Tor Browser issueshttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues2020-07-14T22:25:17Zhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31065Set network.proxy.allow_hijacking_localhost to true2020-07-14T22:25:17ZAlex CatarineuSet network.proxy.allow_hijacking_localhost to truehttps://bugzilla.mozilla.org/1507110 disables proxying localhost even when `network.proxy.no_proxies_on` is empty. We now need to also set `allow_hijacking_localhost=true` in order to avoid websites being able to access local network.https://bugzilla.mozilla.org/1507110 disables proxying localhost even when `network.proxy.no_proxies_on` is empty. We now need to also set `allow_hijacking_localhost=true` in order to avoid websites being able to access local network.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31055Retire Linus' default bridges2021-07-09T17:19:52ZPhilipp Winterphw@torproject.orgRetire Linus' default bridgesLinus mentioned to me that he intends to shut down his default bridges to reduce the maintenance burden and to eliminate the risk of seeing both entry and exit traffic.
The affected bridges are:
* 109.105.109.163:38980
* 109.105.109.16...Linus mentioned to me that he intends to shut down his default bridges to reduce the maintenance burden and to eliminate the risk of seeing both entry and exit traffic.
The affected bridges are:
* 109.105.109.163:38980
* 109.105.109.163:47779
* 109.105.109.165:10527
* 109.105.109.147:13764
I'll push a patch that removes these four bridges in a second.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31015svg.disabled = 'true' hides the the UI icons in extensions2021-07-09T18:24:30Zcypherpunkssvg.disabled = 'true' hides the the UI icons in extensionsIn "safest" security level `svg.disabled` is set to `true` in Tor Browser. This causes the UI icons in the latest versions of uBblock Origin and uMatrix to disappear.
The author of the extensions declined working on this with a note:
"...In "safest" security level `svg.disabled` is set to `true` in Tor Browser. This causes the UI icons in the latest versions of uBblock Origin and uMatrix to disappear.
The author of the extensions declined working on this with a note:
"I consider this a browser issue, to be reported to Firefox issue tracker. Extensions extend a browser abilities, they should not be subjected to restrictions which are meant to be imposed on web pages."
https://github.com/uBlockOrigin/uBlock-issues/issues/446
However as this is Tor Browser specific, I am reporting it here.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/31013Saving images in Tor Browser on Android does not work2021-07-09T17:23:47ZGeorg KoppenSaving images in Tor Browser on Android does not workWe have reports on the blog that saving images does not work in Tor Browser on Android (https://blog.torproject.org/comment/282272#comment-282272).
Steps to reproduce:
1) With Tor Browser go to https://torproject.org
2) long-tap on the...We have reports on the blog that saving images does not work in Tor Browser on Android (https://blog.torproject.org/comment/282272#comment-282272).
Steps to reproduce:
1) With Tor Browser go to https://torproject.org
2) long-tap on the Tor logo in the upper left corner
3) Choose image
4) Save Image
5) Allow access to device to save images
6) Nothing happenshttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/30846Audit activity-stream for network requests2020-07-14T22:25:22ZAlex CatarineuAudit activity-stream for network requestsIn ff68 there are some snippets network requests coming from activity stream (`re[/activity-stream/lib/ASRouter.jsm`).](/activity-stream/lib/ASRouter.jsm`).) We should make sure to disable these and any other related background requests....In ff68 there are some snippets network requests coming from activity stream (`re[/activity-stream/lib/ASRouter.jsm`).](/activity-stream/lib/ASRouter.jsm`).) We should make sure to disable these and any other related background requests.
Some relevant prefs: https://github.com/ghacksuserjs/ghacks-user.js/blob/a92c4086bbf8c4324c4369d1dc8a39338334af45/user.js#L109https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/30767Custom obfs4 bridge does not work on Tor Browser for Android2021-07-09T18:24:30ZGeorg KoppenCustom obfs4 bridge does not work on Tor Browser for AndroidWe got a report on our blog post (https://blog.torproject.org/comment/282217#comment-282217) mentioning that custom obfs4 bridges don't work on Android while they do on desktop. I tested with a bridge provided and can reproduce the issue.We got a report on our blog post (https://blog.torproject.org/comment/282217#comment-282217) mentioning that custom obfs4 bridges don't work on Android while they do on desktop. I tested with a bridge provided and can reproduce the issue.Shane IsbellShane Isbellhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/30665Get Firefox 68 ESR Working with latest android toolchain2020-07-14T22:25:15ZShane IsbellGet Firefox 68 ESR Working with latest android toolchainGet Firefox 68 ESR working in offline mode with updated android toolchain. This task does not include tor-android-service integration.
