ma1 pushed to branch tor-browser-140.11.0esr-15.0-1 at The Tor Project / Applications / Tor Browser Commits: 6f584e21 by Paul Adenot at 2026-05-18T09:52:07+02:00 Bug 2021222 - Cancel SpeechSynthesis when the page navigates away. r=eeejay Override DisconnectFromOwner, which is called during navigation, to cancel any ongoing or queued speech utterances. Differential Revision: https://phabricator.services.mozilla.com/D290201 - - - - - 31f70fc7 by Valentin Gosu at 2026-05-18T10:31:36+02:00 Bug 2023943 - Make CookieNotification::GetOperation ID clone the ID r=baku,cookie-reviewers Differential Revision: https://phabricator.services.mozilla.com/D288379 - - - - - ca319e19 by Valentin Gosu at 2026-05-18T10:33:36+02:00 Bug 2024244 - Make socket transport hold a reference to TLSServerConnectionInfo r=necko-reviewers,kershaw Differential Revision: https://phabricator.services.mozilla.com/D290394 - - - - - 5e058d18 by Kershaw Chang at 2026-05-18T10:34:43+02:00 Bug 2024260 - nsRequestObserverProxy cleanup, r=necko-reviewers,valentin Differential Revision: https://phabricator.services.mozilla.com/D290376 - - - - - b7dd0244 by Tom Schuster at 2026-05-18T10:36:04+02:00 Bug 2024443 - Make CryptoKey::GetAlgorithm more idiomatic. r=nkulatova Differential Revision: https://phabricator.services.mozilla.com/D290392 - - - - - 865084e3 by Jan Grulich at 2026-05-18T10:49:03+02:00 Bug 2029894 - WebRTC backport: Fix double mapoffset application in PipeWire video capture a=dmeehan mmap() with mapoffset as the file offset already returns a pointer to the data at that offset, so passing it again to SPA_MEMBER was reading mapoffset bytes past the mapped region. Also queue the buffer back to PipeWire before returning on mmap failure to avoid leaking it. This is a simple backport of an WebRTC upstream change. Upstream commit: 9ee59b4ab343540923a23edd6429064c22571c3b Original Revision: https://phabricator.services.mozilla.com/D296761 Differential Revision: https://phabricator.services.mozilla.com/D297303 - - - - - 3c0d04ea by Emilio Cobos Álvarez at 2026-05-18T10:55:18+02:00 Bug 2025968 - Don't allow fragmenting a MiddleCroppingBlockFrame. r=layout-reviewers,dshin This requires multicol and XUL (see prefs). But anyways easy to fix. Differential Revision: https://phabricator.services.mozilla.com/D289644 - - - - - 30463934 by Dana Keeler at 2026-05-18T11:07:00+02:00 Bug 2027310 - improve thread coordination in ShowProtectedAuthPrompt r=jschanck Differential Revision: https://phabricator.services.mozilla.com/D291021 - - - - - 07e022c0 by James Teh at 2026-05-18T11:08:48+02:00 Bug 2027308: Fix handling of empty text leaves. a=dmeehan Original Revision: https://phabricator.services.mozilla.com/D294876 Differential Revision: https://phabricator.services.mozilla.com/D296555 - - - - - a0f791eb by Justin Link at 2026-05-18T11:10:57+02:00 Bug 2028274: Removed incorrect CloseHandle() in ~KeyWatcher() and also ensure that no in-flight callbacks are still going to fire r=win-reviewers,gstoll Differential Revision: https://phabricator.services.mozilla.com/D291328 - - - - - 1c851bc4 by Randell Jesup at 2026-05-18T14:56:50+02:00 Bug 2024665: Make nsIReplacedHttpResponse non-scriptable r=necko-reviewers,valentin Differential Revision: https://phabricator.services.mozilla.com/D288719 - - - - - 335e16c4 by Rob Wu at 2026-05-18T15:36:23+02:00 Bug 1940116 - Ignore clicks shortly after extension popup closes r=rpl,Gijs Differential Revision: https://phabricator.services.mozilla.com/D288887 - - - - - 837b9c77 by Maurice Dauer at 2026-05-18T15:50:41+02:00 Bug 2025170 - Pass correct report index for blocked popups, r=emz Differential Revision: https://phabricator.services.mozilla.com/D290850 - - - - - 9bd17e3d by Edgar Chen at 2026-05-18T16:12:57+02:00 Bug 2025346 - Create RemoteObjectProxy properly; r=smaug Differential Revision: https://phabricator.services.mozilla.com/D293507 - - - - - d66a3c3e by Randell Jesup at 2026-05-18T16:19:07+02:00 Bug 2025434: Return early in ClearKey r=media-playback-reviewers,padenot Differential Revision: https://phabricator.services.mozilla.com/D289646 - - - - - c49edfcd by Lee