[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-commits] [Git][tpo/applications/tor-browser][base-browser-128.9.0esr-14.5-1] 154 commits: TB 42308: Create README for tor-browser.

Title: GitLab

Pier Angelo Vendrame pushed to branch base-browser-128.9.0esr-14.5-1 at The Tor Project / Applications / Tor Browser

Commits:

  • 99d26396
    by Henry Wilkes at 2025-03-31T10:47:46+02:00 
    TB 42308: Create README for tor-browser.

We drop the README.txt that comes from Mozilla Firefox and add README.md
for tor-browser.
  • cffe2e36
    by Richard Pospesel at 2025-03-31T10:47:47+02:00 
    TB 41649: Create rebase and security backport gitlab issue templates
  • 0de44290
    by Beatriz Rizental at 2025-03-31T10:47:47+02:00 
    Add CI for Tor Browser
  • 1c3875a4
    by Richard Pospesel at 2025-03-31T10:47:47+02:00 
    TB 41089: Add tor-browser build scripts + Makefile to tor-browser
  • 1f34712f
    by Beatriz Rizental at 2025-03-31T10:47:47+02:00 
    fixup! TB 41089: Add tor-browser build scripts + Makefile to tor-browser
  • 44d74482
    by clairehurst at 2025-03-31T10:47:48+02:00 
    fixup! TB 41089: Add tor-browser build scripts + Makefile to tor-browser

Update android-env-macos-template.sh
  • 3bd49f42
    by Henry Wilkes at 2025-03-31T10:47:48+02:00 
    TB 41803: Add some developer tools for working on tor-browser.
  • 3992a8b8
    by Kathy Brade at 2025-03-31T10:47:48+02:00 
    TB 11641: Disable remoting by default.

Unless the -osint command line flag is used, the browser now defaults
to the equivalent of -no-remote.  There is a new -allow-remote flag that
may be used to restore the original (Firefox-like) default behavior.
  • 80ee126c
    by Alex Catarineu at 2025-03-31T10:47:49+02:00 
    Add TorStrings module for localization
  • 399eeb43
    by Henry Wilkes at 2025-03-31T10:47:49+02:00 
    fixup! Add TorStrings module for localization

TB 43490: Use lower case "n" for "Tor network".
  • a342521b
    by Henry Wilkes at 2025-03-31T10:47:49+02:00 
    Tor Browser strings

This commit adds all the strings needed for Tor Browser patches.
  • 074076f6
    by Henry Wilkes at 2025-03-31T10:47:49+02:00 
    fixup! Tor Browser strings

TB 43490: Use lower case "n" for "Tor network".
  • 85d174fc
    by Henry Wilkes at 2025-03-31T10:47:49+02:00 
    fixup! Tor Browser strings

TB 43405: Add strings for tor settings error notification.
  • 00d3377f
    by Henry Wilkes at 2025-03-31T10:47:50+02:00 
    fixup! Tor Browser strings

TB 43531: Use "label" attribute rather than textContent for the bridge
dialog XUL buttons.
  • 81efb55b
    by Henry Wilkes at 2025-03-31T10:47:50+02:00 
    Tor Browser localization migration scripts.
  • d3239c53
    by Henry Wilkes at 2025-03-31T10:47:50+02:00 
    fixup! Tor Browser localization migration scripts.

TB 43531: Convert bridge dialog button strings to use "label" attribute.
  • 56e3b4fd
    by Mike Perry at 2025-03-31T10:47:50+02:00 
    TB 2176: Rebrand Firefox to TorBrowser

See also Bugs #5194, #7187, #8115, #8219.

This patch does some basic renaming of Firefox to TorBrowser. The rest of the
branding is done by images and icons.

Also fix bug 27905.

Bug 25702: Update Tor Browser icon to follow design guidelines

- Updated all of the branding in /browser/branding/official with new 'stable'
icon series.
- Updated /extensions/onboarding/content/img/tor-watermark.png with new icon and
add the source svg in the same directory
- Copied /browser/branding/official over /browser/branding/nightly and the new
/browser/branding/alpha directories. Replaced content with 'nightly' and
'alpha' icon series.
Updated VisualElements_70.png and VisualElements_150.png with updated icons in
each branding directory (fixes #22654)
- Updated firefox.VisualElementsManfiest.xml with updated colors in each
branding directory
- Added firefox.svg to each branding directory from which all the other icons
are derived (apart from document.icns and document.ico)
- Added default256.png and default512.png icons
- Updated aboutTBUpdate.css to point to branding-aware icon128.png and removed
original icon
- Use the Tor Browser icon within devtools/client/themes/images/.

Bug 30631: Blurry Tor Browser icon on macOS app switcher

It would seem the png2icns tool does not generate correct icns files and
so on macOS the larger icons were missing resulting in blurry icons in
the OS chrome. Regenerated the padded icons in a macOS VM using
iconutil.

Bug 28196: preparations for using torbutton tor-browser-brand.ftl

A small change to Fluent FileSource class is required so that we
can register a new source without its supported locales being
counted as available locales for the browser.

Bug 31803: Replaced about:debugging logo with flat version

Bug 21724: Make Firefox and Tor Browser distinct macOS apps

When macOS opens a document or selects a default browser, it sometimes
uses the CFBundleSignature. Changing from the Firefox MOZB signature to
a different signature TORB allows macOS to distinguish between Firefox
and Tor Browser.

Bug 32092: Fix Tor Browser Support link in preferences

For bug 40562, we moved onionPattern* from bug 27476 to here, as
about:tor needs these files but it is included earlier.

Bug 41278: Create Tor Browser styled pdf logo similar to the vanilla Firefox one

Bug 42088: New application icons (used in-app and on linux).

Bug 42087: New application icons (windows).
  • 068305f0
    by Pier Angelo Vendrame at 2025-03-31T10:47:51+02:00 
    fixup! TB 2176: Rebrand Firefox to TorBrowser

TB 42720: Show what's new in the about:dialog.

