summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* Bug #3811: Create a string to inform users about TBBMike Perry2011-08-27
| | | | | This commit just adds the string. I wanted to do this ASAP so we can get it translated before deploying the actual dialog (#3838).
* Bug #3748: Disable 3rd party HTTP authMike Perry2011-08-27
| | | | | | | We do this by removing the Authenticate header. Users will now experience dialogs informing them of incorrect authenticate attempts in the event of an attack/attempted use of 3rd party auth. See #3837 for the bug to improve the dialog.
* Bug #3809: Remove referer spoofing support.Mike Perry2011-08-26
| | | | | It breaks navigation and other things that we cannot fix in the toggle model. Also it is of questionable real privacy value.
* Bug #523: Clear content prefs as part of new identityMike Perry2011-08-26
| | | | See also #3229. These things are written to disk now..
* Bug #3820: Fix a warning w/ session store filterMike Perry2011-08-26
| | | | | | The warning "No tab found for session store tag" can appear during "New Identity" in TBB. This is due to a lack of proper context for the browser object. It may also indicate a leak of sessionstore data to disk.
* Bug #3819: Fix an API issue w/ cookie protectionsMike Perry2011-08-26
| | | | | | | The cookie protections API I used in "New Identity" would do nothing if you had no protected cookies. I don't believe this issue affected 1.4.0, though.
* Bug #3809: Hide referer spoofing optionMike Perry2011-08-25
| | | | | | Due to bug #3429, referer spoofing is breaking browser navigation. Since it is unsafe to fix #3429 while people still insist on using the toggle model, I'm just going to hide the referer spoofing option for now.
* Bug #3580: Fix hotmail (but only for TBB users)Mike Perry2011-08-25
| | | | | | | | | | | | | | | | | | Hotmail appears to have an optimization strategy that involved pre-loading all of the scripts involved in their site as object tags. When the user navigates between pages, the appropriate object tags get converted into script tags and executed. The problem for us is that docSell.allowPlugins is implemented as a content policy that blocks object tags for a given page. We use this API because the toggle model requires the ability to do per-page plugin control. Firefox 3.6 introduced a global plugin control API that allows us to enable/disable indivual plugins, but this was unfit for use in the toggle situation where tabs might sit around in the background. However, we can use it for TBB. This patch switches us to using the plugin manager API, in TBB only.
* Bug #3414: Apply referer policy to window.name.Mike Perry2011-08-20
| | | | | | This keeps window.name reset when the user enters a new url by hand. It also blocks window.name entirely if you have disabled referers (which I think is what someone who disables referers probably wants).
* Bug 3739: SafeCache policy fails for https->http CORSMike Perry2011-08-20
| | | | | We use the cookie permissions api to get the origin URI. It can do some magic we can't do from XPCOM. Thanks to Georg Koppen for the tip!
* Bug 3580: Fix part of the hotmail breakage.Mike Perry2011-08-19
| | | | | We were blocking some of their javascript, which they apparently load in object tags?
* Bug #523: Implement New Identity (for TBB only).Mike Perry2011-08-15
| | | | At long last, the witch is dead.
* Bug #3665: Use referer host if we can't find the owner windowMike Perry2011-08-08
| | | | | | | | Add a fallback to use the referer host if we can't find the owner window through either loadGroup or notificationCallbacks.. This might still leave https:// urls sourced from http:// frames un-isolated, as well as the reverse...
* Bug #3665: Use loadGroup to get window if callbacks are absentMike Perry2011-08-08
| | | | Thanks to Georg Koppen for catching this oversight.
* Document torbutton release process.Mike Perry2011-07-02
| | | | | Documented in as close to script form as possible. In the bright bright future, the whole release process will be automated.
* The tails patch had a bug number.Mike Perry2011-07-01
|
* Bump version.Mike Perry2011-07-01
|
* These look like translations to me!Mike Perry2011-07-01
| | | | But what the hell do I know...
* Changelog entry for Tails name change.Mike Perry2011-07-01
|
* T(A)ILS was renamed to Tails a while ago.intrigeri2011-07-01
|
* Bug #2361: Make about window work again on FF4+.Mike Perry2011-07-01
| | | | Also make the links work, finally.
* Update changelog for 1.4.0.Mike Perry2011-07-01
|
* Demote safecache logging.Mike Perry2011-06-30
|
* Optimize SafeCache pref lookup a bit.Mike Perry2011-06-30
| | | | Also allow 3rd party caching by default.
