[tor-commits] [tor-browser/tor-browser-60.3.0esr-8.0-1] fixup! TB4: Tor Browser's Firefox preference overrides.

[gk at torproject.org]

commit 3c03aad30d2b2b0e92359f15a1a95cfb2354544e
Author: Georg Koppen <gk at torproject.org>
Date:   Wed Nov 21 10:02:20 2018 +0000

    fixup! TB4: Tor Browser's Firefox preference overrides.
    
    Bug 25794 deals with pointer events and associated fingerprinting
    risks. There are patches we can backport from Mozilla, but they are not
    small and we should give them some baking time. Thus, let's disable
    pointer events for now.
---
 browser/app/profile/000-tor-browser.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js
index bc7c4b05e3a1..07005f326580 100644
--- a/browser/app/profile/000-tor-browser.js
+++ b/browser/app/profile/000-tor-browser.js
@@ -150,6 +150,7 @@ pref("media.webspeech.synth.enabled", false); // Bug 10283: Disable SpeechSynthe
 pref("dom.webaudio.enabled", false); // Bug 13017: Disable Web Audio API
 pref("dom.maxHardwareConcurrency", 1); // Bug 21675: Spoof single-core cpu
 pref("dom.w3c_touch_events.enabled", 0); // Bug 10286: Always disable Touch API
+pref("dom.w3c_pointer_events.enabled", false);
 pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now
 // Disable randomised Firefox HTTP cache decay user test groups (Bug: 13575)
 pref("security.webauth.webauthn", false); // Bug 26614: Disable Web Authentication API for now