+// Prevent download stuffing / DOS (tor-browser#41764)

+pref("browser.download.enable_spam_prevention", true);

+

+pref("font.system.whitelist", "Arimo, Cousine, Noto Naskh Arabic, Noto Sans Adlam, Noto Sans Armenian, Noto Sans Balinese, Noto Sans Bamum, Noto Sans Bassa Vah, Noto Sans Batak, Noto Sans Bengali, Noto Sans Buginese, Noto Sans Buhid, Noto Sans Canadian Aboriginal, Noto Sans Chakma, Noto Sans Cham, Noto Sans Cherokee, Noto Sans Coptic, Noto Sans Deseret, Noto Sans Devanagari, Noto Sans Elbasan, Noto Sans Ethiopic, Noto Sans Georgian, Noto Sans Grantha, Noto Sans Gujarati, Noto Sans Gunjala Gondi, Noto Sans Gurmukhi, Noto Sans Hanifi Rohingya, Noto Sans Hanunoo, Noto Sans Hebrew, Noto Sans JP, Noto Sans Javanese, Noto Sans KR, Noto Sans Kannada, Noto Sans Kayah Li, Noto Sans Khmer, Noto Sans Khojki, Noto Sans Khudawadi, Noto Sans Lao, Noto Sans Lepcha, Noto Sans Limbu, Noto Sans Lisu, Noto Sans Mahajani, Noto Sans Malayalam, Noto Sans Mandaic, Noto Sans Masaram Gondi, Noto Sans Medefaidrin, Noto Sans Meetei Mayek, Noto Sans Mende Kikakui, Noto Sans Miao, Noto Sans Modi, Noto Sans Mongolian, Noto Sans Mro, Noto Sans Multani, Noto Sans Myanmar, Noto Sans NKo, Noto Sans New Tai Lue, Noto Sans Newa, Noto Sans Ol Chiki, Noto Sans Oriya, Noto Sans Osage, Noto Sans Osmanya, Noto Sans Pahawh Hmong, Noto Sans Pau Cin Hau, Noto Sans Rejang, Noto Sans Runic, Noto Sans SC, Noto Sans Samaritan, Noto Sans Saurashtra, Noto Sans Sharada, Noto Sans Shavian, Noto Sans Sinhala, Noto Sans Sora Sompeng, Noto Sans Soyombo, Noto Sans Sundanese, Noto Sans Syloti Nagri, Noto Sans Symbols, Noto Sans Symbols2, Noto Sans Syriac, Noto Sans TC, Noto Sans Tagalog, Noto Sans Tagbanwa, Noto Sans Tai Le, Noto Sans Tai Tham, Noto Sans Tai Viet, Noto Sans Takri, Noto Sans Tamil, Noto Sans Telugu, Noto Sans Thaana, Noto Sans Thai, Noto Sans Tifinagh, Noto Sans Tifinagh APT, Noto Sans Tifinagh Adrar, Noto Sans Tifinagh Agraw Imazighen, Noto Sans Tifinagh Ahaggar, Noto Sans Tifinagh Air, Noto Sans Tifinagh Azawagh, Noto Sans Tifinagh Ghat, Noto Sans Tifinagh Hawad, Noto Sans Tifinagh Rhissa Ixa, Noto Sans Tifinagh SIL, Noto Sans Tifinagh Tawellemmet, Noto Sans Tirhuta, Noto Sans Vai, Noto Sans Wancho, Noto Sans Warang Citi, Noto Sans Yi, Noto Sans Zanabazar Square, Noto Serif Armenian, Noto Serif Balinese, Noto Serif Bengali, Noto Serif Devanagari, Noto Serif Dogra, Noto Serif Ethiopic, Noto Serif Georgian, Noto Serif Grantha, Noto Serif Gujarati, Noto Serif Gurmukhi, Noto Serif Hebrew, Noto Serif Hmong Nyiakeng, Noto Serif Kannada, Noto Serif Khmer, Noto Serif Khojki, Noto Serif Lao, Noto Serif Malayalam, Noto Serif Myanmar, Noto Serif Sinhala, Noto Serif Tamil, Noto Serif Telugu, Noto Serif Thai, Noto Serif Tibetan, Noto Serif Yezidi, STIX Math, Tinos, Twemoji Mozilla");

+

+  TorConnectState: "resource:///modules/TorConnect.jsm",

+  TorConnectTopics: "resource:///modules/TorConnect.jsm",

+XPCOMUtils.defineLazyScriptGetter(

+  this,

+  ["gTorConnectUrlbarButton"],

+  "chrome://browser/content/torconnect/torConnectUrlbarButton.js"

+);

+XPCOMUtils.defineLazyScriptGetter(

+  this,

+  ["gTorConnectTitlebarStatus"],

+  "chrome://browser/content/torconnect/torConnectTitlebarStatus.js"

+);

+    gTorConnectUrlbarButton.init();

