Skip to content

Mullvad Browser 13.0
Compare
Choose a tag to compare
@jbjorkang jbjorkang released this 13 Oct 10:01
· 8 commits to main since this release
13.0
88e111c

⚠️ Going forward the names of all our build artifacts should follow the format ${ARTIFACT}-${OS}-${ARCH}-${VERSION}.${EXT}.
For example, the Linux package for 13.0 is named mullvad-browser-linux-x86_64-13.0.tar.xz.

If you are a downstream packager or download Mullvad Browser artifacts using scripts or automation, you might have to update your scripts.

Blog post

Check our the corresponding blog post.

Changelog

All Platforms

  • Updated Firefox to 115.3.1esr
  • Bug 40050: FF103 Audit [tor-browser-spec]
  • Bug 40051: FF104 Audit [tor-browser-spec]
  • Bug 40052: FF105 Audit [tor-browser-spec]
  • Bug 40053: FF106 Audit [tor-browser-spec]
  • Bug 40054: FF107 Audit [tor-browser-spec]
  • Bug 40055: FF108 Audit [tor-browser-spec]
  • Bug 40056: FF109 Audit [tor-browser-spec]
  • Bug 40057: FF110 Audit [tor-browser-spec]
  • Bug 40058: FF111 Audit [tor-browser-spec]
  • Bug 40059: FF112 Audit [tor-browser-spec]
  • Bug 40060: FF113 Audit [tor-browser-spec]
  • Bug 40061: FF114 Audit [tor-browser-spec]
  • Bug 40062: FF115 Audit [tor-browser-spec]
  • Bug 66: Localize Mullvad Browser [mullvad-browser]
  • Bug 166: Enable built-in URL anti-tracking query parameters stripping [mullvad-browser]
  • Bug 175: Change the default start window size from 1000x1000 [mullvad-browser]
  • Bug 177: Change help links in about:preferences and menu [mullvad-browser]
  • Bug 183: Rebase Mullvad Browser to Firefox 115 [mullvad-browser]
  • Bug 195: Choose which locales to translate Mullvad Browser to [mullvad-browser]
  • Bug 196: Enumerate Mullvad Browser-specific strings for localization [mullvad-browser]
  • Bug 199: Mullvad Browser changes required to use Mullvad Browser-specific localization strings [mullvad-browser]
  • Bug 208: Improve letterboxing's dimensions [mullvad-browser]
  • Bug 211: Change "Mullvad Browser Home" to "New tab" [mullvad-browser]
  • Bug 213: Add search engines to the default list [mullvad-browser]
  • Bug 214: Enable cross-tab identity leak protection in "quiet" mode [mullvad-browser]
  • Bug 215: Update re-adds manually removed default toolbar buttons [mullvad-browser]
  • Bug 218: uBO and Mullvad Browser Extension hidden in unified extensions panel [mullvad-browser]
  • Bug 220: "Firefox Suggest" string appears when search matches a bookmark [mullvad-browser]
  • Bug 223: Trademarks in the about popup are not translated [mullvad-browser]
  • Bug 226: First window after update should go to the user-friendly release page on GitHub [mullvad-browser]
  • Bug 228: Remove popup asking for preferred language on websites [mullvad-browser]
  • Bug 231: Fix the Security Level "read more" link in popup/settings panel [mullvad-browser]
  • Bug 243: Make sure about:mullvadbrowser is treated as a new tab page [mullvad-browser]
  • Bug 26277: When "Safest" setting is enabled searching using duckduckgo should always use the Non-Javascript site for searches [tor-browser]
  • Bug 30556: Re-evaluate letterboxing dimension choices [tor-browser]
  • Bug 33282: Increase the max width of new windows [tor-browser]
  • Bug 33955: Selecting "Copy image" from menu leaks the source URL to the clipboard. This data is often dereferenced by other applications. [tor-browser]
  • Bug 41327: Disable UrlbarProviderInterventions [tor-browser]
  • Bug 41477: Review some extensions.- preferences [tor-browser]
  • Bug 41496: Review 000-tor-browser.js and 001-base-profile.js for 115 [tor-browser]
  • Bug 41528: Hard-coded English "based on Mozilla Firefox" appears in version in "About" dialog [tor-browser]
  • Bug 41576: ESR115: ensure no remote calls for weather & addon suggestions [tor-browser]
  • Bug 41581: ESR115: figure out extension pinning / unified Extensions [tor-browser]
  • Bug 41642: Do not hide new PBM in the hamburger menu if auto PBM is not enabled [tor-browser]
  • Bug 41675: Remove javascript.options.large_arraybuffers [tor-browser]
  • Bug 41691: "Firefox Suggest" text appearing in UI [tor-browser]
  • Bug 41727: WebRTC privacy-hardening settings [tor-browser]
  • Bug 41739: Remove "Website appearance" [tor-browser]
  • Bug 41740: ESR115: change devicePixelRatio spoof to 2 in alpha for testing [tor-browser]
  • Bug 41752: Review changes done by Bug 41565 [tor-browser]
  • Bug 41765: TTP-02-006 WP1: Information leaks via custom homepage (Low) [tor-browser]
  • Bug 41774: Hide the new "Switching to a new device" help menu item [tor-browser]
  • Bug 41791: Copying page contents also puts the source URL on the clipboard [tor-browser]
  • Bug 41797: Lock RFP in release builds [tor-browser]
  • Bug 41833: Reload extensions on new identity [tor-browser]
