- tor-commits - lists.torproject.org

[Git][tpo/applications/tor-browser][tor-browser-115.30.0esr-13.5-1] Bug 1984940: Make sec-fetch user-triggered check default to secure r=ckerschb
by ma1 (＠ma1) 10 Nov '25

10 Nov '25

ma1 pushed to branch tor-browser-115.30.0esr-13.5-1 at The Tor Project / Applications / Tor Browser Commits: 7a746281 by Simon Friedberger at 2025-11-10T18:31:53+01:00 Bug 1984940: Make sec-fetch user-triggered check default to secure r=ckerschb Differential Revision: https://phabricator.services.mozilla.com/D265744 - - - - - 1 changed file: - dom/security/SecFetch.cpp Changes: ===================================== dom/security/SecFetch.cpp ===================================== @@ -232,6 +232,8 @@ bool IsSameSite(nsIChannel* aHTTPChannel) { // Helper function to determine whether a request was triggered // by the end user in the context of SecFetch. +// The more secure/closed state to return for this function is "false". +// A user triggered action is less restricted because it is not cross-origin. bool IsUserTriggeredForSecFetchSite(nsIHttpChannel* aHTTPChannel) { /* * The goal is to distinguish between "webby" navigations that are controlled @@ -243,8 +245,7 @@ bool IsUserTriggeredForSecFetchSite(nsIHttpChannel* aHTTPChannel) { ExtContentPolicyType contentType = loadInfo->GetExternalContentPolicyType(); // A request issued by the browser is always user initiated. - if (loadInfo->TriggeringPrincipal()->IsSystemPrincipal() && - contentType == ExtContentPolicy::TYPE_OTHER) { + if (loadInfo->TriggeringPrincipal()->IsSystemPrincipal()) { return true; } @@ -279,12 +280,12 @@ bool IsUserTriggeredForSecFetchSite(nsIHttpChannel* aHTTPChannel) { if (referrerInfo) { nsCOMPtr<nsIURI> originalReferrer; referrerInfo->GetOriginalReferrer(getter_AddRefs(originalReferrer)); - if (originalReferrer) { - return false; + if (!originalReferrer) { + return true; } } - return true; + return false; } void mozilla::dom::SecFetch::AddSecFetchDest(nsIHttpChannel* aHTTPChannel) { View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7a74628… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/7a74628… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag mb-15.0.1-build1
by morgan (＠morgan) 10 Nov '25

10 Nov '25

morgan pushed new tag mb-15.0.1-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/mb-… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-15.0.1-build1
by morgan (＠morgan) 10 Nov '25

10 Nov '25

morgan pushed new tag tbb-15.0.1-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-15.0] Bug 41610,41611: Prepare Tor, Mullvad Browser 15.0.1
by morgan (＠morgan) 10 Nov '25

