- tor-commits - lists.torproject.org

[Git][tpo/applications/tor-browser-build][maint-14.0] Bug 41301: Prepare Tor Browser 14.0.3 part 2
by morgan (＠morgan) 26 Nov '24

26 Nov '24

morgan pushed to branch maint-14.0 at The Tor Project / Applications / tor-browser-build Commits: f605e288 by Morgan at 2024-11-26T02:24:45+00:00 Bug 41301: Prepare Tor Browser 14.0.3 part 2 - fix legacy torbrowser mar generation - - - - - 1 changed file: - rbm.conf Changes: ===================================== rbm.conf ===================================== @@ -74,7 +74,7 @@ buildconf: var: torbrowser_version: '14.0.3' - torbrowser_build: 'build1' + torbrowser_build: 'build2' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. browser_release_date: '2024/11/25 15:42:04' @@ -89,8 +89,8 @@ var: - '[% IF c("var/mullvad-browser") %]13.5.7[% END %]' mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' - torbrowser_legacy_version: 13.5.9 - torbrowser_legacy_platform_version: 115.17.0 + torbrowser_legacy_version: 13.5.10 + torbrowser_legacy_platform_version: 115.18.0 # By default, we sort the list of installed packages. This allows sharing # containers with identical list of packages, even if they are not listed View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/f… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser-update-responses][main] release: new version, 14.0.3
by morgan (＠morgan) 26 Nov '24

26 Nov '24

morgan pushed to branch main at The Tor Project / Applications / mullvad-browser-update-responses Commits: 62fd0f39 by Morgan at 2024-11-26T02:22:36+00:00 release: new version, 14.0.3 - - - - - 29 changed files: - update_1/release/.htaccess - − update_1/release/13.5.6-14.0-linux-x86_64-ALL.xml - − update_1/release/13.5.6-14.0-macos-ALL.xml - − update_1/release/13.5.6-14.0-windows-x86_64-ALL.xml - − update_1/release/13.5.7-14.0-linux-x86_64-ALL.xml - − update_1/release/13.5.7-14.0-macos-ALL.xml - − update_1/release/13.5.7-14.0-windows-x86_64-ALL.xml - + update_1/release/13.5.7-14.0.3-linux-x86_64-ALL.xml - + update_1/release/13.5.7-14.0.3-macos-ALL.xml - + update_1/release/13.5.7-14.0.3-windows-x86_64-ALL.xml - − update_1/release/13.5.9-14.0-linux-x86_64-ALL.xml - − update_1/release/13.5.9-14.0-macos-ALL.xml - − update_1/release/13.5.9-14.0-windows-x86_64-ALL.xml - + update_1/release/13.5.9-14.0.3-linux-x86_64-ALL.xml - + update_1/release/13.5.9-14.0.3-macos-ALL.xml - + update_1/release/13.5.9-14.0.3-windows-x86_64-ALL.xml - + update_1/release/14.0-14.0.3-linux-x86_64-ALL.xml - + update_1/release/14.0-14.0.3-macos-ALL.xml - + update_1/release/14.0-14.0.3-windows-x86_64-ALL.xml - − update_1/release/14.0-linux-x86_64-ALL.xml - − update_1/release/14.0-macos-ALL.xml - − update_1/release/14.0-windows-x86_64-ALL.xml - + update_1/release/14.0.3-linux-x86_64-ALL.xml - + update_1/release/14.0.3-macos-ALL.xml - + update_1/release/14.0.3-windows-x86_64-ALL.xml - update_1/release/download-linux-x86_64.json - update_1/release/download-macos.json - update_1/release/download-windows-x86_64.json - update_1/release/downloads.json Changes: ===================================== update_1/release/.htaccess ===================================== @@ -1,22 +1,22 @@ RewriteEngine On -RewriteRule ^[^/]+/14.0/ no-update.xml [last] -RewriteRule ^Linux_x86_64-gcc3/13.5.6/ALL 13.5.6-14.0-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/13.5.7/ALL 13.5.7-14.0-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/13.5.9/ALL 13.5.9-14.0-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/[^/]+/ALL 14.0-linux-x86_64-ALL.xml [last] -RewriteRule ^Linux_x86_64-gcc3/ 14.0-linux-x86_64-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/13.5.6/ALL 13.5.6-14.0-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/13.5.7/ALL 13.5.7-14.0-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/13.5.9/ALL 13.5.9-14.0-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/[^/]+/ALL 14.0-macos-ALL.xml [last] -RewriteRule ^Darwin_x86_64-gcc3/ 14.0-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/13.5.6/ALL 13.5.6-14.0-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/13.5.7/ALL 13.5.7-14.0-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/13.5.9/ALL 13.5.9-14.0-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/[^/]+/ALL 14.0-macos-ALL.xml [last] -RewriteRule ^Darwin_aarch64-gcc3/ 14.0-macos-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/13.5.6/ALL 13.5.6-14.0-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/13.5.7/ALL 13.5.7-14.0-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/13.5.9/ALL 13.5.9-14.0-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/[^/]+/ALL 14.0-windows-x86_64-ALL.xml [last] -RewriteRule ^WINNT_x86_64-gcc3-x64/ 14.0-windows-x86_64-ALL.xml [last] +RewriteRule ^[^/]+/14.0.3/ no-update.xml [last] +RewriteRule ^Linux_x86_64-gcc3/13.5.7/ALL 13.5.7-14.0.3-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/13.5.9/ALL 13.5.9-14.0.3-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/14.0/ALL 14.0-14.0.3-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/[^/]+/ALL 14.0.3-linux-x86_64-ALL.xml [last] +RewriteRule ^Linux_x86_64-gcc3/ 14.0.3-linux-x86_64-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/13.5.7/ALL 13.5.7-14.0.3-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/13.5.9/ALL 13.5.9-14.0.3-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/14.0/ALL 14.0-14.0.3-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/[^/]+/ALL 14.0.3-macos-ALL.xml [last] +RewriteRule ^Darwin_x86_64-gcc3/ 14.0.3-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/13.5.7/ALL 13.5.7-14.0.3-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/13.5.9/ALL 13.5.9-14.0.3-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/14.0/ALL 14.0-14.0.3-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/[^/]+/ALL 14.0.3-macos-ALL.xml [last] +RewriteRule ^Darwin_aarch64-gcc3/ 14.0.3-macos-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/13.5.7/ALL 13.5.7-14.0.3-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/13.5.9/ALL 13.5.9-14.0.3-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/14.0/ALL 14.0-14.0.3-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/[^/]+/ALL 14.0.3-windows-x86_64-ALL.xml [last] +RewriteRule ^WINNT_x86_64-gcc3-x64/ 14.0.3-windows-x86_64-ALL.xml [last] ===================================== update_1/release/13.5.6-14.0-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64-14.0_ALL.…" size="114113237" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64--13.5.6-1…" size="56476310" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.6-14.0-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos-14.0_ALL.mar" size="129146988" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos--13.5.6-14.0_ALL…" size="91474239" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.6-14.0-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64-14.0_AL…" size="97539568" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64--13.5.6…" size="62236358" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.7-14.0-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64-14.0_ALL.…" size="114113237" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64--13.5.7-1…" size="53881916" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.7-14.0-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos-14.0_ALL.mar" size="129146988" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos--13.5.7-14.0_ALL…" size="88881650" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.7-14.0-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64-14.0_AL…" size="97539568" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64--13.5.7…" size="59650020" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.7-14.0.3-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64-14.0.3_…" size="114210421" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64--13.5.7…" size="57910842" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.7-14.0.3-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos-14.0.3_ALL.mar" size="129287356" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos--13.5.7-14.0.3…" size="93261151" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.7-14.0.3-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64-14.0.…" size="97637448" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64--13.5…" size="63678802" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.9-14.0-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64-14.0_ALL.…" size="114113237" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64--13.5.9-1…" size="53591292" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.9-14.0-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos-14.0_ALL.mar" size="129146988" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos--13.5.9-14.0_ALL…" size="88443480" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.9-14.0-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64-14.0_AL…" size="97539568" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64--13.5.9…" size="59349404" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.9-14.0.3-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64-14.0.3_…" size="114210421" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64--13.5.9…" size="57748562" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.9-14.0.3-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos-14.0.3_ALL.mar" size="129287356" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos--13.5.9-14.0.3…" size="93088063" type="partial"></patch></update></updates> ===================================== update_1/release/13.5.9-14.0.3-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64-14.0.…" size="97637448" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64--13.5…" size="63516494" type="partial"></patch></update></updates> ===================================== update_1/release/14.0-14.0.3-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64-14.0.3_…" size="114210421" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64--14.0-1…" size="10377581" type="partial"></patch></update></updates> ===================================== update_1/release/14.0-14.0.3-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos-14.0.3_ALL.mar" size="129287356" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos--14.0-14.0.3_A…" size="14932615" type="partial"></patch></update></updates> ===================================== update_1/release/14.0-14.0.3-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64-14.0.…" size="97637448" type="complete"></patch><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64--14.0…" size="10785878" type="partial"></patch></update></updates> ===================================== update_1/release/14.0-linux-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64-14.0_ALL.…" size="114113237" type="complete"></patch></update></updates> ===================================== update_1/release/14.0-macos-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos-14.0_ALL.mar" size="129146988" type="complete"></patch></update></updates> ===================================== update_1/release/14.0-windows-x86_64-ALL.xml deleted ===================================== @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<updates><update type="minor" displayVersion="14.0" appVersion="14.0" platformVersion="128.4.0" buildID="20241112201621" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64-14.0_AL…" size="97539568" type="complete"></patch></update></updates> ===================================== update_1/release/14.0.3-linux-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedInstructionSet="SSE2"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64-14.0.3_…" size="114210421" type="complete"></patch></update></updates> ===================================== update_1/release/14.0.3-macos-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedOSVersion="19.0.0"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos-14.0.3_ALL.mar" size="129287356" type="complete"></patch></update></updates> ===================================== update_1/release/14.0.3-windows-x86_64-ALL.xml ===================================== @@ -0,0 +1,2 @@ +<?xml version="1.0" encoding="UTF-8"?> +<updates><update type="minor" displayVersion="14.0.3" appVersion="14.0.3" platformVersion="128.5.0" buildID="20241125154204" detailsURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" actions="showURL" openURL="https://github.com/mullvad/mullvad-browser/releases/14.0.3" minSupportedOSVersion="10.0"><patch URL="https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64-14.0.…" size="97637448" type="complete"></patch></update></updates> ===================================== update_1/release/download-linux-x86_64.json ===================================== @@ -1 +1 @@ -{"binary":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64-14.0.tar.…","git_tag":"mb-14.0-build2","sig":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64-14.0.tar.…","version":"14.0"} \ No newline at end of file +{"binary":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64-14.0.3.…","git_tag":"mb-14.0.3-build1","sig":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64-14.0.3.…","version":"14.0.3"} \ No newline at end of file ===================================== update_1/release/download-macos.json ===================================== @@ -1 +1 @@ -{"binary":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos-14.0.dmg","git_tag":"mb-14.0-build2","sig":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos-14.0.dmg.asc","version":"14.0"} \ No newline at end of file +{"binary":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos-14.0.3.dmg","git_tag":"mb-14.0.3-build1","sig":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos-14.0.3.dmg.asc","version":"14.0.3"} \ No newline at end of file ===================================== update_1/release/download-windows-x86_64.json ===================================== @@ -1 +1 @@ -{"binary":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64-14.0.exe","git_tag":"mb-14.0-build2","sig":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64-14.0.ex…","version":"14.0"} \ No newline at end of file +{"binary":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64-14.0.…","git_tag":"mb-14.0.3-build1","sig":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64-14.0.…","version":"14.0.3"} \ No newline at end of file ===================================== update_1/release/downloads.json ===================================== @@ -1 +1 @@ -{"downloads":{"linux-x86_64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64-14.0.tar.…","sig":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-linux-x86_64-14.0.tar.…"}},"macos":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos-14.0.dmg","sig":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-macos-14.0.dmg.asc"}},"win64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64-14.0.exe","sig":"https://cdn.mullvad.net/browser/14.0/mullvad-browser-windows-x86_64-14.0.ex…"}}},"tag":"mb-14.0-build2","version":"14.0"} \ No newline at end of file +{"downloads":{"linux-x86_64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64-14.0.3.…","sig":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-linux-x86_64-14.0.3.…"}},"macos":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos-14.0.3.dmg","sig":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-macos-14.0.3.dmg.asc"}},"win64":{"ALL":{"binary":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64-14.0.…","sig":"https://cdn.mullvad.net/browser/14.0.3/mullvad-browser-windows-x86_64-14.0.…"}}},"tag":"mb-14.0.3-build1","version":"14.0.3"} \ No newline at end of file View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser-update-respo… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] Deleted 1 commit: release: new version, 14.0.3
by morgan (＠morgan) 26 Nov '24

