[tor-commits] [Git][tpo/applications/tor-browser][tor-browser-102.8.0esr-12.0-1] fixup! Firefox preference overrides.

[Richard Pospesel (@richard)]

Richard Pospesel pushed to branch tor-browser-102.8.0esr-12.0-1 at The Tor Project / Applications / Tor Browser


Commits:
8d7cac06 by Richard Pospesel at 2023-02-15T13:54:59+00:00
fixup! Firefox preference overrides.

bug 41627: Enable network.http.referer.hideOnionSource in base-browser


(cherry picked from commit 90df17dac724c43bbc533a0f449a72ba419d9d67)
- - - - -


1 changed file:

- browser/app/profile/001-base-profile.js


Changes:

=====================================
browser/app/profile/001-base-profile.js
=====================================
@@ -57,6 +57,12 @@ pref("media.memory_cache_max_size", 16384);
 pref("dom.security.https_only_mode", true);
 pref("dom.security.https_only_mode_pbm", true);
 
+// tor-browser#22320: Hide referer when comming from a .onion address
+// We enable this here (rather than in Tor Browser) in case users of other
+// base-browser derived browsers configure it to use a system Tor daemon
+// to visit onion services.
+pref("network.http.referer.hideOnionSource", true);
+
 // Require Safe Negotiation ( https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/27719 )
 // Blocks connections to servers that don't support RFC 5746 [2] as they're potentially vulnerable to a
 // MiTM attack [3]. A server without RFC 5746 can be safe from the attack if it disables renegotiations



View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/8d7cac068176c7538fe2411c9d098e1a22f96dcf

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/8d7cac068176c7538fe2411c9d098e1a22f96dcf
You're receiving this email because of your account on gitlab.torproject.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-commits/attachments/20230215/35ca5455/attachment.htm>