- tor-commits - lists.torproject.org

[Git][tpo/applications/firefox-android][firefox-android-115.2.1-13.5-1] fixup! Rename as Tor Browser
by Dan Ballard (＠dan) 16 Nov '23

16 Nov '23

Dan Ballard pushed to branch firefox-android-115.2.1-13.5-1 at The Tor Project / Applications / firefox-android Commits: 88d70508 by clairehurst at 2023-11-15T19:12:44-07:00 fixup! Rename as Tor Browser - - - - - 1 changed file: - fenix/app/src/debug/res/drawable-hdpi/fenix_search_widget.png Changes: ===================================== fenix/app/src/debug/res/drawable-hdpi/fenix_search_widget.png ===================================== Binary files a/fenix/app/src/debug/res/drawable-hdpi/fenix_search_widget.png and b/fenix/app/src/debug/res/drawable-hdpi/fenix_search_widget.png differ View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/88d… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/firefox-android/-/commit/88d… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.4.0esr-13.5-1] fixup! Bug 42072: 2023 year end campaign for about:tor.
by Pier Angelo Vendrame (＠pierov) 16 Nov '23

16 Nov '23

Pier Angelo Vendrame pushed to branch tor-browser-115.4.0esr-13.5-1 at The Tor Project / Applications / Tor Browser Commits: ff9552f7 by Dan Ballard at 2023-11-15T17:19:03-08:00 fixup! Bug 42072: 2023 year end campaign for about:tor. Set donation matching amount and date. - - - - - 2 changed files: - browser/components/abouttor/content/aboutTor.html - browser/components/abouttor/content/aboutTor.js Changes: ===================================== browser/components/abouttor/content/aboutTor.html ===================================== @@ -36,11 +36,10 @@ alt="" src="chrome://browser/content/abouttor/yec-2023-image.svg" /> -  <p id="yec-2023-matching" data-l10n-id="yec-2023-matched-donation" - data-l10n-args='{ "amount": 0 }' + data-l10n-args='{ "amount": 75000 }' ></p> <h2 id="yec-2023-heading" data-l10n-id="yec-2023-introduction"></h2> <p id="yec-2023-body" data-l10n-id="yec-2023-please-donate"> ===================================== browser/components/abouttor/content/aboutTor.js ===================================== @@ -204,12 +204,11 @@ const YecWidget = { this.isOpen = false; }); - // TODO: Uncomment once we have a final donation matching amount. - //const donateMatchStart = Date.UTC(2023, 10, 13); // November 13th - //document.body.classList.toggle( - // "yec-2023-is-donation-matching", - // now >= donateMatchStart - //); + const donateMatchStart = Date.UTC(2023, 10, 22); // November 22nd + document.body.classList.toggle( + "yec-2023-is-donation-matching", + now >= donateMatchStart + ); this._updateDonateLocale(); }, View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ff9552f… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ff9552f… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-115.5.0esr-13.0-1] fixup! Firefox preference overrides.
by ma1 (＠ma1) 16 Nov '23

16 Nov '23

ma1 pushed to branch base-browser-115.5.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 030db1b1 by hackademix at 2023-11-16T16:14:56+01:00 fixup! Firefox preference overrides. Bug 42277: Enable storage.sync to fix broken webextensions - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -569,8 +569,6 @@ pref("extensions.abuseReport.enabled", false); // Therefore, do not allow download of additional language packs. They are not a // privacy/security threat, we are disabling them for UX reasons. See bug 41377. pref("intl.multilingual.downloadEnabled", false); -// Disk activity: Disable storage.sync (tor-browser#41424) -pref("webextensions.storage.sync.enabled", false); // Enforce certificate pinning, see: https://bugs.torproject.org/16206 pref("security.cert_pinning.enforcement_level", 2); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/030db1b… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/030db1b… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser][mullvad-browser-115.5.0esr-13.0-1] fixup! Firefox preference overrides.
by ma1 (＠ma1) 16 Nov '23