10 Nov '25

morgan pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build Commits: 6aa82d7f by Morgan at 2025-11-10T13:37:17+00:00 Bug 41610,41611: Prepare Tor, Mullvad Browser 15.0.1 - - - - - 9 changed files: - projects/application-services/config - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/translation/config - rbm.conf Changes: ===================================== projects/application-services/config ===================================== @@ -16,7 +16,7 @@ container: use_container: 1 var: - build_number: 5 + build_number: 6 # This should be updated when the list of gradle dependencies is changed. gradle_dependencies_version: 12 gradle_version: 8.13 ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,18 @@ +Mullvad Browser 15.0.1 - November 11 2025 + * All Platforms + * Updated Firefox to 140.5.0esr + * Updated NoScript to 13.4 + * Updated uBlock Origin to 1.67.0 + * Bug 484: Rebase Mullvad Browser stable onto 140.5.0esr [mullvad-browser] + * Bug 487: Search engines are sorted alphabetically rather than the desired order [mullvad-browser] + * Bug 44275: Reduce console noise on security level guessing [tor-browser] + * Bug 44310: Default zoom always resets to 100% [tor-browser] + * Bug 44325: Backport Security Fixes from Firefox 145 [tor-browser] + * Bug 44333: Add the "No AI" version of DuckDuckGo to available search engines [tor-browser] + * Linux + * Bug 44273: Restore Noto CJK as Jigmo has a too low readability [tor-browser] + * Bug 44315: Font/text issue with self-upgrade window [tor-browser] + Mullvad Browser 15.0 - October 28 2025 * All Platforms * Updated Firefox to 140.4.0esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,30 @@ +Tor Browser 15.0.1 - November 11 2025 + * All Platforms + * Updated NoScript to 13.4 + * Bug 44319: Rebase Tor Browser onto 140.5.0esr [tor-browser] + * Bug 44325: Backport Security Fixes from Firefox 145 [tor-browser] + * Bug 44333: Add the "No AI" version of DuckDuckGo to available search engines [tor-browser] + * Bug 487: Search engines are sorted alphabetically rather than the desired order [mullvad-browser] + * Windows + macOS + Linux + * Updated Firefox to 140.5.0esr + * Bug 44310: Default zoom always resets to 100% [tor-browser] + * Bug 44314: Upgrade message not shown in about:tor [tor-browser] + * Linux + * Bug 44273: Restore Noto CJK as Jigmo has a too low readability [tor-browser] + * Bug 44315: Font/text issue with self-upgrade window [tor-browser] + * Android + * Updated GeckoView to 140.5.0esr + * Bug 44303: Extension update job might never work on Android [tor-browser] + * Build System + * All Platforms + * Bug 41618: Restore the expert bundle's version in the final release directory [tor-browser-build] + * Windows + Linux + Android + * Updated Go to 1.24.10 + * Android + * Bug 41617: Pass page size to zipalign [tor-browser-build] + * Bug 41620: Do not rerun zipalign when signing [tor-browser-build] + * Bug 41621: Remove support using older android build tools when signing 14.5 releases in tools/signing/wrappers/sign-apk [tor-browser-build] + Tor Browser 15.0 - October 28 2025 * All Platforms * Updated NoScript to 13.2.2 ===================================== projects/browser/config ===================================== @@ -113,12 +113,12 @@ input_files: enable: '[% ! c("var/android") %]' - filename: dmg-root enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4597669/noscript-13.2.2.x… + - URL: https://addons.mozilla.org/firefox/downloads/file/4609561/noscript-13.4.xpi