[tor-commits] [Git][tpo/applications/tor-browser][tor-browser-153.0a1-16.0-1] fixup! Firefox preference overrides.

["Pier Angelo Vendrame (@pierov) via tor-commits" <tor-commits@xxxxxxxxxxxxxxxxxxxx>]

Title: GitLab

Pier Angelo Vendrame pushed to branch tor-browser-153.0a1-16.0-1 at The Tor Project / Applications / Tor Browser

Commits:

• 5d6c80ab
  by Pier Angelo Vendrame at 2026-06-29T15:03:39+02:00

  fixup! Firefox preference overrides.
  
  BB 45072: Disable XSLT.
  
  XSLT eventually is going to be disabled in all major browsers.
  While Mozilla has not started the process yet, it makes sense for us to
  do it, since XSLT has been a source of security bugs and fingerprinting
  vectors in the past.
  

1 changed file:

• browser/app/profile/001-base-profile.js

Changes:

browser/app/profile/001-base-profile.js

---

...	...	@@ -476,6 +476,9 @@ pref("dom.push.enabled", false);
476	476	// See tor-browser#18801.
477	477	pref("dom.push.serverURL", "");
478	478
	479	+// tor-browser#45072: Disable XSLT even before Mozilla does it for Firefox.
	480	+pref("dom.xslt.enabled", false);
	481	+
479	482	// Fingerprinting
480	483	// tor-browser#41797: For release builds, lock RFP
481	484	// tor-browser#42125: Set (and lock in release) also exempted domains.

—
View it on GitLab.
You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help Notification message regarding https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5d6c80abc7cd1d6f8c68f6d07409c9be500cb6cb at 1782738226

_______________________________________________
tor-commits mailing list -- tor-commits@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-commits-leave@xxxxxxxxxxxxxxxxxxxx