- tor-commits - lists.torproject.org

[torbutton/master] Bug 3739: SafeCache policy fails for https->http CORS
by mikeperry＠torproject.org 21 Aug '11

21 Aug '11

commit 349dcb1c5776936a37d21dfd70f9d0d2f1227513 Author: Mike Perry <mikeperry-git(a)fscked.org> Date: Sat Aug 20 17:42:20 2011 -0700 Bug 3739: SafeCache policy fails for https->http CORS We use the cookie permissions api to get the origin URI. It can do some magic we can't do from XPCOM. Thanks to Georg Koppen for the tip! --- src/chrome/content/stanford-safecache.js | 15 +++++++++++---- 1 files changed, 11 insertions(+), 4 deletions(-) diff --git a/src/chrome/content/stanford-safecache.js b/src/chrome/content/stanford-safecache.js index bf2fb16..0b08bda 100644 --- a/src/chrome/content/stanford-safecache.js +++ b/src/chrome/content/stanford-safecache.js @@ -55,6 +55,7 @@ function SSC_dump(msg) { function SSC_RequestListener(controller) { this.controller = controller; + this.cookie_permissions = Cc["@mozilla.org/cookie/permission;1"].getService(Ci.nsICookiePermission); } SSC_RequestListener.prototype = @@ -119,10 +120,16 @@ SSC_RequestListener.prototype = parent_host = null; // first party interaction } else if(!parent_host) { // Questionable first party interaction.. - if (!channel.referrer) { - torbutton_safelog(3, "SSC: No parent for ", channel.URI.spec); - } else { - parent_host = channel.referrer.host; + try { + var anuri = this.cookie_permissions.getOriginatingURI(channel); + parent_host = anuri.host; + } catch(e) { + torbutton_safelog(2, "Cookie API failed to get parent: "+e,channel.URI.spec); + if (!channel.referrer) { + torbutton_safelog(3, "SSC: No parent for ", channel.URI.spec); + } else { + parent_host = channel.referrer.host; + } } }

1 0

r24959: {website} Bump versions for new TBBs (website/trunk/include)
by Robert Ransom 20 Aug '11

20 Aug '11

Author: rransom Date: 2011-08-20 20:29:55 +0000 (Sat, 20 Aug 2011) New Revision: 24959 Modified: website/trunk/include/versions.wmi Log: Bump versions for new TBBs Modified: website/trunk/include/versions.wmi =================================================================== --- website/trunk/include/versions.wmi 2011-08-20 19:55:51 UTC (rev 24958) +++ website/trunk/include/versions.wmi 2011-08-20 20:29:55 UTC (rev 24959) @@ -21,10 +21,10 @@ <define-tag version-osx-ppc-stable whitespace=delete>0.2.1.30</define-tag> <define-tag version-osx-ppc-alpha whitespace=delete>0.2.2.30-rc</define-tag> -<define-tag version-torbrowserbundle whitespace=delete>1.3.26</define-tag> +<define-tag version-torbrowserbundle whitespace=delete>1.3.27</define-tag> <define-tag version-torbrowser-tor whitespace=delete>0.2.1.30</define-tag> -<define-tag version-torbrowser-tor-components whitespace=delete>libevent-2.0.12-stable, zlib-1.2.5, openssl-1.0.0d</define-tag> -<define-tag version-torbrowser-firefox whitespace=delete>3.6.19</define-tag> +<define-tag version-torbrowser-tor-components whitespace=delete>libevent-2.0.13-stable, zlib-1.2.5, openssl-1.0.0d</define-tag> +<define-tag version-torbrowser-firefox whitespace=delete>3.6.20</define-tag> <define-tag version-torbrowser-torbutton whitespace=delete>1.2.5</define-tag> <define-tag version-torbrowser-polipo whitespace=delete>1.0.4.1</define-tag> <define-tag version-torbrowser-pidgin whitespace=delete>2.7.5</define-tag> @@ -32,17 +32,17 @@ <define-tag version-torbrowser-vidalia whitespace=delete>0.2.12</define-tag> <define-tag version-torimbrowserbundle whitespace=delete>1.3.21</define-tag> -<define-tag version-torbrowserbundlelinux32 whitespace=delete>1.1.12</define-tag> -<define-tag version-torbrowserbundlelinux64 whitespace=delete>1.1.12</define-tag> +<define-tag version-torbrowserbundlelinux32 whitespace=delete>1.1.13</define-tag> +<define-tag version-torbrowserbundlelinux64 whitespace=delete>1.1.13</define-tag> <define-tag version-gnu-torbrowser-tor whitespace=delete>0.2.2.30-rc</define-tag> -<define-tag version-gnu-torbrowser-tor-components whitespace=delete>libevent-2.0.12, zlib-1.2.5, openssl-0.9.8p</define-tag> -<define-tag version-gnu-torbrowser-firefox whitespace=delete>3.6.19</define-tag> +<define-tag version-gnu-torbrowser-tor-components whitespace=delete>libevent-2.0.13, zlib-1.2.5, openssl-0.9.8p</define-tag> +<define-tag version-gnu-torbrowser-firefox whitespace=delete>3.6.20</define-tag> <define-tag version-gnu-torbrowser-torbutton whitespace=delete>1.2.5</define-tag> <define-tag version-gnu-torbrowser-vidalia whitespace=delete>0.2.12</define-tag> -<define-tag version-torbrowserbundleosx whitespace=delete>1.0.22</define-tag> +<define-tag version-torbrowserbundleosx whitespace=delete>1.0.23</define-tag> <define-tag version-osx-torbrowser-tor whitespace=delete>0.2.2.30-rc</define-tag> -<define-tag version-osx-torbrowser-firefox whitespace=delete>3.6.19</define-tag> +<define-tag version-osx-torbrowser-firefox whitespace=delete>3.6.20</define-tag> <define-tag version-osx-torbrowser-torbutton whitespace=delete>1.2.5</define-tag> <define-tag version-osx-torbrowser-polipo whitespace=delete>1.0.4.1</define-tag> <define-tag version-osx-torbrowser-vidalia whitespace=delete>0.2.12</define-tag>