name: noscript - sha256sum: f5ae80f2858057a3c8ebbafc12269659003f937e1cd781e05c01cc668e025c70 - - URL: https://addons.mozilla.org/firefox/downloads/file/4578681/ublock_origin-1.6… + sha256sum: 9496d2bc785f2b6dff36a3d6f60fa1a70d7b9a1895bc738c30387c94cd945168 + - URL: https://addons.mozilla.org/firefox/downloads/file/4598854/ublock_origin-1.6… name: ublock-origin - sha256sum: bc62cd930601212f1568964389352bbd4b1808466f2c9ac1198c754338077fb0 + sha256sum: b83c6ec49f817a8d05d288b53dbc7005cceccf82e9490d8683b3120aab3c133a enable: '[% c("var/mullvad-browser") %]' - URL: https://cdn.mullvad.net/browser-extension/0.9.5/mullvad-browser-extension-0… name: mullvad-extension ===================================== projects/firefox/config ===================================== @@ -16,12 +16,12 @@ container: use_container: 1 var: - firefox_platform_version: '140.4.0' + firefox_platform_version: '140.5.0' firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 5 + browser_build: 2 copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser @@ -114,8 +114,6 @@ targets: updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' mar_id_prefix: 'mullvadbrowser-mullvad' nightly_updates_publish_dir_prefix: mullvadbrowser- - browser_build: 4 - linux-x86_64: var: arch_deps: ===================================== projects/geckoview/config ===================================== @@ -18,12 +18,12 @@ container: build_apk: 1 var: - firefox_platform_version: '140.4.0' + firefox_platform_version: '140.5.0' geckoview_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 5 + browser_build: 2 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.24.9' +version: '1.24.10' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: c72f81ba54fe00efe7f3e7499d400979246881b13b775e9a9bb85541c11be695 + source_sha256: 34000dcc47a517b78fcf2657ee7d033328a57079fe60c4ed8b7b84260d1d19d3 no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: cdd3da6308bb3beb916744057af92331025053bb + git_hash: df313475cfd9eba31009edca530803dd991264d7 targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 3395fe5bdb7556490e31d3c6804e6240278bc708 + git_hash: 4fcb19da2c6b62bdd96828172162bea89ee3231e targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 807271d57878187b08fbd004276a3eea624421e6 + git_hash: d9fe5b503d0795a584caa2ce99ee101831967220 compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -74,11 +74,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '15.0' - torbrowser_build: 'build2' + torbrowser_version: '15.0.1' + torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2025/10/28 09:45:00' + browser_release_date: '2025/11/10 09:19:47' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: release browser_platforms: @@ -128,13 +128,13 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - '15.0' - 14.5.8 - 14.5.7 - - 14.5.6 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' - torbrowser_legacy_version: 13.5.23 - torbrowser_legacy_platform_version: 115.29.0 + torbrowser_legacy_version: 13.5.24 + torbrowser_legacy_platform_version: 115.30.0 # By default, we sort the list of installed packages. This allows sharing # containers with identical list of packages, even if they are not listed View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/6… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/6… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build][maint-15.0] Bug 41610,41611: Prpeare Tor, Mullvad Browser 15.0.1
by morgan (＠morgan) 10 Nov '25

