Tor浏览器12.5
时间:2023-07-02 来源:torproject 作者:邓肯 条评论
Tor 浏览器 12.5 现在可以从 Tor 浏览器下载页面和我们的发行版目录中获得。此版本中的许多功能都得益于两个项目:
自 2021 年以来,我们与 Guardian Project 和 Tails 一起为巴西、厄瓜多尔和墨西哥的数百名记者和人权维护者提供了数字安全培训。在这些研讨会上,我们记录了应用程序用户体验的痛点,并在后续旅行中返回验证 Tor 浏览器 Alpha 的潜在解决方案。
其次,在四月份,我们宣布推出Mullvad浏览器,这是一个由Tor项目构建并由Mullvad分发的新隐私浏览器。这种合作使我们能够重构 Tor 浏览器的构建系统,解决许多遗留问题,并对 Tor 浏览器的自定义组件进行可访问性审查——您可以在下面了解更多信息。
有什么新变化?
更新的电路显示
在桌面版 Tor 浏览器中,每个选项卡的 Tor 电路都可以在电路显示中找到。在此版本之前,电路显示一直位于站点信息面板中 - 这意味着您必须单击地址栏左侧的挂锁图标(或洋葱图标,如果是洋葱站点)才能访问它。可用性测试参与者在被问到时往往很难找到电路显示器,用户通常需要了解它的位置。
为了解决这个问题,我们将电路显示屏移到挂锁旁边的彩色新图标后面。此外,继电器现在具有标志,有助于使其位置更容易一目了然;洋葱站电路的设计更加简洁;访问人类可读洋葱名称的 SecureDrop 用户现在可以查看并切换回底层 V3 洋葱地址;整个面板已从头开始重建,以便与屏幕阅读器更好地兼容。

新的洋葱网站图标
以前,洋葱网站由洋葱字形表示 - Tor浏览器洋葱徽标的微小平面版本。现在,当您在桌面或Android上访问Tor浏览器12.5中的洋葱网站时,您会注意到一些新的东西。
重要的是要认识到洋葱服务不是 Tor 浏览器独有的,它们本身就是一个产品。随着民间社会团体、人权组织和新闻媒体对洋葱服务的采用率不断提高,对第三方应用程序访问洋葱服务的支持也随之增加。今天,除了Tor浏览器之外,您还可以在Orbot,Onion Browser和Brave等兼容应用程序中访问洋葱服务,仅举几例。鉴于此,继续使用与 Tor 浏览器密切相关的图标来代表洋葱网站不再有意义,我们很高兴今天介绍他们的新身份。
![]()
Improved connection experience
在 Tor 浏览器 10.5 桌面版中,我们停用了 Tor 启动器,取而代之的是允许用户从浏览器窗口本身连接到 Tor 的新界面。此功能解锁了能够在离线时访问 Tor 浏览器的其他菜单的额外好处,包括连接设置,它提供了比同等的 Tor 启动器设置页面更强大的功能。
自该版本发布以来,可用性测试参与者有时在离开“连接到 Tor”选项卡后很难弄清楚如何连接。为了解决这个问题,我们在离线时访问的任何页面的地址栏中都提供了“连接”按钮,并且在您在“连接设置”中配置网桥后,Tor 浏览器将自动连接。我们还改进了浏览器连接状态的可见性,现在可以在浏览器窗口的右上角找到,并且您会注意到整个浏览器中也出现了一个新的连接图标。

更好的可访问性
由于 Tor 浏览器基于 Firefox 的扩展支持版本,因此我们尽可能多地重用 Firefox 的前端用户体验,以便我们可以将资源集中在隐私和安全问题上。然而,Tor浏览器还包括许多自定义页面和组件在Firefox之上。
在 Mozilla 长期努力改进 Firefox 可访问性的同时,我们开始了自己的可访问性审查,以记录 Tor 浏览器桌面自定义功能的问题。这篇评论现在已经完成,我们开始部署第一个修复程序,这将是一个多版本的工作,以提高 Tor 浏览器的可访问性。
从 Tor 浏览器 11.5 开始,我们重构了几个组件,包括捆绑的更改日志 (about:tbupdate)、电路显示、安全级别面板、其他对话框和浏览器 chrome 的其他部分。如果您使用屏幕阅读器或任何其他辅助技术,我们很乐意通过自愿担任 alpha 测试人员并在 Tor 论坛上反馈给我们的开发人员来帮助您测试过去和未来的修复。

芬兰语支持
在 Tor 浏览器 12.0 中,我们添加了对阿尔巴尼亚语和乌克兰语的支持。现在,感谢本地化实验室的志愿者翻译人员和合作伙伴的出色工作,我们很高兴将芬兰语(Suomi)作为桌面和Android语言选项。如果您发现芬兰语或任何其他语言的错误,您可以在我们的本地化门户上了解有关如何为 Tor 浏览器、其文档和我们网站的翻译做出贡献的更多信息。

向我们发送您的反馈
如果您发现错误或对我们如何改进此版本有建议,请告诉我们。感谢 Tor 的所有团队,以及为这个版本做出贡献的许多志愿者。
完整更新日志
自 Tor 浏览器 12.0.7 以来的完整更新日志是:
- 所有平台
- 更新的翻译
- 错误或浏览器构建#40353:重新启用 rlbox
- Bug tor-browser-build#40810:添加芬兰语 (fi) 语言支持
- 错误 tor-browser#41066:电路隔离应考虑容器
- 错误 tor-browser#41428:检查我们是否可以创建自己的品牌目录
- 错误 tor-browser#41514:迁移 torbutton 后 eslint 损坏
- 错误浏览器#41568:禁用稍后运行
- 错误或浏览器#41599:关于:网络#网络ID应该规范化
- 错误 tor-browser#41624:禁用未使用的关于:页面
- 错误 tor-browser#41635:在编译时禁用诺曼底组件
- 错误 tor-browser#41636:在确保 NoScript 设置不会丢失后禁用返回 webextension.storage.sync
- 错误 tor-browser#41647: 在 --with-base-browser-version 中打开 --enable-base-browser
- 错误或浏览器#41662:禁用关于:同步日志
- 错误 tor-browser#41671:将 media.peerconnection.ice.relay_only 变为 true 作为对 WebRTC ICE 泄漏的深度防御
- 错误 tor-browser#41689:从基本浏览器中删除startup.homepage_override_url