1 0

[gettor/master] remove duplicate "Thank you for your request" line
by arma＠torproject.org 20 Aug '11

20 Aug '11

commit 80a5e94b13fc5d691b7f234d29a0eb3aa60da563 Author: Roger Dingledine <arma(a)torproject.org> Date: Sat Aug 20 16:07:39 2011 -0400 remove duplicate "Thank you for your request" line Fixes bug #3383 --- lib/gettor/i18n.py | 3 +-- 1 files changed, 1 insertions(+), 2 deletions(-) diff --git a/lib/gettor/i18n.py b/lib/gettor/i18n.py index 9fec331..6f40bd1 100644 --- a/lib/gettor/i18n.py +++ b/lib/gettor/i18n.py @@ -533,8 +533,7 @@ first file."""), _("""Packages might arrive out of order! Please make sure you received all packages before you attempt to unpack them!"""), # GETTOR_TEXT[38] -_("""Thank you for your request. -It was successfully understood. Your request is currently being processed. +_("""It was successfully understood. Your request is currently being processed. Your package should arrive within the next ten minutes."""), # GETTOR_TEXT[39] _("""If it doesn't arrive, the package might be too big for your mail provider.

1 0

r24958: {website} link to my new research item (website/trunk/getinvolved/en)
by Roger Dingledine 20 Aug '11

20 Aug '11

Author: arma Date: 2011-08-20 19:55:51 +0000 (Sat, 20 Aug 2011) New Revision: 24958 Modified: website/trunk/getinvolved/en/research.wml Log: link to my new research item Modified: website/trunk/getinvolved/en/research.wml =================================================================== --- website/trunk/getinvolved/en/research.wml 2011-08-19 03:29:40 UTC (rev 24957) +++ website/trunk/getinvolved/en/research.wml 2011-08-20 19:55:51 UTC (rev 24958) @@ -138,6 +138,13 @@ <ul> +<li>What algorithm should we use to assign Guard flags such that a) +we assign the flag to as many relays as possible, yet b) we minimize +the chance that Alice will use an attacker's node as a guard? See the +<a href="<blog>/research-problem-better-guard-rotation-parameters">blog +post</a> for details. +</li> + <li>For various diversity metrics, how has the diversity of the Tor network changed over time? How robust is it to change or attack? These results can help us make better design decisions. See the <a