10 Nov '25

morgan pushed to branch maint-15.0 at The Tor Project / Applications / tor-browser-build Commits: ccec0f0a by Morgan at 2025-11-10T09:55:51+00:00 Bug 41610,41611: Prpeare Tor, Mullvad Browser 15.0.1 - - - - - 9 changed files: - projects/application-services/config - projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt - projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt - projects/browser/config - projects/firefox/config - projects/geckoview/config - projects/go/config - projects/translation/config - rbm.conf Changes: ===================================== projects/application-services/config ===================================== @@ -16,7 +16,7 @@ container: use_container: 1 var: - build_number: 5 + build_number: 6 # This should be updated when the list of gradle dependencies is changed. gradle_dependencies_version: 12 gradle_version: 8.13 ===================================== projects/browser/Bundle-Data/Docs-MB/ChangeLog.txt ===================================== @@ -1,3 +1,18 @@ +Mullvad Browser 15.0.1 - November 11 2025 + * All Platforms + * Updated Firefox to 140.5.0esr + * Updated NoScript to 13.4 + * Updated uBlock Origin to 1.67.0 + * Bug 484: Rebase Mullvad Browser stable onto 140.5.0esr [mullvad-browser] + * Bug 487: Search engines are sorted alphabetically rather than the desired order [mullvad-browser] + * Bug 44275: Reduce console noise on security level guessing [tor-browser] + * Bug 44310: Default zoom always resets to 100% [tor-browser] + * Bug 44325: Backport Security Fixes from Firefox 145 [tor-browser] + * Bug 44333: Add the "No AI" version of DuckDuckGo to available search engines [tor-browser] + * Linux + * Bug 44273: Restore Noto CJK as Jigmo has a too low readability [tor-browser] + * Bug 44315: Font/text issue with self-upgrade window [tor-browser] + Mullvad Browser 15.0 - October 28 2025 * All Platforms * Updated Firefox to 140.4.0esr ===================================== projects/browser/Bundle-Data/Docs-TBB/ChangeLog.txt ===================================== @@ -1,3 +1,30 @@ +Tor Browser 15.0.1 - November 11 2025 + * All Platforms + * Updated NoScript to 13.4 + * Bug 44319: Rebase Tor Browser onto 140.5.0esr [tor-browser] + * Bug 44325: Backport Security Fixes from Firefox 145 [tor-browser] + * Bug 44333: Add the "No AI" version of DuckDuckGo to available search engines [tor-browser] + * Bug 487: Search engines are sorted alphabetically rather than the desired order [mullvad-browser] + * Windows + macOS + Linux + * Updated Firefox to 140.5.0esr + * Bug 44310: Default zoom always resets to 100% [tor-browser] + * Bug 44314: Upgrade message not shown in about:tor [tor-browser] + * Linux + * Bug 44273: Restore Noto CJK as Jigmo has a too low readability [tor-browser] + * Bug 44315: Font/text issue with self-upgrade window [tor-browser] + * Android + * Updated GeckoView to 140.5.0esr + * Bug 44303: Extension update job might never work on Android [tor-browser] + * Build System + * All Platforms + * Bug 41618: Restore the expert bundle's version in the final release directory [tor-browser-build] + * Windows + Linux + Android + * Updated Go to 1.24.10 + * Android + * Bug 41617: Pass page size to zipalign [tor-browser-build] + * Bug 41620: Do not rerun zipalign when signing [tor-browser-build] + * Bug 41621: Remove support using older android build tools when signing 14.5 releases in tools/signing/wrappers/sign-apk [tor-browser-build] + Tor Browser 15.0 - October 28 2025 * All Platforms * Updated NoScript to 13.2.2 ===================================== projects/browser/config ===================================== @@ -113,12 +113,12 @@ input_files: enable: '[% ! c("var/android") %]' - filename: dmg-root enable: '[% ! c("var/android") %]' - - URL: https://addons.mozilla.org/firefox/downloads/file/4597669/noscript-13.2.2.x… + - URL: https://addons.mozilla.org/firefox/downloads/file/4609561/noscript-13.4.xpi name: noscript - sha256sum: f5ae80f2858057a3c8ebbafc12269659003f937e1cd781e05c01cc668e025c70 - - URL: https://addons.mozilla.org/firefox/downloads/file/4578681/ublock_origin-1.6… + sha256sum: 9496d2bc785f2b6dff36a3d6f60fa1a70d7b9a1895bc738c30387c94cd945168 + - URL: https://addons.mozilla.org/firefox/downloads/file/4598854/ublock_origin-1.6… name: ublock-origin - sha256sum: bc62cd930601212f1568964389352bbd4b1808466f2c9ac1198c754338077fb0 + sha256sum: b83c6ec49f817a8d05d288b53dbc7005cceccf82e9490d8683b3120aab3c133a enable: '[% c("var/mullvad-browser") %]' - URL: https://cdn.mullvad.net/browser-extension/0.9.5/mullvad-browser-extension-0… name: mullvad-extension ===================================== projects/firefox/config ===================================== @@ -16,12 +16,12 @@ container: use_container: 1 var: - firefox_platform_version: '140.4.0' + firefox_platform_version: '140.5.0' firefox_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 5 + browser_build: 2 copyright_year: '[% exec("git show -s --format=%ci " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }).remove("-.