[tor-commits] [torbutton/master] Bug #10682: Workaround to really disable updates for Torbutton.

mikeperry at torproject.org mikeperry at torproject.org
Mon Feb 3 18:44:33 UTC 2014


commit 19f7e22728e9ec5adcc8852a85a234efd2cbbf1e
Author: Mike Perry <mikeperry-git at torproject.org>
Date:   Mon Feb 3 10:42:17 2014 -0800

    Bug #10682: Workaround to really disable updates for Torbutton.
    
    Without an update URL specified, Firefox will still ping addons.mozilla.org
    for an update. If someone manages to register a fake Torbutton at our UID, it
    could get pushed out to users.
---
 src/install.rdf |    4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/src/install.rdf b/src/install.rdf
index ad891ed..2a37879 100644
--- a/src/install.rdf
+++ b/src/install.rdf
@@ -10,9 +10,7 @@
         <em:homepageURL>https://www.torproject.org/projects/torbrowser.html.en</em:homepageURL>
         <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL>
         <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>
-        <!--
-        <em:updateURL>https://www.torproject.org/torbutton/update17esr.rdf</em:updateURL>
-        -->
+        <em:updateURL>https://127.0.0.1/</em:updateURL>
       <!--  <em:updateKey></em:updateKey> -->
         <!-- firefox -->
         <em:targetApplication>



More information about the tor-commits mailing list