1 0

[gettor/master] get my name out of the strings
by arma＠torproject.org 20 Aug '11

20 Aug '11

commit 1fbe14743b399134ee89ca9840d57a20adcec09a Author: Roger Dingledine <arma(a)torproject.org> Date: Sat Aug 20 15:43:35 2011 -0400 get my name out of the strings this should be a start at solving #3304. we still need all the translations to get fixed too. --- README.USER-HOWTO | 2 +- lib/gettor/responses.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.USER-HOWTO b/README.USER-HOWTO index 607c636..f068e02 100644 --- a/README.USER-HOWTO +++ b/README.USER-HOWTO @@ -57,7 +57,7 @@ example reply would look something like the following: The output should look somewhat like this: - gpg: Good signature from "Roger Dingledine <arma(a)mit.edu>" + gpg: Good signature from "Erinn Clark <...>" If you're not familiar with commandline tools, try looking for a graphical user interface for GnuPG on this website: diff --git a/lib/gettor/responses.py b/lib/gettor/responses.py index 4033a67..47bb7d3 100644 --- a/lib/gettor/responses.py +++ b/lib/gettor/responses.py @@ -64,7 +64,7 @@ def getPackageMsg(t): + t.gettext(i18n.GETTOR_TEXT[29]) + "\n\n" \ + t.gettext(i18n.GETTOR_TEXT[30]) + "\n\n" \ + t.gettext(i18n.GETTOR_TEXT[31]) + "\n\n" \ - + " gpg: Good signature from 'Roger Dingledine <arma(a)mit.edu>'" \ + + " gpg: Good signature from 'Erinn Clark <...>'" \ + "\n\n" \ + t.gettext(i18n.GETTOR_TEXT[32]) + "\n\n" \ + " http://www.gnupg.org/related_software/frontends.html" \

1 0

[torbrowser/maint-2.2] use the right mozconfig for linux
by erinn＠torproject.org 20 Aug '11

20 Aug '11

commit 830a8850ee2a288005c318a4449916c72536cc32 Author: Erinn Clark <erinn(a)torproject.org> Date: Sat Aug 20 21:42:22 2011 +0200 use the right mozconfig for linux --- build-scripts/linux.mk | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/build-scripts/linux.mk b/build-scripts/linux.mk index 1a70edb..7d3bab0 100644 --- a/build-scripts/linux.mk +++ b/build-scripts/linux.mk @@ -112,7 +112,7 @@ FIREFOX_DIR=$(FETCH_DIR)/mozilla-release build-firefox: cp ../src/current-patches/*Firefox* $(FIREFOX_DIR) cp patch-firefox-src.sh $(FIREFOX_DIR) - cp $(CONFIG_SRC)/mozconfig-osx-$(ARCH_TYPE) $(FIREFOX_DIR)/mozconfig + cp $(CONFIG_SRC)/dot_mozconfig $(FIREFOX_DIR)/mozconfig cd $(FIREFOX_DIR) && ./patch-firefox-src.sh cd $(FIREFOX_DIR) && make -f client.mk build

1 0

[torbrowser/maint-2.2] Merge branches 'ff6-minimal' and 'maint-2.2' into maint-2.2
by erinn＠torproject.org 20 Aug '11

20 Aug '11

commit 47c49cd1a98edf4dee0cfb72a2183c02cd43ca82 Author: Erinn Clark <erinn(a)torproject.org> Date: Sat Aug 20 16:14:28 2011 +0200 Merge branches 'ff6-minimal' and 'maint-2.2' into maint-2.2

1 0

[torbrowser/maint-2.2] update firefox-build target
by erinn＠torproject.org 20 Aug '11

20 Aug '11

commit a818cff3a7d842ebcab7ca9efc7fb191f16e419e Author: Erinn Clark <erinn(a)torproject.org> Date: Sat Aug 20 16:41:12 2011 +0200 update firefox-build target --- build-scripts/osx.mk | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/build-scripts/osx.mk b/build-scripts/osx.mk index 1a59db4..7151ddf 100644 --- a/build-scripts/osx.mk +++ b/build-scripts/osx.mk @@ -103,7 +103,7 @@ build-tor: FIREFOX_DIR=$(FETCH_DIR)/mozilla-release build-firefox: - cp ../src/current-patches/*Firefox5* $(FIREFOX_DIR) + cp ../src/current-patches/*Firefox* $(FIREFOX_DIR) cp patch-firefox-src.sh $(FIREFOX_DIR) cp $(CONFIG_SRC)/mozconfig-osx-$(ARCH_TYPE) $(FIREFOX_DIR)/mozconfig cd $(FIREFOX_DIR) && ./patch-firefox-src.sh