  • Bug 41834: Hide "Can't Be Removed - learn more" menu line for uninstallable add-ons [tor-browser]
  • Bug 41874: Visual & A11 regressions in add-on badges [tor-browser]
  • Bug 41876: Remove Firefox View from title bar [tor-browser]
  • Bug 41877: NoScript seems to be blocking by default in the first 115-based testbuild [tor-browser]
  • Bug 41881: Developer tools/Network/New Request remembers requests [tor-browser]
  • Bug 41903: The info icon on the language change prompt is not shown [tor-browser]
  • Bug 41936: Review Mozilla 1770158: Use double-conversion library instead of dtoa for string-to-double conversion [tor-browser]
  • Bug 41937: Review Mozilla 1780014: Add specific telemetry for conservative and first-try handshakes [tor-browser]
  • Bug 41938: Review Mozilla 1769994: On systems with IPv6 preferred DNS resolution clients will fail to connect when "localhost" is used as host for the WebSocket server [tor-browser]
  • Bug 41939: Review Mozilla 1728871: Support fetching data from Remote Setting [tor-browser]
  • Bug 41940: Review Mozilla 1739348: When a filetype is set to "always ask" and the user makes a save/open choice in the dialog, we should not also open the downloads panel [tor-browser]
  • Bug 41941: Review Mozilla 1775254: Improve Math.pow accuracy for large exponents [tor-browser]
  • Bug 41943: Lock javascript.options.spectre.disable_for_isolated_content to false [tor-browser]
  • Bug 41945: Review Mozilla 1783019: Add a cookie banner service to automatically handle website cookie banners [tor-browser]
  • Bug 41946: Review Mozilla 1782579: Add a locale parameter to the text recognition API [tor-browser]
  • Bug 41947: Review Mozilla 1779005: Broken since Firefox 102.0: no instant fallback to direct connection when proxy became unreachable while runtime [tor-browser]
  • Bug 41949: Review Mozilla 1782578: Implement a context menu modal for text recognition [tor-browser]
  • Bug 41950: Review Mozilla 1788668: Add the possibility to check that the clipboard contains some pdfjs stuff [tor-browser]
  • Bug 41951: Review Mozilla 1790681: Enable separatePrivateDefault by default [tor-browser]
  • Bug 41959: Review Mozilla 1795944: Remove descriptionheightworkaround [tor-browser]
  • Bug 41961: Review Mozilla 1798868: Hide cookie banner handling UI by default [tor-browser]
  • Bug 41969: Review Mozilla 1746983: Re-enable pingsender2 [tor-browser]
  • Bug 41970: Review Mozilla 17909270: WebRTC bypasses Network settings & proxy.onRequest [tor-browser]
  • Bug 41973: Custom wingpanels don't line up with their toolbar icons in 13.0 alpha [tor-browser]
  • Bug 41981: Review Mozilla 1800675: Add about:preferences entry for cookie banner handling [tor-browser]
  • Bug 41983: Review Mozilla 1770447: Create a reusable "support-link" widget [tor-browser]
  • Bug 41984: Rename languageNotification.ftl to base-browser.ftl [tor-browser]
  • Bug 42013: Review Mozilla 1834374: Do not call EmptyClipboard() in nsBaseClipboard destructor [tor-browser]
  • Bug 42014: Review Mozilla 1832791: Implement a Remote Settings for the Quarantined Domains pref [tor-browser]
  • Bug 42015: Review Mozilla 1830890: Keep a history window of WebRTC stats for about:webrtc [tor-browser]
  • Bug 42019: Empty browser's clipboard on browser shutdown [tor-browser]
  • Bug 42022: Prevent extension search engines from breaking the whole search system [tor-browser]
  • Bug 42026: Disable cookie banner service and UI. [tor-browser]
  • Bug 42027: Create a Base Browser version of migrateUI [tor-browser]
  • Bug 42029: Defense-in-depth: disable non-proxied UDP WebRTC [tor-browser]
  • Bug 42037: Disable about:firefoxview [tor-browser]
  • Bug 42043: Disable gUM: media.devices.enumerate.legacy.enabled [tor-browser]
  • Bug 42046: Remove XUL layout hacks from base browser [tor-browser]
  • Bug 42050: Bring back Save As... dialog as default [tor-browser]
  • Bug 42061: Move the alpha update channel creation to a commit on its own [tor-browser]
  • Bug 42083: RemoteSecuritySettings.init throws error in console [tor-browser]
  • Bug 42084: Race condition with language preferences may make spoof_english ineffective [tor-browser]
  • Bug 42094: Disable media.aboutwebrtc.hist.enabled as security in-depth [tor-browser]
  • Bug 42138: Disable apz.overscroll.enabled pref [tor-browser]
  • Bug 42159: Responsive Design Mode not working correctly [tor-browser]
  • Bug 42166: New identity dialog missing accessible name [tor-browser]
  • Bug 42167: Make the preference auto-focus more reliable [tor-browser]
  • Bug 40893: Update (Noto) fonts for 13.0 [tor-browser-build]
  • Bug 40924: Customize MOZ_APP_REMOTINGNAME instead of passing --name and --class [tor-browser-build]
  • Bug 40937: First window after update should go to the user-friendly release page on GitHub [tor-browser-build]

