[tbb-commits] [tor-browser/tor-browser-45.0.2esr-6.x-1] fixup! TB4: Tor Browser's Firefox preference overrides.

gk at torproject.org gk at torproject.org
Fri Apr 22 14:56:29 UTC 2016


commit 659e0bdad18e5f4550cb7de8b4248354af5870c9
Author: Georg Koppen <gk at torproject.org>
Date:   Fri Apr 22 08:49:32 2016 +0000

    fixup! TB4: Tor Browser's Firefox preference overrides.
    
    We disable `media.navigator.enabled` as a defense-in-depth to avoid
    media devices getting exposed. (bug 16328)
---
 browser/app/profile/000-tor-browser.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index fbe6fb4..b2beff5 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -175,6 +175,9 @@ pref("plugin.state.flash", 1);
 pref("plugins.hide_infobar_for_missing_plugin", true);
 pref("plugins.hideMissingPluginsNotification", true);
 pref("media.peerconnection.enabled", false); // Disable WebRTC interfaces
+// Disables media devices but only if `media.peerconnection.enabled` is set to
+// `false` as well. (see bug 16328 for this defense-in-depth measure)
+pref("media.navigator.enabled", false);
 // GMPs: We make sure they don't show up on the Add-on panel and confuse users.
 // And the external update/donwload server must not get pinged. We apply a
 // clever solution for https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769716.



More information about the tbb-commits mailing list