1 0

[torbrowser/maint-2.2] Fix the 3rd firefox patch.
by erinn＠torproject.org 20 Aug '11

20 Aug '11

commit f799f2a0b743a185b4aa6b1cb5b058c7a51f5670 Author: Mike Perry <mikeperry-git(a)fscked.org> Date: Sat Aug 20 10:23:09 2011 -0700 Fix the 3rd firefox patch. --- ...-Make-Intermediate-Cert-Store-memory-only.patch | 18 +++++++++--------- 1 files changed, 9 insertions(+), 9 deletions(-) diff --git a/src/current-patches/0003-Firefox6-Make-Intermediate-Cert-Store-memory-only.patch b/src/current-patches/0003-Firefox6-Make-Intermediate-Cert-Store-memory-only.patch index 9c568a0..68d426d 100644 --- a/src/current-patches/0003-Firefox6-Make-Intermediate-Cert-Store-memory-only.patch +++ b/src/current-patches/0003-Firefox6-Make-Intermediate-Cert-Store-memory-only.patch @@ -1,4 +1,4 @@ -From 2bdee82990bbda960d23d6122bf89d422bb63211 Mon Sep 17 00:00:00 2001 +From c50f65a9f11e09332c2c97678b685d2bdcad7d62 Mon Sep 17 00:00:00 2001 From: Mike Perry <mikeperry-git(a)fscked.org> Date: Fri, 19 Aug 2011 17:58:23 -0700 Subject: [PATCH 3/3] Firefox6: Make Intermediate Cert Store memory-only. @@ -8,17 +8,18 @@ This patch makes the intermediate SSL cert store exist in memory only. The pref must be set before startup in prefs.js. https://trac.torproject.org/projects/tor/ticket/2949 --- - security/manager/ssl/src/nsNSSComponent.cpp | 16 ++++++++++++++++ - 1 files changed, 16 insertions(+), 0 deletions(-) + security/manager/ssl/src/nsNSSComponent.cpp | 15 ++++++++++++++- + 1 files changed, 14 insertions(+), 1 deletions(-) diff --git a/security/manager/ssl/src/nsNSSComponent.cpp b/security/manager/ssl/src/nsNSSComponent.cpp -index 7a8569b..5261c5e 100644 +index 7a8569b..828c3eb 100644 --- a/security/manager/ssl/src/nsNSSComponent.cpp +++ b/security/manager/ssl/src/nsNSSComponent.cpp -@@ -1729,6 +1729,22 @@ nsNSSComponent::InitializeNSS(PRBool showWarningBox) +@@ -1729,8 +1729,21 @@ nsNSSComponent::InitializeNSS(PRBool showWarningBox) // Ubuntu 8.04, which loads any nonexistent "<configdir>/libnssckbi.so" as // "/usr/lib/nss/libnssckbi.so". PRUint32 init_flags = NSS_INIT_NOROOTINIT | NSS_INIT_OPTIMIZESPACE; +- SECStatus init_rv = ::NSS_Initialize(profileStr.get(), "", "", + PRBool nocertdb = false; + mPrefBranch->GetBoolPref("security.nocertdb", &nocertdb); + @@ -32,12 +33,11 @@ index 7a8569b..5261c5e 100644 + init_rv = ::NSS_NoDB_Init(NULL); + } else { + init_rv = ::NSS_Initialize(profileStr.get(), "", "", -+ SECMOD_DB, init_flags); -+ } -+ - SECStatus init_rv = ::NSS_Initialize(profileStr.get(), "", "", SECMOD_DB, init_flags); ++ } + if (init_rv != SECSuccess) { + PR_LOG(gPIPNSSLog, PR_LOG_DEBUG, ("can not init NSS r/w in %s\n", profileStr.get())); -- 1.7.3.4

