tor-browser/sandboxed-tor-browser, branch sandboxed-tor-browser-0.0.13

Do the release ritual for sandboxed-tor-browser-0.0.13.

2017-09-13T01:59:00+00:00

Bug 23449: Allow `epool_pwait` in the tor seccomp rules.

2017-09-10T15:38:21+00:00

Update the stub's comment blurb. (No functional changes)

2017-08-31T10:20:42+00:00

Use the GCC constructor attribute for stub initialization.

2017-08-31T10:03:30+00:00

Non-portable but this is cleaner.

Revert "Force disable `navigator.sendBeacon()`."

2017-08-30T03:04:17+00:00

This reverts commit 8ccea0137d87d049c0f09ece7428942af78b7570.

I need to think about this more.  While I still think the call is
basically only used to make tracking people easier, if mainline Tor
Browser doesn't disable it, this will impact the user anonymity set.

Disable the "Open with" dialog, which will never work.

2017-08-28T18:39:31+00:00

The container doesn't have anything to "Open with", nor does it have
D-Bus access.  Neither of these things will change, so the dialog can be
suppressed.

Force disable `navigator.sendBeacon()`.

2017-08-26T09:17:58+00:00

Why Tor Browser doesn't do this, I have no idea, but it's basically part
of the cancer that is killing the internet.

Unset the addon autoupdater URL prefs.

2017-08-17T19:02:45+00:00

Updating addons is disabled by default and will not work, even though it
may appear to (#23265).  Instead of checking and then failing to apply
the update, by removing the URLs from the prefs, the check will fail
immediately.

This applies to everything but HTTPSE, because HTTPSE provides it's own
updateURL in the install.rdf file.

fixup! Bug 22984: Force IDNs to be displayed as punycode to thwart homograph attacks.

2017-08-03T17:32:37+00:00

Bug 13170: Disable the rest of the Firefox experiments botnet prefs.

2017-08-03T17:26:05+00:00

The Tor Browser developers have not took action on this, so I will.