Tor Browser 12.0.2 - January 18 2023
* All Platforms
* Updated tor to 0.4.7.13
* Updated NoScript to 11.4.14
* Bug 40565: do something with security.tls.version.enable-deprecated [tor-browser]
* Bug 40713: Use the new tor-browser l10n branch in Firefox [tor-browser-build]
* Bug 40727: Update list of Snowflake STUN servers in default bridge line [tor-browser-build]
* Bug 41506: Remove TrustCor root certificates [tor-browser]
* Bug 41525: Drop locales from torbutton, since we will inject them in tor-browser-build [tor-browser]
* Windows + macOS + Linux
* Updated Firefox to 102.7esr
* Bug 26504: Browser version in aboutreferences showing the Firefox ESR version [tor-browser]
* Bug 32308: Stop inner letterbox jiggling as border is dragged [tor-browser]
* Bug 41375: Clean unused strings [tor-browser]
* Bug 41393: about:tbupdate semantic and accessibility problems [tor-browser]
* Bug 41522: Backport torbutton -> tor-browser migration to 12.0 series [tor-browser]
* Bug 41524: about:tbupdate needs UTF-8 [tor-browser]
* Bug 41539: Crypto warning weaknesses [tor-browser]
* Bug 41549: tor freeze when receiving to many http proxy requests on socks port [tor-browser]
* Bug 41561: Maximize warning is broken (regression) [tor-browser]
* Bug 41563: Old placeholders used in TorStrings.jsm [tor-browser]
* macOS
* Bug 40716: Unable to update to 12.0.1 on Apple Silicon-based Mac [tor-browser-build]
* Android
* Updated GeckoView to 102.7esr
* Bug 41571: Backport Android-specific Firefox 109 to ESR 102.7-based Tor Browser [tor-browser]
* Build System
* All Platforms
* Updated Go to 1.19.5
* Bug 40735: Add command to list which translation components need to be updated [tor-browser-build]
* Bug 40739: tor-expert-bundle should include ClientTransportPlugin torrc lines for each pluggable transport [tor-browser-build]
* Windows + macOS + Linux
* Bug 40734: Backport the translation project [tor-browser-build]
* Bug 40746: Remove pt_config.json from pt dir [tor-browser-build]
* macOS
* Bug 40706: macos-signer-stapler should wait for user interaction before attempting stapling [tor-browser-build]
Full changelog
The full changelog since Tor Browser 11.5.10 is:
- All Platforms
- Update Translations
- Update tor to 0.4.7.12
- Bug tor-browser#17228: Consideration for disabling/trimming referrers within TBB
- Bug tor-browser#24686: In Tor Browser context, should network.http.tailing.enabled be set to false?
- Bug tor-browser#27127: Audit and enable HTTP/2 push
- Bug tor-browser#27258: font whitelist means we don't have to set gfx.downloadable_fonts.fallback_delay
- Bug tor-browser#40057: ensure that CSS4 system colors are not a fingerprinting vector
- Bug tor-browser#40058: ensure no locale leaks from new Intl APIs
- Bug tor-browser#40183: Consider disabling TLS ciphersuites containing SHA-1
- Bug tor-browser#40251: Clear obsolete prefs after torbutton!27
- Bug tor-browser#40406: Remove Presentation API related prefs
- Bug tor-browser#40491: Don't auto-pick a v2 address when it's in Onion-Location header
- Bug tor-browser#40494: Update Startpage and Blockchair onion search providers
- Bug tor-browser-build#40580: Add support for Ukranian (uk)
- Bug tor-browser-build#40646: Don't build Español AR anymore
- Bug tor-browser-build#40674: Add Secondary Snowflake Bridge
