Alex Catarineu authored Jun 24, 2020 and Georg Koppen committed Jun 24, 2020

Fixes bug 34383.

Kathleen Brade authored Jun 09, 2020 and Georg Koppen committed Jun 11, 2020

Fixes bug 34361.

Kathleen Brade authored Jun 09, 2020 and Georg Koppen committed Jun 11, 2020

Fixes bug 34362.

Kathleen Brade authored Jun 08, 2020 and Georg Koppen committed Jun 11, 2020

Fixes bug 34369.

Kathleen Brade authored Jun 09, 2020 and Georg Koppen committed Jun 11, 2020

Fixes bug 34379.

Bug 34372: Disable GeckoNetworkManager

We should only start and stop the network manager if we are *not*
Tor Browser.

Georg Koppen authored May 08, 2020 and Matthew Finkel committed May 29, 2020

Bug 30318: Integrate snowflake into mobile Tor Browser

Revert "Bug 1633568 - AdjustHelper can inform more listeners about Attribution changes. r=Grisha, a=RyanVM"

This reverts commit 4d64699b.

This reverts commit 7163fd7d.

On Linux, avoid reading policies from /etc/firefox/policies/policies.json

sanketh authored May 10, 2020 and Matthew Finkel committed May 28, 2020

In RFP mode, we do not support PerformanceNavigationTiming, so don't expose it.
In particular, window.PerformanceNavigationTiming should return undefined.

Added a new method PerformanceNavigationTiming::Enabled which when used with the
WebIDL Func attribute allows us to toggle whether
window.PerformanceNavigationTiming is exposed.

Created
dom/tests/mochitest/general/test_toggling_performance_navigation_timing.html to
test whether the toggling works. Updated
browser/components/resistfingerprinting/test/browser/browser_performanceAPI.js
to create a new window each time privacy.resistFingerprinting is flipped so this
behavior does not leak into other tests.

Kathleen Brade authored Apr 16, 2020 and Matthew Finkel committed May 28, 2020

Restrict the Enterprise Policies mechanism to only consult a
policies.json file (avoiding the Windows Registry and macOS's
file system attributes).

Add a few disabledByPolicy() checks to the update service to
avoid extraneous (and potentially confusing) log messages when
updates are disabled by policy.

Sample content for distribution/policies.json:
{
  "policies": {
    "DisableAppUpdate": true
  }
}

Alex Catarineu authored Feb 13, 2020 and Matthew Finkel committed May 28, 2020

A custom HTTPS Everywhere update channel is installed,
which provides rules for locally redirecting some memorable
.tor.onion URLs to non-memorable .onion URLs.

When these redirects occur, we also rewrite the URL in the urlbar
to display the human-memorable hostname instead of the actual
.onion.

Alex Catarineu authored Mar 05, 2020 and Matthew Finkel committed May 28, 2020

Whenever a valid Onion-Location HTTP header (or corresponding HTML
<meta> http-equiv attribute) is found in a document load, we either
redirect to it (if the user opted-in via preference) or notify the
presence of an onionsite alternative with a badge in the urlbar.

Alex Catarineu authored Mar 13, 2020 and Matthew Finkel committed May 28, 2020

We removed the addon in #32767, but it was still being loaded
from addonStartup.json.lz4 and throwing an error on startup
because its resource: location is not available anymore.

Georg Koppen authored Jan 17, 2020 and Matthew Finkel committed May 28, 2020

It's time for our rotation again: Move the backup key in the front
position and add a new backup key.

Marco Bonardo authored Oct 30, 2019 and Matthew Finkel committed May 28, 2020

Bug 1590538 - Don't pass an empty object to urlbar-user-start-navigation because it doesn't handle it properly. r=Standard8

Differential Revision: https://phabricator.services.mozilla.com/D50634

--HG--
extra : moz-landing-system : lando

Alex Catarineu authored Jan 13, 2020 and Matthew Finkel committed May 28, 2020

Using a weak RNG for the form boundary allows a website operator to perform several
attacks on users (as outlined in https://trac.torproject.org/projects/tor/ticket/22919)

These include:
 - Identifying Windows users based on the unseeded RNG
 - Identify the number of form submissions that have occurred cross-origin between same-origin submissions

Additionally, a predictable boundary makes it possible to forge a boundary in the middle
of a file upload.

Differential Revision: https://phabricator.services.mozilla.com/D56056

--HG--
extra : moz-landing-system : lando

Kathleen Brade authored Nov 12, 2019 and Matthew Finkel committed May 28, 2020

When Tor informs the browser that client authentication is needed,
temporarily load about:blank instead of about:neterror and prompt
for the user's key.