It may include patches for Rust 1.34.1.Get Firefox 68 ESR working in offline mode with updated android toolchain. This task does not include tor-android-service integration.
It may include patches for Rust 1.34.1.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/30662Make sure about:newtab is blank2023-02-07T18:08:52ZAlex CatarineuMake sure about:newtab is blankMy understanding is that currently the desired behaviour is that `about:newtab` pages should be blank instead of the default Firefox newtab page. While working on legacy/trac#30429 I realized that after applying most of the desktop patch...My understanding is that currently the desired behaviour is that `about:newtab` pages should be blank instead of the default Firefox newtab page. While working on legacy/trac#30429 I realized that after applying most of the desktop patches `about:newtab` is still the Firefox default. Setting `browser.newtabpage.enabled = false` achieves the desired effect, but this pref is `true` for current esr60 and I could not find a browser patch that explicitly sets `about:newtab` to blank for current esr60.
In any case, we should probably set `browser.newtabpage.enabled = false` for esr68.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/30504Investigate if New Identity works properly after moving to ESR 682020-07-14T22:25:12ZAlex CatarineuInvestigate if New Identity works properly after moving to ESR 68Apparently, it seems to be working. But after reloading Browser Console shows a few errors and warnings:
`PushService: onPermissionChange: Error updating registrations: InvalidStateError PushService.jsm:302`
`An IndexedDB transaction t...Apparently, it seems to be working. But after reloading Browser Console shows a few errors and warnings:
`PushService: onPermissionChange: Error updating registrations: InvalidStateError PushService.jsm:302`
`An IndexedDB transaction that was not yet complete has been aborted due to page navigation. IndexedDBHelper.jsm:145:23`
`Error: _initWorker called too early! Please read the session file from disk first. SessionFile.jsm:334:15`
`TypeError: win.gBrowser is undefined ProcessHangMonitor.jsm:410:18`https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/30463Make sure telemetry reporting is disabled in Tor Browser 92020-07-14T22:25:23ZGeorg KoppenMake sure telemetry reporting is disabled in Tor Browser 9We explicitly unset telemetry reporting for mobile and have this disabled for desktop as well.
We should double-check this for Tor Browser 9, though, as MOZ_TELEMETRY_REPORTING gets now automatically set for builds using official settin...We explicitly unset telemetry reporting for mobile and have this disabled for desktop as well.
We should double-check this for Tor Browser 9, though, as MOZ_TELEMETRY_REPORTING gets now automatically set for builds using official settings (as we do), see https://bugzilla.mozilla.org/show_bug.cgi?id=1549886.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/30460Update TOPL Project to Use Android Toolchain (Firefox 68)2020-07-14T22:25:22ZShane IsbellUpdate TOPL Project to Use Android Toolchain (Firefox 68)Update TOPL Project to use the new android toolchain. This will include updating gradle dependencies and changes to the api versions.Update TOPL Project to use the new android toolchain. This will include updating gradle dependencies and changes to the api versions.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/30429Rebase Tor Browser patches for Firefox ESR 682020-07-14T22:25:19ZGeorg KoppenRebase Tor Browser patches for Firefox ESR 68We need to start rebasing our patches against Firefox 68. This is the ticket that tracks the whole effort.
It's helpful how we did it the last time: comment:6:ticket:25543. As mentioned there https://torpat.ch/ is a very valuable resour...We need to start rebasing our patches against Firefox 68. This is the ticket that tracks the whole effort.
It's helpful how we did it the last time: comment:6:ticket:25543. As mentioned there https://torpat.ch/ is a very valuable resource. It might need updating, though (which we should do while we are at it, or point Arthur to the things that need to get fixed).https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/30304Browser locale can be obtained via DTD strings2020-10-16T16:22:27ZAlex CatarineuBrowser locale can be obtained via DTD stringsSee https://bugzilla.mozilla.org/show_bug.cgi?id=467035.
Works in Tor Browser and Firefox 67 (with a different dtd file as in the bugzilla PoC), probably also next ESR.
Did not do a PoC but it would be easy to get a specific string in ...See https://bugzilla.mozilla.org/show_bug.cgi?id=467035.
Works in Tor Browser and Firefox 67 (with a different dtd file as in the bugzilla PoC), probably also next ESR.
Did not do a PoC but it would be easy to get a specific string in all locales, and just compare with value obtained via a hidden iframe that loads an xml with the translated string.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/28885notify users that update is downloading2023-12-12T12:59:07ZMark Smithnotify users that update is downloadingAn important improvement that was discussed in legacy/trac#25694 is to let users know when an update is in the process of being downloaded. Firefox does not show this information in an obvious way; users need to open about:preferences an...An important improvement that was discussed in legacy/trac#25694 is to let users know when an update is in the process of being downloaded. Firefox does not show this information in an obvious way; users need to open about:preferences and look in the Updates section or open the about box. Tor Browser users are sometimes confused because they know an update is available but have no easy way to know if it is being downloaded, and downloading the MAR files can take a while over Tor.
