Pier Angelo Vendrame pushed to branch base-browser-102.9.0esr-12.5-1 at The Tor Project / Applications / Tor Browser
Commits:
-
cd73f25b
by hackademix at 2023-03-10T11:15:08+00:00
1 changed file:
Changes:
| ... | ... | @@ -370,6 +370,10 @@ pref("network.http.http2.enable-hpack-dump", false, locked); |
| 370 | 370 | // (defense in depth measure)
|
| 371 | 371 | pref("network.gio.supported-protocols", "");
|
| 372 | 372 | pref("media.peerconnection.enabled", false); // Disable WebRTC interfaces
|
| 373 | +// tor-browser#41667 - Defense in depth: use mDNS to avoid local IP leaks on Android too if user enables WebRTC
|
|
| 374 | +pref("media.peerconnection.ice.obfuscate_host_addresses", true);
|
|
| 375 | +// tor-browser#41671 - Defense in depth: connect using TURN only, to avoid IP leaks if user enables WebRTC
|
|
| 376 | +pref("media.peerconnection.ice.relay_only", true);
|
|
| 373 | 377 | // Disables media devices but only if `media.peerconnection.enabled` is set to
|
| 374 | 378 | // `false` as well. (see bug 16328 for this defense-in-depth measure)
|
| 375 | 379 | pref("media.navigator.enabled", false);
|