[tor-commits] [sandboxed-tor-browser/master] Force disable `navigator.sendBeacon()`.

[yawning at torproject.org]

commit 8ccea0137d87d049c0f09ece7428942af78b7570
Author: Yawning Angel <yawning at schwanenlied.me>
Date:   Sat Aug 26 09:17:58 2017 +0000

    Force disable `navigator.sendBeacon()`.
    
    Why Tor Browser doesn't do this, I have no idea, but it's basically part
    of the cancer that is killing the internet.
---
 ChangeLog                  | 2 ++
 data/installer/mozilla.cfg | 4 ++++
 2 files changed, 6 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index fab4f9a..dbd2e12 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,8 @@
 Changes in version 0.0.13 - UNRELEASED:
  * Bug 13170: Disable the rest of the Firefox experiments botnet prefs.
  * Use lockPref for the IDN override done as part of #22984.
+ * Unset the addon autoupdater URL prefs.
+ * Force disable `navigator.sendBeacon()`.
 
 Changes in version 0.0.12 - 2017-08-01:
  * Bug 22969: Disable the addon blocklist.
diff --git a/data/installer/mozilla.cfg b/data/installer/mozilla.cfg
index ed832c7..9b427eb 100644
--- a/data/installer/mozilla.cfg
+++ b/data/installer/mozilla.cfg
@@ -48,3 +48,7 @@ lockPref("network.IDN_show_punycode", true);
 // Anything that tries to blur the line between CA signed HTTPS and Onion
 // Services is misguided at best.
 defaultPref("dom.securecontext.whitelist_onions", false);
+
+// Force disable navigator.sendBeacon() which basically only exists so that
+// people can track the fuck out of you.
+lockPref("beacon.enabled", false);