If a correctly formatted key is entered, use Tor's ONION_CLIENT_AUTH_ADD
control port command to add the key (via Torbutton's control port
module) and reload the page.

If the user cancels the prompt, display the standard about:neterror
"Unable to connect" page. This requires a small change to
browser/actors/NetErrorChild.jsm to account for the fact that the
docShell no longer has the failedChannel information. The failedChannel
is used to extract TLS-related error info, which is not applicable
in the case of a canceled .onion authentication prompt.

Add a leaveOpen option to PopupNotifications.show so we can display
error messages within the popup notification doorhanger without
closing the prompt.

Add support for onion services strings to the TorStrings module.

Add support for Tor extended SOCKS errors (Tor proposal 304) to the
socket transport and SOCKS layers. Improved display of all of these
errors will be implemented as part of bug 30025.

squash! Bug 30237: Add v3 onion services client authentication prompt

Also fixes bug 19757:
 Add a "Remember this key" checkbox to the client auth prompt.

 Add an "Onion Services Authentication" section within the
 about:preferences "Privacy & Security section" to allow
 viewing and removal of v3 onion client auth keys that have
 been stored on disk.

squash! Bug 30237: Add v3 onion services client authentication prompt

Also fixes bug 19251: use enhanced error pages for onion service errors.

Sean Feng authored Oct 24, 2019 and Matthew Finkel committed May 28, 2020

Bug 1590526 - Temporarily allow node adoption across different docGroups for the content/content case r=smaug,zombie a=pascalc

As web extensions rely on this node adoption between content to content
documents, we want to continue allowing this capability to work for now.

Differential Revision: https://phabricator.services.mozilla.com/D50348

--HG--
extra : source : 78c33df33145bd63cd303264734d0b7d85151908
extra : histedit_source : 280627c1dba1ad7b8d82f5a315b5c2170bf3167b

Sean Feng authored Sep 14, 2019 and Matthew Finkel committed May 28, 2020

Differential Revision: https://phabricator.services.mozilla.com/D43135

--HG--
extra : moz-landing-system : lando

Johann Hofmann authored Oct 06, 2019 and Matthew Finkel committed May 28, 2020

Differential Revision: https://phabricator.services.mozilla.com/D47425

--HG--
extra : moz-landing-system : lando

Alex Catarineu authored Nov 25, 2019 and Matthew Finkel committed May 28, 2020

Differential Revision: https://phabricator.services.mozilla.com/D54303

--HG--
extra : moz-landing-system : lando

Georg Koppen authored Nov 07, 2019 and Matthew Finkel committed May 28, 2020

This is a backport of the fix for Mozilla's bug 1591259.

richard authored Oct 28, 2019 and Matthew Finkel committed May 28, 2020

CSS and JS changes to alter the UX surrounding letterboxing. The
browser element containing page content is now anchored to the bottom
of the toolbar, and the remaining letterbox margin is the same color
as the firefox chrome. The letterbox margin and border are tied to
the currently selected theme.

Also adds a 'needsLetterbox' property to tabbrowser.xml to fix a race
condition present when using the 'isEmpty' property. Using 'isEmpty'
as a proxy for 'needsLetterbox' resulted in over-zealous/unnecessary
letterboxing of about:blank tabs.

Alex Catarineu authored Nov 04, 2019 and Matthew Finkel committed May 28, 2020

Spoof dom/dom.properties, layout/xmlparser.properties,
layout/MediaDocument.properties to en-US if needed.

Differential Revision: https://phabricator.services.mozilla.com/D46034

--HG--
extra : moz-landing-system : lando

Tim Huang authored Jun 11, 2019 and Matthew Finkel committed May 28, 2020

Bug 1556017 - Fixing the off-by-one-pixel issue of find bar and devtool iframe for Letterboxing. r=johannh

This patch fixes the off-by-one-pixel issue of Letterboxing. For
FindBar, it will be created when the user requests it and will be hidden
if the user close it after that. The problem of the original approach is
that it only observes the existance of the FindBar element but not the
fact that whether or not it is visible. So, it will miscalculate the
offset of FindBar after it has been created and closed.

For devtools, the original approach adds one pixel offset for the
separator. However, this one pixel offset is not required since there is
no extra separator outside the devtools iframe. So, we don't need that
and this patch removes this one pixel for the devtools.

Differential Revision: https://phabricator.services.mozilla.com/D34156

--HG--
extra : moz-landing-system : lando