26 Nov '24

morgan pushed to branch main at The Tor Project / Applications / Tor Browser update responses WARNING: The push did not contain any new commits, but force pushed to delete the commits and changes below. Deleted commits: 991e6085 by Morgan at 2024-11-26T01:39:12+00:00 release: new version, 14.0.3 - - - - - 30 changed files: - update_3/release/.htaccess - update_3/release/13.5.5-14.0.2+13.5.9-linux-i686-ALL.xml → update_3/release/13.5.5-14.0.3+13.5.9-linux-i686-ALL.xml - update_3/release/13.5.5-14.0.2+13.5.9-linux-x86_64-ALL.xml → update_3/release/13.5.5-14.0.3+13.5.9-linux-x86_64-ALL.xml - update_3/release/13.5.5-14.0.2+13.5.9-macos-ALL.xml → update_3/release/13.5.5-14.0.3+13.5.9-macos-ALL.xml - update_3/release/13.5.5-14.0.2+13.5.9-windows-i686-ALL.xml → update_3/release/13.5.5-14.0.3+13.5.9-windows-i686-ALL.xml - update_3/release/13.5.5-14.0.2+13.5.9-windows-x86_64-ALL.xml → update_3/release/13.5.5-14.0.3+13.5.9-windows-x86_64-ALL.xml - update_3/release/13.5.6-14.0.2+13.5.9-linux-i686-ALL.xml → update_3/release/13.5.6-14.0.3+13.5.9-linux-i686-ALL.xml - update_3/release/13.5.6-14.0.2+13.5.9-linux-x86_64-ALL.xml → update_3/release/13.5.6-14.0.3+13.5.9-linux-x86_64-ALL.xml - update_3/release/13.5.6-14.0.2+13.5.9-macos-ALL.xml → update_3/release/13.5.6-14.0.3+13.5.9-macos-ALL.xml - update_3/release/13.5.6-14.0.2+13.5.9-windows-i686-ALL.xml → update_3/release/13.5.6-14.0.3+13.5.9-windows-i686-ALL.xml - update_3/release/13.5.6-14.0.2+13.5.9-windows-x86_64-ALL.xml → update_3/release/13.5.6-14.0.3+13.5.9-windows-x86_64-ALL.xml - − update_3/release/13.5.7-14.0.2+13.5.9-macos-ALL.xml - + update_3/release/13.5.7-14.0.3+13.5.9-linux-i686-ALL.xml - + update_3/release/13.5.7-14.0.3+13.5.9-linux-x86_64-ALL.xml - + update_3/release/13.5.7-14.0.3+13.5.9-macos-ALL.xml - + update_3/release/13.5.7-14.0.3+13.5.9-windows-i686-ALL.xml - + update_3/release/13.5.7-14.0.3+13.5.9-windows-x86_64-ALL.xml - update_3/release/14.0-14.0.2+13.5.9-linux-i686-ALL.xml → update_3/release/14.0-14.0.3+13.5.9-linux-i686-ALL.xml - update_3/release/14.0-14.0.2+13.5.9-linux-x86_64-ALL.xml → update_3/release/14.0-14.0.3+13.5.9-linux-x86_64-ALL.xml - update_3/release/14.0-14.0.2+13.5.9-macos-ALL.xml → update_3/release/14.0-14.0.3+13.5.9-macos-ALL.xml - update_3/release/14.0-14.0.2+13.5.9-windows-i686-ALL.xml → update_3/release/14.0-14.0.3+13.5.9-windows-i686-ALL.xml - update_3/release/14.0-14.0.2+13.5.9-windows-x86_64-ALL.xml → update_3/release/14.0-14.0.3+13.5.9-windows-x86_64-ALL.xml - − update_3/release/14.0.1-14.0.2+13.5.9-macos-ALL.xml - − update_3/release/14.0.1-14.0.2+13.5.9-windows-i686-ALL.xml - update_3/release/13.5.7-14.0.2+13.5.9-linux-i686-ALL.xml → update_3/release/14.0.1-14.0.3+13.5.9-linux-i686-ALL.xml - update_3/release/13.5.7-14.0.2+13.5.9-linux-x86_64-ALL.xml → update_3/release/14.0.1-14.0.3+13.5.9-linux-x86_64-ALL.xml - + update_3/release/14.0.1-14.0.3+13.5.9-macos-ALL.xml - update_3/release/13.5.7-14.0.2+13.5.9-windows-i686-ALL.xml → update_3/release/14.0.1-14.0.3+13.5.9-windows-i686-ALL.xml - update_3/release/13.5.7-14.0.2+13.5.9-windows-x86_64-ALL.xml → update_3/release/14.0.1-14.0.3+13.5.9-windows-x86_64-ALL.xml - update_3/release/14.0.1-14.0.2+13.5.9-linux-i686-ALL.xml → update_3/release/14.0.2-14.0.3+13.5.9-linux-i686-ALL.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-update-responses][main] release: new version, 14.0.3
by morgan (＠morgan) 26 Nov '24