1 0

[torbrowser/maint-2.2] bump experimental TBBs to 2.2.31, tor to 0.2.2.31-rc, Firefox to 6.0, update other versions too
by erinn＠torproject.org 20 Aug '11

20 Aug '11

commit cdc9067b126c9cf6e9ea5c62e16d816b83e8e8e9 Author: Erinn Clark <erinn(a)torproject.org> Date: Sat Aug 20 21:02:03 2011 +0200 bump experimental TBBs to 2.2.31, tor to 0.2.2.31-rc, Firefox to 6.0, update other versions too --- README.LINUX-2.2 | 9 ++++----- README.OSX-2.2 | 9 ++++----- README.WIN-2.2 | 9 ++++----- build-scripts/versions.mk | 14 +++++++------- changelog.linux-2.2 | 12 ++++++++++++ changelog.osx-2.2 | 14 +++++++++++++- changelog.win-2.2 | 14 +++++++++++++- 7 files changed, 57 insertions(+), 24 deletions(-) diff --git a/README.LINUX-2.2 b/README.LINUX-2.2 index c871c74..47f2684 100644 --- a/README.LINUX-2.2 +++ b/README.LINUX-2.2 @@ -5,12 +5,11 @@ Included applications --------------------- Vidalia 0.2.12 (with Qt 4.6.2) -Tor 0.2.2.30-rc (with libevent-2.0.12-stable, zlib-1.2.5 and openssl-1.0.0d) -Firefox (Aurora) 5.0.1 +Tor 0.2.2.31-rc (with libevent-2.0.13-stable, zlib-1.2.5 and openssl-1.0.0d) +Firefox (Aurora) 6.0 \_ Torbutton 1.4.0 - |_ NoScript 2.1.1.2 - |_ HTTPS-Everywhere 1.0.0development.4 - |_ BetterPrivacy 1.51 + |_ NoScript 2.1.2.6 + |_ HTTPS-Everywhere 1.0.0development.5 Usage ----- diff --git a/README.OSX-2.2 b/README.OSX-2.2 index 88564a6..750e540 100644 --- a/README.OSX-2.2 +++ b/README.OSX-2.2 @@ -5,12 +5,11 @@ Included applications --------------------- Vidalia 0.2.12 (with Qt 4.6.2) -Tor 0.2.2.30-rc (with libevent-2.0.12-stable, zlib-1.2.5 and openssl-1.0.0d) -Firefox (Aurora) 5.0.1 +Tor 0.2.2.31-rc (with libevent-2.0.13-stable, zlib-1.2.5 and openssl-1.0.0d) +Firefox (Aurora) 6.0 \_ Torbutton 1.4.0 - |_ NoScript 2.1.1.2 - |_ HTTPS-Everywhere 1.0.0development.4 - |_ BetterPrivacy 1.51 + |_ NoScript 2.1.2.6 + |_ HTTPS-Everywhere 1.0.0development.5 Usage ----- diff --git a/README.WIN-2.2 b/README.WIN-2.2 index dbe8ffb..519c64f 100644 --- a/README.WIN-2.2 +++ b/README.WIN-2.2 @@ -5,13 +5,12 @@ Included applications --------------------- Vidalia 0.2.12 (with Qt 4.6.2) -Tor 0.2.2.30-rc (with libevent-2.0.12-stable, zlib-1.2.5 and openssl-1.0.0d) +Tor 0.2.2.31-rc (with libevent-2.0.13-stable, zlib-1.2.5 and openssl-1.0.0d) FirefoxPortable 5.0.1 - \_ Firefox (Aurora) 5.0.1 + \_ Firefox (Aurora) 6.0 \_ Torbutton 1.4.0 - |_ NoScript 2.1.1.2 - |_ HTTPS-Everywhere 1.0.0development.4 - |_ BetterPrivacy 1.51 + |_ NoScript 2.1.2.6 + |_ HTTPS-Everywhere 1.0.0development.5 Usage ----- diff --git a/build-scripts/versions.mk b/build-scripts/versions.mk index af23c30..e116326 100644 --- a/build-scripts/versions.mk +++ b/build-scripts/versions.mk @@ -1,21 +1,21 @@ #!