- 错误或浏览器#41704:立即返回远程设置.pollChanges
- 错误 tor-browser#41738:替换补丁以禁用其首选项的实时重新加载
- 错误或浏览器#41763: TTP-02-003 WP1:数据 URI 允许 JS 执行,尽管安全级别最安全(低)
- Bug tor-browser#41775:避免在nsUpdateDriver中重新定义某些宏.cpp
- 错误或浏览器#41818:删除 YEC 2022 字符串
- Windows + macOS + Linux
- 错误 mullvad-browser#165:修复最大化警告 x 按钮和首选项
- 错误 tor-browser#20497:改进了对非便携模式的支持
- 错误 tor-browser#33298:HTTP 洋葱站点在向非洋葱 HTTP 站点提交表单数据时不会发出弹出警告
- 错误浏览器#40144: 关于:私人浏览火狐品牌
- 错误 tor-browser#40347:URL 栏锁定图标在“查看源代码:.onion”URL 上显示连接不安全 [tor-browser]
- 错误 tor-browser#40552:手动模式添加桥的新文本
- 错误浏览器#40701:改进了下载文件时的安全警告
- 错误 tor-browser-build#40711:审查并扩展我们向其传达重大更改的利益相关者
- Bug tor-browser-build#40733:使用新的品牌目录
- 错误或浏览器构建#40745:允许自定义MOZ_APP_BASENAME
- 错误 tor-browser-build#40773:仅在 Tor 浏览器上复制一些文档文件
- 错误 tor-browser-build#40781:将翻译移动到新路径
- 错误 tor-browser#40788: Tor 浏览器 11.0.4-11.0.6 打电话回家
- 错误或浏览器构建#40808:为夜间基本浏览器设置更新URL
- 错误或浏览器构建#40811:使测试更新程序更容易
- 错误 tor-browser-build#40817:添加基本浏览器增量-每晚生成文件目标
- 错误 tor-browser-build#40833:基本浏览器每晚使用默认频道而不是每晚
- 错误 tor-browser#40958:为洋葱站点显示的中继数量可能会产生误导
- 错误浏览器#41038:更新电路显示中的“单击复制”按钮标签
- 错误 tor-browser#41080:一些用户选择相邻的国家进行翻墙设置
- 错误浏览器#41084:保留红色作为危险操作的按钮颜色
- 错误 tor-browser#41085:重构 UI 以删除所有桥
- 错误或浏览器#41093:用户不了解桥点的目的
- 错误浏览器#41109:“新电路...”洋葱名称换行时按钮被切断
- 错误 tor-browser#41350:将 Bug 19273 的实现移出 Torbutton
- 错误 tor-browser#41351:将加密保护补丁移到补丁集中的早期
- 错误或浏览器#41363:加密警告弹出窗口无法访问屏幕阅读器
- 错误 tor-browser#41448:新身份模式中主按钮的用户“危险”样式
- 错误 tor-browser#41483:Tor 浏览器说 Firefox 超时,让用户感到困惑
- 错误 tor-browser#41503:在重新启动时禁用重新启动,在崩溃时恢复
- 错误浏览器#41521:改进本地化说明
- 错误或浏览器#41533:查看源代码的页面信息窗口:http://...洋葱地址说连接未加密
- 错误 tor-browser#41540:在 alpha 中的关于:首选项中混淆了构建 id 日期
- 错误 tor-browser#41562:F11 后 API 触发的全屏导致上下黑边裁剪页面
- 错误浏览器#41577:禁用配置文件迁移
- 错误浏览器#41587:禁用基本浏览器的更新程序
- 错误浏览器#41595:禁用页面缩略图捕获
- 错误 tor-browser#41600:一些用户很难找到电路显示
- 错误浏览器#41607:更新“新电路”图标
- 错误浏览器#41608:改进地址栏连接状态的用户体验
- 错误 tor-browser#41609:将禁用 Firefox 主页(活动流)移动到基本浏览器
- Bug tor-browser#41613:Skip Drang & Drop filter for DNS-safe URL(无主机名,例如 RFC3966 tel:)
- 错误浏览器#41617:改进了内置桥接对话框的用户体验
- 错误或浏览器#41618:更新连接设置中状态条中使用的图标
- 错误浏览器#41623:更新连接辅助的图标
- 错误 tor-browser#41633:从 12.0.2 更新到 12.0.3 会重置 NoScript 设置
- 错误 tor-browser#41657: 删除 --enable-tor-browser-data-outside-app-dir
- 错误 tor-browser#41668:将部分更新程序补丁移动到基本浏览器
- 错误 tor-browser#41686:将“Bug 11641:默认禁用远程处理”提交从基本浏览器移动到 tor 浏览器
- 错误 tor-browser#41695:在最大化的窗口上端口警告,没有来自 torbutton 的信箱
- 错误 tor-browser#41699:收紧 tor 洋葱别名正则表达式
- 错误 tor-browser#41701:报告扩展不起作用
- 错误或浏览器#41702:连接药丸需要垂直居中
- 错误 tor-browser#41709:sendCommand 不应该永远尝试发送命令
- 错误 tor-browser#41711:在新标识中打开新窗口时的争用条件
- 错误 tor-browser#41718:将外部文件类型警告添加到 关于:下载
- 错误 tor-browser#41719:将新电路显示中的标题和按钮字符串更新为句子大小写
- 错误 tor-browser#41725:杂散连接窗格.xhtml补丁
- 错误 tor-browser#41726:对 torconnect 图标进行动画处理以在连接状态之间转换
