[tbb-bugs] #19048 [Applications/Tor Browser]: Review Firefox Developer Docs and Undocumented bugs since FF45esr

[Tor Bug Tracker & Wiki]

#19048: Review Firefox Developer Docs and Undocumented bugs since FF45esr
--------------------------------------------+--------------------------
 Reporter:  gk                              |          Owner:  tbb-team
     Type:  task                            |         Status:  new
 Priority:  Medium                          |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  ff52-esr, TorBrowserTeam201702  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:  Sponsor4
--------------------------------------------+--------------------------

Comment (by mcs):

 Replying to [comment:5 tom]:
 > We will want to set browser.selfsupport.enabled to false to disable
 Normandy aka Shield aka Self Support aka Self Repair. To be safe we can
 also redirect browser.selfsupport.url

 This is already done; see #18738.

 > We probably want to disable stuff under browser.uitour.

 We already have `browser.uitour.enabled = false` but to be even safer
 maybe we should modify the browser.uitour prefs that contain URLs?

 > I'm not sure how to get to it in 52, but in 53, the WebIDE auto-installs
 some extensions it downloads from Mozilla. Probably best to disable it via
 devtools.webide.enabled

 We already have the following in browser/app/profile/000-tor-browser.js:
  pref("devtools.webide.autoinstallADBHelper", false);
  pref("devtools.webide.autoinstallFxdtAdapters", false);
  pref("devtools.webide.enabled", false);
  pref("devtools.appmanager.enabled", false);


 > The Telemetry experiments features should be disabled (experiments.*)

 Agreed.

 > There is something called "Extensions Discovery" governed by
 extensions.getAddons.showPane

 Setting that pref to false removes the "Get Add-ons" panel from
 about:addons. I don't think we have to remove it, but doing so would
 discourage use of add-ons in Tor Browser (and we don't have any control
 over what add-ons Mozilla might show on that panel).

 > Probably want to disable security.ssl.errorReporting

 Agreed.

 > There's something called 'Social' under social.* including the scary one
 social.remote-install.enabled

 It looks like we have #13612 for this. We should look at it for ESR52.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19048#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online