[tor-commits] [tor-browser/tor-browser-45.4.0esr-6.5-1] Bug 20123: Always block remote jar files

[gk at torproject.org]

commit 01d246a535b34248b06e03c4f475387e75a172c3
Author: Arthur Edelstein <arthuredelstein at gmail.com>
Date:   Mon Sep 26 16:15:00 2016 +0000

    Bug 20123: Always block remote jar files
---
 browser/app/profile/000-tor-browser.js | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index a5c0e7f..13af485 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -289,9 +289,8 @@ pref("layers.acceleration.disabled", true);
 pref("media.audio_data.enabled", false);
 
 // If true, remote JAR files will not be opened, regardless of content type
-// Patch done by Jeff Gibat (iSEC). We bind it to the security slider but allow
-// jar: in default mode.
-pref("network.jar.block-remote-files", false);
+// Patch written by Jeff Gibat (iSEC).
+pref("network.jar.block-remote-files", true);
 
 // Enable TLS 1.1 and 1.2:
 // https://trac.torproject.org/projects/tor/ticket/11253