26 Nov '24

morgan pushed to branch main at The Tor Project / Applications / Tor Browser update responses Commits: 991e6085 by Morgan at 2024-11-26T01:39:12+00:00 release: new version, 14.0.3 - - - - - 30 changed files: - update_3/release/.htaccess - update_3/release/13.5.5-14.0.2+13.5.9-linux-i686-ALL.xml → update_3/release/13.5.5-14.0.3+13.5.9-linux-i686-ALL.xml - update_3/release/13.5.5-14.0.2+13.5.9-linux-x86_64-ALL.xml → update_3/release/13.5.5-14.0.3+13.5.9-linux-x86_64-ALL.xml - update_3/release/13.5.5-14.0.2+13.5.9-macos-ALL.xml → update_3/release/13.5.5-14.0.3+13.5.9-macos-ALL.xml - update_3/release/13.5.5-14.0.2+13.5.9-windows-i686-ALL.xml → update_3/release/13.5.5-14.0.3+13.5.9-windows-i686-ALL.xml - update_3/release/13.5.5-14.0.2+13.5.9-windows-x86_64-ALL.xml → update_3/release/13.5.5-14.0.3+13.5.9-windows-x86_64-ALL.xml - update_3/release/13.5.6-14.0.2+13.5.9-linux-i686-ALL.xml → update_3/release/13.5.6-14.0.3+13.5.9-linux-i686-ALL.xml - update_3/release/13.5.6-14.0.2+13.5.9-linux-x86_64-ALL.xml → update_3/release/13.5.6-14.0.3+13.5.9-linux-x86_64-ALL.xml - update_3/release/13.5.6-14.0.2+13.5.9-macos-ALL.xml → update_3/release/13.5.6-14.0.3+13.5.9-macos-ALL.xml - update_3/release/13.5.6-14.0.2+13.5.9-windows-i686-ALL.xml → update_3/release/13.5.6-14.0.3+13.5.9-windows-i686-ALL.xml - update_3/release/13.5.6-14.0.2+13.5.9-windows-x86_64-ALL.xml → update_3/release/13.5.6-14.0.3+13.5.9-windows-x86_64-ALL.xml - − update_3/release/13.5.7-14.0.2+13.5.9-macos-ALL.xml - + update_3/release/13.5.7-14.0.3+13.5.9-linux-i686-ALL.xml - + update_3/release/13.5.7-14.0.3+13.5.9-linux-x86_64-ALL.xml - + update_3/release/13.5.7-14.0.3+13.5.9-macos-ALL.xml - + update_3/release/13.5.7-14.0.3+13.5.9-windows-i686-ALL.xml - + update_3/release/13.5.7-14.0.3+13.5.9-windows-x86_64-ALL.xml - update_3/release/14.0-14.0.2+13.5.9-linux-i686-ALL.xml → update_3/release/14.0-14.0.3+13.5.9-linux-i686-ALL.xml - update_3/release/14.0-14.0.2+13.5.9-linux-x86_64-ALL.xml → update_3/release/14.0-14.0.3+13.5.9-linux-x86_64-ALL.xml - update_3/release/14.0-14.0.2+13.5.9-macos-ALL.xml → update_3/release/14.0-14.0.3+13.5.9-macos-ALL.xml - update_3/release/14.0-14.0.2+13.5.9-windows-i686-ALL.xml → update_3/release/14.0-14.0.3+13.5.9-windows-i686-ALL.xml - update_3/release/14.0-14.0.2+13.5.9-windows-x86_64-ALL.xml → update_3/release/14.0-14.0.3+13.5.9-windows-x86_64-ALL.xml - − update_3/release/14.0.1-14.0.2+13.5.9-macos-ALL.xml - − update_3/release/14.0.1-14.0.2+13.5.9-windows-i686-ALL.xml - update_3/release/13.5.7-14.0.2+13.5.9-linux-i686-ALL.xml → update_3/release/14.0.1-14.0.3+13.5.9-linux-i686-ALL.xml - update_3/release/13.5.7-14.0.2+13.5.9-linux-x86_64-ALL.xml → update_3/release/14.0.1-14.0.3+13.5.9-linux-x86_64-ALL.xml - + update_3/release/14.0.1-14.0.3+13.5.9-macos-ALL.xml - update_3/release/13.5.7-14.0.2+13.5.9-windows-i686-ALL.xml → update_3/release/14.0.1-14.0.3+13.5.9-windows-i686-ALL.xml - update_3/release/13.5.7-14.0.2+13.5.9-windows-x86_64-ALL.xml → update_3/release/14.0.1-14.0.3+13.5.9-windows-x86_64-ALL.xml - update_3/release/14.0.1-14.0.2+13.5.9-linux-i686-ALL.xml → update_3/release/14.0.2-14.0.3+13.5.9-linux-i686-ALL.xml The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-update-responses… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-128.5.0esr-14.5-1] 3 commits: fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in...
by morgan (＠morgan) 25 Nov '24

25 Nov '24

morgan pushed to branch tor-browser-128.5.0esr-14.5-1 at The Tor Project / Applications / Tor Browser Commits: e4243a7f by Henry Wilkes at 2024-11-25T22:15:46+00:00 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection Bug 43314: Show initial focus for the connection settings dialog. - - - - - 76241a15 by Henry Wilkes at 2024-11-25T22:15:46+00:00 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection Bug 43314: Use <description> instead of <h3> for dialog introduction text. This keeps the style and semantics consistent with other dialogs. - - - - - 535b9be0 by Henry Wilkes at 2024-11-25T22:15:46+00:00 fixup! Bug 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection Bug 43314: Add control attributes to the xul:label elements in the connection settings. These associate the form controls with their labels, giving them an accessible name and an additional click target. - - - - - 5 changed files: - browser/components/torpreferences/content/connectionSettingsDialog.js - browser/components/torpreferences/content/connectionSettingsDialog.xhtml - browser/components/torpreferences/content/requestBridgeDialog.js - browser/components/torpreferences/content/requestBridgeDialog.xhtml - browser/components/torpreferences/content/torPreferences.css Changes: ===================================== browser/components/torpreferences/content/connectionSettingsDialog.js ===================================== @@ -317,6 +317,16 @@ const gConnectionSettingsDialog = { }, }; +// Initial focus is not visible, even if opened with a keyboard. We avoid the +// default handler and manage the focus ourselves, which will paint the focus +// ring by default. +// NOTE: A side effect is that the focus ring will show even if the user opened +// with a mouse event. +// TODO: Remove this once bugzilla bug 1708261 is resolved. +document.subDialogSetDefaultFocus = () => { + document.getElementById("torPreferences-connection-toggleProxy").focus(); +}; + window.addEventListener( "DOMContentLoaded", () => { ===================================== browser/components/torpreferences/content/connectionSettingsDialog.xhtml ===================================== @@ -24,10 +24,10 @@ <script src="chrome://browser/content/torpreferences/connectionSettingsDialog.js" /> - <html:h3 + <description id="torPreferences-connection-header" data-l10n-id="tor-advanced-dialog-introduction" - ></html:h3> + ></description>  <checkbox id="torPreferences-connection-toggleProxy" @@ -38,6 +38,7 @@ <label id="torPreferences-localProxy-type" data-l10n-id="tor-advanced-dialog-proxy-type-selector-label" + control="torPreferences-localProxy-builtinList" /> </hbox> <hbox align="center"> @@ -53,6 +54,7 @@ <label id="torPreferences-localProxy-address" data-l10n-id="tor-advanced-dialog-proxy-address-input-label" + control="torPreferences-localProxy-textboxAddress" /> </hbox> <hbox align="center"> @@ -65,6 +67,7 @@ <label id="torPreferences-localProxy-port" data-l10n-id="tor-advanced-dialog-proxy-port-input-label" + control="torPreferences-localProxy-textboxPort" />  <html:input @@ -81,6 +84,7 @@ <label id="torPreferences-localProxy-username" data-l10n-id="tor-advanced-dialog-proxy-username-input-label" + control="torPreferences-localProxy-textboxUsername" /> </hbox> <hbox align="center"> @@ -93,6 +97,7 @@ <label id="torPreferences-localProxy-password" data-l10n-id="tor-advanced-dialog-proxy-password-input-label" + control="torPreferences-localProxy-textboxPassword" /> <html:input id="torPreferences-localProxy-textboxPassword" @@ -112,6 +117,7 @@ <label id="torPreferences-connection-allowedPorts" data-l10n-id="tor-advanced-dialog-firewall-ports-input-label" + control="torPreferences-connection-textboxAllowedPorts" /> </hbox> <hbox id="torPreferences-connection-hboxAllowedPorts" align="center"> ===================================== browser/components/torpreferences/content/requestBridgeDialog.js ===================================== @@ -15,7 +15,7 @@ const log = console.createInstance({ const gRequestBridgeDialog = { selectors: { - dialogHeader: "h3#torPreferences-requestBridge-header", + dialogHeader: "#torPreferences-requestBridge-header", captchaImage: "image#torPreferences-requestBridge-captchaImage", captchaEntryTextbox: "input#torPreferences-requestBridge-captchaTextbox", refreshCaptchaButton: ===================================== browser/components/torpreferences/content/requestBridgeDialog.xhtml ===================================== @@ -23,10 +23,10 @@ <script src="chrome://browser/content/torpreferences/requestBridgeDialog.js" /> - <html:h3 + <description id="torPreferences-requestBridge-header" data-l10n-id="request-bridge-dialog-top-solve" - ></html:h3> + ></description>  <image id="torPreferences-requestBridge-captchaImage" flex="1" /> <hbox id="torPreferences-requestBridge-inputHbox"> ===================================== browser/components/torpreferences/content/torPreferences.css ===================================== @@ -793,11 +793,7 @@ button.spoof-button-disabled { font-weight: 700; } -/* Advanced Settings */ - -h3#torPreferences-requestBridge-header { - margin: 0; -} +/* Request bridges */ image#torPreferences-requestBridge-captchaImage { margin: 16px 0 8px 0; View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/38bb69… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/38bb69… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-128.5.0esr-14.5-1-build2
by morgan (＠morgan) 25 Nov '24

