Commit Graph

152 Commits

Author SHA1 Message Date
JDX50S
270db6d671 Merge commit from fork
* security: enable MAR signature verification for updates

Remove `--enable-unverified-updates` from the common mozconfig. This flag
was disabling all MAR (Mozilla ARchive) signature verification in the
updater binary, meaning update packages were applied without any
cryptographic authenticity check.

With this flag removed, the Mozilla build system will:
- Link NSS and signmar into the updater binary
- Enable SecVerifyTransformCreate-based signature verification on macOS
- Require MAR files to contain valid signatures before applying

REQUIRED FOLLOW-UP (maintainer action):
1. Generate a Zen-specific MAR signing keypair (RSA-PKCS1-SHA384)
   See: https://firefox-source-docs.mozilla.org/build/buildsystem/mar.html
2. Place the public key DER file(s) in the source tree at
   toolkit/mozapps/update/updater/release_primary.der
3. Sign MAR files during the release build with the private key
4. Set ACCEPTED_MAR_CHANNEL_IDS in update-settings.ini to restrict
   which update channels the updater will accept

Ref: GHSA-qpj9-m8jc-mw6q

* no-bug: Added signature steps

* no-bug: Export browser/installer/package-manifest.in

---------

Co-authored-by: Maliq Barnard <maliqbarnard@Maliqs-MacBook-Air.local>
Co-authored-by: Mr. M <mr.m@tuta.com>
2026-04-09 19:28:31 +02:00
mr. m
76f17c3a57 chore: Automatically import patches from phabricator and librewolf, p=#12271
* chore: Automatically import patches from phabricator and librewolf, b=no-bug, c=workflows, scripts

Signed-off-by: mr. m <91018726+mr-cheffy@users.noreply.github.com>

* feat: Remove legacy flag, b=no-bug, c=common, configs

---------
2026-02-07 18:02:40 +01:00
Mr. M
e88530da19 chore: Set a proper user app dir for legacy unix paths, b=bug #11917, c=common, configs 2026-01-19 11:57:53 +01:00
mr. m
d5727a6a1b chore: Clean up build flags to stay more close to firefox defaults, b=no-bug, c=common, configs, windows 2026-01-10 01:24:20 +01:00
mr. m
481163a756 feat: Correctly initialize new restored windows, p=#11821
* feat: Correctly initialize new restored windows, b=no-bug, c=no-component

* chore: Experiment with different build flags for optimization and build time, b=no-bug, c=common, configs