- Bug tor-browser#40783: Review 000-tor-browser.js and 001-base-profile.js for 102
- Bug tor-browser#41098: Compare Tor Browser's and GeckoView's profiles
- Bug tor-browser#41125: Review Mozilla 1732792: retry polling requests without proxy
- Bug tor-browser#41154: Review Mozilla 1765167: Deprecate Cu.import
- Bug tor-browser#41164: Add some #define for the base-browser section
- Bug tor-browser#41306: Typo "will not able" in "Tor unexpectedly exited" dialog
- Bug tor-browser#41317: Tor Browser leaks banned ports in network.security.ports.banned
- Bug tor-browser#41345: fonts: windows whitelist contains supplemental fonts
- Bug tor-browser#41398: Disable Web MIDI API
- Bug tor-browser#41406: Do not define --without-wasm-sandboxed-libraries if WASI_SYSROOT is defined
- Bug tor-browser#41420: Remove brand.dtd customization on nightly
- Bug tor-browser#41457: Remove more Mozilla permissions
- Bug tor-browser#41473: Add support for Albanian (sq)
- Windows + macOS + Linux
- Update Firefox to 102.5.0esr
- Bug tor-browser#17400: Decide how to use the multi-lingual Tor Browser in the alpha/release series
- Bug tor-browser-build#40595: Migrate to 102 on desktop
- Bug tor-browser-build#40638: Visit our website link after build-to-build upgrade in Nightly channel points to old v2 onion
- Bug tor-browser-build#40648: Do not customize update.locale in multi-lingual builds
- Bug tor-browser#40853: use Subprocess.jsm to launch tor
- Bug tor-browser#40933: Migrate remaining tor-launcher functionality to tor-browser
- Bug tor-browser#41011: The Internet and Tor status are visible when opening the settings
- Bug tor-browser#41044: Content exceeding the height of the connection settings modals
- Bug tor-browser#41116: Review Mozilla 1226042: add support for the new 'system-ui' generic font family
- Bug tor-browser#41117: Review Mozilla 1512851: Add Share Menu to File Menu on macOS
- Bug tor-browser#41283: Toolbar buttons missing their label attribute
- Bug tor-browser#41284: Stray security-level- fluent ids
- Bug tor-browser#41287: New identity button inactive if added after customization
- Bug tor-browser#41292: moreFromMozilla pane in about
- Bug tor-browser#41293: Incomplete branding in German with 12.0a2
- Bug tor-browser#41337: Add a title to the new identity confirmation
- Bug tor-browser#41342: Update the New Identity dialog to the proton modal style
- Bug tor-browser#41344: Authenticated Onion Services do not prompt for auth key in 12.0 alpha series
- Bug tor-browser#41352: Update or drop the show manual logic in torbutton
- Bug tor-browser#41369: Consider a different list-order for locales in language menu
- Bug tor-browser#41374: Missing a few torconnect strings in the DTD
- Bug tor-browser#41377: Hide Search for more languages... from Language selector in multi-locale build
- Bug tor-browser#41378: Inform users when Tor Browser sets their language automatically
- Bug tor-browser#41385: Bootstrap failure is logged but not raised up to about:torconnect
- Bug tor-browser#41386: The new tor-launcher has a problem when another Tor is running
- Bug tor-browser#41387: New identity and new circuit ended up inside history
- Bug tor-browser#41400: Missing onionAuthViewKeys causes "Onion Services Keys" dialog to be empty.