25 Nov '24

morgan pushed new tag mullvad-browser-128.5.0esr-14.5-1-build2 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag tor-browser-128.5.0esr-14.5-1-build2
by morgan (＠morgan) 25 Nov '24

25 Nov '24

morgan pushed new tag tor-browser-128.5.0esr-14.5-1-build2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-128.5.0esr-14.5-1] 4 commits: Bug 1836921 - Improve dialogs a=dmeehan
by morgan (＠morgan) 25 Nov '24

25 Nov '24

morgan pushed to branch mullvad-browser-128.5.0esr-14.5-1 at The Tor Project / Applications / Mullvad Browser Commits: b50d0c88 by Arturo Mejia at 2024-11-25T21:58:05+00:00 Bug 1836921 - Improve dialogs a=dmeehan Original Revision: https://phabricator.services.mozilla.com/D226961 Differential Revision: https://phabricator.services.mozilla.com/D228842 - - - - - 2ccb950c by Malte Juergens at 2024-11-25T21:58:06+00:00 Bug 1909396 - Remove HTTPS-Only exception button in iframes r=freddyb,fluent-reviewers Rationale for this can be read in Bug 1909396, but the main reason is that the iframe will get blocked regardless by mixed content blocking. Differential Revision: https://phabricator.services.mozilla.com/D220257 - - - - - 255f9c5b by Makoto Kato at 2024-11-25T21:58:06+00:00 Bug 1776646 - Support EXTRA_IS_SENSITIVE for clipboard. r=geckoview-reviewers,owlish When nsITransferable.isPrivateData is true, such as coping password or private mode, we should set EXTRA_IS_SENSITIVE to ClipData. AndroidJunit test runner doesn't often get `ClipDescription.extras` from clipboard service in test runner. So we cannot write a unit test using AndroidJUnit test runner. Differential Revision: https://phabricator.services.mozilla.com/D225326 - - - - - 60b7e8a2 by Cathy Lu at 2024-11-25T21:58:06+00:00 Bug 1914797 - Part 1 + 2 + partial backout (details below) Bug 1914797 - Part 1 - Revert bug 1868469 r=android-reviewers,jonalmeida, a=dmeehan Differential Revision: https://phabricator.services.mozilla.com/D226431 Bug 1914797 - Part 2 - Add url change during onPageStart for slow loading sites r=android-reviewers,jonalmeida, a=dmeehan Differential Revision: https://phabricator.services.mozilla.com/D226432 Backed out 1 changesets (bug 1914797) for causing Bug 1929028 Backed out changeset a79554879d7b (bug 1914797) - - - - - 16 changed files: - dom/ipc/WindowGlobalParent.cpp - dom/security/test/https-only/browser.toml - + dom/security/test/https-only/browser_iframe_buttons.js - + dom/security/test/https-only/file_iframe_buttons.html - mobile/android/android-components/components/feature/app-links/src/main/java/mozilla/components/feature/app/links/SimpleRedirectDialogFragment.kt - mobile/android/android-components/components/feature/app-links/src/test/java/mozilla/components/feature/app/links/SimpleRedirectDialogFragmentTest.kt - mobile/android/android-components/components/feature/session/src/main/java/mozilla/components/feature/session/SessionUseCases.kt - mobile/android/android-components/components/feature/session/src/test/java/mozilla/components/feature/session/SessionUseCasesTest.kt - mobile/android/android-components/docs/changelog.md - mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/ui/CrashReportingTest.kt - mobile/android/geckoview/src/main/java/org/mozilla/gecko/Clipboard.java - mobile/android/geckoview/src/main/java/org/mozilla/geckoview/GeckoInputConnection.java - toolkit/components/httpsonlyerror/content/errorpage.html - toolkit/components/httpsonlyerror/content/errorpage.js - toolkit/locales/en-US/toolkit/about/aboutHttpsOnlyError.ftl - widget/android/nsClipboard.cpp Changes: ===================================== dom/ipc/WindowGlobalParent.cpp ===================================== @@ -1378,18 +1378,11 @@ mozilla::ipc::IPCResult WindowGlobalParent::RecvReloadWithHttpsOnlyException() { return IPC_FAIL(this, "HTTPS-only mode: Illegal state"); } - // If the error page is within an iFrame, we create an exception for whatever - // scheme the top-level site is currently on, because the user wants to - // unbreak the iFrame and not the top-level page. When the error page shows up - // on a top-level request, then we replace the scheme with http, because the - // user wants to unbreak the whole page. + // We replace the scheme with http, because the user wants to unbreak the + // whole page. nsCOMPtr<nsIURI> newURI; - if (!BrowsingContext()->IsTop()) { - newURI = innerURI; - } else { - Unused << NS_MutateURI(innerURI).SetScheme("http"_ns).Finalize( - getter_AddRefs(newURI)); - } + Unused << NS_MutateURI(innerURI).SetScheme("http"_ns).Finalize( + getter_AddRefs(newURI)); OriginAttributes originAttributes = TopWindowContext()->DocumentPrincipal()->OriginAttributesRef(); ===================================== dom/security/test/https-only/browser.toml ===================================== @@ -29,6 +29,9 @@ support-files = [ ["browser_httpsonly_speculative_connect.js"] support-files = ["file_httpsonly_speculative_connect.html"] +["browser_iframe_buttons.js"] +support-files = ["file_iframe_buttons.html"] + ["browser_iframe_test.js"] skip-if = [ "os == 'linux' && bits == 64", # Bug 1735565 ===================================== dom/security/test/https-only/browser_iframe_buttons.js ===================================== @@ -0,0 +1,50 @@ +/* Any copyright is dedicated to the Public Domain. + https://creativecommons.org/publicdomain/zero/1.0/ */ + +"use strict"; + +// Ensure the buttons at the buttom of the HTTPS-Only error page do not get +// displayed in an iframe (Bug 1909396). + +add_task(async function test_iframe_buttons() { + await BrowserTestUtils.withNewTab( + "https://example.com/browser/dom/security/test/https-only/file_iframe_button…", + async function (browser) { + await SpecialPowers.pushPrefEnv({ + set: [["dom.security.https_only_mode", true]], + }); + + await SpecialPowers.spawn(browser, [], async function () { + const iframe = content.document.getElementById("iframe"); + // eslint-disable-next-line @microsoft/sdl/no-insecure-url + iframe.src = "http://nocert.example.com"; + + await ContentTaskUtils.waitForCondition( + () => iframe.contentWindow.document.readyState === "interactive", + "Iframe error page should have loaded" + ); + + ok( + !!iframe.contentWindow.document.getElementById("explanation-iframe"), + "#explanation-iframe should exist" + ); + + is( + iframe.contentWindow.document + .getElementById("explanation-iframe") + .getAttribute("hidden"), + null, + "#explanation-iframe should not be hidden" + ); + + for (const id of ["explanation-continue", "goBack", "openInsecure"]) { + is( + iframe.contentWindow.document.getElementById(id), + null, + `#${id} should have been removed` + ); + } + }); + } + ); +}); ===================================== dom/security/test/https-only/file_iframe_buttons.html ===================================== @@ -0,0 +1,9 @@ +<!DOCTYPE html> +<html lang="en"> +<head> + <meta charset="UTF-8"> +</head> +<body> + <iframe id="iframe" frameborder="0"></iframe> +</body> +</html> ===================================== mobile/android/android-components/components/feature/app-links/src/main/java/mozilla/components/feature/app/links/SimpleRedirectDialogFragment.kt ===================================== @@ -11,6 +11,7 @@ import androidx.annotation.StringRes import androidx.annotation.StyleRes import androidx.annotation.VisibleForTesting import androidx.appcompat.app.AlertDialog +import mozilla.components.support.ktx.util.PromptAbuserDetector import mozilla.components.ui.widgets.withCenterAlignedButtons /** @@ -23,6 +24,10 @@ import mozilla.components.ui.widgets.withCenterAlignedButtons */ class SimpleRedirectDialogFragment : RedirectDialogFragment() { + @VisibleForTesting + internal var promptAbuserDetector = + PromptAbuserDetector(maxSuccessiveDialogSecondsLimit = TIME_SHOWN_OFFSET_SECONDS) + @VisibleForTesting internal var testingContext: Context? = null @@ -32,6 +37,8 @@ class SimpleRedirectDialogFragment : RedirectDialogFragment() { return if (themeID == 0) AlertDialog.Builder(context) else AlertDialog.Builder(context, themeID) } + promptAbuserDetector.updateJSDialogAbusedState() + return with(requireBundle()) { val dialogTitleText = getInt(KEY_TITLE_TEXT, R.string.mozac_feature_applinks_normal_confirm_dialog_title) val dialogMessageString = getString(KEY_MESSAGE_STRING, "") @@ -40,18 +47,29 @@ class SimpleRedirectDialogFragment : RedirectDialogFragment() { val themeResId = getInt(KEY_THEME_ID, 0) val cancelable = getBoolean(KEY_CANCELABLE, false) - getBuilder(themeResId) + val dialog = getBuilder(themeResId) .setTitle(dialogTitleText) .setMessage(dialogMessageString) - .setPositiveButton(positiveButtonText) { _, _ -> - onConfirmRedirect() - } + .setPositiveButton(positiveButtonText) { _, _ -> } .setNegativeButton(negativeButtonText) { _, _ -> onCancelRedirect() } .setCancelable(cancelable) .create() - .withCenterAlignedButtons() + + dialog.withCenterAlignedButtons() + dialog.setOnShowListener { + val okButton = dialog.getButton(AlertDialog.BUTTON_POSITIVE) + okButton.setOnClickListener { + if (promptAbuserDetector.areDialogsBeingAbused()) { + promptAbuserDetector.updateJSDialogAbusedState() + } else { + onConfirmRedirect() + dialog.dismiss() + } + } + } + dialog } } @@ -101,6 +119,7 @@ class SimpleRedirectDialogFragment : RedirectDialogFragment() { const val KEY_THEME_ID = "KEY_THEME_ID" const val KEY_CANCELABLE = "KEY_CANCELABLE" + private const val TIME_SHOWN_OFFSET_SECONDS = 1 } private fun requireBundle(): Bundle { ===================================== mobile/android/android-components/components/feature/app-links/src/test/java/mozilla/components/feature/app/links/SimpleRedirectDialogFragmentTest.kt ===================================== @@ -13,6 +13,7 @@ import mozilla.components.support.test.mock import mozilla.components.support.test.robolectric.testContext import org.junit.Assert.assertFalse import org.junit.Assert.assertTrue +import org.junit.Ignore import org.junit.Test import org.junit.runner.RunWith import org.mockito.Mockito.doNothing @@ -27,6 +28,7 @@ class SimpleRedirectDialogFragmentTest { private val themeResId = appcompatR.style.Theme_AppCompat_Light @Test + @Ignore("This will be addressed in another follow up ticket") fun `Dialog confirmed callback is called correctly`() { var onConfirmCalled = false var onCancelCalled = false @@ -104,6 +106,7 @@ class SimpleRedirectDialogFragmentTest { assertFalse(onCancelCalled) } + @Suppress("unused") private fun mockFragmentManager(): FragmentManager { val fragmentManager: FragmentManager = mock() val transaction: FragmentTransaction = mock() ===================================== mobile/android/android-components/components/feature/session/src/main/java/mozilla/components/feature/session/SessionUseCases.kt ===================================== @@ -4,7 +4,6 @@ package mozilla.components.feature.session -import mozilla.components.browser.state.action.ContentAction import mozilla.components.browser.state.action.CrashAction import mozilla.components.browser.state.action.EngineAction import mozilla.components.browser.state.action.LastAccessAction @@ -94,13 +93,6 @@ class SessionUseCases( flags = flags, additionalHeaders = additionalHeaders, ) - // Update the url in content immediately until the engine updates with any new changes to the state. - store.dispatch( - ContentAction.UpdateUrlAction( - loadSessionId, - url, - ), - ) store.dispatch( EngineAction.OptimizedLoadUrlTriggeredAction( loadSessionId, ===================================== mobile/android/android-components/components/feature/session/src/test/java/mozilla/components/feature/session/SessionUseCasesTest.kt ===================================== @@ -11,7 +11,6 @@ import mozilla.components.browser.state.action.EngineAction import mozilla.components.browser.state.action.TabListAction import mozilla.components.browser.state.engine.EngineMiddleware import mozilla.components.browser.state.selector.findTab -import mozilla.components.browser.state.selector.selectedTab import mozilla.components.browser.state.state.BrowserState import mozilla.components.browser.state.state.TabSessionState import mozilla.components.browser.state.state.createCustomTab @@ -81,7 +80,6 @@ class SessionUseCasesTest { assertEquals("mozilla", action.tabId) assertEquals("https://getpocket.com", action.url) } - assertEquals("https://getpocket.com", store.state.selectedTab?.content?.url) useCases.loadUrl("https://www.mozilla.org", LoadUrlFlags.select(LoadUrlFlags.EXTERNAL)) store.waitUntilIdle() @@ -95,7 +93,6 @@ class SessionUseCasesTest { assertEquals("https://www.mozilla.org", action.url) assertEquals(LoadUrlFlags.select(LoadUrlFlags.EXTERNAL), action.flags) } - assertEquals("https://www.mozilla.org", store.state.selectedTab?.content?.url) useCases.loadUrl("https://firefox.com", store.state.selectedTabId) store.waitUntilIdle() @@ -105,7 +102,6 @@ class SessionUseCasesTest { assertEquals("mozilla", action.tabId) assertEquals("https://firefox.com", action.url) } - assertEquals("https://firefox.com", store.state.selectedTab?.content?.url) useCases.loadUrl.invoke( "https://developer.mozilla.org", ===================================== mobile/android/android-components/docs/changelog.md ===================================== @@ -109,9 +109,6 @@ permalink: /changelog/ * **feature-customtabs** * Fallback behaviour when failing to open a new window in custom tab will now be loading the URL directly in the same custom tab. [Bug 1832357](https://bugzilla.mozilla.org/show_bug.cgi?id=1832357) -* **feature-session** - * Update URL in the store immediately when using the optimized load URL code path. - * **tooling-lint** * Added a lint rule to detect when `Response#close` may not have been called. Note: Currently, this rule only runs on Android Components. ===================================== mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/ui/CrashReportingTest.kt ===================================== @@ -83,7 +83,7 @@ class CrashReportingTest : TestSetup() { verifyPageContent(tabCrashMessage) }.openTabDrawer(activityTestRule) { verifyExistingOpenTabs(firstWebPage.title) - verifyExistingOpenTabs("about:crashcontent") + verifyExistingOpenTabs(secondWebPage.title) }.closeTabDrawer { }.goToHomescreen { verifyExistingTopSitesList() ===================================== mobile/android/geckoview/src/main/java/org/mozilla/gecko/Clipboard.java ===================================== @@ -11,6 +11,7 @@ import android.content.ClipboardManager.OnPrimaryClipChangedListener; import android.content.Context; import android.content.res.AssetFileDescriptor; import android.os.Build; +import android.os.PersistableBundle; import android.text.TextUtils; import android.util.Log; import java.io.ByteArrayOutputStream; @@ -133,8 +134,9 @@ public final class Clipboard { * @return true if copy is successful. */ @WrapForJNI(calledFrom = "gecko") - public static boolean setText(final Context context, final CharSequence text) { - return