- 错误 tor-browser#41734:添加一个“已连接”标志以指示 Tor 浏览器当前正在使用哪个内置桥接选项
- 错误 tor-browser#41736:使用 CustomizableUI.jsm 自定义默认的 CustomizableUI 工具栏
- 错误 tor-browser#41749:将洋葱字形替换为洋葱服务的专用图标
- 错误 tor-browser#41770:键盘导航中断,留下工具栏 tor 电路按钮
- Bug tor-browser#41775:避免在nsUpdateDriver中重新定义某些宏.cpp
- 错误 tor-browser#41785:开发人员工具中的网络监视器显示 HTTP 洋葱资源不安全
- 错误或浏览器#41792:拖放保护阻止拖动下载
- 错误 tor-browser#41800:将外部文件类型警告添加到库/管理书签
- 错误 tor-browser#41801:修复 handleProcessReady in TorSettings.init
- 错误 tor-browser#41802:用于从桥线提取传输的错误正则表达式
- 错误 tor-browser#41810:添加“连接”按钮以请求桥接并提供桥接模式
- 错误 tor-browser#41816:关于:torconnect 中的顶部导航未正确更新
- 错误浏览器#41841:在洋葱定位药丸中使用新的洋葱网站.svg图标
- 视窗 + Linux
- Bug tor-browser-build#40714:在发行版目录中发布NoScript,也适用于Windows和Linux
- 错误浏览器#41654:更新信息跳转到数据
- 窗户
- 错误或浏览器构建#40772:检查并修复NSIS安装程序中的HiDPI问题
- Bug tor-browser-build#40793:将一些元数据也添加到Windows安装程序中
- Bug tor-browser-build#40801:更正 NSIS 脚本中系统范围安装的 ExecShell
- 错误或浏览器#41459:WebRTC无法在mingw下构建
- 错误或浏览器#41678:WebRTC构建修复补丁错误地定义了pid_t
- 苹果操作系统
- 错误 tor-browser-build#40719:也允许在基本浏览器上构建非通用 macOS 版本
- 错误 tor-browser#41535:删除旧的、未使用的和未记录的“-不可见”macOS CLI 标志
- Linux目录
- 错误 tor-browser-build#40830:基本浏览器中缺少 fontconfig 目录
- Bug tor-browser-build#40860:改进了从旧字体配置文件到新字体配置文件的过渡
- Bug tor-browser#41163:由于RFP,许多捆绑字体在Ubuntu / Fedora中被阻止
- 错误或浏览器#41732:实现Linux字体白名单作为深度防御
- 人造人
- 错误或浏览器#41001:删除剩余的安全滑块代码
- 错误浏览器#41185:隐藏了解有关同步的更多信息
- Bug tor-browser#41634:Google Play错误地检测到 libTor.so 是使用OpenSSL 1.1.1b构建的
- 错误浏览器#41667:在Android上启用media.peerconnection.ice.obfuscate_host_addresses以进行深度防御
- 错误 tor-browser#41677:删除 Android 上的 --disable-tor-browser-update 标志
- 构建系统
- 所有平台
- 更新至 1.20.5
- 错误 tor-browser-build#40673:避免单独构建每个 go 模块
- Bug tor-browser-build#40679:使用最新的翻译进行夜间构建
- Bug tor-browser-build#40689:将 Ubuntu 版本从 projects/mmdebstrap-image/config 更新到 22.04.1
- Bug tor-browser-build#40717:创建一个脚本来准备更改日志
- 错误 tor-browser-build#40720:更新 fetch-changelogs.py 脚本以支持新的构建系统标签
- 错误 tor-browser-build#40750:找出为什么 rlbox 会损害可重复性
- 错误 tor-browser-build#40751:制作符号标签-* 需要考虑项目名称
- 错误 tor-browser-build#40753:当更新程序被禁用时,我们不应该复制 mar 工具
- Bug tor-browser-build#40760:添加 BSD 打包程序联系人以发布准备模板
- Bug tor-browser-build#40763:在工具/签名/每晚中添加对多个浏览器进行签名的支持
- 错误 tor-browser-build#40783:更新下载-unsigned-sha256sums-gpg-signatures-from-people-tpo 以使用$projectname前缀目录
- 错误 tor-browser-build#40784:修复 #40737 之后的 var_p/nightly_torbrowser_incremental_from
- Bug tor-browser-build#40794:在 firefox-l10n 输出名称中包含 build-id
- 错误 tor-browser-build#40795:修剪 tor-browser-build 发布准备问题模板
- 错误 tor-browser-build#40796:使用问题编号时,更改日志脚本的用户体验错误
- Bug tor-browser-build#40805:为所有浏览器定义版本标志
- 错误 tor-browser-build#40807:在工具/签名/每晚中添加用于每晚对基本浏览器进行签名的配置
- 错误 tor-browser-build#40812:让 var/rezip in projects/firefox/config 安静