Windows

  • Bug 40737: Revert backout of Mozilla's fix for bug 1724777 [tor-browser]
  • Bug 41798: Stop building private_browsing.exe on Windows [tor-browser]
  • Bug 41806: Prevent Private Browsing start menu item to be added automatically [tor-browser]
  • Bug 41942: Review Mozilla 1682520: Use the WER runtime exception module to catch early crashes [tor-browser]
  • Bug 41944: Review Mozilla 1774083: Add Surrogate COM Server to handle native Windows notifications when Firefox is closed. [tor-browser]
  • Bug 42008: Review Mozilla 1808146: Copying images from Pixiv and pasting them in certain programs is broken [tor-browser]
  • Bug 42010: Review Mozilla 1810641: Enable overscroll on Windows on all channels [tor-browser]
  • Bug 40930: Upate zlib to 1.3 after 13.0a3 [tor-browser-build]

macOS

  • Bug 41948: Review Mozilla 1782981: Hide the text recognition context menu if the macOS version doesn't support APIs [tor-browser]
  • Bug 41982: Review Mozilla 1762392: Add Cocoa platform support for paste files [tor-browser]
  • Bug 42057: Disable Platform text-recognition functionality [tor-browser]
  • Bug 42147: Add browser.helperApps.deleteTempFileOnExit to our profile [tor-browser]

