commit 01d246a535b34248b06e03c4f475387e75a172c3 Author: Arthur Edelstein arthuredelstein@gmail.com Date: Mon Sep 26 16:15:00 2016 +0000

Bug 20123: Always block remote jar files --- browser/app/profile/000-tor-browser.js | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index a5c0e7f..13af485 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -289,9 +289,8 @@ pref("layers.acceleration.disabled", true); pref("media.audio_data.enabled", false);

// If true, remote JAR files will not be opened, regardless of content type -// Patch done by Jeff Gibat (iSEC). We bind it to the security slider but allow -// jar: in default mode. -pref("network.jar.block-remote-files", false); +// Patch written by Jeff Gibat (iSEC). +pref("network.jar.block-remote-files", true);

// Enable TLS 1.1 and 1.2: // https://trac.torproject.org/projects/tor/ticket/11253