commit 19f7e22728e9ec5adcc8852a85a234efd2cbbf1e Author: Mike Perry mikeperry-git@torproject.org Date: Mon Feb 3 10:42:17 2014 -0800

Bug #10682: Workaround to really disable updates for Torbutton.

Without an update URL specified, Firefox will still ping addons.mozilla.org for an update. If someone manages to register a fake Torbutton at our UID, it could get pushed out to users. --- src/install.rdf | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/src/install.rdf b/src/install.rdf index ad891ed..2a37879 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -10,9 +10,7 @@ em:homepageURLhttps://www.torproject.org/projects/torbrowser.html.en</em:homepageURL> em:optionsURLchrome://torbutton/content/preferences.xul</em:optionsURL> em:iconURLchrome://torbutton/skin/tor.png</em:iconURL> - <!-- - <em:updateURL>https://www.torproject.org/torbutton/update17esr.rdf</em:updateURL> - --> + em:updateURLhttps://127.0.0.1/</em:updateURL> <!-- <em:updateKey></em:updateKey> --> <!-- firefox --> em:targetApplication