+    gTorConnectTitlebarStatus.init();

+

+    gTorConnectUrlbarButton.uninit();

+    gTorConnectTitlebarStatus.uninit();

+    gTorCircuitPanel.uninit();

+<?xml-stylesheet href="chrome://browser/content/torconnect/torConnectTitlebarStatus.css" type="text/css"?>

+      <html:div id="tor-connect-titlebar-status" role="status">

+        <html:img alt="" id="tor-connect-titlebar-status-icon" />

+        <html:span id="tor-connect-titlebar-status-label"></html:span>

+      </html:div>

+

+

+            <hbox id="tor-connect-urlbar-button"

+                  role="button"

+                  class="tor-urlbar-button"

+                  hidden="true">

+              <label id="tor-connect-urlbar-button-label"/>

+            </hbox>

+

+#include ../../components/onionservices/content/onionlocation-urlbar.inc.xhtml

+      class="tor-urlbar-button"

+  <label id="onion-label"/>

+  -moz-context-properties: fill;

+  fill: currentColor;

+    // Prevent repeat triggering on keydown when the Enter key is held down.

+    // Without this, holding down Enter will continue to trigger the button's

+    // click event until the user stops holding. This means that a user can

+    // accidentally re-trigger a button several times. And if focus moves to a

+    // new button it can also get triggered, despite not receiving the initial

+    // keydown event.

+    //

+    // E.g. If the user presses down Enter on the "Connect" button it will

+    // trigger and focus will move to the "Cancel" button. This should prevent

+    // the user accidentally triggering the "Cancel" button if they hold down

+    // Enter for a little bit too long.

+        // If the keydown is a repeating Enter event, ignore it.

+        // NOTE: If firefox uses wayland display (rather than xwayland), the

+        // "repeat" event is always "false" so this will not work.

+        // See bugzilla bug 1784438. Also see bugzilla bug 1594003.

+        // Currently tor browser uses xwayland by default on linux.

+        if (event.key === "Enter" && event.repeat) {

+#tor-connect-titlebar-status:not([hidden]) {

+  display: flex;

+  align-items: center;

+  /* Want same as #private-browsing-indicator-with-label */

+  margin-inline: 7px;

+}

+

+#tor-connect-titlebar-status-label {

+  margin-inline: 6px;

+  white-space: nowrap;

+}

+

+#tor-connect-titlebar-status-icon {

+  -moz-context-properties: fill;

+  fill: currentColor;

+  width: 16px;

+  height: 16px;

+}

+

+#tor-connect-titlebar-status-icon.tor-connect-status-connected {

+  fill: var(--purple-60);

+}

+

+@media (prefers-color-scheme: dark) {

+  #tor-connect-titlebar-status-icon.tor-connect-status-connected {

+    fill: var(--purple-30);

+  }

+}

+

+#tor-connect-titlebar-status-icon.tor-connect-status-potentially-blocked {

+  fill: #c50042;

+}

+

+@media (prefers-color-scheme: dark) {

+  #tor-connect-titlebar-status-icon.tor-connect-status-potentially-blocked {

+    fill: #ff9aa2;

+  }

+}

+/* eslint-env mozilla/browser-window */

+

+/**

+ * A TorConnect status shown in the application title bar.

+ */

+var gTorConnectTitlebarStatus = {

+  /**

+   * The status element in the title bar.

+   *

+   * @type {Element}

+   */

+  node: null,

+  /**

+   * The status label.

+   *

+   * @type {Element}

+   */

+  label: null,

+  /**

+   * The status icon.

+   *

+   * @type {Element}

+   */

+  icon: null,

+

+  /**

+   * Initialize the component.

+   */

+  init() {

+    const { TorStrings } = ChromeUtils.import(

+      "resource:///modules/TorStrings.jsm"

+    );

+

+    this._strings = TorStrings.torConnect;

+

+    this.node = document.getElementById("tor-connect-titlebar-status");

+    this.icon = document.getElementById("tor-connect-titlebar-status-icon");

+    this.label = document.getElementById("tor-connect-titlebar-status-label");

+    // The title also acts as an accessible name for the role="status".

+    this.node.setAttribute("title", this._strings.titlebarStatusName);

+

+    this._observeTopic = TorConnectTopics.StateChange;

+    this._stateListener = {

+      observe: (subject, topic, data) => {

+        if (topic !== this._observeTopic) {

+          return;

+        }

+        this._torConnectStateChanged();

+      },

+    };

+    Services.obs.addObserver(this._stateListener, this._observeTopic);

+

+    this._torConnectStateChanged();

+  },

+

+  /**

+   * De-initialize the component.

+   */

+  deinit() {

+    Services.obs.removeObserver(this._stateListener, this._observeTopic);

+  },

+

+  /**

+   * Callback for when the TorConnect state changes.