- 错误 tor-browser-build#40818:为 rust 编译器启用 wasm 目标
- Bug tor-browser-build#40828:使用 http://archive.debian.org/debian-archive/ for jessie
- 错误 tor-browser-build#40837:将 mullvad 浏览器构建更改变基到主浏览器
- 错误 tor-browser-build#40870:从工具/签名/下载-unsigned-sha256sums-gpg-signatures-from-people-tpo 中删除没有浏览器名称的 url
- 错误 tor-browser#41649:创建变基和安全向后移植 gitlab 问题模板
- 错误 tor-browser#41682:添加基本浏览器每晚 mar 签名密钥
- Windows + macOS + Linux
- Bug tor-browser-build#33953:提供一种轻松更新项目Go依赖项的方法
- Bug tor-browser-build#40713:在 Firefox 中使用新的 tor-browser l10n 分支
- Bug tor-browser-build#40777:创建一个 Go 引导项目
- Bug tor-browser-build#40778:在 Firefox 中使用测试版本禁用所有翻译
- 错误 tor-browser-build#40788:删除除 en-US 以外的所有语言作为隐私浏览器构建目标
- Bug tor-browser-build#40809:从projects/firefox/mozconfig中删除--enable-tor-browser-update和--enable-verify-mar
- 错误 tor-browser-build#40813:每晚为 basebrowser 启用 var/updater_enabled
- 错误 tor-browser-build#40823:更新项目/发布/update_responses_config.yml 中的 appname_* 变量
- 错误 tor-browser-build#40826:在工具/签名/每晚/更新响应-base-config.yml 中正确设置基本浏览器的appname_marfile
- 错误 tor-browser-build#40827:MAR 生成使用(大部分)硬编码的 MAR 更新通道
- 错误 tor-browser-build#40841:使签名脚本适应新的签名机器
- 错误 tor-browser-build#40849:将 Go 依赖项移动到依赖于它们的项目中,而不是作为独立项目
- 错误 tor-browser-build#40866:从自述文件中删除
Using ansible to set up a nightly build machine - Bug tor-browser-build#40869:obfs4 更名为琴鸟
- 窗户
- 错误或浏览器内部版本#29185:当图标具有 alpha 通道时,NSIS 安装程序不可重现
- Bug tor-browser-build#40757:将项目/浏览器/windows-installer/torbrowser.nsi 更改为模板文件
- Windows + macOS + Linux
- Bug tor-browser-build#40732:查看捆绑数据并尽量不要在基本浏览器中发布默认配置文件
- Linux + 安卓
- 错误 tor-browser-build#40653:使用运行时构建编译器 rt 而不是主 LLVM 构建
- 苹果操作系统
- 错误 tor-browser-build#40792:签名脚本缺少项目名称前缀以制定规则
- 错误 tor-browser-build#40798:dmg2mar 步骤还负责将已签名+稳定的 dmg 复制到已签名的目录
- Bug tor-browser-build#40806:更新对macOS mozconfig的引用
- 错误 tor-browser-build#40824:dmg2mar 脚本使用硬编码的项目名称作为路径
- Bug tor-browser-build#40847:构建文件系统影响DMG的创建
- 错误 tor-browser-build#40858:创建脚本以帮助测试人员自签名 Mac 构建以允许在 Arm 处理器上运行
- Bug tor-browser#41453: 将 mozconfig-macos-x86_64 重命名为 mozconfig-macos
- 人造人
- 错误或浏览器构建#40738:更新安卓git哈希模板
- 错误或浏览器构建#40874:将提交信息也添加到GV
- 错误 tor-browser#41684:针对本地开发版本的 Android 改进
- 所有平台
New release: Tor Browser 12.5
Tor Browser 12.5 is now available from the Tor Browser download page and our distribution directory. Many of the features in this release were made possible thanks to two projects:Since 2021 we've provided digital security training to hundreds of journalists and human rights defenders in Brazil, Ecuador and Mexico alongside Guardian Project and Tails. During these workshops we documented pain points with our applications' user experience, and returned to validate potential solutions with Tor Browser Alpha in follow-up trips.