*") %]' nightly_updates_publish_dir: '[% c("var/nightly_updates_publish_dir_prefix") %]nightly-[% c("var/osname") %]' gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser @@ -114,8 +114,6 @@ targets: updater_url: 'https://cdn.mullvad.net/browser/update_responses/update_1/' mar_id_prefix: 'mullvadbrowser-mullvad' nightly_updates_publish_dir_prefix: mullvadbrowser- - browser_build: 4 - linux-x86_64: var: arch_deps: ===================================== projects/geckoview/config ===================================== @@ -18,12 +18,12 @@ container: build_apk: 1 var: - firefox_platform_version: '140.4.0' + firefox_platform_version: '140.5.0' geckoview_version: '[% c("var/firefox_platform_version") %]esr' browser_series: '15.0' browser_rebase: 1 browser_branch: '[% c("var/browser_series") %]-[% c("var/browser_rebase") %]' - browser_build: 5 + browser_build: 2 gitlab_project: https://gitlab.torproject.org/tpo/applications/tor-browser git_commit: '[% exec("git rev-parse " _ c("git_hash") _ "^{commit}", { exec_noco => 1 }) %]' deps: ===================================== projects/go/config ===================================== @@ -1,11 +1,11 @@ # vim: filetype=yaml sw=2 -version: '1.24.9' +version: '1.24.10' filename: '[% project %]-[% c("version") %]-[% c("var/osname") %]-[% c("var/build_id") %].tar.[% c("compress_tar") %]' container: use_container: 1 var: - source_sha256: c72f81ba54fe00efe7f3e7499d400979246881b13b775e9a9bb85541c11be695 + source_sha256: 34000dcc47a517b78fcf2657ee7d033328a57079fe60c4ed8b7b84260d1d19d3 no_crosscompile: 1 setup: | mkdir -p /var/tmp/dist ===================================== projects/translation/config ===================================== @@ -12,13 +12,13 @@ compress_tar: 'gz' steps: base-browser: base-browser: '[% INCLUDE build %]' - git_hash: cdd3da6308bb3beb916744057af92331025053bb + git_hash: df313475cfd9eba31009edca530803dd991264d7 targets: nightly: git_hash: 'base-browser' tor-browser: tor-browser: '[% INCLUDE build %]' - git_hash: 3395fe5bdb7556490e31d3c6804e6240278bc708 + git_hash: 4fcb19da2c6b62bdd96828172162bea89ee3231e targets: nightly: git_hash: 'tor-browser' @@ -32,7 +32,7 @@ steps: fenix: '[% INCLUDE build %]' # We need to bump the commit before releasing but just pointing to a branch # might cause too much rebuidling of the Firefox part. - git_hash: 807271d57878187b08fbd004276a3eea624421e6 + git_hash: d9fe5b503d0795a584caa2ce99ee101831967220 compress_tar: 'zst' targets: nightly: ===================================== rbm.conf ===================================== @@ -74,11 +74,11 @@ buildconf: git_signtag_opt: '-s' var: - torbrowser_version: '15.0' - torbrowser_build: 'build2' + torbrowser_version: '15.0.1' + torbrowser_build: 'build1' # This should be the date of when the build is started. For the build # to be reproducible, browser_release_date should always be in the past. - browser_release_date: '2025/10/28 09:45:00' + browser_release_date: '2025/11/10 09:19:47' browser_release_date_timestamp: '[% USE date; date.format(c("var/browser_release_date"), "%s") %]' browser_default_channel: release browser_platforms: @@ -128,13 +128,13 @@ var: updater_enabled: 1 build_mar: 1 torbrowser_incremental_from: + - '15.0' - 14.5.8 - 14.5.7 - - 14.5.6 mar_channel_id: '[% c("var/projectname") %]-torproject-[% c("var/channel") %]' - torbrowser_legacy_version: 13.5.23 - torbrowser_legacy_platform_version: 115.29.0 + torbrowser_legacy_version: 13.5.24 + torbrowser_legacy_platform_version: 115.30.0 # By default, we sort the list of installed packages. This allows sharing # containers with identical list of packages, even if they are not listed View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/commit/c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new tag mullvad-browser-140.5.0esr-15.0-1-build2
by ma1 (＠ma1) 10 Nov '25