We plan to add a new "Downloading Tor Browser update..." message that will be displayed in the hamburger menu. We will also ensure that the standard "update" icon is displayed on the hamburger menu toolbar icon so users know to look inside for more info.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/28822re-implement desktop onboarding for ESR 682020-07-14T22:25:11ZMark Smithre-implement desktop onboarding for ESR 68As of Firefox 64, the onboarding extension which we used to implement Tor Browser onboarding has been removed. See:
https://bugzilla.mozilla.org/show_bug.cgi?id=1462415
https://bugzilla.mozilla.org/show_bug.cgi?id=1457565
More research ...As of Firefox 64, the onboarding extension which we used to implement Tor Browser onboarding has been removed. See:
https://bugzilla.mozilla.org/show_bug.cgi?id=1462415
https://bugzilla.mozilla.org/show_bug.cgi?id=1457565
More research is required, but it looks like Firefox's new onboarding experience is integrated into their "activity stream" interface (aka new tab page).https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/28810Have tor operate on different ports by default for alpha, release and nightly...2022-07-09T18:25:53ZrichardHave tor operate on different ports by default for alpha, release and nightly Tor Browser buildsThe change in legacy/trac#28546 changes the default install directory based on build (release, alpha, or nightly) for windows, and legacy/trac#28809 will do the same for macOS.
It would be nice if we could run these different builds si...The change in legacy/trac#28546 changes the default install directory based on build (release, alpha, or nightly) for windows, and legacy/trac#28809 will do the same for macOS.
It would be nice if we could run these different builds simultaneously by having tor listen to different ports by default so that we do not need to kill our existing running Tor Browser instance or manually change the port settings ourselves.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/28809Create build-specific installer for macOS2022-07-09T18:24:42ZrichardCreate build-specific installer for macOSSimilar to legacy/trac#28546 modify macOS installer to allow Tor Browser release, alpha and nightly to be installed side-by-side.Similar to legacy/trac#28546 modify macOS installer to allow Tor Browser release, alpha and nightly to be installed side-by-side.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/28709Enable Fuzzyfox2021-07-09T18:24:30ZTom Rittertom@ritter.vgEnable FuzzyfoxFuzzyfox is a new timer mitigation technique currently in Nightly.
https://bugzilla.mozilla.org/show_bug.cgi?id=fuzzyfox
There are some open issues on it that would be best to solve before enabling it by default, but this bug can serve...Fuzzyfox is a new timer mitigation technique currently in Nightly.
https://bugzilla.mozilla.org/show_bug.cgi?id=fuzzyfox
There are some open issues on it that would be best to solve before enabling it by default, but this bug can serve as a tracker for either backporting it or evaluating it.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/2854012/11 release Banner text2021-07-09T18:24:30ZSarah Stevenson12/11 release Banner textPlease create the following 6 banners where:
[Line 1, non-variable] Tor: Strength in Numbers
[Line 2, variable]
1. Keep Tor strong. Give today, and Mozilla will match your donation. https://marvelapp.com/a131e34/screen/48876408
2. ...Please create the following 6 banners where:
[Line 1, non-variable] Tor: Strength in Numbers
[Line 2, variable]
1. Keep Tor strong. Give today, and Mozilla will match your donation. https://marvelapp.com/a131e34/screen/48876408
2. Mozilla is matching every donation until 2019. Give now, and your gift becomes twice as strong.
^^ please notice that the 'Give today, and Mozilla will match your donation" phrase will change here and be: "Give now, and your gift becomes twice as strong."
3. Support internet freedom. Give today, and Mozilla will match your donation.
4. Defend the open web. Give today, and Mozilla will match your donation.
5. Support privacy and freedom online. Give today, and Mozilla will match your donation.
6. We need your support. Every dollar counts. Give today, and Mozilla will match your donation.
[Button]:
“Count me in.” To be used in English.
“Donate now.” To be used for all other languages.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/28381Oreo adaptive icon shape2021-07-09T17:23:47ZTracOreo adaptive icon shapePlease add support for icon shape
https://developer.android.com/guide/practices/ui_guidelines/icon_design_adaptive
https://material.io/guidelines/style/icons.html
**Trac**:
**Username**: cepxuoPlease add support for icon shape
https://developer.android.com/guide/practices/ui_guidelines/icon_design_adaptive
https://material.io/guidelines/style/icons.html
**Trac**:
**Username**: cepxuo