Secondly, in April we announced the launch of Mullvad Browser, a new privacy browser built by the Tor Project and distributed by Mullvad. This collaboration has enabled us to refactor Tor Browser's build system, address numerous legacy issues and conduct an accessibility review of Tor Browser's custom components – which you can learn more about below.
What's new?
Updated circuit display
In Tor Browser for desktop, the Tor circuit for each of your tabs can be found in the circuit display. Up until this release the circuit display lived in the site information panel – meaning you'd have to click the padlock icon (or onion icon, in the case of onion sites) to the left of the address bar to access it. Usability testing participants often struggled to find the circuit display when asked, and users generally needed to be taught where it lived.
To fix this, we've moved the circuit display behind a colorful new icon that sits beside the padlock. In addition, relays now have flags to help make their locations easier to identify at a glance; the design of onion site circuits has been made more concise; SecureDrop users who visit a human-readable onion name can now see and switch back to the underlying V3 onion address; and the panel as a whole has been rebuilt from scratch for better compatibility with screen readers.

New onion site icons
Previously, onion sites were represented by the onion-glyph – a tiny, flat version of Tor Browser's onion logo. Now, when you visit an onion site in Tor Browser 12.5 on either desktop or Android you'll notice something new.
It's important to recognize that onion services are not exclusive to Tor Browser, and are a product in their own right. As onion service adoption has grown among civil society groups, human rights organizations, and news media outlets, so too has support for visiting onion services by third-party apps. Today, in addition to Tor Browser, you can also access onion services in compatible apps like Orbot, Onion Browser and Brave, to name a few. Given that, it no longer makes sense to continue to represent onion sites with an icon so closely associated with Tor Browser, and we're excited to introduce their new identity today.
![]()
Improved connection experience
In Tor Browser 10.5 for desktop we retired the Tor Launcher in favor of a new interface that allows users to connect to Tor from the browser window itself. This feature unlocked the added benefit of being able to access Tor Browser's other menus while offline, including Connection settings, which offers greater functionality than the equivalent Tor Launcher settings page ever did.
Since that release, usability testing participants have sometimes had difficulty figuring out how to connect after navigating away from the Connect to Tor tab. To remedy this, we've made the Connect button accessible in the address bar of any page you visit while offline, and Tor Browser will connect automatically after you've configured a bridge in Connection settings. We've also improved the visibility of the browser's connection status, which can now be found in the top-right of the browser window, and you'll notice a new connection icon appear throughout the browser too.

Better accessibility
As Tor Browser is based on the Extended Support Release of Firefox, we reuse as much of Firefox's front-end user experience as possible so that we can concentrate our resources on privacy and security issues. However Tor Browser also includes many custom pages and components on top of Firefox.
In parallel with longstanding efforts by Mozilla to improve Firefox's accessibility, we began an accessibility review of our own to document issues with Tor Browser for desktop's custom features. This review has now been completed, and we're beginning to deploy the first fixes in what will be a multi-release effort to improve Tor Browser's accessibility.
Since Tor Browser 11.5 we've refactored several components including bundled changelogs (about:tbupdate), the circuit display, the security level panel, miscellaneous dialogs and other parts of the browser chrome. If you use a screen reader or any other assistive technology, we'd love to get your help testing past and future fixes by volunteering as an alpha tester and feeding back to our developers on the Tor forum.

