[tbb-commits] [tor-browser/tor-browser-45.0.2esr-6.x-1] fixup! TB4: Tor Browser's Firefox preference overrides.
gk at torproject.org
gk at torproject.org
Fri Apr 22 14:56:29 UTC 2016
commit 659e0bdad18e5f4550cb7de8b4248354af5870c9
Author: Georg Koppen <gk at torproject.org>
Date: Fri Apr 22 08:49:32 2016 +0000
fixup! TB4: Tor Browser's Firefox preference overrides.
We disable `media.navigator.enabled` as a defense-in-depth to avoid
media devices getting exposed. (bug 16328)
---
browser/app/profile/000-tor-browser.js | 3 +++
1 file changed, 3 insertions(+)
diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index fbe6fb4..b2beff5 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -175,6 +175,9 @@ pref("plugin.state.flash", 1);
pref("plugins.hide_infobar_for_missing_plugin", true);
pref("plugins.hideMissingPluginsNotification", true);
pref("media.peerconnection.enabled", false); // Disable WebRTC interfaces
+// Disables media devices but only if `media.peerconnection.enabled` is set to
+// `false` as well. (see bug 16328 for this defense-in-depth measure)
+pref("media.navigator.enabled", false);
// GMPs: We make sure they don't show up on the Add-on panel and confuse users.
// And the external update/donwload server must not get pinged. We apply a
// clever solution for https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769716.
More information about the tbb-commits
mailing list