commit 00d5bc28bf82c9fb049368b78cff8f43d775c299 Author: Mike Perry <mikeperry-git@fscked.org> Date: Wed Jun 1 00:31:09 2011 -0700 Bug 3101: Disable WebGL. Too many unknowns for now. I think these folks may be right, at least for the short term: http://www.contextis.com/resources/blog/webgl/ Remote fonts were a minefield of exploits, and the vulnerability surface there was like 1% of OpenGL. After a few releases, we can revisit the remaining fingerprinting issues and consider re-enabling. --- src/chrome/content/torbutton.js | 5 +++++ src/defaults/preferences/preferences.js | 1 + src/install.rdf | 2 +- 3 files changed, 7 insertions(+), 1 deletions(-) diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js index 9f5c5fe..401443a 100644 --- a/src/chrome/content/torbutton.js +++ b/src/chrome/content/torbutton.js @@ -1403,6 +1403,11 @@ function torbutton_update_status(mode, force_update) { !mode, mode, changed); } + if (m_tb_ff4) { + torbutton_setBoolPref("webgl.disabled", "webgl_disabled", mode, mode, + changed); + } + if(m_tb_ff35) { // Disable geolocation torbutton_setBoolPref("geo.enabled", "geo_enabled", !mode, mode, diff --git a/src/defaults/preferences/preferences.js b/src/defaults/preferences/preferences.js index 58c8abe..fd88a1e 100644 --- a/src/defaults/preferences/preferences.js +++ b/src/defaults/preferences/preferences.js @@ -93,6 +93,7 @@ pref("extensions.torbutton.saved.buildID_override",""); pref("extensions.torbutton.saved.useragent_vendor", ""); pref("extensions.torbutton.saved.useragent_vendorSub",""); pref("extensions.torbutton.saved.transparentTor",false); +pref("extensions.torbutton.saved.webgl_disabled", false); // network.dns.disablePrefetch is a hidden option. It has no default value: //pref("extensions.torbutton.saved.dns_prefetch", false); diff --git a/src/install.rdf b/src/install.rdf index 540e053..0d4c9f7 100644 --- a/src/install.rdf +++ b/src/install.rdf @@ -6,7 +6,7 @@ <em:name>Torbutton</em:name> <em:creator>Mike Perry & Kory Kirk</em:creator> <em:id>{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}</em:id> - <em:version>1.3.3-alpha</em:version> + <em:version>1.4.0rc1-pre1</em:version> <em:homepageURL>https://www.torproject.org/torbutton/</em:homepageURL> <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL> <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>