Finnish language support
In Tor Browser 12.0 we added support for Albanian and Ukrainian. Now, thanks to the incredible work of our volunteer translators and partners at the Localization Lab, we're delighted to include Finnish (Suomi) as a language option on both desktop and Android too. If you spot an error in Finnish or any other language, you can learn more about how to contribute to the translation of Tor Browser, its documentation and our websites on our localization portal.

Send us your feedback
If you find a bug or have a suggestion for how we could improve this release, please let us know. Thanks to all of the teams across Tor, and the many volunteers, who contributed to this release.
Full changelog
The full changelog since Tor Browser 12.0.7 is:
- All Platforms
- Updated Translations
- Bug tor-browser-build#40353: Re-enable rlbox
- Bug tor-browser-build#40810: Add Finnish (fi) language support
- Bug tor-browser#41066: Circuit Isolation should take containers into account
- Bug tor-browser#41428: Check if we can create our own directories for branding
- Bug tor-browser#41514: eslint broken since migrating torbutton
- Bug tor-browser#41568: Disable LaterRun
- Bug tor-browser#41599: about:networking#networkid should be normalized
- Bug tor-browser#41624: Disable unused about: pages
- Bug tor-browser#41635: Disable the Normandy component at compile time
- Bug tor-browser#41636: Disable back webextension.storage.sync after ensuring NoScript settings won't be lost
- Bug tor-browser#41647: Turn --enable-base-browser in --with-base-browser-version
- Bug tor-browser#41662: Disable about:sync-logs
- Bug tor-browser#41671: Turn media.peerconnection.ice.relay_only to true as defense in depth against WebRTC ICE leaks
- Bug tor-browser#41689: Remove startup.homepage_override_url from Base Browser
- Bug tor-browser#41704: Immediately return on remoteSettings.pollChanges
- Bug tor-browser#41738: Replace the patch to disable live reload with its preference
- Bug tor-browser#41763: TTP-02-003 WP1: Data URI allows JS execution despite safest security level (Low)
- Bug tor-browser#41775: Avoid re-defining some macros in nsUpdateDriver.cpp
- Bug tor-browser#41818: Remove YEC 2022 strings
- Windows + macOS + Linux
- Bug mullvad-browser#165: Fix maximization warning x button and preference
- Bug tor-browser#20497: Improve support for non-portable mode
- Bug tor-browser#33298: HTTP onion sites do not give a popup warning when submitting form data to non-onion HTTP sites
- Bug tor-browser#40144: about:privatebrowsing Firefox branding
- Bug tor-browser#40347: URL bar lock icon says connection is not secure when on "view-source:.onion" URLs [tor-browser]
- Bug tor-browser#40552: New texts for the add a bridge manually modal
- Bug tor-browser#40701: Improve security warning when downloading a file
- Bug tor-browser-build#40711: Review and expand the stakeholders we communicate major changes to
- Bug tor-browser-build#40733: Use the new branding directories
- Bug tor-browser-build#40745: Allow customizing MOZ_APP_BASENAME
- Bug tor-browser-build#40773: Copy some documentation files only on Tor Browser
- Bug tor-browser-build#40781: Move translations to new paths
- Bug tor-browser#40788: Tor Browser 11.0.4-11.0.6 phoning home
- Bug tor-browser-build#40808: Set update URL for nightly base-browser
- Bug tor-browser-build#40811: Make testing the updater easier
- Bug tor-browser-build#40817: Add basebrowser-incrementals-nightly makefile target
- Bug tor-browser-build#40833: base-browser nightly is using the default channel instead of nightly
- Bug tor-browser#40958: The number of relays displayed for an onion site can be misleading
- Bug tor-browser#41038: Update "Click to Copy" button label in circuit display
- Bug tor-browser#41080: Some users are choosing an adjacent country for circumvention settings
- Bug tor-browser#41084: Reserve red as a button color for dangerous actions
- Bug tor-browser#41085: Refactor the UI to remove all bridges
- Bug tor-browser#41093: Users don't understand the purpose of bridge-moji
- Bug tor-browser#41109: "New circuit..." button gets cut-off when onion name wraps
- Bug tor-browser#41350: Move the implementation of Bug 19273 out of Torbutton
- Bug tor-browser#41351: Move the crypto protection patch earlier in the patchset
- Bug tor-browser#41363: Crypto warning popup is not screen reader accessible
- Bug tor-browser#41448: User 'danger' style for primary button in new identity modal
- Bug tor-browser#41483: Tor Browser says Firefox timed out, confusing users
- Bug tor-browser#41503: Disable restart in case of reboot and restore in case of crash
- Bug tor-browser#41521: Improve localization notes
- Bug tor-browser#41533: Page Info window for view-source:http://...onion addresses says Connection Not Encrypted
