Kathleen Brade authored 4 years ago and Georg Koppen committed 4 years ago

Add object-src 'none' to the about:tor content security policy.

Alex Catarineu authored 5 years ago and Georg Koppen committed 4 years ago

Also remove a customizeToolbar.xul line from chrome.manifest,
since it's not needed.

Alex Catarineu authored 5 years ago and Georg Koppen committed 4 years ago

There was a nsISocketTransportService breaking change in
https://bugzilla.mozilla.org/show_bug.cgi?id=1558726.

Alex Catarineu authored 4 years ago and Georg Koppen committed 4 years ago

This fixes a race condition which can be hit in some cases,
such as running some marionette tests. The race condition
results in noscript not being initialized properly due to
the 'pageshow' event being received before 'started'.

To avoid misleading users about private key usage, change:
  example.onion is requesting your private key.
to:
  example.onion is requesting that you authenticate.

Replaced torbutton's torbutton.svg with tor-browser's
torPreferencesIcon.svg to match new style

We also show a tooltip with the full domain on hover, so that it's not
necessary to copy it for users to see it.

Add strings for onion service error pages.

Replace "Keep Tor strong"
with    "Tor is free to use because of donations from people like you"

Add onionAuthViewKeys() and onionAuthRemove() Tor controller functions.

Add strings for "Remember this key" checkbox and the new
"Onion Services Authentication" preferences section.

Modify the Tor controller onionAuthAdd() function to remove support
for the nickname parameter (not supported by tor) and add some
missing parameter validation.