arthuredelstein / tor-browser Public

…rect content type and principal on OSX; r=baku

This patch makes nsMenuItemIconX also participate in the setup
introduced in bug 1277803.

Adapt preferences to take new EME related ones into account.

In the past the ClearKey system had not been compiled when specifying
--disable-eme. But that changed and it is even bundled nowadays (see:
Mozilla's bug 1300654). We don't want to ship it right now as the use
case for it is not really visible while the code had security
vulnerabilities in the past.

Make EME comment clearer for ESR52.

The Battery API is not available to content anymore since Firefox 52.
Thus, we don't need to set `dom.battery.enabled` anymore. Fixes bug
5293.

…r dialog.

For e10s compatibility, send the "external-app-requested" observer
notification later in the download process, and suspend active requests
while doing so. Fixes bug 21766.

This change also fixes a problem in the esr52-based browser where
downloads stalled when e10s was disabled. Fixes bug 21886.

This fixes bug 22254: `pref()` does not like a `;` between pref name and
value.

…c49. a=lizzard

MozReview-Commit-ID: WVK0smAfAW

--HG--
extra : source : 06bf49fb579575e4813aa54127f67c22964c822b
extra : intermediate-source : 6a0563089b5209cde47ab5dcf33630a7d31e648e

Disable the updater's OSX privilege elevation feature. If the user
does not have write permission to the .app directory, they will be
prompted to download a new copy of the browser. Fixes bug 21940.

As defense-in-depth measures, we also removed the code that is
used by Firefox to launch an OSX process with administrator privileges
as well as the extra copy of the updater executable that was located
under TorBrowser.app/Contents/Library/LaunchServices/.

We disable the newly added safebrowsing capabilities, see bug 21683.

This reverts commit b51157d.

Mozilla still finds critical bugs in Graphite, let#s keep it disabled
for now. Fixes bug 21726.

The old blocklist update system is still running. Thus, no need to
contact the new, on Kinto based system in addition. Fixes bug 22071.

We disable the Microsoft's Family Safety for MitM concerns, see bug 21686.

No need to leak local network things to Mozilla, see bug 21790

The executables are not PIE anymore with the switch to ESR52. We need to
set --enable-pie now even though we still use the hardening wrapper.
Fixes #22238, patch by boklm.

We don't need any Mozilla experiments in Tor Browser. Let's make sure
this feature is disabled. Fixes bug 22073.

Hide the TLS error reporting checkbox for now as Mozilla seems to be the
wrong party to get Tor Browser reports. One day we might want to
repurpose this checkbox to point to our own infrastructure to help
finding bad relays (see bug 19119). Fixes bug 22072.

Bug 21685: Disable remote new tab pages

Also, fix typo in EventUtils.js

Bug 10286: Disable Touch API

        remove Amazon, eBay, bing.

Use a data: URL for the browser.search.defaultenginename preference value
so that the value is used when setting the default search engine.
Fixes bug #22044.

…ing = true

We fix bug 21675 by pretending every user has just one core available.

Bug 22041: libmozsandbox.so error after upgrading to 7.0a3

Fix a problem with unstaged updates on Linux and OSX where the original
files were not restored after a partial update failed to apply due to
changes the user made within their installation. This would leave the
browser in a state where it had a mix of old files and new (patched)
files, which can cause the browser to not be able to start, and
therefore not be able to fallback to a complete update.

We work around bug 13017 by disabling the Web Audio API for now.

…tributes. r=tanvi

--HG--
extra : rebase_source : 6155960b626c29092c96ea7fbc605cc0b637d918