html:div> </vbox> ===================================== browser/components/torpreferences/content/connectionPane.js ===================================== @@ -1080,8 +1080,8 @@ const gBuiltinBridgesArea = { description: "tor-bridges-built-in-snowflake-description", }, "meek-azure": { - name: "tor-bridges-built-in-meek-azure-name", - description: "tor-bridges-built-in-meek-azure-description", + name: "tor-bridges-built-in-meek-name", + description: "tor-bridges-built-in-meek-description", }, }, ===================================== mobile/android/fenix/app/src/main/res/values/torbrowser_strings.xml ===================================== @@ -23,9 +23,12 @@ <string name="preferences_tor_network_settings_bridge_config_explanation">Bridges are unlisted relays that make it more difficult to block connections to the Tor network. Because of how certain countries try to block Tor, certain bridges work in certain countries but not others.</string> <string name="preferences_tor_network_settings_bridge_config_toggle">Use a Bridge</string> <string name="preferences_tor_network_settings_bridge_config_toggle_description">Config a bridge to connect to Tor</string> +  <string name="preferences_tor_network_settings_bridge_config_builtin_bridge_obfs4">obfs4</string> - <string name="preferences_tor_network_settings_bridge_config_builtin_bridge_meek_azure">meek-azure</string> - <string name="preferences_tor_network_settings_bridge_config_builtin_bridge_snowflake">snowflake</string> +  + <string name="preferences_tor_network_settings_bridge_config_builtin_bridge_meek">meek</string> +  + <string name="preferences_tor_network_settings_bridge_config_builtin_bridge_snowflake2">Snowflake</string> <string name="preferences_tor_network_settings_bridge_config_user_provided_bridge">Provide a Bridge I know</string> <string name="preferences_tor_network_settings_bridge_config_user_provided_bridge_description">Enter bridge information from a trusted source</string> <string name="preferences_tor_network_settings_bridge_config_current_bridge">Current Configured Bridge: %s</string> ===================================== mobile/android/fenix/app/src/main/res/xml/tor_bridge_config_preferences.xml ===================================== @@ -21,12 +21,12 @@ android:defaultValue="false" android:dependency="@string/pref_key_tor_network_settings_bridge_config_toggle" android:key="@string/pref_key_tor_network_settings_bridge_config_builtin_bridge_meek_azure" - android:title="@string/preferences_tor_network_settings_bridge_config_builtin_bridge_meek_azure" /> + android:title="@string/preferences_tor_network_settings_bridge_config_builtin_bridge_meek" /> <org.mozilla.fenix.settings.RadioButtonPreference android:defaultValue="false" android:dependency="@string/pref_key_tor_network_settings_bridge_config_toggle" android:key="@string/pref_key_tor_network_settings_bridge_config_builtin_bridge_snowflake" - android:title="@string/preferences_tor_network_settings_bridge_config_builtin_bridge_snowflake" /> + android:title="@string/preferences_tor_network_settings_bridge_config_builtin_bridge_snowflake2" /> <EditTextPreference android:dependency="@string/pref_key_tor_network_settings_bridge_config_toggle" android:key="@string/pref_key_tor_network_settings_bridge_config_user_provided_bridge" ===================================== toolkit/locales/en-US/toolkit/global/tor-browser.ftl ===================================== @@ -135,12 +135,12 @@ tor-bridges-built-in-obfs4-description = Makes your Tor traffic look like random tor-bridges-built-in-snowflake-name = Snowflake # "Snowflake" is a proper noun for a type of Tor bridge, and likely should not be translated. tor-bridges-built-in-snowflake-description = Routes your connection through Snowflake proxies to make it look like you’re placing a video call, for example. -# "meek-azure" is a technical name, and likely should not be translated. -tor-bridges-built-in-meek-azure-name = meek-azure -tor-bridges-built-in-meek-azure-description = Makes it look like you’re connected to a Microsoft website, instead of using Tor. May work in heavily censored regions, but is usually very slow. +# "meek" is a technical name, and likely should not be translated. +tor-bridges-built-in-meek-name = meek +tor-bridges-built-in-meek-description = Connects you to the Tor network through a big cloud provider. May work in heavily censored regions, but is usually very slow. # Shown at the start of a Tor bridge line. -# $type (String) - The Tor bridge type ("snowflake", "obfs4", "meek-azure"). +# $type (String) - The Tor bridge type ("snowflake", "obfs4", "meek", etc). tor-bridges-type-prefix = { $type } bridge: # Shown at the start of a Tor bridge line, when the transport type is unknown (or "vanilla"). tor-bridges-type-prefix-generic = Tor bridge: @@ -385,15 +385,12 @@ built-in-dialog-title = .title = Select a Built-In Bridge # -brand-short-name refers to 'Tor Browser', localized. built-in-dialog-introduction = { -brand-short-name } includes some specific types of bridges known as “pluggable transports”, which can help conceal the fact you’re using Tor. -# "obfs4" is a technical name, and likely should not be translated. -built-in-dialog-obfs4-radio-option = - .label = obfs4 -# "Snowflake" is a proper noun for a type of Tor bridge, and likely should not be translated. -built-in-dialog-snowflake-radio-option = - .label = Snowflake -# "meek-azure" is a technical name, and likely should not be translated. -built-in-dialog-meek-azure-radio-option = - .label = meek-azure +built-in-dialog-obfs4-radio-option2 = + .label = { tor-bridges-built-in-obfs4-name } +built-in-dialog-snowflake-radio-option2 = + .label = { tor-bridges-built-in-snowflake-name } +built-in-dialog-meek-radio-option2 = + .label = { tor-bridges-built-in-meek-name } # Label attached to the built-in bridge option that is already in use. # The "aria-label" should use the same text, but include some ending punctuation to separate it from the sentence that follows. This is used for screen reader users. built-in-dialog-current-bridge-label = Current bridge View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/efc66d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/efc66d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.1.0esr-15.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 08 Aug '25