- Bug tor-browser#41401: Missing some mozilla icons because we still loading them from "chrome://browser/skin" rather than "chrome://global/skin/icons"
- Bug tor-browser#41404: Fix blockchair-onion search extension
- Bug tor-browser#41409: Circuit display is broken on Tails
- Bug tor-browser#41410: Opening and closing HTTPS-Only settings make the identity panel shrink
- Bug tor-browser#41412: New Identity shows "Tor Browser" instead of "Restart Tor Browser" in unstranslated locales
- Bug tor-browser#41417: Prompt users to restart after changing language
- Bug tor-browser#41429: TorConnect and TorSettings are initialized twice
- Bug tor-browser#41435: Add a Tor Browser migration function
- Bug tor-browser#41436: The new tor-launcher handles arrays in the wrong way
- Bug tor-browser#41437: Use the new media query for dark theme for the "Connected" pill in bridges
- Bug tor-browser#41449: Onion authentication's learn more should link to the offline manual
- Bug tor-browser#41451: Still using requestedLocales in torbutton
- Bug tor-browser#41455: Tor Browser dev build cannot launch tor
- Bug tor-browser#41458: Prevent mach package-multi-locale from actually creating a package
- Bug tor-browser#41462: Add anchors to bridge-moji and onion authentication entries
- Bug tor-browser#41466: Port YEC 2022 campaign to Tor Browser 12.0 (Desktop)
- Bug tor-browser#41495: Clicking on "View Logs" in the "Establishing Connection" page takes you to about
- Bug tor-browser#41498: The Help panel is empty in 12.0a4
- Bug tor-browser#41508: Update the onboarding link for 12.0
- Windows
- Bug tor-browser#41149: Review Mozilla 1762576: Firefox is not allowing Symantec DLP to inject DLL into the browser for Data Loss Prevention software
- Bug tor-browser#41278: Create Tor Browser styled pdf logo similar to the vanilla Firefox one
- Bug tor-browser#41426: base-browser nightly fails to build for windows-i686
- macOS
- Bug tor-browser#23451: Adapt font whitelist to changes on macOS (zh locales)
- Bug tor-browser#41004: The Bangla font does not display correctly on MacOs
- Bug tor-browser#41108: Remove privileged macOS installation from 102
- Bug tor-browser#41294: Bookmarks manager broken in 12.0a2 on MacOS
- Bug tor-browser#41348: cherry-pick macOS OSSpinLock replacements
- Bug tor-browser#41370: Find a way to ship custom default bookmarks without changing language-packs on macOS
- Bug tor-browser#41372: "Japanese" language menu item is localised in multi-locale testbuild (on mac OS)
- Bug tor-browser#41379: The new tor-launcher is broken also on macOS
- Linux
- Bug tor-browser#40359: Tor Browser Launcher has Wrong Icon
- Bug tor-browser-build#40626: Define the replacements for generic families on Linux
- Bug tor-browser#41163: Fixing loading of bundled fonts on linux
- Android
- Update GeckoView to 102.5.0esr
- Bug tor-browser#40014: Check which of our mobile prefs and configuration changes are still valid for GeckoView
- Bug tor-browser-build#40631: Stop bundling HTTPS Everywhere on Android
- Bug tor-browser#41394: Implement a setting to always prefer onion sites
- Bug tor-browser#41465: Port YEC 2022 campaign to Tor Browser 12.0 (Android)
- Build System
- All Platforms
- Update Go to 1.19.3
- Bug tor-browser-build#23656: Use .mozconfig files in tor-browser repo for rbm builds
- Bug tor-browser-build#28754: make testbuild-android-armv7 stalls during sha256sum step
- Bug rbm#40049: gpg_keyring should allow for array of keyrings
- Bug tor-browser-build#40397: Create a new build target to package tor daemon, pluggable transports and dependencies
- Bug tor-browser-build#40407: Bump binutils version to pick up security improvements for Windows users
- Bug tor-browser-build#40585: Prune the manual more
- Bug tor-browser-build#40587: Migrate tor-browser-build configs from gitolite to gitlab repos
- Bug tor-browser-build#40591: Rust 1.60 not working to build 102 on Debian Jessie
- Bug tor-browser-build#40592: Consider re-using our LLVM/Clang to build Rust
- Bug tor-browser-build#40593: Update signing scripts to take into account new project names and layout
- Bug tor-browser-build#40607: Add alpha-specific release prep template
- Bug tor-browser-build#40610: src-*.tar.xz tarballs are missing in https://dist.torproject.org/torbrowser/12.0a1/
- Bug tor-browser-build#40612: Migrate Release Prep template to Release Prep - Stable