Customize the "What's new" link and cleanup other channel-specific
prefs.
  • 659957c5
    by Pier Angelo Vendrame at 2025-03-31T10:47:51+02:00 
    fixup! TB 2176: Rebrand Firefox to TorBrowser

TB 42720: Show what's new in the about:dialog.

Improve some comments.
  • c66effeb
    by Pier Angelo Vendrame at 2025-03-31T10:47:51+02:00 
    fixup! TB 2176: Rebrand Firefox to TorBrowser

TB 43575: Clean up more channel-related prefs.

app.update.promptWaitTime is already in 001-base-browser.js.
  • 860f000a
    by Pier Angelo Vendrame at 2025-03-31T10:47:51+02:00 
    fixup! TB 2176: Rebrand Firefox to TorBrowser

TB 43464: Add Android branding

Remove any previous customization to mobile/android/branding.
  • 1377e402
    by Pier Angelo Vendrame at 2025-03-31T10:47:52+02:00 
    fixup! TB 2176: Rebrand Firefox to TorBrowser

TB 43464: Add Android branding

Add Tor Browser branding for Android.
  • 5a032fa5
    by Henry Wilkes at 2025-03-31T10:47:52+02:00 
    Customize moz-toggle for tor-browser.
  • a5578777
    by Henry Wilkes at 2025-03-31T10:47:52+02:00 
    TB 43087: Add onion-pattern to be used on Tor pages.
  • d607f1bc
    by hackademix at 2025-03-31T10:47:52+02:00 
    TB 41917: Tor brand-specific styles.
  • 8c591793
    by Henry Wilkes at 2025-03-31T10:47:53+02:00 
    TB 41817: tor-browser semantic colors.
  • a2e78b7a
    by Henry Wilkes at 2025-03-31T10:47:53+02:00 
    TB 42110: Add TorUIUtils module for common tor component methods.
  • 16849bb0
    by Henry Wilkes at 2025-03-31T10:47:53+02:00 
    Add purple tor version of the loading APNG.
  • da3f17b9
    by Henry Wilkes at 2025-03-31T10:47:53+02:00 
    TB 42583: Modify moz-support-link for Tor Browser.
  • f3042818
    by sanketh at 2025-03-31T10:47:54+02:00 
    TB 40209: Implement Basic Crypto Safety

Adds a CryptoSafety actor which detects when you've copied a crypto
address from a HTTP webpage and shows a warning.

Closes #40209.

Bug 40428: Fix string attribute names
  • 46a88dad
    by Mike Perry at 2025-03-31T10:47:54+02:00 
    TB3: Tor Browser's official .mozconfigs.

Also:
Add an --enable-tor-browser-data-outside-app-dir configure option

Add --with-tor-browser-version configure option

Bug 31457: disable per-installation profiles

The dedicated profiles (per-installation) feature does not interact
well with our bundled profiles on Linux and Windows, and it also causes
multiple profiles to be created on macOS under TorBrowser-Data.

Bug 31935: Disable profile downgrade protection.

Since Tor Browser does not support more than one profile, disable
the prompt and associated code that offers to create one when a
version downgrade situation is detected.

Add --enable-tor-browser-update build option

Bug 40793: moved Tor configuration options from old-configure.in to moz.configure

Bug 41584: Move some configuration options to base-browser level
  • 7c411390
    by Pier Angelo Vendrame at 2025-03-31T10:47:54+02:00 
    fixup! TB3: Tor Browser's official .mozconfigs.

TB 43464: Add Android branding

Use tb-nightly branding for dev builds.
  • 0e3c628e
    by Henry Wilkes at 2025-03-31T10:47:55+02:00 
    TB 41340: Enable TOR_BROWSER_NIGHTLY_BUILD features for dev and nightly builds

tor-browser#41285: Enable fluent warnings.
  • becb99c7
    by Pier Angelo Vendrame at 2025-03-31T10:47:55+02:00 
    TB 40562: Added Tor Browser preferences to 000-tor-browser.js

Before reordering patches, we used to keep the Tor-related patches
(torbutton and tor-launcher) at the beginning.
After that issue, we decided to move them towards the end.

In addition to that, we have decided to move Tor Browser-only
preferences there, too, to make Base Browser-only fixups easier to
apply.
  • c61e95fe
    by Pier Angelo Vendrame at 2025-03-31T10:47:55+02:00 
    fixup! TB 40562: Added Tor Browser preferences to 000-tor-browser.js

TB 42720: Show what's new in the about:dialog.

Update our comment about app.releaseNotesURL.aboutDialog.
  • 35899088
    by Pier Angelo Vendrame at 2025-03-31T10:47:55+02:00 
    TB 13252: Customize profile management on macOS

On macOS we allow both portable mode and system installation.
However, in the latter case, we customize Firefox's directories to
match the hierarchy we use for the portable mode.

Also, display an informative error message if the TorBrowser-Data
directory cannot be created due to an "access denied" or a
"read only volume" error.
  • aef490c0
    by Pier Angelo Vendrame at 2025-03-31T10:47:56+02:00 
    TB 40933: Add tor-launcher functionality

Bug 41926: Reimplement the control port
  • 92b9188f
    by Henry Wilkes at 2025-03-31T10:47:56+02:00 
    fixup! TB 40933: Add tor-launcher functionality

TB 42300: Store TorProvider log messages in TorProviderBuilder to be
used between instances and to be available whilst a provider is not
available.
  • 9b7cf18a
    by Henry Wilkes at 2025-03-31T10:47:56+02:00 
    fixup! TB 40933: Add tor-launcher functionality

TB 43405: Split TorProvider writeSettings into separate methods for the
proxy, firewall and bridges settings.