* chore: Format, b=no-bug, c=no-component
2026-01-06 12:38:22 +01:00
mr. m
31f6b2ab12 chore: Disabled crashreporter, b=closes #10560, c=common, configs 2025-09-27 14:07:20 +02:00
Mr. M
5ec8badab4 chore: Cleanup firefox build flags since they are on by default now, b=no-bug, c=common, configs 2025-09-25 02:00:22 +02:00
Mr. M
d962cf9949 fix: Fixed closing last tab not closing the window and other refactors, b=closes #10455, c=common, configs, kbs, split-view, folders, tests, workspaces 2025-09-21 17:29:40 +02:00
Mr. M
4744a4cf6d feat: Enable crash reports and use npm ci, b=no-bug, c=workflows, common, configs 2025-09-21 15:10:29 +02:00
Mr. M
2c5a7612f8 chore: Added release checks to the mozconfig, b=no-bug, c=common, configs 2025-08-09 13:33:23 +02:00
Mr. M
d786c6927f feat: security: Enable google safebrowsing and populate the API keys, b=no-bug, c=workflows, common, configs 2025-06-09 19:11:09 +02:00
Mr. M
3d9a40beb9 feat: Added better privacy and less connections on startup, b=(no-bug), c=common, configs, tabs, welcome 2025-04-27 19:52:06 +02:00
mr. M
aa673cc361 fix: ensure SCCACHE_GHA_ENABLED is set to 'true' or 'false' based on input 2025-04-01 19:51:17 +02:00
mr. m
2010c3a5c7 fix: update branding options in mozconfig and adjust JS preference handling 2025-03-31 19:01:59 +02:00
mr. M
e200b6080b refactor: update mozconfig files to enable clang plugin for macOS and remove it for Windows 2025-03-30 16:43:42 +02:00
mr. M
c3e33fa7f3 refactor: update configuration and initialization for Zen application 2025-03-26 23:28:30 +01:00
mr. M
7b124f1dc2 Add preference to hide one-off search buttons and adjust CSS positioning 2025-03-02 17:03:58 +01:00
mr. M
fd8a56762d Refactor pinned tab management and improve initialization logic 2025-03-02 10:41:14 +01:00
mr. M
7e4c3c0df0 Enable JavaScript and properties minification in build configuration 2025-03-02 10:27:58 +01:00
mr. m
ca183c7de6 Common fixes and optimizations 2025-02-25 12:30:33 +01:00
mr. m
382dcc8d0c Started using sccache for all builds now 2025-02-24 23:05:50 +01:00
mr. m
c322051ddd Changed mac bundle name from Zen Browser -> Zen 2025-02-16 12:42:33 +01:00
mr. M
7a6398db45 Update MOZ_APP_DISPLAYNAME to use a consistent branding name in mozconfig 2025-02-14 23:57:10 +01:00
mr. M
20f3a4128c Refactor CSS styles to replace border-radius with native inner radius and update box-shadow for improved visual consistency 2025-01-23 14:09:34 +01:00
Vinamra Mishra
79966cb5ed Windows build fix
Signed-off-by: Vinamra Mishra <72907109+Vinamra7@users.noreply.github.com>
2025-01-22 19:36:27 +05:30
mr. M
9fd989106d Update Firefox version to 134.0.1 in surfer.json and README.md; adjust LTO settings in mozconfig 2025-01-14 16:46:55 +01:00
mr. M
335fb757ab Add distribution ID for Zen Browser in mozconfig 2025-01-08 22:39:46 +01:00
mr. M
6c9fb9b3bb Refactor build configurations to standardize runner environments and update LTO settings in mozconfig 2025-01-08 21:19:23 +01:00
mr. M
b94e4dcff1 Remove MOZ_OPTIMIZE settings and override LTO settings in mozconfig for Linux and Windows 2025-01-08 16:26:30 +01:00
mr. M
edb6dc9248 Update CI workflows to conditionally use optimized runners and adjust LTO settings based on release branch 2025-01-06 12:59:34 +01:00
mr. M
4abe2cdb6d Enable bootstrap option in mozconfig for Zen release configuration 2025-01-04 20:25:27 +01:00
mr. M
83cb4553ad Remove bootstrap option from mozconfig for Zen release configuration 2025-01-04 19:54:12 +01:00
mr. M
1e51804b74 Update mozconfig for Zen release: enable automation and adjust compiler flags 2025-01-04 19:31:23 +01:00
mr. m
0dc41eedb0 Update mozconfig
Signed-off-by: mr. m  <91018726+mr-cheff@users.noreply.github.com>
2025-01-01 12:11:20 -08:00
mr. M
f53843f9b0 Remove MOZ_DISTRIBUTION_ID from common mozconfig 2024-12-31 00:13:38 +01:00
mr. M
a1debe45cf Update configuration and UI behavior for Zen Browser
- Remove unnecessary comments from mozconfig
- Disable sign-on remembering in preferences
- Ensure popups are rolled up when updating vertical tabs
- Adjust popup hidden event listener to use capture option
- Bump version numbers in surfer.json for releases
2024-12-24 12:29:56 +01:00
mr. m
a83bfa7a45 Enable Clang plugin for Linux and macOS builds in mozconfig 2024-12-22 17:55:08 +00:00
mr. M
31ce093a4a Update LTO configuration and enable Clang plugin for Linux builds 2024-12-22 14:36:02 +01:00
mr. M
fce8d134a3 Refactor LTO configuration across platforms and update version numbers in surfer.json 2024-12-22 12:06:22 +01:00
mr. M
a7b486de56 Enable LTO (Link Time Optimization) in platform-specific mozconfig files 2024-12-22 08:31:51 +01:00
Vijay A
8b6cdd8ab8 Remove duplication of node version for ease of maintenance 2024-11-29 11:57:53 +05:30
mr. M
a666e6c39b Remove jprof option from mozconfig for release builds 2024-11-27 16:53:11 +01:00
omove
6de89958ad ARM64 Testing 2024-11-20 07:57:56 -05:00
mr. M
499781baf1 fix: disable Clang plugin in mozconfig 2024-11-14 21:39:21 +01:00
mr. M
1da6210617 feat: enable Clang plugin in mozconfig 2024-11-14 12:48:58 +01:00
mauro-balades
9e251af4a7 Refactor mozconfig to disable data reporting, services health report, and telemetry reporting 2024-09-10 19:08:42 +02:00
mauro-balades
2cbf882258 Added PGO for windows builds 2024-08-31 22:51:35 +02:00
mauro-balades
70df8829fb Let's see if this makes it faster 2024-08-30 12:11:03 +02:00
Mauro Balades
4cef2dd304 chore: Comment out MOZ_PACKAGE_JSSHELL in mozconfig 2024-08-26 00:19:38 +02:00
Mauro Balades
10c10523f1 chore: Comment out MOZ_PACKAGE_JSSHELL in mozconfig 2024-08-25 23:18:04 +02:00