- Bug tor-browser-build#40619: Make sure translations are taken from gitlab.tpo and not git.tpo
- Bug torbrowser-build#40627: Add boklm to torbutton.gpg
- Bug tor-browser-build#40634: Update the project/browser path in tools/changelog-format-blog-post and other files
- Bug tor-browser-build#40636: Remove https-everywhere from projects/browser/config
- Bug tor-browser-build#40639: Remove tor-launcher references
- Bug tor-browser-build#40643: Update Richard's key in torbutton.gpg
- Bug tor-browser-build#40645: Remove unused signing keys and create individual keyrings for Tor Project developers
- Bug tor-browser-build#40655: Published tor-expert-bundle tar.gz files should not include their tor-browser-build build id
- Bug tor-browser-build#40656: Improve get_last_build_version in tools/signing/nightly/sign-nightly
- Bug tor-browser-build#40660: Update changelog-format-blog-post script to point gitlab rather than gitolite
- Bug tor-browser-build#40662: Make base-browser nightly build from tag
- Bug tor-browser-build#40663: Do not ship bookmarks in tor-browser-build anymore
- Bug tor-browser-build#40667: Update Node.js to 12.22.12
- Bug tor-browser-build#40669: Remove HTTPS-Everywhere keyring
- Bug tor-browser-build#40671: Update langpacks URL
- Bug tor-browser-build#40675: Update tb_builders list in set-config
- Bug tor-browser-build#40690: Revert fix for zlib build break
- Bug tor-browser#41308: Use the same branch for Desktop and GeckoView
- Bug tor-browser#41321: Delete various master branches after automated build/testing scripts are updated
- Bug tor-browser#41340: Opt in to some of the NIGHTLY_BUILD features
- Bug tor-browser#41357: Enable browser toolbox debugging by default for dev builds
- Bug tor-browser#41446: Multi-lingual alpha bundles break make fetch
- Windows + macOS + Linux
- Bug tor-browser-build#40499: Update firefox to enable building from new 'base-browser' tag
- Bug tor-browser-build#40500: Add base-browser package project
- Bug tor-browser-build#40501: Makefile updates to support building base-browser packages
- Bug tor-browser-build#40503: Update Release Prep issue template with base-browser and privacy browser changes
- Bug tor-browser-build#40547: Remove container/remote_* from rbm.conf
- Bug tor-browser-build#40581: Update reference to master branches
- Bug tor-browser-build#40641: Fetch Firefox locales from l10n-central
- Bug tor-browser-build#40678: Force all 11.5 users to update through 11.5.8 before 12.0
- Bug tor-browser-build#40685: Remove targets/nightly/var/mar_locales from rbm.conf
- Bug tor-browser-build#40686: Add a temporary project to fetch Fluent tranlations for base-browser
- Bug tor-browser-build#40691: Update firefox config to point to base-browser branch rather than a particular tag in nightly
- Bug tor-browser-build#40699: Fix input_files in projects/firefox-l10n/config
- Bug tor-browser#41099: Update+comment the update channels in update_responses.config.yaml
- Windows
- Bug tor-browser-buid#29318: Use Clang for everything on Windows
- Bug tor-browser-build#29321: Use mingw-w64/clang toolchain to build tor
- Bug tor-browser-build#29322: Use mingw-w64/clang toolchain to build OpenSSL
- Bug tor-browser-build#40409: Upgrade NSIS to 3.08
- Bug tor-browser-build#40666: Fix compiler depedencies for Firefox on Windows
- macOS
- Bug tor-browser-build#40067: Rename "OS X" to "macOS"
- Bug tor-browser-build#40158: Add support for macOS AArch64
- Bug tor-browser-build#40439: Create universal x86-64/arm64 mac builds
- Bug tor-browser-build#40605: Reworked the macOS toolchain creation
- Bug tor-browser-build#40620: Update macosx-sdk to 11.0
- Bug tor-browser-build#40687: macOS nightly builds with packaged locales fail
- Bug tor-browser-build#40694: aarch64 tor-expert-bundle for macOS is not exported as part of the browser build
- Linux
- Bug tor-browser-build#31321: Add cc -> gcc link to projects/gcc
- Bug tor-browser-build#40621: Update namecoin patches for linted TorButton
- Bug tor-browser-build#40659: Error building goservice for linux in nightly build
- Bug tor-browser#41343: Add -without-wam-sandboxed-libraries to mozconfig-linux-x86_64-dev for local builds
- Android
- Bug tor-browser-build#40574: Improve tools/signing/android-signing
- Bug tor-browser-build#40604: Fix binutils build on android
- Bug tor-browser-build#40640: Extract Gradle in the toolchain setup
- Bug tor-browser#41304: Add Android-specific targets to makefiles