We also call TorSettings.setTorProvider instead of
TorProvider.writeSettings so that TorSettings can handle the application
errors.
  • a5089178
    by Cecylia Bocovich at 2025-03-31T10:47:56+02:00 
    Lox integration
  • e1834bce
    by Richard Pospesel at 2025-03-31T10:47:57+02:00 
    TB 40597: Implement TorSettings module

- migrated in-page settings read/write implementation from about:preferences#tor
  to the TorSettings module
- TorSettings initially loads settings from the tor daemon, and saves them to
  firefox prefs
- TorSettings notifies observers when a setting has changed; currently only
  QuickStart notification is implemented for parity with previous preference
  notify logic in about:torconnect and about:preferences#tor
- about:preferences#tor, and about:torconnect now read and write settings
  thorugh the TorSettings module
- all tor settings live in the torbrowser.settings.* preference branch
- removed unused pref modify permission for about:torconnect content page from
  AsyncPrefs.jsm

Bug 40645: Migrate Moat APIs to Moat.jsm module
  • 629e9ebb
    by Henry Wilkes at 2025-03-31T10:47:57+02:00 
    fixup! TB 40597: Implement TorSettings module

TB 43463: Load Moat regions from a local file rather than using Moat.

Also rename getCountryCodes to getFrequentRegions.
  • b5a22ff1
    by Henry Wilkes at 2025-03-31T10:47:57+02:00 
    fixup! TB 40597: Implement TorSettings module

TB 42550: Move straight to FinalError when the user selects a specific
region.

Also fix the `simulateMoatResponse` value for the censorship levels.
Although it does not change the overall outcome (bootstrap fails) it
does change *how* it fails.
  • 69289bb9
    by Dan Ballard at 2025-03-31T10:47:57+02:00 
    fixup! TB 40597: Implement TorSettings module

Bug 41188: pt1 add android stages
  • e930a210
    by Henry Wilkes at 2025-03-31T10:47:58+02:00 
    fixup! TB 40597: Implement TorSettings module

TB 43321: Add a isQuickstart property to the TorConnect.stage.

This is used by `about:torconnect` for determining focus behaviour.
  • 8f6c7181
    by Henry Wilkes at 2025-03-31T10:47:58+02:00 
    fixup! TB 40597: Implement TorSettings module

TB 43405: Do not allow string values for proxy and firewall ports. And
do not allow a proxy username without a password or vis versa.
  • 316e2114
    by Henry Wilkes at 2025-03-31T10:47:58+02:00 
    fixup! TB 40597: Implement TorSettings module

TB 43405: TorSettings handles failures to apply Tor settings.

We update TorSettings.#applySettings to catch TorProvider write errors
and signal this error with "ApplyError".

We also keep track of which group of settings have failed so that we can
restore them on the user's request.
  • 98ed1f5d
    by Henry Wilkes at 2025-03-31T10:47:58+02:00 
    fixup! TB 40597: Implement TorSettings module

TB 43488: Skip straight to "FinalError" if we do not get an expected
TorConnectError.
  • 70f075b6
    by Pier Angelo Vendrame at 2025-03-31T10:47:59+02:00 
    fixup! TB 40597: Implement TorSettings module

Sync pt_config.json after tor-browser-build#41407.
  • 5a96eb85
    by Henry Wilkes at 2025-03-31T10:47:59+02:00 
    fixup! TB 40597: Implement TorSettings module

TB 43563: Rebuild TorConnect region names when the app locale changes.

Also rename TorConnect.countryNames to TorConnect.getRegionNames.
  • f656c298
    by Arthur Edelstein at 2025-03-31T10:47:59+02:00 
    TB 3455: Add DomainIsolator, for isolating circuit by domain.

Add an XPCOM component that registers a ProtocolProxyChannelFilter
which sets the username/password for each web request according to
url bar domain.

Bug 9442: Add New Circuit button

Bug 13766: Set a 10 minute circuit dirty timeout for the catch-all circ.

Bug 19206: Include a 128 bit random tag as part of the domain isolator nonce.

Bug 19206: Clear out the domain isolator state on `New Identity`.

Bug 21201.2: Isolate by firstPartyDomain from OriginAttributes

Bug 21745: Fix handling of catch-all circuit

Bug 41741: Refactor the domain isolator and new circuit
  • 7818bb53
    by Henry Wilkes at 2025-03-31T10:47:59+02:00 
    TB 41600: Add a tor circuit display panel.
  • 722f797a
    by Pier Angelo Vendrame at 2025-03-31T10:48:00+02:00 
    TB 42247: Android helpers for the TorProvider

GeckoView is missing some API we use on desktop for the integration
with the tor daemon, such as subprocess.
Therefore, we need to implement them in Java and plumb the data
back and forth between JS and Java.
  • ea27cad3
    by Dan Ballard at 2025-03-31T10:48:00+02:00 
    fixup! TB 42247: Android helpers for the TorProvider

Bug 41188: Add staging event wiring
  • 00ec0fb7
    by clairehurst at 2025-03-31T10:48:00+02:00 
    fixup! TB 42247: Android helpers for the TorProvider

Bug 41188: Wire up stages to UI
  • 17d70724
    by clairehurst at 2025-03-31T10:48:00+02:00 
    fixup! TB 42247: Android helpers for the TorProvider
  • 84d5bb73
    by Dan Ballard at 2025-03-31T10:48:01+02:00 
    fixup! TB 42247: Android helpers for the TorProvider
  • 67545648
    by Pier Angelo Vendrame at 2025-03-31T10:48:01+02:00 
    fixup! TB 42247: Android helpers for the TorProvider

Use libLyrebird.so also in TorAndroidIntegration.
  • 836cbaf9
    by Henry Wilkes at 2025-03-31T10:48:01+02:00 
    fixup! TB 42247: Android helpers for the TorProvider

TB 43563: Use TorConnect.getRegionNames rather than
TorConnect.countryNames.
  • bad8b3f9
    by hackademix at 2025-03-31T10:48:01+02:00 
    TB 8324: Prevent DNS proxy bypasses caused by Drag&Drop

