[tor-commits] [tor-browser/tor-browser-60.3.0esr-8.5-1] fixup! TB4: Tor Browser's Firefox preference overrides.

gk at torproject.org gk at torproject.org
Tue Dec 4 19:35:01 UTC 2018


commit c20210b1a017c4e94157c1acfbef18e878202ff4
Author: Georg Koppen <gk at torproject.org>
Date:   Wed Nov 21 10:02:20 2018 +0000

    fixup! TB4: Tor Browser's Firefox preference overrides.
    
    Bug 25794 deals with pointer events and associated fingerprinting
    risks. There are patches we can backport from Mozilla, but they are not
    small and we should give them some baking time. Thus, let's disable
    pointer events for now.
---
 browser/app/profile/000-tor-browser.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index 38f72579760a..8f74748f2072 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -150,6 +150,7 @@ pref("media.webspeech.synth.enabled", false); // Bug 10283: Disable SpeechSynthe
 pref("dom.webaudio.enabled", false); // Bug 13017: Disable Web Audio API
 pref("dom.maxHardwareConcurrency", 1); // Bug 21675: Spoof single-core cpu
 pref("dom.w3c_touch_events.enabled", 0); // Bug 10286: Always disable Touch API
+pref("dom.w3c_pointer_events.enabled", false);
 pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now
 // Disable randomised Firefox HTTP cache decay user test groups (Bug: 13575)
 pref("security.webauth.webauthn", false); // Bug 26614: Disable Web Authentication API for now



More information about the tor-commits mailing list