setData(context, ClipData.newPlainText("text", text)); + public static boolean setText( + final Context context, final CharSequence text, final boolean isPrivateData) { + return setData(context, ClipData.newPlainText("text", text), isPrivateData); } /** @@ -147,8 +149,11 @@ public final class Clipboard { */ @WrapForJNI(calledFrom = "gecko") private static boolean setHTML( - final Context context, final CharSequence text, final String htmlText) { - return setData(context, ClipData.newHtmlText("html", text, htmlText)); + final Context context, + final CharSequence text, + final String htmlText, + final boolean isPrivateData) { + return setData(context, ClipData.newHtmlText("html", text, htmlText), isPrivateData); } /** @@ -158,11 +163,17 @@ public final class Clipboard { * @param clipData a {@link android.content.ClipData} to set to clipboard * @return true if copy is successful. */ - private static boolean setData(final Context context, final ClipData clipData) { + private static boolean setData( + final Context context, final ClipData clipData, final boolean isPrivateData) { // In API Level 11 and above, CLIPBOARD_SERVICE returns android.content.ClipboardManager, // which is a subclass of android.text.ClipboardManager. final ClipboardManager cm = (ClipboardManager) context.getSystemService(Context.CLIPBOARD_SERVICE); + if (isPrivateData && Build.VERSION.SDK_INT >= Build.VERSION_CODES.N) { + final PersistableBundle extras = new PersistableBundle(); + extras.putBoolean(ClipDescription.EXTRA_IS_SENSITIVE, true); + clipData.getDescription().setExtras(extras); + } try { cm.setPrimaryClip(clipData); } catch (final NullPointerException e) { @@ -228,7 +239,7 @@ public final class Clipboard { @WrapForJNI(calledFrom = "gecko") private static void clear(final Context context) { if (Build.VERSION.SDK_INT <= Build.VERSION_CODES.P) { - setText(context, null); + setText(context, null, false); return; } // Although we don't know more details of https://crbug.com/1203377, Blink doesn't use ===================================== mobile/android/geckoview/src/main/java/org/mozilla/geckoview/GeckoInputConnection.java ===================================== @@ -70,6 +70,7 @@ import org.mozilla.gecko.util.ThreadUtils; private ExtractedTextRequest mUpdateRequest; private final InputConnection mKeyInputConnection; private CursorAnchorInfo.Builder mCursorAnchorInfoBuilder; + private boolean mIsPrivateBrowsing; public static SessionTextInput.InputConnectionClient create( final GeckoSession session, @@ -208,12 +209,13 @@ import org.mozilla.gecko.util.ThreadUtils; // If selection is empty, we'll select everything if (selStart == selEnd) { // Fill the clipboard - Clipboard.setText(view.getContext(), editable); + Clipboard.setText(view.getContext(), editable, mIsPrivateBrowsing); editable.clear(); } else { Clipboard.setText( view.getContext(), - editable.subSequence(Math.min(selStart, selEnd), Math.max(selStart, selEnd))); + editable.subSequence(Math.min(selStart, selEnd), Math.max(selStart, selEnd)), + mIsPrivateBrowsing); editable.delete(selStart, selEnd); } break; @@ -231,7 +233,7 @@ import org.mozilla.gecko.util.ThreadUtils; : editable .toString() .substring(Math.min(selStart, selEnd), Math.max(selStart, selEnd)); - Clipboard.setText(view.getContext(), copiedText); + Clipboard.setText(view.getContext(), copiedText, mIsPrivateBrowsing); break; } return true; @@ -603,6 +605,9 @@ import org.mozilla.gecko.util.ThreadUtils; outAttrs.imeOptions |= EditorInfo.IME_FLAG_NO_EXTRACT_UI | EditorInfo.IME_FLAG_NO_FULLSCREEN; } + mIsPrivateBrowsing = + ((outAttrs.imeOptions & InputMethods.IME_FLAG_NO_PERSONALIZED_LEARNING) != 0); + if (DEBUG) { Log.d( LOGTAG, ===================================== toolkit/components/httpsonlyerror/content/errorpage.html ===================================== @@ -70,6 +70,16 @@ inert ></button> </div> + + <p id="explanation-iframe" hidden> + <span data-l10n-id="about-httpsonly-explanation-iframe"></span> + <a + id="mixedContentLearnMoreLink" + target="_blank" + data-l10n-id="about-httpsonly-link-learn-more" + ></a> + </p> + <div class="suggestion-box" hidden> <h2 data-l10n-id="about-httpsonly-suggestion-box-header"></h2> </div> ===================================== toolkit/components/httpsonlyerror/content/errorpage.js ===================================== @@ -29,28 +29,35 @@ function initPage() { document .getElementById("learnMoreLink") .setAttribute("href", baseSupportURL + "https-only-prefs"); + document + .getElementById("mixedContentLearnMoreLink") + .setAttribute("href", baseSupportURL + "mixed-content"); + + const isTopLevel = window.top == window; + if (!isTopLevel) { + for (const id of ["explanation-continue", "goBack", "openInsecure"]) { + document.getElementById(id).remove(); + } + document.getElementById("explanation-iframe").removeAttribute("hidden"); + return; + } document .getElementById("openInsecure") .addEventListener("click", onOpenInsecureButtonClick); + document + .getElementById("goBack") + .addEventListener("click", onReturnButtonClick); const delay = RPMGetIntPref("security.dialog_enable_delay", 1000); setTimeout(() => { document.getElementById("openInsecure").removeAttribute("inert"); }, delay); - if (window.top == window) { - document - .getElementById("goBack") - .addEventListener("click", onReturnButtonClick); - addAutofocus("#goBack", "beforeend"); - } else { - document.getElementById("goBack").remove(); - } + addAutofocus("#goBack", "beforeend"); - const isTopLevel = window.top == window; const hasWWWPrefix = pageUrl.href.startsWith("https://www."); - if (isTopLevel && !hasWWWPrefix) { + if (!hasWWWPrefix) { // HTTPS-Only generally simply replaces http: with https:; // here we additionally try to add www and see if that allows to upgrade the connection if it is top level ===================================== toolkit/locales/en-US/toolkit/about/aboutHttpsOnlyError.ftl ===================================== @@ -12,6 +12,7 @@ about-httpsonly-explanation-question = What could be causing this? about-httpsonly-explanation-nosupport = Most likely, the website simply does not support HTTPS. about-httpsonly-explanation-risk = It’s also possible that an attacker is involved. If you decide to visit the website, you should not enter any sensitive information like passwords, emails, or credit card details. about-httpsonly-explanation-continue = If you continue, HTTPS-Only Mode will be turned off temporarily for this site. +about-httpsonly-explanation-iframe = Due to mixed content blocking, it is not possible to manually allow this frame to load. about-httpsonly-button-continue-to-site = Continue to HTTP Site about-httpsonly-button-go-back = Go Back ===================================== widget/android/nsClipboard.cpp ===================================== @@ -92,14 +92,16 @@ nsClipboard::SetNativeClipboardData(nsITransferable* aTransferable, return rv; } + bool isPrivate = aTransferable->GetIsPrivateData(); + if (!html.IsEmpty() && java::Clipboard::SetHTML(java::GeckoAppShell::GetApplicationContext(), - text, html)) { + text, html, isPrivate)) { return NS_OK; } if (!text.IsEmpty() && java::Clipboard::SetText(java::GeckoAppShell::GetApplicationContext(), - text)) { + text, isPrivate)) { return NS_OK; } View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/95… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/95… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-128.5.0esr-14.5-1-build1
by morgan (＠morgan) 25 Nov '24