Bug 41613: Skip Drang & Drop filtering for DNS-safe URLs
  • 17314cfb
    by Matthew Finkel at 2025-03-31T10:48:02+02:00 
    TB 25741: TBA: Disable GeckoNetworkManager

The browser should not need information related to the network
interface or network state, tor should take care of that.
  • 48362635
    by Pier Angelo Vendrame at 2025-03-31T10:48:02+02:00 
    TB 40807: Added QRCode.js to toolkit/modules
  • 10206eef
    by Richard Pospesel at 2025-03-31T10:48:02+02:00 
    TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection

This patch adds a new about:preferences#connection page which allows
modifying bridge, proxy, and firewall settings from within Tor Browser.
All of the functionality present in tor-launcher's Network
Configuration panel is present:

 - Setting built-in bridges
 - Requesting bridges from BridgeDB via moat
 - Using user-provided bridges
 - Configuring SOCKS4, SOCKS5, and HTTP/HTTPS proxies
 - Setting firewall ports
 - Viewing and Copying Tor's logs
 - The Networking Settings in General preferences has been removed

Bug 40774: Update about:preferences page to match new UI designs
  • 7ccbba6b
    by Henry Wilkes at 2025-03-31T10:48:02+02:00 
    fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection

TB 43463: Use TorConnect.frequentRegionCodes promise to populate the
locations popup. Also ensure the initial value is "automatic".
  • 97c3422e
    by Henry Wilkes at 2025-03-31T10:48:03+02:00 
    fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection

TB 43547: Removing the last bridge sets the source to Invalid instead.
  • dff63abc
    by Henry Wilkes at 2025-03-31T10:48:03+02:00 
    fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection

TB 42300: Fetch tor logs from TorProviderBuilder.
  • a0d3262a
    by Henry Wilkes at 2025-03-31T10:48:03+02:00 
    fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection

TB 43405: Add some validation to the Advanced connection settings
dialog.
  • 2d60b93b
    by Henry Wilkes at 2025-03-31T10:48:03+02:00 
    fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection

TB 43130: Adjust preferences for contrast theme or forced colors.

Give the "Your bridges" and "request bridges" boxes an outline for
forced-colors since the background color will not show.

Use `--border-radius-*` instead of fixed `px` values.

Do not use the accent color for text when in contrast theme or forced
colors.
  • e96ca39b
    by Henry Wilkes at 2025-03-31T10:48:04+02:00 
    fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection

TB 43531: Use "label" attribute rather than textContent for the bridge
dialog XUL buttons.
  • 95a73b44
    by Henry Wilkes at 2025-03-31T10:48:04+02:00 
    fixup! TB 31286: Implementation of bridge, proxy, and firewall settings in about:preferences#connection

TB 43563: Use TorConnect.getRegionNames rather than
TorConnect.countryNames.

Also, add a note regarding changing app locales.
  • 0f5c5927
    by Richard Pospesel at 2025-03-31T10:48:04+02:00 
    TB 27476: Implement about:torconnect captive portal within Tor Browser

- implements new about:torconnect page as tor-launcher replacement
- adds new torconnect component to browser
- tor process management functionality remains implemented in tor-launcher through the TorProtocolService module
- adds warning/error box to about:preferences#tor when not connected to tor

Bug 40773: Update the about:torconnect frontend page to match additional UI flows.

Bug 41608: Add a toolbar status button and a urlbar "Connect" button.
  • 81fac989
    by Henry Wilkes at 2025-03-31T10:48:04+02:00 
    fixup! TB 27476: Implement about:torconnect captive portal within Tor Browser

TB 43463: Renamed TorConnect getCountryCodes to getFrequentRegions.
  • 5b3e3831
    by Henry Wilkes at 2025-03-31T10:48:05+02:00 
    fixup! TB 27476: Implement about:torconnect captive portal within Tor Browser

TB 43321: Only focus the about:torconnect buttons under certain
circumstances.

By default, when switching stages we move the focus back to the stage
heading. This is because we want to lead the user back to the top of the
page to show them the new context. This should help improve the
experience when using a screen reader.

If we are in the bootstrapping stage we instead move the focus to the
"Cancel" button since it is likely that the user wants to use this
control.

If the user presses the "Cancel" button we return the focus to the
"Connect" or "Try a bridge" button. I.e. we restore the prior focus.
This allows to user to easily re-try without having to re-read the page
they just saw.

We do a similar thing when the user cancels the automatic startup
bootstrapping.

Finally, on page load we will focus the "Connect" button if the user has
previously interacted with it. We record this interaction in a
preference that persists between sessions.

We also separate out the "Loading" stage from the "Start" stage. It is
unexpected for `about:torconnect` to be opened whilst in the "Loading"
stage, but if it does happen it would be safer to keep the page blank.
The way this is implemented also ensures that the initial page is blank
prior to "get-init-args" resolving.
  • c6f95a38
    by Henry Wilkes at 2025-03-31T10:48:05+02:00 
    fixup! TB 27476: Implement about:torconnect captive portal within Tor Browser

TB 42656: Drop maybeUpdateOpenLocationForTorConnect.
  • f29ddce3
    by Henry Wilkes at 2025-03-31T10:48:05+02:00 
    fixup! TB 27476: Implement about:torconnect captive portal within Tor Browser

TB 43563: Re-fill the list of region names when the app locale changes.

We also clean up some of the corresponding code.
  • adf0731c
    by Pier Angelo Vendrame at 2025-03-31T10:48:05+02:00 
    Temporary changes to about:torconnect for Android.

We are planning of tempoorarily using about:torconnect on Android, until
the native UX is ready.
  • 75c063e1
    by Henry Wilkes at 2025-03-31T10:48:06+02:00 
    TB 43405: Show a prompt whenever we fail to apply Tor settings.
  • 0ba8a826
    by Henry Wilkes at 2025-03-31T10:48:06+02:00 
    TB 7494: Create local home page for TBB.