* Remove use of md5.js.Mike Perry2011-06-30
| | | | Use browsers internal MD5 instead.
* Move SafeCache listener to our global window.Mike Perry2011-06-30
| | | | | They were registering way too many redundant listeners and incorrectly referencing window.content.location.
* Decouple SafeCache from browser cookie prefs.Mike Perry2011-06-30
| | | | | | Make it always on. Also, give 'SafeCookie' its own pref and make it off by default.
* Remove redundant overlay.Mike Perry2011-06-30
|
* Remove SafeCache preferences.Mike Perry2011-06-30
| | | | We're going to trim down our prefs soon. We want safecache always-on.
* Commit Edward Pastuszenski's SafeCache+SafeCookie work.Mike Perry2011-06-30
| | | | | | | http://crypto.stanford.edu/cs294s/projects/browser.html We're going to chop this up a bit, but I figured I'd commit a pristine copy of his work before doing so.
* Squelch exception from app launcher in error console.Mike Perry2011-06-30
|
* Bug #3506: Try to avoid shrinking windows..Mike Perry2011-06-30
|
* Bug #1282: Turns out window.screen.availHeight lies.Mike Perry2011-06-29
| | | | Need to use nsIScreenManager.
* Make icon tooltip state current tor status.Mike Perry2011-06-29
| | | | | Since clicking on torbutton no longer toggles Tor state, we should just display the current state in the tooltip.
* Bug #1282: Set fixed window size for each new window.Mike Perry2011-06-29
| | | | | | Rather than one fixed size, we try to bin the resolution into just a few possibilities, choosing the largest bin possible for a given desktop resolution. We also cap the width at 1000.
* Bug #3506: Remove resize event listener.Mike Perry2011-06-29
| | | | We only resize windows to 50px on page load now.
* Make it harder to accidentally toggle torbutton.Mike Perry2011-06-28
| | | | Also make clicking provide a menu rather than auto-toggle.
* Fix a transparent context menu issue on Linux FF4+.Mike Perry2011-06-24
|
* Make DuckDuckGo the default Google Captcha redirect destination.Mike Perry2011-06-24
| | | | | | | | The search results seem slightly better than ixquick, and the interface is a lot slicker. Plus, who wouldn't trust a duck with a bow-tie? He just wants to help you so bad.
* Bug 3446: We're Firefox 5.0, we swear.Mike Perry2011-06-24
|
* Bug 3441: Enable cookie protection UI by default.Mike Perry2011-06-23
| | | | Also handle the upgrade case to avoid inconsistent prefs.
* Bug 3554: Make Cookie protections obey disk settingsMike Perry2011-06-23
| | | | | The code will delete any existing protections files from the earlier alphas, or from simply changing prefs.
* Bug 2338: Force toggle at startup if tor is enabledMike Perry2011-06-22
| | | | | The toggle ensures our applied prefs match the current torbutton xpi values. It also ensures our proxy matches the environment variable (#2843).
* Bug 2843: Handle TOR_SOCKS env vars on prefs init.Mike Perry2011-06-22
| | | | | We still need to fix #2338 to deal with this properly. TBB will never read the env var otherwise.
* Bug 2843: Update preferences window to support env var.Mike Perry2011-06-22
| | | | | These changes only make the preferences window sane wrt to the TOR_SOCKS_PORT environment var. We still need some code to set the pref during startup.
* Bug 3177: Update torbutton for new TorBrowser prefs.Mike Perry2011-06-20
| | | | Turns out there's just one that makes sense to set right now.
* Bug 3399: Fix a reversed boolean expression found by arno.Mike Perry2011-06-20
| | | | Thanks arno.
* Remove some transifex puke.Mike Perry2011-06-17
|
* Bug 3345: Make Google Captcha redirect work again.Mike Perry2011-06-03
|
* Bug 3101: Disable WebGL. Too many unknowns for now.Mike Perry2011-06-01
| | | | | | | | | | | I think these folks may be right, at least for the short term: http://www.contextis.com/resources/blog/webgl/ Remote fonts were a minefield of exploits, and the vulnerability surface there was like 1% of OpenGL. After a few releases, we can revisit the remaining fingerprinting issues and consider re-enabling.
generated by cgit v1.2.1 (git 2.18.0) at 2024-02-08 07:09:15 +0000