25 Nov '24

morgan pushed new tag mullvad-browser-128.5.0esr-14.5-1-build1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-128.5.0esr-14.5-1] 4 commits: Bug 1836921 - Improve dialogs a=dmeehan
by morgan (＠morgan) 25 Nov '24

25 Nov '24

morgan pushed to branch tor-browser-128.5.0esr-14.5-1 at The Tor Project / Applications / Tor Browser Commits: 358d6dd2 by Arturo Mejia at 2024-11-25T21:56:15+00:00 Bug 1836921 - Improve dialogs a=dmeehan Original Revision: https://phabricator.services.mozilla.com/D226961 Differential Revision: https://phabricator.services.mozilla.com/D228842 - - - - - 7ed8bc91 by Malte Juergens at 2024-11-25T21:56:15+00:00 Bug 1909396 - Remove HTTPS-Only exception button in iframes r=freddyb,fluent-reviewers Rationale for this can be read in Bug 1909396, but the main reason is that the iframe will get blocked regardless by mixed content blocking. Differential Revision: https://phabricator.services.mozilla.com/D220257 - - - - - fe4186b7 by Makoto Kato at 2024-11-25T21:56:15+00:00 Bug 1776646 - Support EXTRA_IS_SENSITIVE for clipboard. r=geckoview-reviewers,owlish When nsITransferable.isPrivateData is true, such as coping password or private mode, we should set EXTRA_IS_SENSITIVE to ClipData. AndroidJunit test runner doesn't often get `ClipDescription.extras` from clipboard service in test runner. So we cannot write a unit test using AndroidJUnit test runner. Differential Revision: https://phabricator.services.mozilla.com/D225326 - - - - - 38bb69b8 by Cathy Lu at 2024-11-25T21:56:16+00:00 Bug 1914797 - Part 1 + 2 + partial backout (details below) Bug 1914797 - Part 1 - Revert bug 1868469 r=android-reviewers,jonalmeida, a=dmeehan Differential Revision: https://phabricator.services.mozilla.com/D226431 Bug 1914797 - Part 2 - Add url change during onPageStart for slow loading sites r=android-reviewers,jonalmeida, a=dmeehan Differential Revision: https://phabricator.services.mozilla.com/D226432 Backed out 1 changesets (bug 1914797) for causing Bug 1929028 Backed out changeset a79554879d7b (bug 1914797) - - - - - 16 changed files: - dom/ipc/WindowGlobalParent.cpp - dom/security/test/https-only/browser.toml - + dom/security/test/https-only/browser_iframe_buttons.js - + dom/security/test/https-only/file_iframe_buttons.html - mobile/android/android-components/components/feature/app-links/src/main/java/mozilla/components/feature/app/links/SimpleRedirectDialogFragment.kt - mobile/android/android-components/components/feature/app-links/src/test/java/mozilla/components/feature/app/links/SimpleRedirectDialogFragmentTest.kt - mobile/android/android-components/components/feature/session/src/main/java/mozilla/components/feature/session/SessionUseCases.kt - mobile/android/android-components/components/feature/session/src/test/java/mozilla/components/feature/session/SessionUseCasesTest.kt - mobile/android/android-components/docs/changelog.md - mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/ui/CrashReportingTest.kt - mobile/android/geckoview/src/main/java/org/mozilla/gecko/Clipboard.java - mobile/android/geckoview/src/main/java/org/mozilla/geckoview/GeckoInputConnection.java - toolkit/components/httpsonlyerror/content/errorpage.html - toolkit/components/httpsonlyerror/content/errorpage.js - toolkit/locales/en-US/toolkit/about/aboutHttpsOnlyError.ftl - widget/android/nsClipboard.cpp Changes: ===================================== dom/ipc/WindowGlobalParent.cpp ===================================== @@ -1378,18 +1378,11 @@ mozilla::ipc::IPCResult WindowGlobalParent::RecvReloadWithHttpsOnlyException() { return IPC_FAIL(this, "HTTPS-only mode: Illegal state"); } - // If the error page is within an iFrame, we create an exception for whatever - // scheme the top-level site is currently on, because the user wants to - // unbreak the iFrame and not the top-level page. When the error page shows up - // on a top-level request, then we replace the scheme with http, because the - // user wants to unbreak the whole page. + // We replace the scheme with http, because the user wants to unbreak the + // whole page. nsCOMPtr<nsIURI> newURI; - if (!BrowsingContext()->IsTop()) { - newURI = innerURI; - } else { - Unused << NS_MutateURI(innerURI).SetScheme("http"_ns).Finalize( - getter_AddRefs(newURI)); - } + Unused << NS_MutateURI(innerURI).SetScheme("http"_ns).Finalize( + getter_AddRefs(newURI)); OriginAttributes originAttributes = TopWindowContext()->DocumentPrincipal()->OriginAttributesRef(); ===================================== dom/security/test/https-only/browser.toml ===================================== @@ -29,6 +29,9 @@ support-files = [ ["browser_httpsonly_speculative_connect.js"] support-files = ["file_httpsonly_speculative_connect.html"] +["browser_iframe_buttons.js"] +support-files = ["file_iframe_buttons.html"] + ["browser_iframe_test.js"] skip-if = [ "os == 'linux' && bits == 64", # Bug 1735565 ===================================== dom/security/test/https-only/browser_iframe_buttons.js ===================================== @@ -0,0 +1,50 @@ +/* Any copyright is dedicated to the Public Domain. + https://creativecommons.org/publicdomain/zero/1.0/ */ + +"use strict"; + +// Ensure the buttons at the buttom of the HTTPS-Only error page do not get +// displayed in an iframe (Bug 1909396). + +add_task(async function test_iframe_buttons() { + await BrowserTestUtils.withNewTab( + "https://example.com/browser/dom/security/test/https-only/file_iframe_button…", + async function (browser) { + await SpecialPowers.pushPrefEnv({ + set: [["dom.security.https_only_mode", true]], + }); + + await SpecialPowers.spawn(browser, [], async function () { + const iframe = content.document.getElementById("iframe"); + // eslint-disable-next-line @microsoft/sdl/no-insecure-url + iframe.src = "http://nocert.example.com"; + + await ContentTaskUtils.waitForCondition( + () => iframe.contentWindow.document.readyState === "interactive", + "Iframe error page should have loaded" + ); + + ok( + !!iframe.contentWindow.document.getElementById("explanation-iframe"), + "#explanation-iframe should exist" + ); + + is( + iframe.contentWindow.document + .getElementById("explanation-iframe") + .getAttribute("hidden"), + null, + "#explanation-iframe should not be hidden" + ); + + for (const id of ["explanation-continue", "goBack", "openInsecure"]) { + is( + iframe.contentWindow.document.getElementById(id), + null, + `#${id} should have been removed` + ); + } + }); + } + ); +}); ===================================== dom/security/test/https-only/file_iframe_buttons.html ===================================== @@ -0,0 +1,9 @@ +<!DOCTYPE html> +<html lang="en"> +<head> + <meta charset="UTF-8"> +</head> +<body> + <iframe id="iframe" frameborder="0"></iframe> +</body> +</html> ===================================== mobile/android/android-components/components/feature/app-links/src/main/java/mozilla/components/feature/app/links/SimpleRedirectDialogFragment.kt ===================================== @@ -11,6 +11,7 @@ import androidx.annotation.StringRes import androidx.annotation.StyleRes import androidx.annotation.VisibleForTesting import androidx.appcompat.app.AlertDialog +import mozilla.components.support.ktx.util.PromptAbuserDetector import mozilla.components.ui.widgets.withCenterAlignedButtons /** @@ -23,6 +24,10 @@ import mozilla.components.ui.widgets.withCenterAlignedButtons */ class SimpleRedirectDialogFragment : RedirectDialogFragment() { + @VisibleForTesting + internal var promptAbuserDetector = + PromptAbuserDetector(maxSuccessiveDialogSecondsLimit = TIME_SHOWN_OFFSET_SECONDS) + @VisibleForTesting internal var testingContext: Context? = null @@ -32,6 +37,8 @@ class SimpleRedirectDialogFragment : RedirectDialogFragment() { return if (themeID == 0) AlertDialog.Builder(context) else AlertDialog.Builder(context, themeID) } + promptAbuserDetector.updateJSDialogAbusedState() + return with(requireBundle()) { val dialogTitleText = getInt(KEY_TITLE_TEXT, R.string.mozac_feature_applinks_normal_confirm_dialog_title) val dialogMessageString = getString(KEY_MESSAGE_STRING, "") @@ -40,18 +47,29 @@ class SimpleRedirectDialogFragment : RedirectDialogFragment() { val themeResId = getInt(KEY_THEME_ID, 0) val cancelable = getBoolean(KEY_CANCELABLE, false) - getBuilder(themeResId) + val dialog = getBuilder(themeResId) .setTitle(dialogTitleText) .setMessage(dialogMessageString) - .setPositiveButton(positiveButtonText) { _, _ -> - onConfirmRedirect() - } + .setPositiveButton(positiveButtonText) { _, _ -> } .setNegativeButton(negativeButtonText) { _, _ -> onCancelRedirect() } .setCancelable(cancelable) .create() - .withCenterAlignedButtons() + + dialog.withCenterAlignedButtons() + dialog.setOnShowListener { + val okButton = dialog.getButton(AlertDialog.BUTTON_POSITIVE) + okButton.setOnClickListener { + if (promptAbuserDetector.areDialogsBeingAbused()) { + promptAbuserDetector.updateJSDialogAbusedState() + } else { + onConfirmRedirect() + dialog.dismiss() + } + } + } + dialog } } @@ -101,6 +119,7 @@ class SimpleRedirectDialogFragment : RedirectDialogFragment() { const val KEY_THEME_ID = "KEY_THEME_ID" const val KEY_CANCELABLE = "KEY_CANCELABLE" + private const val TIME_SHOWN_OFFSET_SECONDS = 1 } private fun requireBundle(): Bundle { ===================================== mobile/android/android-components/components/feature/app-links/src/test/java/mozilla/components/feature/app/links/SimpleRedirectDialogFragmentTest.kt ===================================== @@ -13,6 +13,7 @@ import mozilla.components.support.test.mock import mozilla.components.support.test.robolectric.testContext import org.junit.Assert.assertFalse import org.junit.Assert.assertTrue +import org.junit.Ignore import org.junit.Test import org.junit.runner.RunWith import org.mockito.Mockito.doNothing @@ -27,6 +28,7 @@ class SimpleRedirectDialogFragmentTest { private val themeResId = appcompatR.style.Theme_AppCompat_Light @Test + @Ignore("This will be addressed in another follow up ticket") fun `Dialog confirmed callback is called correctly`() { var onConfirmCalled = false var onCancelCalled = false @@ -104,6 +106,7 @@ class SimpleRedirectDialogFragmentTest { assertFalse(onCancelCalled) } + @Suppress("unused") private fun mockFragmentManager(): FragmentManager { val fragmentManager: FragmentManager = mock() val transaction: FragmentTransaction = mock() ===================================== mobile/android/android-components/components/feature/session/src/main/java/mozilla/components/feature/session/SessionUseCases.kt ===================================== @@ -4,7 +4,6 @@ package mozilla.components.feature.session -import mozilla.components.browser.state.action.ContentAction import mozilla.components.browser.state.action.CrashAction import mozilla.components.browser.state.action.EngineAction import mozilla.components.browser.state.action.LastAccessAction @@ -94,13 +93,6 @@ class SessionUseCases( flags = flags, additionalHeaders = additionalHeaders, ) - // Update the url in content immediately until the engine updates with any new changes to the