10 Nov '25

ma1 pushed new tag mullvad-browser-140.5.0esr-15.0-1-build2 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-140.5.0esr-15.0-1] 2 commits: Bug 1880634 - Use chrome-only dispatch for the MozTogglePictureInPicture event. r=niklas
by ma1 (＠ma1) 10 Nov '25

10 Nov '25

ma1 pushed to branch mullvad-browser-140.5.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 35a291da by Mike Conley at 2025-11-10T11:48:22+01:00 Bug 1880634 - Use chrome-only dispatch for the MozTogglePictureInPicture event. r=niklas Differential Revision: https://phabricator.services.mozilla.com/D202063 - - - - - 629f8c06 by Nika Layzell at 2025-11-10T11:48:30+01:00 Bug 1987977 - Add extra fd validation to ChannelPosix, r=ipc-reviewers,jld Every attached FD has a guaranteed 4 bytes of payload, so this check should be redundant unless a message payload is manually constructed or corrupted. Differential Revision: https://phabricator.services.mozilla.com/D265038 - - - - - 5 changed files: - browser/actors/ContextMenuChild.sys.mjs - ipc/chromium/src/chrome/common/ipc_channel_posix.cc - toolkit/actors/PictureInPictureChild.sys.mjs - toolkit/components/pictureinpicture/tests/click-event-helper.js - toolkit/components/pictureinpicture/tests/head.js Changes: ===================================== browser/actors/ContextMenuChild.sys.mjs ===================================== @@ -121,7 +121,10 @@ export class ContextMenuChild extends JSWindowActorChild { }, this.contentWindow ); - media.dispatchEvent(event); + this.contentWindow.windowUtils.dispatchEventToChromeOnly( + media, + event + ); break; } } ===================================== ipc/chromium/src/chrome/common/ipc_channel_posix.cc ===================================== @@ -419,8 +419,9 @@ bool Channel::ChannelImpl::ProcessIncomingMessages() { error = "Message needs unreceived descriptors"; } - if (m.header()->num_handles > - IPC::Message::MAX_DESCRIPTORS_PER_MESSAGE) { + size_t maxHandles = std::min<size_t>( + m.size(), IPC::Message::MAX_DESCRIPTORS_PER_MESSAGE); + if (m.header()->num_handles > maxHandles) { // There are too many descriptors in this message error = "Message requires an excessive number of descriptors"; } @@ -536,8 +537,9 @@ bool Channel::ChannelImpl::ProcessOutgoingMessages() { } #endif - if (msg->attached_handles_.Length() > - IPC::Message::MAX_DESCRIPTORS_PER_MESSAGE) { + size_t maxHandles = std::min<size_t>( + msg->size(), IPC::Message::MAX_DESCRIPTORS_PER_MESSAGE); + if (msg->attached_handles_.Length() > maxHandles) { MOZ_DIAGNOSTIC_CRASH("Too many file descriptors!"); CHROMIUM_LOG(FATAL) << "Too many file descriptors!"; // This should not be reached. ===================================== toolkit/actors/PictureInPictureChild.sys.mjs ===================================== @@ -191,7 +191,10 @@ export class PictureInPictureLauncherChild extends JSWindowActorChild { detail: { reason }, } ); - video.dispatchEvent(stopPipEvent); + this.contentWindow.windowUtils.dispatchEventToChromeOnly( + video, + stopPipEvent + ); return; } @@ -703,7 +706,7 @@ export class PictureInPictureToggleChild extends JSWindowActorChild { detail: { reason: "UrlBar", eventExtraKeys }, } ); - video.dispatchEvent(pipEvent); + this.contentWindow.windowUtils.dispatchEventToChromeOnly(video, pipEvent); } } @@ -1092,7 +1095,7 @@ export class PictureInPictureToggleChild extends JSWindowActorChild { detail: { reason: "Toggle" }, } ); - video.dispatchEvent(pipEvent); + this.contentWindow.windowUtils.dispatchEventToChromeOnly(video, pipEvent); // Since we've initiated Picture-in-Picture, we can go ahead and // hide the toggle now. ===================================== toolkit/components/pictureinpicture/tests/click-event-helper.js ===================================== @@ -2,13 +2,20 @@ http://creativecommons.org/publicdomain/zero/1.0/ */ /** - * This helper script is used to record mouse button events for - * Picture-in-Picture toggle click tests. Anytime the toggle is - * clicked, we expect none of the events to be fired. Otherwise, - * all events should be fired when clicking. + * This helper script is used to record events for Picture-in-Picture toggle + * click tests. Anytime the toggle is clicked, we expect none of the events to + * be fired. Otherwise, all (except MozTogglePictureInPicture) events should be + * fired when clicking on web content. */ -let eventTypes = ["pointerdown", "mousedown", "pointerup", "mouseup", "click"]; +let eventTypes = [ + "MozTogglePictureInPicture", + "pointerdown", + "mousedown", + "pointerup", + "mouseup", + "click", +]; for (let event of eventTypes) { addEventListener(event, recordEvent, { capture: true }); ===================================== toolkit/components/pictureinpicture/tests/head.js ===================================== @@ -139,7 +139,7 @@ async function triggerPictureInPicture(browser, videoID, triggerFn) { let event = new content.CustomEvent("MozTogglePictureInPicture", { bubbles: true, }); - video.dispatchEvent(event); + content.windowUtils.dispatchEventToChromeOnly(video, event); await ContentTaskUtils.waitForCondition(() => { return video.isCloningElementVisually; }, "Video is being cloned visually."); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/0c… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/0c… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag base-browser-140.5.0esr-15.0-1-build2
by ma1 (＠ma1) 10 Nov '25

10 Nov '25

ma1 pushed new tag base-browser-140.5.0esr-15.0-1-build2 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/base-brow… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser-build] Pushed new tag tbb-13.5.24-build1
by morgan (＠morgan) 10 Nov '25

10 Nov '25

morgan pushed new tag tbb-13.5.24-build1 at The Tor Project / Applications / tor-browser-build -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/tree/tbb… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-140.5.0esr-15.0-1] 2 commits: Bug 1880634 - Use chrome-only dispatch for the MozTogglePictureInPicture event. r=niklas
by ma1 (＠ma1) 10 Nov '25

