commit 00d5bc28bf82c9fb049368b78cff8f43d775c299 Author: Mike Perry mikeperry-git@fscked.org Date: Wed Jun 1 00:31:09 2011 -0700
Bug 3101: Disable WebGL. Too many unknowns for now.
I think these folks may be right, at least for the short term: http://www.contextis.com/resources/blog/webgl/
Remote fonts were a minefield of exploits, and the vulnerability surface there was like 1% of OpenGL.
After a few releases, we can revisit the remaining fingerprinting issues and consider re-enabling. --- src/chrome/content/torbutton.js | 5 +++++ src/defaults/preferences/preferences.js | 1 + src/install.rdf | 2 +- 3 files changed, 7 insertions(+), 1 deletions(-)
diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js index 9f5c5fe..401443a 100644 --- a/src/chrome/content/torbutton.js +++ b/src/chrome/content/torbutton.js @@ -1403,6 +1403,11 @@ function torbutton_update_status(mode, force_update) { !mode, mode, changed); }
+ if (m_tb_ff4) { + torbutton_setBoolPref("webgl.disabled", "webgl_disabled", mode, mode, + changed); + } + if(m_tb_ff35) { // Disable geolocation torbutton_setBoolPref("geo.enabled", "geo_enabled", !mode, mode, diff --git a/src/defaults/preferences/preferences.js b/src/defaults/preferences/preferences.js index 58c8abe..fd88a1e 100644 --- a/src/defaults/preferences/preferences.js +++ b/src/defaults/preferences/preferences.js @@ -93,6 +93,7 @@ pref("extensions.torbutton.saved.buildID_override",""); pref("extensions.torbutton.saved.useragent_vendor", ""); pref("extensions.torbutton.saved.useragent_vendorSub",""); pref("extensions.torbutton.saved.transparentTor",false); +pref("extensions.torbutton.saved.webgl_disabled", false); // network.dns.disablePrefetch is a hidden option. It has no default value: //pref("extensions.torbutton.saved.dns_prefetch", false);
diff --git a/src/install.rdf b/src/install.rdf index 540e053..0d4c9f7 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ em:nameTorbutton</em:name> em:creatorMike Perry & Kory Kirk</em:creator> em:id{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}</em:id> - em:version1.3.3-alpha</em:version> + em:version1.4.0rc1-pre1</em:version> em:homepageURLhttps://www.torproject.org/torbutton/</em:homepageURL> em:optionsURLchrome://torbutton/content/preferences.xul</em:optionsURL> em:iconURLchrome://torbutton/skin/tor.png</em:iconURL>