state. - store.dispatch( - ContentAction.UpdateUrlAction( - loadSessionId, - url, - ), - ) store.dispatch( EngineAction.OptimizedLoadUrlTriggeredAction( loadSessionId, ===================================== mobile/android/android-components/components/feature/session/src/test/java/mozilla/components/feature/session/SessionUseCasesTest.kt ===================================== @@ -11,7 +11,6 @@ import mozilla.components.browser.state.action.EngineAction import mozilla.components.browser.state.action.TabListAction import mozilla.components.browser.state.engine.EngineMiddleware import mozilla.components.browser.state.selector.findTab -import mozilla.components.browser.state.selector.selectedTab import mozilla.components.browser.state.state.BrowserState import mozilla.components.browser.state.state.TabSessionState import mozilla.components.browser.state.state.createCustomTab @@ -81,7 +80,6 @@ class SessionUseCasesTest { assertEquals("mozilla", action.tabId) assertEquals("https://getpocket.com", action.url) } - assertEquals("https://getpocket.com", store.state.selectedTab?.content?.url) useCases.loadUrl("https://www.mozilla.org", LoadUrlFlags.select(LoadUrlFlags.EXTERNAL)) store.waitUntilIdle() @@ -95,7 +93,6 @@ class SessionUseCasesTest { assertEquals("https://www.mozilla.org", action.url) assertEquals(LoadUrlFlags.select(LoadUrlFlags.EXTERNAL), action.flags) } - assertEquals("https://www.mozilla.org", store.state.selectedTab?.content?.url) useCases.loadUrl("https://firefox.com", store.state.selectedTabId) store.waitUntilIdle() @@ -105,7 +102,6 @@ class SessionUseCasesTest { assertEquals("mozilla", action.tabId) assertEquals("https://firefox.com", action.url) } - assertEquals("https://firefox.com", store.state.selectedTab?.content?.url) useCases.loadUrl.invoke( "https://developer.mozilla.org", ===================================== mobile/android/android-components/docs/changelog.md ===================================== @@ -109,9 +109,6 @@ permalink: /changelog/ * **feature-customtabs** * Fallback behaviour when failing to open a new window in custom tab will now be loading the URL directly in the same custom tab. [Bug 1832357](https://bugzilla.mozilla.org/show_bug.cgi?id=1832357) -* **feature-session** - * Update URL in the store immediately when using the optimized load URL code path. - * **tooling-lint** * Added a lint rule to detect when `Response#close` may not have been called. Note: Currently, this rule only runs on Android Components. ===================================== mobile/android/fenix/app/src/androidTest/java/org/mozilla/fenix/ui/CrashReportingTest.kt ===================================== @@ -83,7 +83,7 @@ class CrashReportingTest : TestSetup() { verifyPageContent(tabCrashMessage) }.openTabDrawer(activityTestRule) { verifyExistingOpenTabs(firstWebPage.title) - verifyExistingOpenTabs("about:crashcontent") + verifyExistingOpenTabs(secondWebPage.title) }.closeTabDrawer { }.goToHomescreen { verifyExistingTopSitesList() ===================================== mobile/android/geckoview/src/main/java/org/mozilla/gecko/Clipboard.java ===================================== @@ -11,6 +11,7 @@ import android.content.ClipboardManager.OnPrimaryClipChangedListener; import android.content.Context; import android.content.res.AssetFileDescriptor; import android.os.Build; +import android.os.PersistableBundle; import android.text.TextUtils; import android.util.Log; import java.io.ByteArrayOutputStream; @@ -133,8 +134,9 @@ public final class Clipboard { * @return true if copy is successful. */ @WrapForJNI(calledFrom = "gecko") - public static boolean setText(final Context context, final CharSequence text) { - return setData(context, ClipData.newPlainText("text", text)); + public static boolean setText( + final Context context, final CharSequence text, final boolean isPrivateData) { + return setData(context, ClipData.newPlainText("text", text), isPrivateData); } /** @@ -147,8 +149,11 @@ public final class Clipboard { */ @WrapForJNI(calledFrom = "gecko") private static boolean setHTML( - final Context context, final CharSequence text, final String htmlText) { - return setData(context, ClipData.newHtmlText("html", text, htmlText)); + final Context context, + final CharSequence text, + final String htmlText, + final boolean isPrivateData) { + return setData(context, ClipData.newHtmlText("html", text, htmlText), isPrivateData); } /** @@ -158,11 +163,17 @@ public final class Clipboard { * @param clipData a {@link android.content.ClipData} to set to clipboard * @return true if copy is successful. */ - private static boolean setData(final Context context, final ClipData clipData) { + private static boolean setData( + final Context context, final ClipData clipData, final boolean isPrivateData) { // In API Level 11 and above, CLIPBOARD_SERVICE returns android.content.ClipboardManager, // which is a subclass of android.text.ClipboardManager. final ClipboardManager cm = (ClipboardManager) context.getSystemService(Context.CLIPBOARD_SERVICE); + if (isPrivateData && Build.VERSION.SDK_INT >= Build.VERSION_CODES.N) { + final PersistableBundle extras = new PersistableBundle(); + extras.putBoolean(ClipDescription.EXTRA_IS_SENSITIVE, true); + clipData.getDescription().setExtras(extras); + } try { cm.setPrimaryClip(clipData); } catch (final NullPointerException e) { @@ -228,7 +239,7 @@ public final class Clipboard { @WrapForJNI(calledFrom = "gecko") private static void clear(final Context context) { if (Build.VERSION.SDK_INT <= Build.VERSION_CODES.P) { - setText(context, null); + setText(context, null, false); return; } // Although we don't know more details of https://crbug.com/1203377, Blink doesn't use ===================================== mobile/android/geckoview/src/main/java/org/mozilla/geckoview/GeckoInputConnection.java ===================================== @@ -70,6 +70,7 @@ import org.mozilla.gecko.util.ThreadUtils; private ExtractedTextRequest mUpdateRequest; private final InputConnection mKeyInputConnection; private CursorAnchorInfo.Builder mCursorAnchorInfoBuilder; + private boolean mIsPrivateBrowsing; public static SessionTextInput.InputConnectionClient create( final GeckoSession session, @@ -208,12 +209,13 @@ import org.mozilla.gecko.util.ThreadUtils; // If selection is empty, we'll select everything if (selStart == selEnd) { // Fill the clipboard - Clipboard.setText(view.getContext(), editable); + Clipboard.setText(view.getContext(), editable, mIsPrivateBrowsing); editable.clear(); } else { Clipboard.setText( view.getContext(), - editable.subSequence(Math.min(selStart, selEnd), Math.max(selStart, selEnd))); + editable.subSequence(Math.min(selStart, selEnd), Math.max(selStart, selEnd)), + mIsPrivateBrowsing); editable.delete(selStart, selEnd); } break; @@ -231,7 +233,7 @@ import org.mozilla.gecko.util.ThreadUtils; : editable .toString() .substring(Math.min(selStart, selEnd), Math.max(selStart, selEnd)); - Clipboard.setText(view.getContext(), copiedText); + Clipboard.setText(view.getContext(), copiedText, mIsPrivateBrowsing); break; } return true; @@ -603,6 +605,9 @@ import org.mozilla.gecko.util.ThreadUtils; outAttrs.imeOptions |= EditorInfo.IME_FLAG_NO_EXTRACT_UI | EditorInfo.IME_FLAG_NO_FULLSCREEN; } + mIsPrivateBrowsing = + ((outAttrs.imeOptions & InputMethods.IME_FLAG_NO_PERSONALIZED_LEARNING) != 0); + if (DEBUG) { Log.d( LOGTAG, ===================================== toolkit/components/httpsonlyerror/content/errorpage.html ===================================== @@ -70,6 +70,16 @@ inert ></button> </div> + + <p id="explanation-iframe" hidden> + <span data-l10n-id="about-httpsonly-explanation-iframe"></span> + <a + id="mixedContentLearnMoreLink" + target="_blank" + data-l10n-id="about-httpsonly-link-learn-more" + ></a> + </p> + <div class="suggestion-box" hidden> <h2 data-l10n-id="about-httpsonly-suggestion-box-header"></h2> </div> ===================================== toolkit/components/httpsonlyerror/content/errorpage.js ===================================== @@ -29,28 +29,35 @@ function initPage() { document .getElementById("learnMoreLink") .setAttribute("href", baseSupportURL + "https-only-prefs"); + document + .getElementById("mixedContentLearnMoreLink") + .setAttribute("href", baseSupportURL + "mixed-content"); + + const isTopLevel = window.top == window; + if (!isTopLevel) { + for (const id of ["explanation-continue", "goBack", "openInsecure"]) { + document.getElementById(id).remove(); + } + document.getElementById("explanation-iframe").removeAttribute("hidden"); + return; + } document .getElementById("openInsecure") .addEventListener("click", onOpenInsecureButtonClick); + document + .getElementById("goBack") + .addEventListener("click", onReturnButtonClick); const delay = RPMGetIntPref("security.dialog_enable_delay", 1000); setTimeout(() => { document.getElementById("openInsecure").removeAttribute("inert"); }, delay); - if (window.top == window) { - document - .getElementById("goBack") - .addEventListener("click", onReturnButtonClick); - addAutofocus("#goBack", "beforeend"); - } else { - document.getElementById("goBack").remove(); - } + addAutofocus("#goBack", "beforeend"); - const isTopLevel = window.top == window; const hasWWWPrefix = pageUrl.href.startsWith("https://www."); - if (isTopLevel && !hasWWWPrefix) { + if (!hasWWWPrefix) { // HTTPS-Only generally simply replaces http: with https:; // here we additionally try to add www and see if that allows to upgrade the connection if it is top level ===================================== toolkit/locales/en-US/toolkit/about/aboutHttpsOnlyError.ftl ===================================== @@ -12,6 +12,7 @@ about-httpsonly-explanation-question = What could be causing this? about-httpsonly-explanation-nosupport = Most likely, the website simply does not support HTTPS. about-httpsonly-explanation-risk = It’s also possible that an attacker is involved. If you decide to visit the website, you should not enter any sensitive information like passwords, emails, or credit card details. about-httpsonly-explanation-continue = If you continue, HTTPS-Only Mode will be turned off temporarily for this site. +about-httpsonly-explanation-iframe = Due to mixed content blocking, it is not possible to manually allow this frame to load. about-httpsonly-button-continue-to-site = Continue to HTTP Site about-httpsonly-button-go-back = Go Back ===================================== widget/android/nsClipboard.cpp ===================================== @@ -92,14 +92,16 @@ nsClipboard::SetNativeClipboardData(nsITransferable* aTransferable, return rv; } + bool isPrivate = aTransferable->GetIsPrivateData(); + if (!html.IsEmpty() && java::Clipboard::SetHTML(java::GeckoAppShell::GetApplicationContext(), - text, html)) { + text, html, isPrivate)) { return NS_OK; } if (!text.IsEmpty() && java::Clipboard::SetText(java::GeckoAppShell::GetApplicationContext(), - text)) { + text, isPrivate)) { return NS_OK; } View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/245cd2… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/245cd2… You're receiving this email because of your account on gitlab.torproject.org.

1 0