10 Nov '25

ma1 pushed to branch base-browser-140.5.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: f1070f84 by Mike Conley at 2025-11-10T11:35:37+01:00 Bug 1880634 - Use chrome-only dispatch for the MozTogglePictureInPicture event. r=niklas Differential Revision: https://phabricator.services.mozilla.com/D202063 - - - - - 0dd46822 by Nika Layzell at 2025-11-10T11:36:52+01:00 Bug 1987977 - Add extra fd validation to ChannelPosix, r=ipc-reviewers,jld Every attached FD has a guaranteed 4 bytes of payload, so this check should be redundant unless a message payload is manually constructed or corrupted. Differential Revision: https://phabricator.services.mozilla.com/D265038 - - - - - 5 changed files: - browser/actors/ContextMenuChild.sys.mjs - ipc/chromium/src/chrome/common/ipc_channel_posix.cc - toolkit/actors/PictureInPictureChild.sys.mjs - toolkit/components/pictureinpicture/tests/click-event-helper.js - toolkit/components/pictureinpicture/tests/head.js Changes: ===================================== browser/actors/ContextMenuChild.sys.mjs ===================================== @@ -121,7 +121,10 @@ export class ContextMenuChild extends JSWindowActorChild { }, this.contentWindow ); - media.dispatchEvent(event); + this.contentWindow.windowUtils.dispatchEventToChromeOnly( + media, + event + ); break; } } ===================================== ipc/chromium/src/chrome/common/ipc_channel_posix.cc ===================================== @@ -419,8 +419,9 @@ bool Channel::ChannelImpl::ProcessIncomingMessages() { error = "Message needs unreceived descriptors"; } - if (m.header()->num_handles > - IPC::Message::MAX_DESCRIPTORS_PER_MESSAGE) { + size_t maxHandles = std::min<size_t>( + m.size(), IPC::Message::MAX_DESCRIPTORS_PER_MESSAGE); + if (m.header()->num_handles > maxHandles) { // There are too many descriptors in this message error = "Message requires an excessive number of descriptors"; } @@ -536,8 +537,9 @@ bool Channel::ChannelImpl::ProcessOutgoingMessages() { } #endif - if (msg->attached_handles_.Length() > - IPC::Message::MAX_DESCRIPTORS_PER_MESSAGE) { + size_t maxHandles = std::min<size_t>( + msg->size(), IPC::Message::MAX_DESCRIPTORS_PER_MESSAGE); + if (msg->attached_handles_.Length() > maxHandles) { MOZ_DIAGNOSTIC_CRASH("Too many file descriptors!"); CHROMIUM_LOG(FATAL) << "Too many file descriptors!"; // This should not be reached. ===================================== toolkit/actors/PictureInPictureChild.sys.mjs ===================================== @@ -191,7 +191,10 @@ export class PictureInPictureLauncherChild extends JSWindowActorChild { detail: { reason }, } ); - video.dispatchEvent(stopPipEvent); + this.contentWindow.windowUtils.dispatchEventToChromeOnly( + video, + stopPipEvent + ); return; } @@ -703,7 +706,7 @@ export class PictureInPictureToggleChild extends JSWindowActorChild { detail: { reason: "UrlBar", eventExtraKeys }, } ); - video.dispatchEvent(pipEvent); + this.contentWindow.windowUtils.dispatchEventToChromeOnly(video, pipEvent); } } @@ -1092,7 +1095,7 @@ export class PictureInPictureToggleChild extends JSWindowActorChild { detail: { reason: "Toggle" }, } ); - video.dispatchEvent(pipEvent); + this.contentWindow.windowUtils.dispatchEventToChromeOnly(video, pipEvent); // Since we've initiated Picture-in-Picture, we can go ahead and // hide the toggle now. ===================================== toolkit/components/pictureinpicture/tests/click-event-helper.js ===================================== @@ -2,13 +2,20 @@ http://creativecommons.org/publicdomain/zero/1.0/ */ /** - * This helper script is used to record mouse button events for - * Picture-in-Picture toggle click tests. Anytime the toggle is - * clicked, we expect none of the events to be fired. Otherwise, - * all events should be fired when clicking. + * This helper script is used to record events for Picture-in-Picture toggle + * click tests. Anytime the toggle is clicked, we expect none of the events to + * be fired. Otherwise, all (except MozTogglePictureInPicture) events should be + * fired when clicking on web content. */ -let eventTypes = ["pointerdown", "mousedown", "pointerup", "mouseup", "click"]; +let eventTypes = [ + "MozTogglePictureInPicture", + "pointerdown", + "mousedown", + "pointerup", + "mouseup", + "click", +]; for (let event of eventTypes) { addEventListener(event, recordEvent, { capture: true }); ===================================== toolkit/components/pictureinpicture/tests/head.js ===================================== @@ -139,7 +139,7 @@ async function triggerPictureInPicture(browser, videoID, triggerFn) { let event = new content.CustomEvent("MozTogglePictureInPicture", { bubbles: true, }); - video.dispatchEvent(event); + content.windowUtils.dispatchEventToChromeOnly(video, event); await ContentTaskUtils.waitForCondition(() => { return video.isCloningElementVisually; }, "Video is being cloned visually."); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/9ebdbd… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/9ebdbd… You're receiving this email because of your account on gitlab.torproject.org.

1 0