[tor-commits] [tor-browser/tor-browser-24.4.0esr-1] Add security enhancements suggested by Jesse Ruderman.

[mikeperry@xxxxxxxxxxxxxx]

commit 8896b493c0487ac7402514257d6e4acdde00ff64
Author: Mike Perry <mikeperry-git@xxxxxxxxxxxxxx>
Date:   Sat Mar 29 23:58:04 2014 -0700

    Add security enhancements suggested by Jesse Ruderman.
    
    We were going to put these in the security slider, but perhaps they should be
    set by default. There will be a perf impact, but let's see if anyone notices
    and complains, at least for a beta or two. If not, maybe we can even set these
    in a release.
---
 browser/app/profile/000-tor-browser.js |    8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index 7e2efc9..91f8697 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -140,5 +140,13 @@ pref("keyword.URL", "https://startpage.com/do/search?q=";);
 pref("gfx.direct2d.disabled", true);
 pref("layers.acceleration.disabled", true);
 
+// Security enhancements
+// https://trac.torproject.org/projects/tor/ticket/9387#comment:17
+pref("javascript.options.ion.content", false);
+pref("javascripjavascript.options.baselinejit.content", false);
+pref("javascripjavascript.options.asmjs", false);
+pref("javascripjavascript.options.typeinference", false);
+
+
 // Version placeholder
 pref("torbrowser.version", "UNKNOWN");

_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits