meta: tor uplift: the rest

[Thorin-Oakenpants]

Dec 2019:

• Closing this issue. This list wasn't really maintained (and there are lots more Firefox bugs like this, just not necessarily tagged as Tor Uplift). RFP and FPI specific bugs are on other sticky issues.

---

Locked sticky issue for tracking other Tor Uplift items of interest (after RFP #7 and FPI #8 )

• Tor Uplift
• MVP Tracking
• Bugzilla META Tor Uplift ticket
• Tor Uplift Dependency Tree

Last updated: see changelog at foot

RESOLVED & ADDED TO USER.JS ^{if applicable}

🔻 FF52

• 1121643 only expose whitelisted system fonts (FF52+)
  // user_pref("font.system.whitelist", ""); // (hidden pref)

🔻 FF56

• 1266495 remove <isindex>

🔻 FF57

• 1388881 Stylo respects mathml.disabled
• 863246 disable/limit resource://, chrome:// and about:// URI leaks
  ❗ security.all_resource_uri_content_accessible - may add this to user.js [reminder]
  [TEST] https://www.browserleaks.com/firefox
  [1] https://trac.torproject.org/projects/tor/ticket/8725

🔻 FF59

• 1222924 stop exposing moz-icon URL scheme

🔻 FF60

• 1359076 disable all Device Sensor APIs except orientation
  • here's an article
• 1382359 treat .onion as a secure context

🔻 FF64

• 680300 restrict discoverability of protocol handlers
• 583181 don't expose navigator.buildID to web content - compat info

🔻 FF68

• 1541958 nsUserInfo removed
  • original ticket: 1433350 remnant code, windows user name/accounts etc loaded into memory, was available to extensions, blah blah, read the ticket

🔻 FF70

• 467035 dtd locale leaks

CHANGELOG

• Dec 19th 2019: closing this issue

...