16 Nov '23

ma1 pushed to branch mullvad-browser-115.5.0esr-13.0-1 at The Tor Project / Applications / Mullvad Browser Commits: 7ce3d34f by hackademix at 2023-11-16T16:13:36+01:00 fixup! Firefox preference overrides. MB 250: Enable storage.sync to fix broken webextensions - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -567,8 +567,6 @@ pref("extensions.abuseReport.enabled", false); // Therefore, do not allow download of additional language packs. They are not a // privacy/security threat, we are disabling them for UX reasons. See bug 41377. pref("intl.multilingual.downloadEnabled", false); -// Disk activity: Disable storage.sync (tor-browser#41424) -pref("webextensions.storage.sync.enabled", false); // Enforce certificate pinning, see: https://bugs.torproject.org/16206 pref("security.cert_pinning.enforcement_level", 2); View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/7ce… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/commit/7ce… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][tor-browser-115.5.0esr-13.0-1] fixup! Firefox preference overrides.
by ma1 (＠ma1) 16 Nov '23

16 Nov '23

ma1 pushed to branch tor-browser-115.5.0esr-13.0-1 at The Tor Project / Applications / Tor Browser Commits: 2c6df91f by hackademix at 2023-11-16T16:09:40+01:00 fixup! Firefox preference overrides. Bug 42277: Enable storage.sync to fix broken webextensions - - - - - 1 changed file: - browser/app/profile/001-base-profile.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -569,8 +569,6 @@ pref("extensions.abuseReport.enabled", false); // Therefore, do not allow download of additional language packs. They are not a // privacy/security threat, we are disabling them for UX reasons. See bug 41377. pref("intl.multilingual.downloadEnabled", false); -// Disk activity: Disable storage.sync (tor-browser#41424) -pref("webextensions.storage.sync.enabled", false); // Enforce certificate pinning, see: https://bugs.torproject.org/16206 pref("security.cert_pinning.enforcement_level", 2); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/2c6df91… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/2c6df91… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser][base-browser-115.4.0esr-13.5-1] 2 commits: Bug 1849186 - Add a preference not to expose the content title in the window...
by Pier Angelo Vendrame (＠pierov) 16 Nov '23