Bug 41333: Update about:tor to new design. Including:
+ make the favicon match the branding icon.
+ make the location bar show a search icon.
  • b09c0ef4
    by Henry Wilkes at 2025-03-31T10:48:06+02:00 
    fixup! TB 7494: Create local home page for TBB.

TB 43489: Add a survey banner in about:tor.
  • a8a8dc16
    by Henry Wilkes at 2025-03-31T10:48:06+02:00 
    fixup! TB 7494: Create local home page for TBB.

TB 43556: Rename "Not now" to "Dismiss" in the survey banner.
  • c22e3686
    by Pier Angelo Vendrame at 2025-03-31T10:48:07+02:00 
    TB 41668: Tweaks to the Base Browser updater for Tor Browser

This commit was once part of "Bug 4234: Use the Firefox Update Process
for Tor Browser.".
However, some parts of it were not needed for Base Browser and some
derivative browsers.
Therefore, we extracted from that commit the parts for Tor Browser
legacy, and we add them back to the patch set with this commit.
  • a72ad679
    by Pier Angelo Vendrame at 2025-03-31T10:48:07+02:00 
    fixup! TB 41668: Tweaks to the Base Browser updater for Tor Browser

TB 42720: Show what's new in the about:dialog.

Add a variable for the base browser version without dot, as we use it
in blog post URLs.
  • da0c1fa6
    by Kathy Brade at 2025-03-31T10:48:07+02:00 
    TB 12647: Support symlinks in the updater.
  • 10c30390
    by Georg Koppen at 2025-03-31T10:48:07+02:00 
    TB 32658: Create a new MAR signing key

It's time for our rotation again: Move the backup key in the front
position and add a new backup key.

Bug 33803: Move our primary nightly MAR signing key to tor-browser

Bug 33803: Add a secondary nightly MAR signing key
  • 4d12b49f
    by Pier Angelo Vendrame at 2025-03-31T10:48:08+02:00 
    TB 42891: Set the bundled search engine for Tor Browser.

After upstream changes between Firefox 115 and 128, we had to
completely rework the way in which we define our search engines.

This commit replaces the old "Omnibox: Add DDG, Startpage, Disconnect,
Youtube, Twitter; remove Amazon, eBay, bing".

With that commit, we customized a list of addons IDs to ship as
built-in search engines, but then upsteam moved to using only
RemoteSettings.
The configuration has many more fields, and it would be quite long to
include it in the source code. Therefore, we use some local JSON files
and load the settings from them.
  • f87797fc
    by Alex Catarineu at 2025-03-31T10:48:08+02:00 
    TB 40073: Disable remote Public Suffix List fetching

In https://bugzilla.mozilla.org/show_bug.cgi?id=1563246 Firefox implemented
fetching the Public Suffix List via RemoteSettings and replacing the default
one at runtime, which we do not want.
  • 7b8887a9
    by Henry Wilkes at 2025-03-31T10:48:08+02:00 
    TB 41906: Hide DNS over HTTPS preferences.
  • bb02f02a
    by Richard Pospesel at 2025-03-31T10:48:08+02:00 
    TB 23247: Communicating security expectations for .onion

Encrypting pages hosted on Onion Services with SSL/TLS is redundant
(in terms of hiding content) as all traffic within the Tor network is
already fully encrypted.  Therefore, serving HTTP pages from an Onion
Service is more or less fine.

Prior to this patch, Tor Browser would mostly treat pages delivered
via Onion Services as well as pages delivered in the ordinary fashion
over the internet in the same way.  This created some inconsistencies
in behaviour and misinformation presented to the user relating to the
security of pages delivered via Onion Services:

 - HTTP Onion Service pages did not have any 'lock' icon indicating
   the site was secure
 - HTTP Onion Service pages would be marked as unencrypted in the Page
   Info screen
 - Mixed-mode content restrictions did not apply to HTTP Onion Service
   pages embedding Non-Onion HTTP content

This patch fixes the above issues, and also adds several new 'Onion'
icons to the mix to indicate all of the various permutations of Onion
Services hosted HTTP or HTTPS pages with HTTP or HTTPS content.

Strings for Onion Service Page Info page are pulled from Torbutton's
localization strings.
  • 665a580b
    by Kathy Brade at 2025-03-31T10:48:09+02:00 
    TB 30237: Add v3 onion services client authentication prompt

When Tor informs the browser that client authentication is needed,
temporarily load about:blank instead of about:neterror and prompt
for the user's key.

If a correctly formatted key is entered, use Tor's ONION_CLIENT_AUTH_ADD
control port command to add the key (via Torbutton's control port
module) and reload the page.

If the user cancels the prompt, display the standard about:neterror
"Unable to connect" page. This requires a small change to
browser/actors/NetErrorChild.jsm to account for the fact that the
docShell no longer has the failedChannel information. The failedChannel
is used to extract TLS-related error info, which is not applicable
in the case of a canceled .onion authentication prompt.

Add a leaveOpen option to PopupNotifications.show so we can display
error messages within the popup notification doorhanger without
closing the prompt.

Add support for onion services strings to the TorStrings module.

Add support for Tor extended SOCKS errors (Tor proposal 304) to the
socket transport and SOCKS layers. Improved display of all of these
errors will be implemented as part of bug 30025.

Also fixes bug 19757:
 Add a "Remember this key" checkbox to the client auth prompt.

 Add an "Onion Services Authentication" section within the
 about:preferences "Privacy & Security section" to allow
 viewing and removal of v3 onion client auth keys that have
 been stored on disk.