/usr/bin/make -RELEASE_VER=2.2.30 +RELEASE_VER=2.2.31 -HTTPSEVERY_VER=1.0.0development.4 -FIREFOX_VER=5.0.1 -LIBEVENT_VER=2.0.12-stable +HTTPSEVERY_VER=1.0.0development.5 +FIREFOX_VER=6.0 +LIBEVENT_VER=2.0.13-stable LIBPNG_VER=1.4.3 -NOSCRIPT_VER=2.1.1.2 +NOSCRIPT_VER=2.1.2.6 OPENSSL_VER=1.0.0d OTR_VER=3.2.0 PIDGIN_VER=2.6.4 POLIPO_VER=1.0.4.1 QT_VER=4.6.2 -TOR_VER=0.2.2.30-rc +TOR_VER=0.2.2.31-rc TORBUTTON_VER=1.4.0 VIDALIA_VER=0.2.12 -ZLIB_VER=1.2.5 +ZLIB_VER=1.4.0 ## Extension IDs FF_VENDOR_ID:=\{ec8030f7-c20a-464f-9b0e-13a3a9e97384\} diff --git a/changelog.linux-2.2 b/changelog.linux-2.2 index f9119c5..20d8bc5 100644 --- a/changelog.linux-2.2 +++ b/changelog.linux-2.2 @@ -1,3 +1,15 @@ +Tor Browser Bundle (2.2.30-1) alpha; suite=osx + + * Update Tor to 0.2.2.31-rc + * Update Firefox to 6.0 + * Update Libevent to 2.0.13-stable + * Update NoScript to 2.1.2.6 + * Update HTTPS Everywhere to 1.0.0development.5 + * Remove BetterPrivacy until we can figure out how to make it safe in all + bundles (see #3597) + + -- Erinn Clark <erinn(a)torproject.org> Sat Aug 20 20:40:52 CEST 2011 + Tor Browser Bundle (2.2.30-1) alpha; suite=linux * Update Tor to 0.2.2.30-rc diff --git a/changelog.osx-2.2 b/changelog.osx-2.2 index 888aaf5..ff6763d 100644 --- a/changelog.osx-2.2 +++ b/changelog.osx-2.2 @@ -1,8 +1,20 @@ +Tor Browser Bundle (2.2.30-1) alpha; suite=osx + + * Update Tor to 0.2.2.31-rc + * Update Firefox to 6.0 + * Update Libevent to 2.0.13-stable + * Update NoScript to 2.1.2.6 + * Update HTTPS Everywhere to 1.0.0development.5 + * Remove BetterPrivacy until we can figure out how to make it safe in all + bundles (see #3597) + + -- Erinn Clark <erinn(a)torproject.org> Sat Aug 20 20:40:52 CEST 2011 + Tor Browser Bundle (2.2.30-2) alpha; suite=osx * Update Firefox to 5.0.1 - - Erinn Clark <erinn(a)torproject.org> Wed Jul 13 09:07:41 ART 2011 + -- Erinn Clark <erinn(a)torproject.org> Wed Jul 13 09:07:41 ART 2011 Tor Browser Bundle (2.2.30-1) alpha; suite=osx diff --git a/changelog.win-2.2 b/changelog.win-2.2 index ee916bc..bde8ad4 100644 --- a/changelog.win-2.2 +++ b/changelog.win-2.2 @@ -1,8 +1,20 @@ +Tor Browser Bundle (2.2.30-1) alpha; suite=osx + + * Update Tor to 0.2.2.31-rc + * Update Firefox to 6.0 + * Update Libevent to 2.0.13-stable + * Update NoScript to 2.1.2.6 + * Update HTTPS Everywhere to 1.0.0development.5 + * Remove BetterPrivacy until we can figure out how to make it safe in all + bundles (see #3597) + + -- Erinn Clark <erinn(a)torproject.org> Sat Aug 20 20:40:52 CEST 2011 + Tor Browser Bundle (2.2.30-2) alpha; suite=windows * Update Firefox to 5.0.1 - - Erinn Clark <erinn(a)torproject.org> Wed Jul 13 09:07:41 ART 2011 + -- Erinn Clark <erinn(a)torproject.org> Wed Jul 13 09:07:41 ART 2011 Tor Browser Bundle (2.2.30-1) alpha; suite=windows

1 0