Linux

  • Bug 225: Right Click - New Tab on link does nothing [mullvad-browser]
  • Bug 41884: Linux: set browser.tabs.searchclipboardfor.middleclick to false [tor-browser]
  • Bug 40576: Fontconfig warning: remove 'blank' configuration [tor-browser-build]

Build System

All Platforms

  • Bug 180: Change the naming scheme of the installers at build time [mullvad-browser]
  • Bug 197: Develop Crowdin to Gitlab translations repo pipeline [mullvad-browser]
  • Bug 198: Enable localization for Mullvad Browser builds [mullvad-browser]
  • Bug 31588: Be smarter about vendoring for Rust projects [tor-browser-build]
  • Bug 40089: Clean up usage of get-moz-build-date script [tor-browser-build]
  • Bug 40149: Remove patching of nightly update URL [tor-browser-build]
  • Bug 40410: Get rid of python2 [tor-browser-build]
  • Bug 40487: Bump Python version [tor-browser-build]
  • Bug 40615: Consider adding a readme to the fonts directory [tor-browser-build]
  • Bug 40802: Drop the patch for making WASI reproducible [tor-browser-build]
  • Bug 40829: Review and standardize naming scheme for browser installer/package artifacts [tor-browser-build]
  • Bug 40855: Update toolchains for Mozilla 115 [tor-browser-build]
  • Bug 40868: Bump Rust to 1.69.0 [tor-browser-build]
  • Bug 40880: The README doesn't include some dependencies needed for building incrementals [tor-browser-build]
  • Bug 40886: Update README with instructions for Arch linux [tor-browser-build]
  • Bug 40898: Add doc from tor-browser-spec/processes/ReleaseProcess to gitlab issue templates [tor-browser-build]
  • Bug 40907: Sometimes debug information are not deterministic with Clang 16.0.4 [tor-browser-build]
  • Bug 40916: Update updated_responses_config.yml to pull Mullvad incrementals from archive.torproject.org [tor-browser-build]
  • Bug 40922: Use base-browser.ftl instead of languageNotification.ftl [tor-browser-build]
  • Bug 40931: Fix incrementals after tor-browser-build#40829 [tor-browser-build]
  • Bug 40932: Remove appname_bundle_android, appname_bundle_macos, appname_bundle_linux, appname_bundle_win32, appname_bundle_win64 from projects/release/update_responses_config.yml [tor-browser-build]
  • Bug 40933: Fix generating incrementals between 12.5.x and 13.0 [tor-browser-build]
  • Bug 40935: Fix fallout from build target rename in signing scripts [tor-browser-build]
  • Bug 40942: Use the branch to build Base Browser [tor-browser-build]
  • Bug 40944: After #40931, updates_responses is using incremental.mar files as if they were non-incremental mar files [tor-browser-build]
  • Bug 40946: override_updater_url does not work for Mullvad Browser [tor-browser-build]
  • Bug 40947: Remove migrate_langs from tools/signing/nightly/update-responses-base-config.yml [tor-browser-build]
  • Bug 40956: Allow testing the updater also with release and alpha channel [tor-browser-build]
  • Bug 40957: Expired subkey warning on Tor Browser GPG verification [tor-browser-build]
  • Bug 40972: Handle Mullvad Browser in the changelog script and group entries by project [tor-browser-build]

Windows

  • Bug 41995: Generated headers on Windows aren't reproducible [tor-browser]
  • Bug 40832: Unify mingw-w64-clang 32+64 bits [tor-browser-build]
  • Bug 40940: Change position of the install|portable in the builds filenames [tor-browser-build]

macOS

  • Bug 40943: Update libdmg-hfsplus to include our uplifted patch [tor-browser-build]

Linux

  • Bug 40102: Move from Debian Jessie to Debian Stretch for our Linux builds [tor-browser-build]
Assets 8