- Bug tor-browser#41540: Confusing build-id date in about:preferences in alphas
- Bug tor-browser#41562: API-triggered fullscreen after F11 causes letterboxing to crop the page
- Bug tor-browser#41577: Disable profile migration
- Bug tor-browser#41587: Disable the updater for Base Browser
- Bug tor-browser#41595: Disable pagethumbnails capturing
- Bug tor-browser#41600: Some users have difficulty finding the circuit display
- Bug tor-browser#41607: Update "New Circuit" icon
- Bug tor-browser#41608: Improve the UX of the location bar's connection status
- Bug tor-browser#41609: Move the disabling of Firefox Home (Activity Stream) to base-browser
- Bug tor-browser#41613: Skip Drang & Drop filtering for DNS-safe URLs (no hostname, e.g. RFC3966 tel:)
- Bug tor-browser#41617: Improve the UX of the built-in bridges dialog
- Bug tor-browser#41618: Update the iconography used in the status strip in connection settings
- Bug tor-browser#41623: Update connection assist's iconography
- Bug tor-browser#41633: Updating from 12.0.2 to 12.0.3 resets NoScript settings
- Bug tor-browser#41657: Remove --enable-tor-browser-data-outside-app-dir
- Bug tor-browser#41668: Move part of the updater patches to base browser
- Bug tor-browser#41686: Move the 'Bug 11641: Disable remoting by default' commit from base-browser to tor-browser
- Bug tor-browser#41695: Port warning on maximized windows without letterboxing from torbutton
- Bug tor-browser#41699: Tighten up the tor onion alias regular expression
- Bug tor-browser#41701: Reporting an extension does not work
- Bug tor-browser#41702: The connection pill needs to be centered vertically
- Bug tor-browser#41709: sendCommand should not try to send a command forever
- Bug tor-browser#41711: Race condition when opening a new window in New Identity
- Bug tor-browser#41718: Add the external filetype warning to about:downloads
- Bug tor-browser#41719: Update title and button strings in the new circuit display to sentence case
- Bug tor-browser#41725: Stray connectionPane.xhtml patch
- Bug tor-browser#41726: Animate the torconnect icon to transition between connected states
- Bug tor-browser#41734: Add a 'Connected' flag to indicate which built-in bridge option Tor Browser is currently using
- Bug tor-browser#41736: Customize the default CustomizableUI toolbar using CustomizableUI.jsm
- Bug tor-browser#41749: Replace the onion-glyph with dedicated icon for onion services
- Bug tor-browser#41770: Keyboard navigation broken leaving the toolbar tor circuit button
- Bug tor-browser#41775: Avoid re-defining some macros in nsUpdateDriver.cpp
- Bug tor-browser#41785: Network monitor in developer tools shows HTTP onion resources as insecure
- Bug tor-browser#41792: Drag and Drop protection prevents dragging downloads
- Bug tor-browser#41800: Add the external filetype warning to Library / Manage Bookmarks
- Bug tor-browser#41801: Fix handleProcessReady in TorSettings.init
- Bug tor-browser#41802: Bad regex used to extract transport from bridgeline
- Bug tor-browser#41810: Add "Connect" buttons to Request Bridge and Provide Bridge modals
- Bug tor-browser#41816: The top navigation in about:torconnect isn't updated correctly
- Bug tor-browser#41841: Use the new onion-site.svg icon in the onion-location pill
- Windows + Linux
- Bug tor-browser-build#40714: Ship NoScript in the distribution directory also for Windows and Linux
- Bug tor-browser#41654: UpdateInfo jumped into Data
- Windows
- Bug tor-browser-build#40772: Check and fix HiDPI issues in the NSIS installer
- Bug tor-browser-build#40793: Add some metadata also to the Windows installer
- Bug tor-browser-build#40801: Correct the ExecShell for system-wide installs in the NSIS script
- Bug tor-browser#41459: WebRTC fails to build under mingw
- Bug tor-browser#41678: WebRTC build fix patches incorrectly defining pid_t
- macOS
- Bug tor-browser-build#40719: Allow non-universal macOS builds also on base-browser
- Bug tor-browser#41535: Remove the old, unused and undocumented "-invisible" macOS CLI flag
- Linux
- Bug tor-browser-build#40830: The fontconfig directory is missing in Base Browser
- Bug tor-browser-build#40860: Improve the transition from the old fontconfig file to the new one
- Bug tor-browser#41163: Many bundled fonts are blocked in Ubuntu/Fedora because of RFP
- Bug tor-browser#41732: implement linux font whitelist as defense-in-depth
- Android
- Bug tor-browser#41001: Remove remaining security slider code
- Bug tor-browser#41185: Hide learn more about sync
- Bug tor-browser#41634: Google Play incorrectly detects that libTor.so is built with OpenSSL 1.1.1b
- Bug tor-browser#41667: Enable media.peerconnection.ice.obfuscate_host_addresses on Android for defense-in-depth
- Bug tor-browser#41677: Remove the --disable-tor-browser-update flag on Android
