[tor-commits] [Git][tpo/applications/tor-browser][tor-browser-128.2.0esr-14.0-1] 2 commits: fixup! Bug 40925: Implemented the Security Level component

Pier Angelo Vendrame (@pierov) git at gitlab.torproject.org
Wed Sep 11 07:24:20 UTC 2024



Pier Angelo Vendrame pushed to branch tor-browser-128.2.0esr-14.0-1 at The Tor Project / Applications / Tor Browser


Commits:
4c041d5b by Pier Angelo Vendrame at 2024-09-11T09:03:32+02:00
fixup! Bug 40925: Implemented the Security Level component

Bug 42149: Do not change HTTPS-Only settings in the security level
anymore.

That preference does not really belong to the security level.

- - - - -
f5f0ab07 by Pier Angelo Vendrame at 2024-09-11T09:23:10+02:00
fixup! Bug 42027: Base Browser migration procedures.

Bug 42149: Clear user values for
https_only_mode_send_http_background_request since we do not change it
with the security level anymore.

- - - - -


2 changed files:

- browser/components/BrowserGlue.sys.mjs
- toolkit/components/securitylevel/SecurityLevel.sys.mjs


Changes:

=====================================
browser/components/BrowserGlue.sys.mjs
=====================================
@@ -4812,8 +4812,11 @@ BrowserGlue.prototype = {
   _migrateUIBB() {
     // Version 1: 13.0a3. Reset layout.css.prefers-color-scheme.content-override
     //            for tor-browser#41739.
-    // Version 2: Reset the privacy tracking headers preferences since the UI
-    //            is hidden. tor-browser#42777.
+    // Version 2: 14.0a5:Reset the privacy tracking headers preferences since
+    //            the UI is hidden. tor-browser#42777.
+    //            Also, do not set
+    //            dom.security.https_only_mode_send_http_background_request in
+    //            the security level anymore (tor-browser#42149).
     const MIGRATION_VERSION = 2;
     const MIGRATION_PREF = "basebrowser.migration.version";
     // We do not care whether this is a new or old profile, since in version 1
@@ -4836,11 +4839,11 @@ BrowserGlue.prototype = {
         // The last two preferences have no corresponding UI, but are related.
         "privacy.globalprivacycontrol.functionality.enabled",
         "privacy.globalprivacycontrol.pbmode.enabled",
+        "dom.security.https_only_mode_send_http_background_request",
       ]) {
         Services.prefs.clearUserPref(prefName);
       }
     }
-
     Services.prefs.setIntPref(MIGRATION_PREF, MIGRATION_VERSION);
   },
 


=====================================
toolkit/components/securitylevel/SecurityLevel.sys.mjs
=====================================
@@ -256,17 +256,16 @@ var initializeNoScriptControl = () => {
 /* eslint-disable */
 // prettier-ignore
 const kSecuritySettings = {
-  // Preference name :                                          [0, 1-high 2-m    3-m    4-low]
-  "javascript.options.ion" :                                    [,  false, false, false, true ],
-  "javascript.options.baselinejit" :                            [,  false, false, false, true ],
-  "javascript.options.native_regexp" :                          [,  false, false, false, true ],
-  "mathml.disabled" :                                           [,  true,  true,  true,  false],
-  "gfx.font_rendering.graphite.enabled" :                       [,  false, false, false, true ],
-  "gfx.font_rendering.opentype_svg.enabled" :                   [,  false, false, false, true ],
-  "svg.disabled" :                                              [,  true,  false, false, false],
-  "javascript.options.asmjs" :                                  [,  false, false, false, true ],
-  "javascript.options.wasm" :                                   [,  false, false, false, true ],
-  "dom.security.https_only_mode_send_http_background_request" : [,  false, false, false, true ],
+  // Preference name:                        [0, 1-high 2-m    3-m    4-low]
+  "javascript.options.ion":                  [,  false, false, false, true ],
+  "javascript.options.baselinejit":          [,  false, false, false, true ],
+  "javascript.options.native_regexp":        [,  false, false, false, true ],
+  "mathml.disabled":                         [,  true,  true,  true,  false],
+  "gfx.font_rendering.graphite.enabled":     [,  false, false, false, true ],
+  "gfx.font_rendering.opentype_svg.enabled": [,  false, false, false, true ],
+  "svg.disabled":                            [,  true,  false, false, false],
+  "javascript.options.asmjs":                [,  false, false, false, true ],
+  "javascript.options.wasm":                 [,  false, false, false, true ],
 };
 /* eslint-enable */
 



View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/f67ca0abf0757c8e3e9afeb3a093c0619b49a4fd...f5f0ab0789cdc9c9c5a76b120d62ad7611eada16

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/compare/f67ca0abf0757c8e3e9afeb3a093c0619b49a4fd...f5f0ab0789cdc9c9c5a76b120d62ad7611eada16
You're receiving this email because of your account on gitlab.torproject.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-commits/attachments/20240911/e43c4b2c/attachment-0001.htm>


More information about the tor-commits mailing list