[tor-commits] [Git][tpo/applications/tor-browser][base-browser-128.4.0esr-14.5-1] fixup! Firefox preference overrides.

[Pier Angelo Vendrame (@pierov)]

Pier Angelo Vendrame pushed to branch base-browser-128.4.0esr-14.5-1 at The Tor Project / Applications / Tor Browser


Commits:
ebaa959d by Pier Angelo Vendrame at 2024-10-23T17:57:26+02:00
fixup! Firefox preference overrides.

Bug 42125: Set and lock privacy.resistFingerprinting.exemptedDomains.

The rationale for locking this is consistency with RFP.

Also, set privacy.resistFingerprinting.randomDataOnCanvasExtract as a
countermesure to some wrong guides.

- - - - -


1 changed file:

- browser/app/profile/001-base-profile.js


Changes:

=====================================
browser/app/profile/001-base-profile.js
=====================================
@@ -385,10 +385,18 @@ pref("dom.push.serverURL", "");
 
 // Fingerprinting
 // tor-browser#41797: For release builds, lock RFP
+// tor-browser#42125: Set (and lock in release) also exempted domains.
 #if MOZ_UPDATE_CHANNEL == release
 pref("privacy.resistFingerprinting", true, locked);
+pref("privacy.resistFingerprinting.exemptedDomains", "", locked);
+// tor-browser#42125: Some misleading guides suggest to set this to false, but
+// the result would be that the canvas is completely white
+// (see StaticPrefList.yaml), so lock it to true.
+// Might be removed (MozBug 1670447).
+pref("privacy.resistFingerprinting.randomDataOnCanvasExtract", true, locked);
 #else
 pref("privacy.resistFingerprinting", true);
+pref("privacy.resistFingerprinting.exemptedDomains", "");
 #endif
 // tor-browser#18603: failIfMajorPerformanceCaveat is an optional attribute that
 // can be used when creating a WebGL context if the browser detects that the



View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ebaa959d739e78e52dfc03385d5b06595fcb7da3

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/ebaa959d739e78e52dfc03385d5b06595fcb7da3
You're receiving this email because of your account on gitlab.torproject.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-commits/attachments/20241023/4ae78b49/attachment-0001.htm>