commit a0efd2fcd6e945919b46c9204846b14cdcc188bb Author: Georg Koppen gk@torproject.org Date: Sat Jun 23 09:45:36 2018 +0000

fixup! TB4: Tor Browser's Firefox preference overrides.

We modify the language packs to add our own search engines etc. and therefore breaks Mozilla's signature, see: 26465. Thus, we need to disable the signing requirement for language packs right now. --- browser/app/profile/000-tor-browser.js | 3 +++ 1 file changed, 3 insertions(+)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index dd494b80ebe0..c3d83adf7d43 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -351,6 +351,9 @@ pref("security.family_safety.mode", 0); // Enforce SHA1 deprecation, see: bug 18042. pref("security.pki.sha1_enforcement_level", 2);

+// Disable the language pack signing check for now, see: bug 26465 +pref("extensions.langpacks.signatures.required", false); + // Avoid report TLS errors to Mozilla. We might want to repurpose this feature // one day to help detecting bad relays (which is bug 19119). For now we just // hide the checkbox, see bug 22072.