08 Aug '25

Pier Angelo Vendrame pushed to branch mullvad-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 5aa8703d by Pier Angelo Vendrame at 2025-08-08T18:31:31+02:00 fixup! Firefox preference overrides. BB 44026: Disable the modal with upstream's ToU. We disable data collection, so those terms do not apply to us. Indeed, currently this feature is already gated on the datareporting pref, but since upstream is refactoring these prefs, adding an explicit one seems a good idea. Also, move the datareporting prefs closer to telemetry. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -202,8 +202,6 @@ pref("browser.safebrowsing.provider.google4.updateURL", ""); pref("browser.safebrowsing.provider.google4.gethashURL", ""); pref("browser.safebrowsing.provider.mozilla.updateURL", ""); pref("browser.safebrowsing.provider.mozilla.gethashURL", ""); -pref("datareporting.healthreport.uploadEnabled", false); -pref("datareporting.policy.dataSubmissionEnabled", false); // tor-browser#42735: Disable recent search suggestions pref("browser.urlbar.recentsearches.featureGate", false); pref("browser.urlbar.suggest.recentsearches", false); @@ -225,6 +223,8 @@ pref("toolkit.telemetry.firstShutdownPing.enabled", false); // Added in tor-brow pref("toolkit.telemetry.updatePing.enabled", false); // Make sure updater telemetry is disabled; see #25909. pref("toolkit.telemetry.bhrPing.enabled", false); pref("toolkit.telemetry.coverage.opt-out", true); +pref("datareporting.healthreport.uploadEnabled", false); +pref("datareporting.policy.dataSubmissionEnabled", false); // Force all telemtry identifier to their canary values tor-browser#43750 pref("toolkit.telemetry.cachedClientID", "c0ffeec0-ffee-c0ff-eec0-ffeec0ffeec0", locked); pref("toolkit.telemetry.cachedProfileGroupID", "decafdec-afde-cafd-ecaf-decafdecafde", locked); @@ -236,6 +236,9 @@ pref("browser.tabs.crashReporting.sendReport", false); pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); // Added in tor-browser#41496 even though false by default pref("browser.crashReports.unsubmittedCheck.enabled", false); +// tor-browser#44026: Disable the modal that shows upstream terms of usage, +// since we opt out of their telemetry and data collection. +pref("browser.preonboarding.enabled", false); // Disable checkbox in about:neterror that controls // security.xfocsp.errorReporting.automatic. See tor-browser#42653. pref("security.xfocsp.errorReporting.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/5aa… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/5aa… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-140.1.0esr-15.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 08 Aug '25

