From 7286181cbff5c4b98ed9246366a85ae1fbc8f54d Mon Sep 17 00:00:00 2001 From: Mark H Weaver Date: Tue, 17 Jun 2025 12:23:06 -0400 Subject: Update to 128.12.0-1. * data/patches/CVE-2024-11692.patch, data/patches/CVE-2024-11693.patch, data/patches/CVE-2024-11697.patch: Remove vestigial patches. * data/patches/hide-firefox-view-button.patch: New file. * data/patches/about-addons.patch, data/patches/hide-protections-dashboard.patch, data/patches/hide-submit-feedback-menu-item.patch, data/patches/icecat-about-dialog.patch, data/patches/icecat-preferences.patch, data/patches/moz-configure-changes.patch: Adapt to version 128. * data/settings.js: Add more IceCat-specific customizations. * tools/process-json-files.py: Process more JSON files for search engine configuration v2 and overrides, as needed for version 128. * makeicecat: Update FFMAJOR, FFMINOR, SOURCEBALL_CHECKSUM, L10N_URL, L10_CMP_URL, and L10N_CMP_REV. Add L10N_REV. (sort_inner_list): Ignore case when sorting inner lists. (validate_env): Add check for Git. Remove check for Mercurial. (fetch_l10n): Update to reflect upstream changes. Use Git instead of Mercurial. Fetch all locales in a single clone operation. (configure, apply_batch_branding): Adapt to version 128. --- data/patches/CVE-2024-11692.patch | 61 --------------------------------------- 1 file changed, 61 deletions(-) delete mode 100644 data/patches/CVE-2024-11692.patch (limited to 'data/patches/CVE-2024-11692.patch') diff --git a/data/patches/CVE-2024-11692.patch b/data/patches/CVE-2024-11692.patch deleted file mode 100644 index 393fe5e..0000000 --- a/data/patches/CVE-2024-11692.patch +++ /dev/null @@ -1,61 +0,0 @@ -Fixes CVE-2024-11692 (Select list elements could be shown over another site) -Based on -Adapted to ESR 115 by Mark H Weaver - -# HG changeset patch -# User Edgar Chen -# Date 1730556179 0 -# Node ID a6cf1a7cd289db4f46cb34f4dd16cce133b25e8d -# Parent e983e8a66e515a2e32497cec1b3ccf439396dadc -Bug 1909535 - Don't show select dropdown in background tabs; a=dmeehan - -Original Revision: https://phabricator.services.mozilla.com/D225706 - -Differential Revision: https://phabricator.services.mozilla.com/D227607 - -diff --git a/toolkit/actors/SelectParent.sys.mjs b/toolkit/actors/SelectParent.sys.mjs ---- a/toolkit/actors/SelectParent.sys.mjs -+++ b/toolkit/actors/SelectParent.sys.mjs -@@ -273,16 +273,41 @@ export var SelectParentHelper = { - } - - this._currentZoom = zoom; - this._currentMenulist = menulist; - this.populateChildren(menulist, items, uniqueItemStyles, selectedIndex); - }, - - open(browser, menulist, rect, isOpenedViaTouch, selectParentActor) { -+ const canOpen = (() => { -+ if (!menulist.ownerDocument.hasFocus()) { -+ // Don't open in inactive browser windows. -+ return false; -+ } -+ if (browser) { -+ if (!browser.browsingContext.isActive) { -+ // Don't open in inactive tabs. -+ return false; -+ } -+ let tabbrowser = browser.getTabBrowser(); -+ if (tabbrowser && tabbrowser.selectedBrowser != browser) { -+ // AsyncTabSwitcher might delay activating our browser, check -+ // explicitly for tabbrowser. -+ return false; -+ } -+ } -+ return true; -+ })(); -+ -+ if (!canOpen) { -+ selectParentActor.sendAsyncMessage("Forms:DismissedDropDown", {}); -+ return; -+ } -+ - this._actor = selectParentActor; - menulist.hidden = false; - this._currentBrowser = browser; - this._closedWithEnter = false; - this._selectRect = rect; - this._registerListeners(menulist.menupopup); - - // Set the maximum height to show exactly MAX_ROWS items. - -- cgit v1.2.3