[tbb-dev] Tag: sandboxed-tor-browser-0.0.10

[Yawning Angel]

Hello,

New tag, because "Firefox loads Google Analytics in an IFRAME as part
of an 'about:' URL" is all sorts of unacceptable.

The approach I went with is to reject all network access to
`discovery.addons.mozilla.org` unless the user has explicitly
enabled the option labeled `Modifiable Extensions (UNSAFE: Security,
Anonymity)`, in which case the pane will function normally.

The SelfRando workaround should be unneeded as of the next Tor Browser
Alpha release as upstream fixed the underlying issue.

Changes in version 0.0.10 - 2017-07-12:
 * Bug 22829: Remove default obfs4 bridge riemann.
 * Bug 22853: Something in SelfRando is totally brain damaged.
 * Bug 22899: `about:addons`'s "Get Addons" pane is unsafe and should be
              treated as such.
 * Bug 22901: Clarify/expand on the warnings for all the config
              settings.

Regards,

-- 
Yawning Angel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tbb-dev/attachments/20170712/3d2e195a/attachment.sig>