Security/Fusion/Esr140: Difference between revisions

add current status of bugs
(move dashboard to top of page)
(add current status of bugs)
Line 13: Line 13:
=== P1: patches in Phab, blocked review ===
=== P1: patches in Phab, blocked review ===


* [https://bugzilla.mozilla.org/show_bug.cgi?id=1845105 Bug 1845105]: we tried to uplift our patch for ''BB 41901: Hardcode normalized FontSubstitutes.'', [https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/1539bc09a28bb0b457d14579b39885cb0d332aaa 1539bc09]. Let me know if you need to be CC'ed in.  
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1845105 Bug 1845105]: we tried to uplift our patch for ''BB 41901: Hardcode normalized FontSubstitutes.'', [https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/1539bc09a28bb0b457d14579b39885cb0d332aaa 1539bc09].
** manuel: Patch was r+'ed by reviewer once. needinfo is set to notify about new r? request. @manuel will ping on slack if no review until May 9.
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1900648 Bug 1900648] (uplift for ''BB 42288: Allow language spoofing in status messages.'', [https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f91b57d594f70be9a13c296e0a60cca099eee97b f91b57d5])
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1900648 Bug 1900648] (uplift for ''BB 42288: Allow language spoofing in status messages.'', [https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/f91b57d594f70be9a13c296e0a60cca099eee97b f91b57d5])
** manuel: Patches on bug depending are both r+ on previous revision. Need help landing? What work remains after https://bugzilla.mozilla.org/show_bug.cgi?id=1959147 gets fixed?


=== P2: need help from upstream! ===
=== P2: need help from upstream! ===


* [https://bugzilla.mozilla.org/show_bug.cgi?id=1746668 '''Bug 1746668''']: l10n leak important improvements, see comment 28 with a plan I outlined, we need approval, or to somehow review it and then get started with it  
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1746668 '''Bug 1746668''']: l10n leak important improvements, see comment 28 with a plan I outlined, we need approval, or to somehow review it and then get started with it
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1944251 '''Bug 1944251''']: drop ''font.system.whitelist'', make TB consistent with Firefox and improve compatibility ([https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43322 #43322])  
** manuel: not sure who to ask right now, zibi left mozilla recently, so we need to find someone else to ask
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1944251 '''Bug 1944251''']: drop ''font.system.whitelist'', make TB consistent with Firefox and improve compatibility ([https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/43322 #43322])
** manuel: needinfo'ed emk
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1397996 '''Bug 1397996''']: scrollbar leaks, we want an upstream take on it (tradeoffs with accessibility) ([https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/22137 #22137])  
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1397996 '''Bug 1397996''']: scrollbar leaks, we want an upstream take on it (tradeoffs with accessibility) ([https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/22137 #22137])  
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1676104 '''Bug 1676104''']: this is not a P1 only because it should affect UI and/or AC requests (e.g., addons?). Our current patch is ''BB 40171: Make WebRequest and GeckoWebExecutor First-Party aware'' ([https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5240a3b51428d50626a385976e7da78d121b8ee4 5240a3b5]); see also [https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40171 #40171] (still open for uplift).  
* [https://bugzilla.mozilla.org/show_bug.cgi?id=1676104 '''Bug 1676104''']: this is not a P1 only because it should affect UI and/or AC requests (e.g., addons?). Our current patch is ''BB 40171: Make WebRequest and GeckoWebExecutor First-Party aware'' ([https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/5240a3b51428d50626a385976e7da78d121b8ee4 5240a3b5]); see also [https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40171 #40171] (still open for uplift).  
Confirmed users
425

edits