08 Aug '25

Pier Angelo Vendrame pushed to branch base-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: cdc07ea9 by Pier Angelo Vendrame at 2025-08-08T18:31:17+02:00 fixup! Firefox preference overrides. BB 44026: Disable the modal with upstream's ToU. We disable data collection, so those terms do not apply to us. Indeed, currently this feature is already gated on the datareporting pref, but since upstream is refactoring these prefs, adding an explicit one seems a good idea. Also, move the datareporting prefs closer to telemetry. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -202,8 +202,6 @@ pref("browser.safebrowsing.provider.google4.updateURL", ""); pref("browser.safebrowsing.provider.google4.gethashURL", ""); pref("browser.safebrowsing.provider.mozilla.updateURL", ""); pref("browser.safebrowsing.provider.mozilla.gethashURL", ""); -pref("datareporting.healthreport.uploadEnabled", false); -pref("datareporting.policy.dataSubmissionEnabled", false); // tor-browser#42735: Disable recent search suggestions pref("browser.urlbar.recentsearches.featureGate", false); pref("browser.urlbar.suggest.recentsearches", false); @@ -225,6 +223,8 @@ pref("toolkit.telemetry.firstShutdownPing.enabled", false); // Added in tor-brow pref("toolkit.telemetry.updatePing.enabled", false); // Make sure updater telemetry is disabled; see #25909. pref("toolkit.telemetry.bhrPing.enabled", false); pref("toolkit.telemetry.coverage.opt-out", true); +pref("datareporting.healthreport.uploadEnabled", false); +pref("datareporting.policy.dataSubmissionEnabled", false); // Force all telemtry identifier to their canary values tor-browser#43750 pref("toolkit.telemetry.cachedClientID", "c0ffeec0-ffee-c0ff-eec0-ffeec0ffeec0", locked); pref("toolkit.telemetry.cachedProfileGroupID", "decafdec-afde-cafd-ecaf-decafdecafde", locked); @@ -236,6 +236,9 @@ pref("browser.tabs.crashReporting.sendReport", false); pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); // Added in tor-browser#41496 even though false by default pref("browser.crashReports.unsubmittedCheck.enabled", false); +// tor-browser#44026: Disable the modal that shows upstream terms of usage, +// since we opt out of their telemetry and data collection. +pref("browser.preonboarding.enabled", false); // Disable checkbox in about:neterror that controls // security.xfocsp.errorReporting.automatic. See tor-browser#42653. pref("security.xfocsp.errorReporting.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/cdc07ea… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/cdc07ea… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.1.0esr-15.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 08 Aug '25

08 Aug '25

Pier Angelo Vendrame pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: efc66d2c by Pier Angelo Vendrame at 2025-08-08T18:29:59+02:00 fixup! Firefox preference overrides. BB 44026: Disable the modal with upstream's ToU. We disable data collection, so those terms do not apply to us. Indeed, currently this feature is already gated on the datareporting pref, but since upstream is refactoring these prefs, adding an explicit one seems a good idea. Also, move the datareporting prefs closer to telemetry. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -202,8 +202,6 @@ pref("browser.safebrowsing.provider.google4.updateURL", ""); pref("browser.safebrowsing.provider.google4.gethashURL", ""); pref("browser.safebrowsing.provider.mozilla.updateURL", ""); pref("browser.safebrowsing.provider.mozilla.gethashURL", ""); -pref("datareporting.healthreport.uploadEnabled", false); -pref("datareporting.policy.dataSubmissionEnabled", false); // tor-browser#42735: Disable recent search suggestions pref("browser.urlbar.recentsearches.featureGate", false); pref("browser.urlbar.suggest.recentsearches", false); @@ -225,6 +223,8 @@ pref("toolkit.telemetry.firstShutdownPing.enabled", false); // Added in tor-brow pref("toolkit.telemetry.updatePing.enabled", false); // Make sure updater telemetry is disabled; see #25909. pref("toolkit.telemetry.bhrPing.enabled", false); pref("toolkit.telemetry.coverage.opt-out", true); +pref("datareporting.healthreport.uploadEnabled", false); +pref("datareporting.policy.dataSubmissionEnabled", false); // Force all telemtry identifier to their canary values tor-browser#43750 pref("toolkit.telemetry.cachedClientID", "c0ffeec0-ffee-c0ff-eec0-ffeec0ffeec0", locked); pref("toolkit.telemetry.cachedProfileGroupID", "decafdec-afde-cafd-ecaf-decafdecafde", locked); @@ -236,6 +236,9 @@ pref("browser.tabs.crashReporting.sendReport", false); pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); // Added in tor-browser#41496 even though false by default pref("browser.crashReports.unsubmittedCheck.enabled", false); +// tor-browser#44026: Disable the modal that shows upstream terms of usage, +// since we opt out of their telemetry and data collection. +pref("browser.preonboarding.enabled", false); // Disable checkbox in about:neterror that controls // security.xfocsp.errorReporting.automatic. See tor-browser#42653. pref("security.xfocsp.errorReporting.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/efc66d2… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/efc66d2… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.1.0esr-15.0-1] fixup! TB 40041 [android]: Implement Tor Network Settings
by Dan Ballard (＠dan) 07 Aug '25

