[tor-commits] [torbutton/master] Bug 3101: Disable WebGL. Too many unknowns for now.

[mikeperry@xxxxxxxxxxxxxx]

commit 00d5bc28bf82c9fb049368b78cff8f43d775c299
Author: Mike Perry <mikeperry-git@xxxxxxxxxx>
Date:   Wed Jun 1 00:31:09 2011 -0700

    Bug 3101: Disable WebGL. Too many unknowns for now.
    
    I think these folks may be right, at least for the short term:
    http://www.contextis.com/resources/blog/webgl/
    
    Remote fonts were a minefield of exploits, and the vulnerability surface there
    was like 1% of OpenGL.
    
    After a few releases, we can revisit the remaining fingerprinting issues and
    consider re-enabling.
---
 src/chrome/content/torbutton.js         |    5 +++++
 src/defaults/preferences/preferences.js |    1 +
 src/install.rdf                         |    2 +-
 3 files changed, 7 insertions(+), 1 deletions(-)

diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js
index 9f5c5fe..401443a 100644
--- a/src/chrome/content/torbutton.js
+++ b/src/chrome/content/torbutton.js
@@ -1403,6 +1403,11 @@ function torbutton_update_status(mode, force_update) {
                 !mode, mode, changed);
     }
 
+    if (m_tb_ff4) {
+      torbutton_setBoolPref("webgl.disabled", "webgl_disabled", mode, mode,
+                changed);
+    }
+
     if(m_tb_ff35) {
         // Disable geolocation
         torbutton_setBoolPref("geo.enabled", "geo_enabled", !mode, mode,
diff --git a/src/defaults/preferences/preferences.js b/src/defaults/preferences/preferences.js
index 58c8abe..fd88a1e 100644
--- a/src/defaults/preferences/preferences.js
+++ b/src/defaults/preferences/preferences.js
@@ -93,6 +93,7 @@ pref("extensions.torbutton.saved.buildID_override","");
 pref("extensions.torbutton.saved.useragent_vendor", "");
 pref("extensions.torbutton.saved.useragent_vendorSub","");
 pref("extensions.torbutton.saved.transparentTor",false);
+pref("extensions.torbutton.saved.webgl_disabled", false);
 // network.dns.disablePrefetch is a hidden option. It has no default value:
 //pref("extensions.torbutton.saved.dns_prefetch", false);
 
diff --git a/src/install.rdf b/src/install.rdf
index 540e053..0d4c9f7 100644
--- a/src/install.rdf
+++ b/src/install.rdf
@@ -6,7 +6,7 @@
         <em:name>Torbutton</em:name>
         <em:creator>Mike Perry &amp; Kory Kirk</em:creator>
         <em:id>{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}</em:id>
-        <em:version>1.3.3-alpha</em:version>
+        <em:version>1.4.0rc1-pre1</em:version>
         <em:homepageURL>https://www.torproject.org/torbutton/</em:homepageURL>
         <em:optionsURL>chrome://torbutton/content/preferences.xul</em:optionsURL>
         <em:iconURL>chrome://torbutton/skin/tor.png</em:iconURL>

_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits