Can a TBB developer please push these very simple but important anti- fingerprinting prefs through:
pref("full-screen-api.enabled", false); pref("browser.link.open_newwindow.restriction", 0); pref("dom.disable_window_move_resize", true);
Fixing:
https://trac.torproject.org/projects/tor/ticket/12609 (two weeks old) https://trac.torproject.org/projects/tor/ticket/9881 (ten months old)
I've written a proposal to treat fingerprinting related bugfixes like other security bugfixes with regards to urgency and release management: