[tor-bugs] #15196 [Tor Browser]: Rebase Tor Browser patches to ESR 38
Tor Bug Tracker & Wiki
blackhole at torproject.org
Fri May 29 06:35:19 UTC 2015
#15196: Rebase Tor Browser patches to ESR 38
-----------------------------+--------------------------------------------
Reporter: gk | Owner: arthuredelstein
Type: task | Status: new
Priority: normal | Milestone:
Component: Tor Browser | Version:
Resolution: | Keywords: ff38-esr, TorBrowserTeam201505
Actual Points: | Parent ID:
Points: |
-----------------------------+--------------------------------------------
Comment (by arthuredelstein):
I have re-ordered the patches in a new branch:
https://github.com/arthuredelstein/tor-
browser/commits/tb_GECKO380esr_2015050513_RELBRANCH+1
The patches are now grouped roughly by "topic".
Here's a list of all patches from the last pre-rebase branch,
https://gitweb.torproject.org/tor-browser.git/log/?h=tor-
browser-31.7.0esr-5.0-1,
with each patch annotated per its status. (Note that a couple of patches
from this week are not yet included.)
{{{
Rebasing from tor-browser-31.7.0esr-5.0-1 to
tb_GECKO380esr_2015050513_RELBRANCH+1
R = Rebased
S = Skipped (not needed?)
P = Pending further work
U = Updater patches (mostly combined)
E = Already exists in FF 38 ESR
R Bug #2874: Block Components.interfaces from content
R Bug #2950: Make Permissions Manager memory-only
R Bug #2949: Make Intermediate Cert Store memory-only.
R Bug #3547: Block all plugins except flash.
S Bug #3229: Make content pref service memory-only + clearable
R TB2: Provide an observer event to close persistent connections
R Bug #2875: Limit device and system specific CSS Media Queries.
P Bug #2872: Limit the number of fonts per document.
R Bug #2176: Rebrand Firefox to TorBrowser
R Omnibox: Add DDG, Startpage, Disconnect, Youtube, Twitter; remove
Amazon, eBay, bing
R Bug #5715: Make nsICacheService.EvictEntries synchronous
R Bug #5741: Prevent WebSocket DNS leak.
R Bug #5742: API allows you to get the url bar URI for a channel or
nsIDocument.
R Bug #4755: Return client window coordinates for mouse event screenX/Y
(for dragend, 0,0 is returned).
R Bug #8312: Remove "This plugin is disabled" barrier.
R Bug #3875: Use Optimistic Data SOCKS variant.
R TB3: Tor Browser's official .mozconfigs.
R TB4: Tor Browser's Firefox preference overrides.
R Bug #6253: Add canvas image extraction prompt.
R Bug #5856: Do not expose physical screen info via window &
window.screen.
R Bug #6786: Do not expose system colors to CSS or canvas.
R Bug #10819: Add a pref, "privacy.thirdparty.isolate", to allow the
activation or deactivation of isolating DOM storage and image caching by
first party URI.
R Bug #6539: Isolate the Image Cache per url bar domain.
R Bug #6564: Isolate DOM storage to first party URI.
R Bug #5282: Randomize HTTP request order and pipeline depth.
R Bug #9837: Disable uninstall helper.exe on Win32.
R Bug #9829.1: new .mozconfig file for the new cross-compiler and ESR24
R Bug #9173: Change the default Firefox profile directory to be TBB-
relative.
R Bug #11641: change TBB directory structure to be more like Firefox's
E Bug #12146: Make the CONNECT Host header the same as the Request-URI.
E Bug #9701: Prevent ClipBoardCache from writing to disk.
R Bug #12620: TorBrowser regression tests folder
R Regression tests for #2875: Limit device and system specific CSS Media
Queries.
R Regression tests for #4902: Add DDG and StartPage to Omnibox.
R Regression tests for #4755: Return client window coordinates for mouse
event screenX/Y (for dragend, 0,0 is returned).
R Regression tests for TB4: Tor Browser's Firefox preference overrides.
R Regression tests for #2874: Block Components.interfaces from content
R Regression tests for #5856: Do not expose physical screen info via
window & window.screen.
