New Alpha Release: Tor Browser 13.5a6
Tor Browser 13.5a6 is now available from the Tor Browser download page and also from our distribution directory.
This version includes important security updates to Firefox.
We would like to thank the folowing community members for their contributions this release:
- RustyBird for their fix for tor-browser-build#41110
If you would like to contribute, our contributor guide can be found here.
Letterboxing Improvements and Configuration Options
Over the past month we have merged various usability improvements and configuration options for the new letterboxing UX. In about:preferences#general one may now configure some aspects of the letterbox behaviour, including whether the content area floats in the center of the window or is snapped to the browser chrome at the top. We also implemented a somewhat hidden feature which will allow you to remove the extra spacing when you resize the window by double-clicking within the letterbox gutter area. This will snap the whole window down to the size required by the content.
Native Android Connect-Assist
We have continued improving our connect-assist implementation on Android. This has included backend work continuing to improve and generalise the low-level systems used by both Desktop and Android versions, frontend work re-immplementing the same flow, configuration options, and error handling presently found in the Desktop frontend. We have also started refactoring the various Tor configuration related menus and the Tor Logs are once again accessible using the native ux by navigating to Settings > Connection > Tor Logs
Please give the new systems a go by navigating to Settings > Connection > Enable beta connection features
and toggling Enable beta connection features
and selecting Native Android UI
Known Issues
We still have a lot of work to do, bugs to fix, and general polish to apply. We currently have one known issue whereby manually enabling bridges in the Config Bridge
menu usually fails to stick after navigating away from that menu. This issue is being tracked in tor-browser#42486
Connect-Assist Backend Work
As mentioned in the previous section, we have been iteratively improving the connect-assist backend code which is used on both Desktop and Android. If you are Desktop user we would appreciate you verifying that your bootstrapping experience is unchanged between releases, particularly if you have any custom configuration or settings.
Localisation Updates
We have been developing several improvements to our localisation pipelines and we have been merging patches which remove legacy 'dtd'-based translation strings and migrate to the modern 'fluent' system used by modern Firefox. End-users should not see any changes as a result of these changes. Please keep an eye out for for any broken strings or translation regressions and report any issues you may find!
Send us your feedback
If you find a bug or have a suggestion for how we could improve this release, please let us know.
Full changelog
The full changelog since Tor Browser 13.5a5 is:
- All Platforms
- Bug tor-browser#41114: Fix no-async-promise-executor on TorConnect
- Bug tor-browser#41676: Set privacy.resistFingerprinting.testing.setTZtoUTC as a defense-in-depth
- Bug tor-browser#42336: Review the relationship between TorSettings and the TorProvider
- Bug tor-browser#42428: Timezone offset leak via document.lastModified
- Bug tor-browser#42435: Update moat domain fronting configuration
- Bug tor-browser#42437: Drop "torbrowser.version" preference
- Bug tor-browser#42444: Remove the "Prioritize .onion sites when known" option
- Bug tor-browser#42449: Rebase Tor Browser alpha onto Firefox 115.9.0esr
- Bug tor-browser#42459: Add startpage onion service to list of search providers
- Bug tor-browser#42466: Drop the "Onion Logo" from trademark statement
- Bug tor-browser#42472: Timezone May leak from XSLT Date function
- Bug tor-browser#42473: ESR 115.9.1 fixes
- Bug tor-browser#42481: Modularize SecurityLevel
- Bug tor-browser-build#41105: Bump version of snowflake to v2.9.2
- Windows + macOS + Linux
- Updated Firefox to 115.9.0esr
- Bug tor-browser#41916: Letterboxing preferences UI
- Bug tor-browser#41918: Add option to reuse last window size when letterboxing is enabled
- Bug tor-browser#42203: Fluent migration: about dialog
- Bug tor-browser#42209: Fluent migration: tor circuit
- Bug tor-browser#42211: Fluent migration: new identity
- Bug tor-browser#42214: Fluent migration: security level
- Bug tor-browser#42236: Let users decide whether to load their home page on new identity.
- Bug tor-browser#42443: Shrink the window to match letterboxing size when the emtpy area is doble-clicked
- Bug tor-browser#42446: Improve accessible descriptions in built-in dialog
- Bug tor-browser#42458: Update the "Submit Feedback" link in "About Tor Browser"
- Windows
- Bug tor-browser#42377: Hidden fonts are automatically added to the allow list
- Linux
- Bug tor-browser#42438: Adapt the data import wizard to use the original $HOME on Linux
- Bug tor-browser-build#41110: Avoid Fontconfig warning about "ambiguous path"
- Android
- Updated GeckoView to 115.9.0esr
- Bug tor-browser#41187: Improve Android's bridge settings UI
- Bug tor-browser#42427: Do not ship bridges as prefences anymore
- Build System
- All Platforms
- Updated Go to 1.21.8
- Bug tor-browser-build#41102: src archive does not match likely due to mismatched xz-utils version
- Bug tor-browser-build#41107: Update download-unsigned-sha256sums-gpg-signatures-from-people-tpo for new type of URL
- Bug rbm#40073: We should remove ./ when using 7-zip for zip files
- Windows + macOS + Linux
- Bug tor-browser#42305: (Semi-)Automatically merge translation resources across tor browser releases (desktop)
- Bug tor-browser-build#41088: Remove use of projects/browser/run_scripts
- Windows
- Bug tor-browser-build#41097: authenticode-timestamping.sh fails to run again because tmp-timestamp already exists
- Android
- Bug tor-browser#40502: Do not recommend addons on Tor Browser
- Bug tor-browser-build#41082: Package tor expert bundle on android as .aar that firefox-android can use in lieu of tor-android-service with geckoview bootstrap
- All Platforms
Comments
We encourage respectful, on-topic comments. Comments that violate our Code of Conduct will be deleted. Off-topic comments may be deleted at the discretion of the moderators. Please do not comment as a way to receive support or to report bugs on a post unrelated to a release. If you are looking for support, please see our FAQ, user support forum or ways to get in touch with us.