Enable AssertSystemPrincipalMustNotLoadRemoteDocuments
AssertSystemPrincipalMustNotLoadRemoteDocuments is a defense in depth mitigation Tor should ensure is used by default.
This will involve removing some ifdefs and possibly backporting the updates to the function from -central to -esr68
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information