1. 14 Oct, 2016 3 commits
    • Arthur Edelstein's avatar
      Bug 20244.3: Remove 'restrict third party cookies...' checkbox · 2978978e
      Arthur Edelstein authored
      Also, we remove the 'extensions.torbutton.restrict_thirdparty'
      and use the 'privacy.thirdparty.isolate' pref. At the same time we
      will need to add a checkbox to the about:preferences#privacy page
      that toggles 'privacy.thirdparty.isolate'.
      
      Note that 'privacy.thirdparty.isolate' will be renamed to
      'privacy.firstparty.isolate' in Firefox 52.
      2978978e
    • Arthur Edelstein's avatar
      Bug 20244.2: Remove 'disable browser plugins' checkbox · aa05941e
      Arthur Edelstein authored
      This patch also removes the 'extensions.torbutton.no_tor_plugin'
      pref and simply uses the 'plugin.disable' pref instead.
      
      Thanks to our patch for Bug 10280 in tor-browser.git,
      buttons on the plugins section of about:addons
      already let you "Enable plugins" and "Disable plugins"
      (i.e., toggle the 'plugin.disable' pref).
      
      Also it's probably better to remove this footgun in the UI.
      aa05941e
    • Arthur Edelstein's avatar
      Bug 20244.1: Remove "block-disk" checkbox from Privacy & Security Settings · 6d785fa1
      Arthur Edelstein authored
      An equivalent checkbox, "Always use private browsing mode"
      is already available in about:preferences#privacy. Better to leave
      it more hidden from the user in any case, as it is inadvisable
      to disable private browsing mode.
      
      We remove the 'extensions.torbutton.block_disk' pref and use the
      'browser.privatebrowsing.autostart' pref instead, because they
      are equivalent.
      6d785fa1
  2. 26 Sep, 2016 2 commits
  3. 23 Sep, 2016 1 commit
  4. 15 Sep, 2016 3 commits
  5. 12 Sep, 2016 1 commit
  6. 09 Sep, 2016 4 commits
  7. 08 Sep, 2016 1 commit
  8. 30 Aug, 2016 1 commit
  9. 26 Aug, 2016 1 commit
  10. 25 Aug, 2016 1 commit
    • Kathleen Brade's avatar
      Bug 15852: Remove/synchronize Torbutton SOCKS pref logic · 1b41636c
      Kathleen Brade authored
      Remove the remains of the Torbutton settings panel (which was hidden
      by the fix for bug 14630).
      
      Remove the status bar panel (the status bar was removed in Firefox 4).
      
      Remove the outdated "Disable Torbutton to change these settings"
      message from the Firefox proxy settings dialog.
      
      Change the behavior of the "Restore Defaults" button in the Privacy
      and Security Settings window to no longer reset the browser's proxy
      preferences. Our general philosophy is that if Torbutton does not
      provide a GUI for changing a preference, Torbutton should not modify
      the preference. The exceptions are that Torbutton still supports the
      TOR_SOCKS_PORT and TOR_TRANSPROXY environment variables.
      
      Remove a lot of toggle logic, including extensions.torbutton.tor_enabled
      and related preferences.
      
      Remove the dual cookie jar support since Tor can no longer be turned off.
      
      Rename torbutton_close_on_toggle() to torbutton_close_tabs_on_new_identity().
      
      Remove torbutton_check_socks_remote_dns() since SOCKS remote DNS is
      supported by all modern versions of Firefox.
      
      Remove torbutton_has_good_socks() since it was testing for Firefox 5
      or newer.
      
      Remove unused Firefox version check variables, unused functions, and
      commented out code.
      1b41636c
  11. 19 Aug, 2016 1 commit
  12. 12 Aug, 2016 1 commit
  13. 29 Jul, 2016 1 commit
  14. 28 Jul, 2016 1 commit
  15. 17 Jul, 2016 4 commits
  16. 16 Jul, 2016 1 commit
    • Yawning Angel's avatar
      Bug 8725: Consistently deny redirects to browser/addon internal URLs. · fa67687d
      Yawning Angel authored
      The browser's behavior is different depending on if a given internal
      resource is available or not, regardless of the fact that the actual
      body will not load due to the various safeguards and checks.
      
      This normalizes the behavior by denying all redirects destined for URLs
      with proscribed browser internal schemes (`resource`, `about`, `chrome`).
      fa67687d
  17. 17 Jun, 2016 3 commits
  18. 10 Jun, 2016 2 commits
    • Yawning Angel's avatar
      Bug 19206: Clear out the domain isolator state on `New Identity`. · 36d84929
      Yawning Angel authored and Georg Koppen's avatar Georg Koppen committed
      Additionally clear out the domain isolator state on `New Identity`.  In
      theory this removes the need to explicitly issue a `NEWNYM` as new
      circuits will be used for all subsequent requests, including those made
      via the catch-all circuit.
      36d84929
    • Yawning Angel's avatar
      Bug 19206: Include a 128 bit random tag as part of the domain isolator nonce. · 0fbd44f0
      Yawning Angel authored and Georg Koppen's avatar Georg Koppen committed
      When creating a domain isolation nonce, 128 bits of entropy is drawn
      from a cryptographic source and saved on a per-domain basis.  The new
      circuit behavior is changed to regenerate the nonce, instead of
      incrementing a counter.
      
      This allows the "right thing" to happen when the same tor instance is
      used across multiple Tor Browser sessions, for example when using a
      system wide tor, or a magic anonymity box.
      0fbd44f0
  19. 04 Jun, 2016 1 commit
  20. 31 May, 2016 3 commits
  21. 24 May, 2016 1 commit
  22. 16 May, 2016 1 commit
  23. 09 May, 2016 1 commit
  24. 04 May, 2016 1 commit