Commit 4e644f7a authored by Pier Angelo Vendrame's avatar Pier Angelo Vendrame 🎃 Committed by brizental
Browse files

fixup! Firefox preference overrides. 

BB 45072: Disable XSLT.

XSLT eventually is going to be disabled in all major browsers.
While Mozilla has not started the process yet, it makes sense for us to
do it, since XSLT has been a source of security bugs and fingerprinting
vectors in the past.
parent 851389e4

browser/app/profile/001-base-profile.js

+3 −0
Changes for browser/app/profile/001-base-profile.js: 3 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -473,6 +473,9 @@ pref("dom.push.enabled", false); 
// See tor-browser#18801.

pref("dom.push.serverURL", "");



// tor-browser#45072: Disable XSLT even before Mozilla does it for Firefox.

pref("dom.xslt.enabled", false);



// Fingerprinting

// tor-browser#41797: For release builds, lock RFP

// tor-browser#42125: Set (and lock in release) also exempted domains.