16 Nov '23

Pier Angelo Vendrame pushed to branch base-browser-115.4.0esr-13.5-1 at The Tor Project / Applications / Tor Browser Commits: 2d2fd4cb by Pier Angelo Vendrame at 2023-11-16T13:36:51+01:00 Bug 1849186 - Add a preference not to expose the content title in the window title. r=Gijs,tabbrowser-reviewers,dao Differential Revision: https://phabricator.services.mozilla.com/D190496 - - - - - c6af08e3 by Pier Angelo Vendrame at 2023-11-16T13:36:52+01:00 fixup! Firefox preference overrides. Bug 41988: Do not expose page titles in winow title - - - - - 4 changed files: - browser/app/profile/001-base-profile.js - browser/app/profile/firefox.js - browser/base/content/tabbrowser.js - browser/components/privatebrowsing/test/browser/browser_privatebrowsing_windowtitle.js Changes: ===================================== browser/app/profile/001-base-profile.js ===================================== @@ -86,6 +86,12 @@ pref("browser.sessionstore.resume_from_crash", false); // Disable capturing thumbnails (tor-browser#41595) // Also not needed in PBM at the moment. pref("browser.pagethumbnails.capturing_disabled", true); +// tor-browser#41988: Remove page titles from window titles to prevent possible +// disk leaks, e.g., in system logs. +// For example, it happened that GNOME shell logged the window name that caused +// JS errors/unexpected conditions for unrelated issues. +pref("privacy.exposeContentTitleInWindow", false); +pref("privacy.exposeContentTitleInWindow.pbm", false); // Empty clipboard content from private windows on exit (tor-browser#42154) pref("browser.privatebrowsing.preserveClipboard", false); ===================================== browser/app/profile/firefox.js ===================================== @@ -968,7 +968,7 @@ pref("privacy.panicButton.enabled", true); // Time until temporary permissions expire, in ms pref("privacy.temporary_permission_expire_time_ms", 3600000); -// Enables protection mechanism against password spoofing for cross domain auh requests +// Enables protection mechanism against password spoofing for cross domain auth requests // See bug 791594 pref("privacy.authPromptSpoofingProtection", true); @@ -2104,6 +2104,12 @@ pref("privacy.webrtc.sharedTabWarning", false); // before navigating to the actual meeting room page. Doesn't survive tab close. pref("privacy.webrtc.deviceGracePeriodTimeoutMs", 3600000); +// Enable including the content in the window title. +// PBM users might want to disable this to avoid a possible source of disk +// leaks. +pref("privacy.exposeContentTitleInWindow", true); +pref("privacy.exposeContentTitleInWindow.pbm", true); + // Start the browser in e10s mode pref("browser.tabs.remote.autostart", true); pref("browser.tabs.remote.desktopbehavior", true); ===================================== browser/base/content/tabbrowser.js ===================================== @@ -102,6 +102,18 @@ true ); }); + XPCOMUtils.defineLazyPreferenceGetter( + this, + "_shouldExposeContentTitle", + "privacy.exposeContentTitleInWindow", + true + ); + XPCOMUtils.defineLazyPreferenceGetter( + this, + "_shouldExposeContentTitlePbm", + "privacy.exposeContentTitleInWindow.pbm", + true + ); if (AppConstants.MOZ_CRASHREPORTER) { ChromeUtils.defineModuleGetter( @@ -1072,6 +1084,19 @@ getWindowTitleForBrowser(aBrowser) { let docElement = document.documentElement; let title = ""; + let dataSuffix = + docElement.getAttribute("privatebrowsingmode") == "temporary" + ? "Private" + : "Default"; + let defaultTitle = docElement.dataset["title" + dataSuffix]; + + if ( + !this._shouldExposeContentTitle || + (PrivateBrowsingUtils.isWindowPrivate(window) && + !this._shouldExposeContentTitlePbm) + ) { + return defaultTitle; + } // If location bar is hidden and the URL type supports a host, // add the scheme and host to the title to prevent spoofing. @@ -1109,10 +1134,6 @@ title += tab.getAttribute("label").replace(/\0/g, ""); } - let dataSuffix = - docElement.getAttribute("privatebrowsingmode") == "temporary" - ? "Private" - : "Default"; if (title) { // We're using a function rather than just using `title` as the // new substring to avoid `$$`, `$'` etc. having a special @@ -1125,7 +1146,7 @@ ); } - return docElement.dataset["title" + dataSuffix]; + return defaultTitle; }, updateTitlebar() { ===================================== browser/components/privatebrowsing/test/browser/browser_privatebrowsing_windowtitle.js ===================================== @@ -107,4 +107,34 @@ add_task(async function test() { true, pb_about_pb_title ); + + await SpecialPowers.pushPrefEnv({ + set: [["privacy.exposeContentTitleInWindow.pbm", false]], + }); + await testTabTitle(await openWin(false), testPageURL, false, page_with_title); + await testTabTitle( + await openWin(true), + testPageURL, + true, + pb_page_without_title + ); + await SpecialPowers.pushPrefEnv({ + set: [ + ["privacy.exposeContentTitleInWindow", false], + ["privacy.exposeContentTitleInWindow.pbm", true], + ], + }); + await testTabTitle( + await openWin(false), + testPageURL, + false, + page_without_title + ); + // The generic preference set to false is intended to override the PBM one + await testTabTitle( + await openWin(true), + testPageURL, + true, + pb_page_without_title + ); }); View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/d25471… -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/d25471… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new tag base-browser-115.5.0esr-13.0-1-build1
by Pier Angelo Vendrame (＠pierov) 16 Nov '23

16 Nov '23

Pier Angelo Vendrame pushed new tag base-browser-115.5.0esr-13.0-1-build1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/base-brow… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Deleted tag base-browser-115.5.0esr-13.5-1-build1
by Pier Angelo Vendrame (＠pierov) 16 Nov '23

16 Nov '23

Pier Angelo Vendrame deleted tag base-browser-115.5.0esr-13.5-1-build1 at The Tor Project / Applications / Tor Browser -- You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/mullvad-browser] Pushed new branch mullvad-browser-115.5.0esr-13.5-1
by Pier Angelo Vendrame (＠pierov) 16 Nov '23

16 Nov '23

Pier Angelo Vendrame pushed new branch mullvad-browser-115.5.0esr-13.5-1 at The Tor Project / Applications / Mullvad Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/tree/mullv… You're receiving this email because of your account on gitlab.torproject.org.

1 0

[Git][tpo/applications/tor-browser] Pushed new branch tor-browser-115.5.0esr-13.5-1
by Pier Angelo Vendrame (＠pierov) 16 Nov '23

16 Nov '23

Pier Angelo Vendrame pushed new branch tor-browser-115.5.0esr-13.5-1 at The Tor Project / Applications / Tor Browser -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/tree/tor-brows… You're receiving this email because of your account on gitlab.torproject.org.

1 0