Also fixes bug 19251: use enhanced error pages for onion service errors.
  • 6b573df3
    by Alex Catarineu at 2025-03-31T10:48:09+02:00 
    TB 21952: Implement Onion-Location

Whenever a valid Onion-Location HTTP header (or corresponding HTML
<meta> http-equiv attribute) is found in a document load, we either
redirect to it (if the user opted-in via preference) or notify the
presence of an onionsite alternative with a badge in the urlbar.
  • e9e42846
    by Pier Angelo Vendrame at 2025-03-31T10:48:09+02:00 
    TB 40458: Implement .tor.onion aliases

We have enabled HTTPS-Only mode, therefore we do not need
HTTPS-Everywhere anymore.
However, we want to keep supporting .tor.onion aliases (especially for
securedrop).
Therefore, in this patch we implemented the parsing of HTTPS-Everywhere
rulesets, and the redirect of .tor.onion domains.
Actually, Tor Browser believes they are actual domains. We change them
on the fly on the SOCKS proxy requests to resolve the domain, and on
the code that verifies HTTPS certificates.
  • 93abbb72
    by Henry Wilkes at 2025-03-31T10:48:09+02:00 
    fixup! TB 40458: Implement .tor.onion aliases

TB 43443: Drop au.securedrop.tor.onion effective TLD.
  • 640af04b
    by Pier Angelo Vendrame at 2025-03-31T10:48:10+02:00 
    TB 11698: Incorporate Tor Browser Manual pages into Tor Browser

This patch associates the about:manual page to a translated page that
must be injected to browser/omni.ja after the build.
The content must be placed in chrome/browser/content/browser/manual/, so
that is then available at chrome://browser/content/manual/.
We preferred giving absolute freedom to the web team, rather than having
to change the patch in case of changes on the documentation.
  • 61c0547d
    by Pier Angelo Vendrame at 2025-03-31T10:48:10+02:00 
    TB 41435: Add a Tor Browser migration function

For now this function only deletes old language packs for which we are
already packaging the strings with the application.
  • d7bf2f3a
    by Dan Ballard at 2025-03-31T10:48:10+02:00 
    TB 40701: Add security warning when downloading a file

Shown in the downloads panel, about:downloads and places.xhtml.
  • e33c4386
    by Henry Wilkes at 2025-03-31T10:48:10+02:00 
    TB 41736: Customize toolbar for tor-browser.
  • d9c9caed
    by hackademix at 2025-03-31T10:48:11+02:00 
    TB 41728: Pin bridges.torproject.org domains to Let's Encrypt's root cert public key
  • 8effb13a
    by Richard Pospesel at 2025-03-31T10:48:11+02:00 
    TB 41822: Unconditionally disable default browser UX in about:preferences
  • 530e321b
    by Cecylia Bocovich at 2025-03-31T10:48:11+02:00 
    Temporary commit: manually place generated wasm files

These files are built reproducibly using tor-browser-build: https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/merge_requests/715

We're manually adding them here while working on the interface, but
eventually these should be placed in the right location using
tor-browser-build.
  • 88966c0a
    by Pier Angelo Vendrame at 2025-03-31T10:48:11+02:00 
    [android] TBA strings
  • 4337d37e
    by Henry Wilkes at 2025-03-31T10:48:12+02:00 
    fixup! [android] TBA strings

TB 43490: Use lower case "n" for "Tor network".

TB 43091: Also drop unused strings: preferences_tor_network_settings,
tor_bootstrap_quick_start_disabled, tor_bootstrap_quick_start_enabled.
  • 89a82409
    by Dan Ballard at 2025-03-31T10:48:12+02:00 
    fixup! [android] TBA strings

Bug 43473: change quickstart to connect automatically in settings
  • f3d7d6da
    by Henry Wilkes at 2025-03-31T10:48:12+02:00 
    fixup! [android] TBA strings

TB 43091: Remove unused android strings.
  • a1db4e03
    by Dan Ballard at 2025-03-31T10:48:12+02:00 
    fixup! [android] TBA strings

Bug 43505 [android]: Add 2025 UX Survey Campaign
  • e7e8d32e
    by Dan Ballard at 2025-03-31T10:48:13+02:00 
    TB 42660: Disable ProxySelector.openConnectionWithProxy and NOPify CrashReporter.sendCrashReport
  • bbdccc0a
    by Dan Ballard at 2025-03-31T10:48:13+02:00 
    TB 43006: Disable RFP for Font Visibility on Android
  • 2397f443
    by Matthew Finkel at 2025-03-31T10:48:13+02:00 
    TB 40005: [android] Modify Default toolbar menu

Originally android-components#40005.
  • d2d79247
    by Alex Catarineu at 2025-03-31T10:48:13+02:00 
    TB 34378: [android] Port external helper app prompting

Together with the corresponding fenix patch, this allows all `startActivity`
that may open external apps to be replaced by `TorUtils.startActivityPrompt`.

Originally, android-components#40007 and fenix#34378.
  • 4163d23a
    by Alex Catarineu at 2025-03-31T10:48:14+02:00 
    TB 40002: [android] Ensure system download manager is not used

Originally, android-components#40002.

android-components#40075: Support scoped storage to enable downloads on API < 29

- in android-components!7,  we blocked all usage of Scoped
  Storage in an attempt to block usage of Android's
  DownloadManager, which is known to cause proxy bypasses
- as of Android API 29, downloads will not work without Scoped Storage,
  causing all downlaods to fail (see: fenix##40192)
- here, we enable usage of scoped storage for API >= 29, but block
  calls to DownloadManager on API < 29
  • b8cddc5c
    by Alex Catarineu at 2025-03-31T10:48:14+02:00 
    TB 40009: [android] Change the default search engines

Originally, android-components#40009.

This matches the search engines from desktop, that is:
DDG as the default, then YouTube, Google, DDGOnion,
Startpage, Twitter, Wikipedia and Yahoo.

android-components#40062: Update DuckDuckGo onion search plugin
  • afc5d9ce
    by hackademix at 2025-03-31T10:48:14+02:00 
    TB 42191: [android] Temporary StrictMode relaxation to clear the thumbnail cache.
  • a3f00143
    by hackademix at 2025-03-31T10:48:14+02:00 
    [android] Modify add-on support

Bug 41160: One-time ultimate switch Tor Browser Android to HTTPS-Only.
Bug 41159: Remove HTTPS-Everywhere extension from Tor Browser Android.