07 Aug '25

Dan Ballard pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 1643c744 by clairehurst at 2025-08-07T10:25:07-06:00 fixup! TB 40041 [android]: Implement Tor Network Settings tor-browser#44042 Debug crash when opening settings too quickly after launching app. Clean up surrounding code - - - - - 1 changed file: - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/settings/SettingsFragment.kt Changes: ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/settings/SettingsFragment.kt ===================================== @@ -34,8 +34,10 @@ import androidx.preference.PreferenceFragmentCompat import androidx.preference.SwitchPreference import androidx.recyclerview.widget.RecyclerView import kotlinx.coroutines.CoroutineScope +import kotlinx.coroutines.Dispatchers import kotlinx.coroutines.delay import kotlinx.coroutines.launch +import kotlinx.coroutines.runBlocking import mozilla.components.browser.state.state.selectedOrDefaultSearchEngine import mozilla.components.concept.engine.Engine import mozilla.components.concept.sync.AccountObserver @@ -189,7 +191,9 @@ class SettingsFragment : PreferenceFragmentCompat(), UserInteractionHandler { } override fun onCreatePreferences(savedInstanceState: Bundle?, rootKey: String?) { - setPreferencesFromResource(R.xml.preferences, rootKey) + runBlocking(context = Dispatchers.IO) { + setPreferencesFromResource(R.xml.preferences, rootKey) + } } override fun onViewCreated(view: View, savedInstanceState: Bundle?) { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/1643c74… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/1643c74… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-140.1.0esr-15.0-1] fixup! TB 40041 [android]: Implement Tor Network Settings
by Dan Ballard (＠dan) 07 Aug '25

07 Aug '25

Dan Ballard pushed to branch tor-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 32f432c8 by clairehurst at 2025-08-07T10:20:12-06:00 fixup! TB 40041 [android]: Implement Tor Network Settings tor-browser#44042 Debug crash when opening settings too quickly after launching app. Clean up surrounding code - - - - - 1 changed file: - mobile/android/fenix/app/src/main/java/org/mozilla/fenix/settings/SettingsFragment.kt Changes: ===================================== mobile/android/fenix/app/src/main/java/org/mozilla/fenix/settings/SettingsFragment.kt ===================================== @@ -189,8 +189,6 @@ class SettingsFragment : PreferenceFragmentCompat(), UserInteractionHandler { } override fun onCreatePreferences(savedInstanceState: Bundle?, rootKey: String?) { - //setPreferencesFromResource(R.xml.tor_network_settings_preferences, rootKey) - //setupConnectionPreferences() setPreferencesFromResource(R.xml.preferences, rootKey) } View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/32f432c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/32f432c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-140.1.0esr-15.0-1] fixup! Firefox preference overrides.
by Pier Angelo Vendrame (＠pierov) 07 Aug '25

07 Aug '25

Pier Angelo Vendrame pushed to branch base-browser-140.1.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 6cb6ea55 by Pier Angelo Vendrame at 2025-08-07T11:43:23+02:00 fixup! Firefox preference overrides. BB 44062: Enable touch events on Windows and Android. Auto-detection makes some properties available on the global scope only when touch support is actually available, but this introduces entorpy. Let's force touch enabled in Windows+Android and disable it elsewhere. This improves consistency with the spoofed number of touch points. - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -443,9 +443,12 @@ pref("dom.webmidi.enabled", false); // Bug 41398: Disable Web MIDI API // randomized IDs when this pref is true). // Defense-in-depth (already the default value) from Firefox 119 or 120. pref("media.devices.enumerate.legacy.enabled", false); -// Bug 10286: Always disable Touch API. -// We might need to deepen this topic, see tor-browser#42069. +// Touch events (tor-browser#10286, tor-browser#42069, tor-browser#44062) +#if defined(XP_WIN) || defined(ANDROID) +pref("dom.w3c_touch_events.enabled", 1); +#else pref("dom.w3c_touch_events.enabled", 0); +#endif #ifndef ANDROID // Bug 42138: Disable touch-based overscroll UX pref("apz.overscroll.enabled", false); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6cb6ea5… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/6cb6ea5… You're receiving this email because of your account on gitlab.torproject.org.

1 0