R Regression tests for Bug #2950: Make Permissions Manager memory-only
E Bug 1022847 - toolkit/mozapps/update fails to compile with MinGW
r=netzen
E Bug 1022847 - Fixed --enable-metro build.
R Bug #12974: Disable NTLM and Negotiate HTTP Auth
E Bug #10822: Introduce a pref to disable SSL session tracking
R Bug #4234: Use the Firefox Update Process for TBB.
U Bug #13091: Use "Tor Browser" everywhere (space included)
U Bug #13047: Updater should not send Kernel/GTK version
R Bug 13028: Prevent potential proxy bypass cases.
E Bug 1071527 - "dom.performance.enabled" set to "false" shows non-zero
values for attributes. r=bz
R Bug 13021: Prompt before allowing Canvas isPointIn*() calls.
E Bug 1010972 - Don't use MSVC assembly on mingw. r=jesup
R Bug 10715: Enable Webgl for mingw-w64 again.
E Bug 12811: Add MOZ_D3DCOMPILER_DLL iff available.
E Bug 12811: Fix for Mozilla's bug 1058778.
E Bug 12811: WTypes.h -> wtypes.h
E Bug 973138 - Fixed goto crossing variable declaration (fixes GCC
compilation).
R Disable ICU when cross-compiling; clean-up.
R Bug 13025: Lie about screen orientation.
U Bug 13356: symlinks missing after complete update.
R Bug 13016: Hide CSS -moz-osx-font-smoothing values.
E Bug 13027: Backport of Navigator.* spoofing patch.
U Bug 13301: Avoid incompatible extensions prompt.
R Bug #5926: Allow JS locale to be set to English/C.
E Bug #11955 Backport certificate pinning
E Bug #3455.1: Allow proxy settings to be set per URL bar domain.
R Bug #3455.2. Allow RFC1929 authentication (username/password) to SOCKS
servers.
R Changes needed to build Mac in 64bit
E It seems like we need to add one more path traversal for ESR31
U Bug 13594: Windows updater depends on msvcr100.dll
E Bug 13558: Allow download folder change on Win XP.
R Bug 13742: Isolate cache to URL bar domain.
E? Revert "Bug 762358 - Re-run configure when mozconfig changed in a
significant way. r=gps a=NPOTB"
R Bug 13439: No canvas prompt for content-callers.
E Bug 902761 - Build configuration for turning .der files into .h files.
r=rstrong
E Bug 902761 - Stop storing certs used for MAR verification in EXE
resource files. r=rstrong
U Bug 13379: Sign our MAR files (backport Mozilla patches).
U Bug 13379: Sign our MAR files.
U Bug 13379: Adding our MAR signing keys.
R Bug #13749.1: regression tests for first party isolation of
localStorage
R Bug #13749.2: Regression tests for first-party isolation of cache
R Bug 12430: Disable external jar: via preference
R Bug 14392: Make about:tor behave like other initial pages.
R Bug 13900: Remove 3rd party HTTP auth tokens.
R Bug 14631: Improve profile access error messages.
R Bug 14631: Improve profile access error msgs (strings).
U Bug 15201: Windows: disable "runas" code path in updater.
R Bug 12827: Create preference to disable SVG.
R Bug 13548: Create preference to disable MathML.
U Bug 15406: Do not force updates for Torbutton and Tor Launcher.
U Bug 15406: Only include forced updates if extensions differ.
R Bug 10280: Don't load any plugins into the address space.
R Bug 10761: Fix shutdown crashes on Windows
R Bug 14716: HTTP Basic Authentication prompt only displayed once
R Bug #15502. Isolate blob URLs to first party; no blobURLs in Web
Workers
R Bug #15502, Part 2: Regression tests for blob URL isolation
U Bug 15857: Fix file descriptor leak in updater.
U Bug 10895: Fix versioning for langpacks.
R Bug 1517: Reduce precision of time for Javascript.
R Bug 13670.2: Isolate OCSP requests by first party domain
R fixup! Bug 13670.2: Isolate OCSP requests by first party domain
Merge branch '13670+16' into tor-browser-31.7.0esr-5.0-1
R fixup! Bug #5856: Do not expose physical screen info via window &
window.screen.
R Bug 15773: Enable ICU on OS X
}}}
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15196#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list