Bug 41094: Enable HTTPS-Only Mode by default in Tor Browser Android.

Turn shouldUseHttpsOnly's default to true.

Bug 40225: Bundled extensions don't get updated with Android Tor
           Browser updates.

Bug 40030: Install NoScript addon on startup.

Also 40070: Consider storing the list of recommended addons

This implements our own AddonsProvider, which loads the list of
available addons from assets instead of fetching it from an
endpoint.

Also, we hide the uninstall button for builtin addons.

Bug 40058: Hide option for disallowing addon in private mode
  • 7256333d
    by Alex Catarineu at 2025-03-31T10:48:15+02:00 
    [android] Modify Addon support

android-components#40011: Hide option for disallowing addons in private mode

android-components#40016: Allow inheriting from AddonCollectionProvider

This will allow implementing our own AddonsProvider in fenix.
  • af163817
    by Alex Catarineu at 2025-03-31T10:48:15+02:00 
    TB 40015: [android] Port padlock states for .onion services

Originally, android-components#40015.
  • 5a380d47
    by Matthew Finkel at 2025-03-31T10:48:15+02:00 
    [android] Modify Tracking Protection configuration

android-components#40020: Disable third-party cookies

android-components#40024: Disable tracking protection by default
  • cdd5eaf3
    by Matthew Finkel at 2025-03-31T10:48:15+02:00 
    TB 40023: [android] Stop PrivateNotificationService

Originally, android-components#40023.
  • 6ca58fad
    by Alex Catarineu at 2025-03-31T10:48:16+02:00 
    TB 34439 [android]: Isolate Icon loader on Android.

Originally, android-components#34439.
  • 2a7c6314
    by Matthew Finkel at 2025-03-31T10:48:16+02:00 
    [android] Disable features and functionality

Bug 33594: Disable data collection by default (Glean)

Bug 40019: Adjust is disabled on Release when data collection is disabled

Bug 34338: Disable the crash reporter

Bug 40014: Neuter Google Advertising ID

Bug 40018: Disable Push service

Bug 40034: Disable PWA onboading

Bug 40072: Disable Tracking Protection

Bug 40061: Do not show "Send to device" in sharing menu

Bug 40109: Reduce requested permissions

Exclude LOCATION and NETWORK_STATE
  • b4305616
    by Matthew Finkel at 2025-03-31T10:48:16+02:00 
    TB 40032 [android]: Set usesCleartextTraffic as false

Originally, fenix#40032.
  • c3ef4f0c
    by Matthew Finkel at 2025-03-31T10:48:16+02:00 
    [android] Rename as Tor Browser

Bug 40020: Change applicationId

Bug 40020: Change app name

Bug 40020: Change deeplink scheme

Bug 40020: Change App icons

Bug 40073: Use correct branding on About page

Bug 40088: Use Tor Browser logo in migration screen
  • 1f8556af
    by Georg Koppen at 2025-03-31T10:48:16+02:00 
    [android] Modify build system

Bug 40083: Make locale ordering in BuildConfig deterministic

Bug 40042: Add option do overwrite timestamp in extension version

Bug 40059: Use MOZ_BUILD_DATE for versionCode

At the same time we adapt MOZ_BUILD_DATE to our needs where it is
actually used and not in tor-browser-build. This gives us more
flexibility. See: tor-browser-build#40084.

Bug 40067: Fix reproducibility issue in classes2.dex

We make sure our MOZ_BUILD_DATE gets used as a source for showing date
related information on the Fenix about page.

Bug 40071: Show only supported locales

Bug 40064: Use Gecko Beta for Nightly and Debug variants

Bug 40123: Allow building the instrumented tests apks for variants other than debug

This allows to specify the variant of the instrumented tests via
a `testBuildType` gradle argument. It also applies a workaround for
a R8 issue from https://issuetracker.google.com/issues/140851070.

Bug 40143: Use deterministic date in Test apk

The build config was using Date() when generating the Test apk's
versionName.
  • 11d27f79
    by Beatriz Rizental at 2025-03-31T10:48:17+02:00 
    TB 42669: [android] Use custom no-op app-services

Fetch the custom built no-op application services library
from tor-browser-build when building for Android.
  • 0fb19c87
    by Matthew Finkel at 2025-03-31T10:48:17+02:00 
    TB 40185: [android] Use NimbusDisabled

Originally, fenix#40185.
  • d373ecf1
    by Alex Catarineu at 2025-03-31T10:48:17+02:00 
    TB 40087 [android]: Implement a switch for spoof English.

Originally, fenix#40087 and android-components#40019.
  • e58116da
    by Matthew Finkel at 2025-03-31T10:48:17+02:00 
    TB 34403 [android]: Disable Normal mode by default.

Originally, fenix#34403.
  • 1dc262cb
    by Matthew Finkel at 2025-03-31T10:48:18+02:00 
    TB 40016 [android]: Don't install WebCompat webext.

Originally, fenix#40016.
  • 438f4642
    by Matthew Finkel at 2025-03-31T10:48:18+02:00 
    [android] Modify UI/UX

Bug 40015: Modify Home menu

Bug 40016: Hide unwanted Settings

Bug 40016: Modify Default toolbar menu

Bug 40016: Add Donate settings button

Bug 40016: Move Allow Screenshots under Advanced

Bug 40016: Don't install WebCompat webext

Bug 40016: Don't onboard Search Suggestions

Bug 40094: Do not use MasterPasswordTipProvider in HomeFragment

Bug 40095: Hide "Sign in to sync" in bookmarks

Bug 40031: Hide Mozilla-specific items on About page

Bug 40063: Do not sort search engines alphabetically

Bug 40141: Hide EME site permission

Bug 40166: Hide "Normal" tab (again) and Sync tab in TabTray

Bug 40167: Hide "Save to Collection" in menu

Bug 40172: Find the Quit button

Bug 40186: Hide Credit Cards in Settings

Bug 40198: Spoof English toggle now overlaps with locale list
  • ce0dc4bb
    by Matthew Finkel at 2025-03-31T10:48:18+02:00 
    TB 40026 [android]: Implement Security Level settings on Android.

