[tor-commits] [tor-browser/tor-browser-24.5.0esr-1] fixup! Tor Browser's Firefox preference overrides.

[mikeperry at torproject.org]

commit 1bfe1ef04e14d677555db8009544736c24ddf299
Author: Mike Perry <mikeperry-git at torproject.org>
Date:   Mon May 26 10:19:36 2014 -0700

    fixup! Tor Browser's Firefox preference overrides.
    
    Bug #11253: Turn on TLS 1.1 and 1.2.
    
    Also disable a deprecated Audio API for safety.
---
 browser/app/profile/000-tor-browser.js |    7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index b6b9252..a6ff777 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -148,6 +148,13 @@ pref("javascript.options.baselinejit.content", false);
 pref("javascript.options.asmjs", false);
 pref("javascript.options.typeinference", false);
 
+// Audio_data is deprecated in future releases, but still present
+// in FF24. This is a dangerous combination (spotted by iSec)
+pref("media.audio_data.enabled", false);
+
+// Enable TLS 1.1 and 1.2:
+// https://trac.torproject.org/projects/tor/ticket/11253
+pref("security.tls.version.max", 3);
 
 // Version placeholder
 pref("torbrowser.version", "UNKNOWN");