- Build System
- All Platforms
- Updated Go to 1.20.5
- Bug tor-browser-build#40673: Avoid building each go module separately
- Bug tor-browser-build#40679: Use the latest translations for nightly builds
- Bug tor-browser-build#40689: Update Ubuntu version from projects/mmdebstrap-image/config to 22.04.1
- Bug tor-browser-build#40717: Create a script to prepare changelogs
- Bug tor-browser-build#40720: Update fetch-changelogs.py scripts to support new Build System label
- Bug tor-browser-build#40750: Find why rlbox hurts reproducibility
- Bug tor-browser-build#40751: make signtag-* needs to take project name into account
- Bug tor-browser-build#40753: We should not copy mar tools when the updater is disabled
- Bug tor-browser-build#40760: Add BSD packager contacts to release prep templates
- Bug tor-browser-build#40763: Add support for signing multiple browsers in tools/signing/nightly
- Bug tor-browser-build#40783: Update download-unsigned-sha256sums-gpg-signatures-from-people-tpo to use $projectname prefix directory
- Bug tor-browser-build#40784: Fix var_p/nightly_torbrowser_incremental_from after #40737
- Bug tor-browser-build#40794: Include the build-id in firefox-l10n output name
- Bug tor-browser-build#40795: Trim down tor-browser-build release prep issue templates
- Bug tor-browser-build#40796: Bad UX for the changelogs script when using the issue number
- Bug tor-browser-build#40805: Define the version flag for all browsers
- Bug tor-browser-build#40807: Add config for signing base-browser nightly in tools/signing/nightly
- Bug tor-browser-build#40812: Make var/rezip in projects/firefox/config quiet
- Bug tor-browser-build#40818: Enable wasm target for rust compiler
- Bug tor-browser-build#40828: Use http://archive.debian.org/debian-archive/ for jessie
- Bug tor-browser-build#40837: Rebase mullvad-browser build changes onto main
- Bug tor-browser-build#40870: Remove url without browser name from tools/signing/download-unsigned-sha256sums-gpg-signatures-from-people-tpo
- Bug tor-browser#41649: Create rebase and security backport gitlab issue templates
- Bug tor-browser#41682: Add base-browser nightly mar signing key
- Windows + macOS + Linux
- Bug tor-browser-build#33953: Provide a way for easily updating Go dependencies of projects
- Bug tor-browser-build#40713: Use the new tor-browser l10n branch in Firefox
- Bug tor-browser-build#40777: Create a Go bootstrap project
- Bug tor-browser-build#40778: Disable all translations with testbuilds in Firefox
- Bug tor-browser-build#40788: Remove all languages but en-US for privacy-browser build target
- Bug tor-browser-build#40809: Remove --enable-tor-browser-update and --enable-verify-mar from projects/firefox/mozconfig
- Bug tor-browser-build#40813: Enable var/updater_enabled for basebrowser nightly
- Bug tor-browser-build#40823: Update appname_* variables in projects/release/update_responses_config.yml
- Bug tor-browser-build#40826: Correctly set appname_marfile for basebrowser in tools/signing/nightly/update-responses-base-config.yml
- Bug tor-browser-build#40827: MAR generation uses (mostly) hard-coded MAR update channel
- Bug tor-browser-build#40841: Adapt signing scripts to new signing machines
- Bug tor-browser-build#40849: Move Go dependencies to the projects dependent on them, not as a standalone projects
- Bug tor-browser-build#40866: Remove
Using ansible to set up a nightly build machinefrom README - Bug tor-browser-build#40869: obfs4 is renamed to lyrebird
- Windows
- Bug tor-browser-build#29185: NSIS Installer not reproducible when icon has an alpha channel
- Bug tor-browser-build#40757: Change projects/browser/windows-installer/torbrowser.nsi to a template file
- Windows + macOS + Linux
- Bug tor-browser-build#40732: Review Bundle-Data and try not to ship the default profile in base browser
- Linux + Android
- Bug tor-browser-build#40653: Build compiler-rt with runtimes instead of the main LLVM build
- macOS
- Bug tor-browser-build#40792: signing scripts missing project name prefix to make rule
- Bug tor-browser-build#40798: dmg2mar step also takes care of copying the signed+stabled dmg to the signed directory
- Bug tor-browser-build#40806: Update the reference to the macOS mozconfig
- Bug tor-browser-build#40824: dmg2mar script using hardcoded project names for paths
- Bug tor-browser-build#40847: Build filesystem influences the DMG creation
- Bug tor-browser-build#40858: Create script to assist testers self sign Mac builds to allow running on Arm processors
- Bug tor-browser#41453: Rename mozconfig-macos-x86_64 to mozconfig-macos
- Android
- Bug tor-browser-build#40738: Update Android git hashes templates
- Bug tor-browser-build#40874: Add commit information also to GV
- Bug tor-browser#41684: Android improvements for local dev builds
- All Platforms
