[tbb-commits] [tor-browser/tor-browser-24.4.0esr-1] Add security enhancements suggested by Jesse Ruderman.
mikeperry at torproject.org
mikeperry at torproject.org
Sun Mar 30 07:02:16 UTC 2014
commit 8896b493c0487ac7402514257d6e4acdde00ff64
Author: Mike Perry <mikeperry-git at torproject.org>
Date: Sat Mar 29 23:58:04 2014 -0700
Add security enhancements suggested by Jesse Ruderman.
We were going to put these in the security slider, but perhaps they should be
set by default. There will be a perf impact, but let's see if anyone notices
and complains, at least for a beta or two. If not, maybe we can even set these
in a release.
---
browser/app/profile/000-tor-browser.js | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index 7e2efc9..91f8697 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -140,5 +140,13 @@ pref("keyword.URL", "https://startpage.com/do/search?q=");
pref("gfx.direct2d.disabled", true);
pref("layers.acceleration.disabled", true);
+// Security enhancements
+// https://trac.torproject.org/projects/tor/ticket/9387#comment:17
+pref("javascript.options.ion.content", false);
+pref("javascripjavascript.options.baselinejit.content", false);
+pref("javascripjavascript.options.asmjs", false);
+pref("javascripjavascript.options.typeinference", false);
+
+
// Version placeholder
pref("torbrowser.version", "UNKNOWN");
More information about the tbb-commits
mailing list