Originally, fenix#40026.
  • c1cc2705
    by Dan Ballard at 2025-03-31T10:48:18+02:00 
    TB 41972: [android] Disable Mozilla onboarding
  • 1f2340a7
    by Dan Ballard at 2025-03-31T10:48:19+02:00 
    TB 41878: [android] Add standalone Tor Bootstrap
  • a26da5f9
    by clairehurst at 2025-03-31T10:48:19+02:00 
    fixup! TB 41878: [android] Add standalone Tor Bootstrap

tor-browser#43329 [Android] Remove remaining traces of the old Bootstrap
  • 2bea8801
    by Dan Ballard at 2025-03-31T10:48:19+02:00 
    fixup! TB 41878: [android] Add standalone Tor Bootstrap

Bug 41188: Add staging event wiring
  • fef9d890
    by clairehurst at 2025-03-31T10:48:19+02:00 
    fixup! TB 41878: [android] Add standalone Tor Bootstrap

tor-browser#43361
  • 7750df02
    by Pier Angelo Vendrame at 2025-03-31T10:48:20+02:00 
    fixup! TB 41878: [android] Add standalone Tor Bootstrap

TBB 41407: Use Lyrebird also for Snowflake.

TBB 41410: Use the libLyrebird.so name.
  • 9dccc635
    by Matthew Finkel at 2025-03-31T10:48:20+02:00 
    TB 40041 [android]: Implement Tor Network Settings

Originally, fenix#40041.
  • 50bf2db5
    by clairehurst at 2025-03-31T10:48:20+02:00 
    fixup! TB 40041 [android]: Implement Tor Network Settings

tor-browser#43329 [Android] Remove remaining traces of the old Bootstrap
  • 2da76189
    by Dan Ballard at 2025-03-31T10:48:20+02:00 
    fixup! TB 40041 [android]: Implement Tor Network Settings

Bug 43473: change quickstart to connect automatically in settings
  • 7271b0a8
    by clairehurst at 2025-03-31T10:48:21+02:00 
    fixup! TB 40041 [android]: Implement Tor Network Settings
  • 3263aa80
    by clairehurst at 2025-03-31T10:48:21+02:00 
    [android] Implement Android-native Connection Assist UI
  • 9f0575a7
    by clairehurst at 2025-03-31T10:48:21+02:00 
    fixup! [android] Implement Android-native Connection Assist UI

tor-browser!43408 Add pref to load quickstartUI faster
  • 18837157
    by clairehurst at 2025-03-31T10:48:21+02:00 
    fixup! [android] Implement Android-native Connection Assist UI

tor-browser#43480
  • 46a4b5fc
    by Dan Ballard at 2025-03-31T10:48:22+02:00 
    fixup! [android] Implement Android-native Connection Assist UI

Bug 41188: Add staging event wiring
  • 539f5533
    by clairehurst at 2025-03-31T10:48:22+02:00 
    fixup! [android] Implement Android-native Connection Assist UI

tor-browser#43361
  • 8d9cf823
    by clairehurst at 2025-03-31T10:48:22+02:00 
    fixup! [android] Implement Android-native Connection Assist UI

Bug 41188: Wire up stages to UI
  • 341838db
    by clairehurst at 2025-03-31T10:48:22+02:00 
    fixup! [android] Implement Android-native Connection Assist UI
  • 46959fb3
    by clairehurst at 2025-03-31T22:35:38+02:00 
    fixup! [android] Implement Android-native Connection Assist UI

Bug 43576: Connection Assist on Android Fast Follows (Bug 41188)
Fix domain Fronting issues: !1426 (comment 3175104)
  • 8e43e074
    by clairehurst at 2025-03-31T22:35:38+02:00 
    TB 42655 [android]: Implement "New circuit for this site" on Android
  • 34e331ae
    by clairehurst at 2025-03-31T22:35:38+02:00 
    TB 42089: [android] Remove ability to submit site support requests
  • 4c255af0
    by clairehurst at 2025-03-31T22:35:38+02:00 
    [android] Delete unused media
  • 8c89b31a
    by clairehurst at 2025-03-31T22:35:39+02:00 
    [android] TB 43351: Add function to disable forcing ALL CAPS for the fenix snackbar action button text

This is needed because the default snackbar will force all caps, which can cause problems in some languages. See tor-browser#43351 and bugzilla bug 1935387.

TODO: Remove once the forced all caps is removed by mozilla.
  • 019f390d
    by Beatriz Rizental at 2025-03-31T22:35:39+02:00 
    TB 43243: [android] Implement Android launch test

Also remove exit call from terminate function.
It causes all espresso tests to crash on exit and otherwise doesn't do anything.
  • 18295d9c
    by Dan Ballard at 2025-03-31T22:35:39+02:00 
    TB 43505 [android]: Add 2025 UX Survey Campaign
  • 9b7e175b
    by Henry Wilkes at 2025-03-31T22:35:39+02:00 
    fixup! Bug 43505 [android]: Add 2025 UX Survey Campaign

TB 43556: Update the "Dismiss" translations in the survey banner.
  • ce4889c9
    by Pier Angelo Vendrame at 2025-04-01T16:23:39+02:00 
    fixup! Firefox preference overrides.

BB 43322: Switch from font whitelist to font visibility.

1589 changed files:

The diff was not included because it is too large.

—
View it on GitLab.
You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help 

_______________________________________________
tor-commits mailing list -- tor-commits@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-commits-leave@xxxxxxxxxxxxxxxxxxxx