Salzman at 2026-05-18T18:57:20+02:00 Bug 2025877. r=gfx-reviewers,bradwerth Differential Revision: https://phabricator.services.mozilla.com/D293720 - - - - - cd88cabc by Valentin Gosu at 2026-05-18T18:58:24+02:00 Bug 2025888 - Make IncrementalTokenizer read entire buffer r=necko-reviewers,jesup Differential Revision: https://phabricator.services.mozilla.com/D290085 - - - - - 7f679086 by Jens Stutte at 2026-05-18T19:13:42+02:00 Bug 2025942 - Fix off-by-one in a LogModuleManager::PrintFmt check. r=xpcom-reviewers,emilio Differential Revision: https://phabricator.services.mozilla.com/D290099 - - - - - 35fe931c by Tooru Fujisawa at 2026-05-18T19:14:55+02:00 Bug 2025947 - Check data corruption in script decompression. r=bthrall Differential Revision: https://phabricator.services.mozilla.com/D290360 - - - - - 8fc98260 by Iain Ireland at 2026-05-18T19:21:08+02:00 Bug 2027276: Use size_t when inflating UTF8 r=spidermonkey-reviewers,sfink Differential Revision: https://phabricator.services.mozilla.com/D291002 - - - - - a19a10ba by Matthew Gregan at 2026-05-18T19:27:57+02:00 Bug 2029281 - Update libcubeb to 626d7d9f906e9f3cfb70be9e58af0f5a5f399a74. r=cubeb-reviewers,pehrsons Differential Revision: https://phabricator.services.mozilla.com/D292234 - - - - - eac7548a by Tom Schuster at 2026-05-18T19:35:23+02:00 Bug 2030385 - Fix non-contiguous nsIContentAnalysisResponse::Action serializer. r=dlp-reviewers,gstoll Differential Revision: https://phabricator.services.mozilla.com/D293519 - - - - - 5fef0fd1 by Randell Jesup at 2026-05-18T19:49:07+02:00 Bug 2032604: Check Jar entry names for nulls a=dmeehan Original Revision: https://phabricator.services.mozilla.com/D295451 Differential Revision: https://phabricator.services.mozilla.com/D297033 - - - - - 42 changed files: - accessible/base/TextLeafRange.cpp - browser/base/content/test/popups/browser_popup_blocker.js - browser/components/extensions/ExtensionPopups.sys.mjs - browser/components/extensions/test/browser/browser.toml - + browser/components/extensions/test/browser/browser_ext_popup_after_close.js - browser/modules/PopupAndRedirectBlockerObserver.sys.mjs - dom/bindings/RemoteObjectProxy.cpp - dom/canvas/OffscreenCanvasDisplayHelper.cpp - dom/cookiestore/CookieStoreNotificationWatcher.cpp - dom/crypto/CryptoKey.cpp - dom/crypto/KeyAlgorithmProxy.h - dom/ipc/ContentParent.cpp - dom/media/eme/clearkey/ClearKeyBase64.cpp - dom/media/webspeech/synth/SpeechSynthesis.cpp - dom/media/webspeech/synth/SpeechSynthesis.h - + dom/media/webspeech/synth/test/file_speech_cancel_on_navigation_page1.html - + dom/media/webspeech/synth/test/file_speech_cancel_on_navigation_page2.html - dom/media/webspeech/synth/test/mochitest.toml - + dom/media/webspeech/synth/test/test_speech_cancel_on_navigation.html - dom/script/ScriptCompression.cpp - js/src/vm/CharacterEncoding.cpp - layout/generic/MiddleCroppingBlockFrame.cpp - media/libcubeb/moz.yaml - media/libcubeb/src/cubeb_jack.cpp - modules/libjar/nsJARChannel.cpp - netwerk/base/TLSServerSocket.cpp - netwerk/base/nsRequestObserverProxy.cpp - netwerk/base/nsSocketTransport2.cpp - netwerk/base/nsSocketTransport2.h - netwerk/cookie/CookieNotification.cpp - netwerk/protocol/http/nsIReplacedHttpResponse.idl - security/manager/ssl/nsNSSCallbacks.cpp - third_party/libwebrtc/modules/video_capture/linux/video_capture_pipewire.cc - + third_party/libwebrtc/moz-patch-stack/9ee59b4ab3.no-op-cherry-pick-msg - toolkit/actors/PopupAndRedirectBlockingChild.sys.mjs - toolkit/actors/PopupAndRedirectBlockingParent.sys.mjs - toolkit/components/contentanalysis/ContentAnalysisIPCTypes.h - toolkit/components/contentanalysis/nsIContentAnalysis.idl - widget/windows/WinRegistry.cpp - xpcom/base/Logging.cpp - xpcom/ds/IncrementalTokenizer.cpp - xpcom/ds/IncrementalTokenizer.h The diff was not included because it is too large. View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/b3693a3... -- View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/b3693a3... You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications: https://gitlab.torproject.org/-/profile/notifications | Help: https://gitlab.torproject.org/help