+   */

+  _torConnectStateChanged() {

+    let textId;

+    let connected = false;

+    let potentiallyBlocked = false;

+    switch (TorConnect.state) {

+      case TorConnectState.Disabled:

+        // Hide immediately.

+        this.node.hidden = true;

+        return;

+      case TorConnectState.Bootstrapped:

+        this._startHiding();

+        textId = "titlebarStatusConnected";

+        connected = true;

+        break;

+      case TorConnectState.Bootstrapping:

+      case TorConnectState.AutoBootstrapping:

+        textId = "titlebarStatusConnecting";

+        break;

+      default:

+        if (TorConnect.potentiallyBlocked) {

+          textId = "titlebarStatusPotentiallyBlocked";

+          potentiallyBlocked = true;

+        } else {

+          textId = "titlebarStatusNotConnected";

+        }

+        break;

+    }

+    this.label.textContent = this._strings[textId];

+    this.icon.setAttribute(

+      "src",

+      connected

+        ? "chrome://browser/content/torconnect/onion.svg"

+        : "chrome://browser/content/torconnect/onion-slash-fillable.svg"

+    );

+    this.icon.classList.toggle("tor-connect-status-connected", connected);

+    this.icon.classList.toggle(

+      "tor-connect-status-potentially-blocked",

+      potentiallyBlocked

+    );

+  },

+

+  /**

+   * Mark the component to be hidden after some delay.

+   */

+  _startHiding() {

+    setTimeout(() => {

+      this.node.hidden = true;

+    }, 5000);

+  },

+};

+/* eslint-env mozilla/browser-window */

+

+/**

+ * A "Connect" button shown in the urlbar when not connected to tor and in tabs

+ * other than about:torconnect.

+ */

+var gTorConnectUrlbarButton = {

+  /**

+   * The urlbar button node.

+   *

+   * @type {Element}

+   */

+  button: null,

+  /**

+   * Whether we are active.

+   *

+   * @type {boolean}

+   */

+  _isActive: false,

+  /**

+   * Whether we are in the "about:torconnect" tab.

+   *

+   * @type {boolean}

+   */

+  // We init to "true" so that the button can only appear after the first page

+  // load.

+  _inAboutTorConnectTab: true,

+

+  /**

+   * Initialize the button.

+   */

+  init() {

+    if (this._isActive) {

+      return;

+    }

+    this._isActive = true;

+

+    const { TorStrings } = ChromeUtils.import(

+      "resource:///modules/TorStrings.jsm"

+    );

+

+    this.button = document.getElementById("tor-connect-urlbar-button");

+    document.getElementById("tor-connect-urlbar-button-label").value =

+      TorStrings.torConnect.torConnectButton;

+    this.button.addEventListener("click", event => {

+      if (event.button !== 0) {

+        return;

+      }

+      this.connect();

+    });

+    this.button.addEventListener("keydown", event => {

+      if (event.key !== "Enter" && event.key !== " ") {

+        return;

+      }

+      this.connect();

+    });

+

+    this._observeTopic = TorConnectTopics.StateChange;

+    this._stateListener = {

+      observe: (subject, topic, data) => {

+        if (topic !== this._observeTopic) {

+          return;

+        }

+        this._torConnectStateChanged();

+      },

+    };

+    Services.obs.addObserver(this._stateListener, this._observeTopic);

+

+    this._locationListener = {

+      onLocationChange: (webProgress, request, locationURI, flags) => {

+        if (

+          webProgress.isTopLevel &&

+          !(flags & Ci.nsIWebProgressListener.LOCATION_CHANGE_SAME_DOCUMENT)

+        ) {

+          this._inAboutTorConnectTab = gBrowser.selectedBrowser.currentURI?.spec.startsWith(

+            "about:torconnect"

+          );

+          this._updateButtonVisibility();

+        }

+      },

+    };

+    // Notified of new locations for the currently selected browser (tab) *and*

+    // switching selected browser.

+    gBrowser.addProgressListener(this._locationListener);

+

+    this._torConnectStateChanged();

+  },

+

+  /**

+   * Deactivate and de-initialize the button.

+   */

+  deinit() {

+    if (!this._isActive) {

+      return;

+    }

+    this._isActive = false;

+

+    Services.obs.removeObserver(this._stateListener, this._observeTopic);

+    gBrowser.removeProgressListener(this._locationListener);

+    this._updateButtonVisibility();

+  },

+

+  /**

+   * Begin the tor connection bootstrapping process.

+   */

+  connect() {

+    TorConnect.openTorConnect({ beginBootstrap: true });

+  },

+

+  /**

+   * Callback for when the TorConnect state changes.

+   */

+  _torConnectStateChanged() {

+    if (

+      TorConnect.state === TorConnectState.Bootstrapped ||

+      TorConnect.state === TorConnectState.Disabled

+    ) {

+      this.deinit();

+      return;

+    }

+    this._updateButtonVisibility();

+  },

+

+  /**

+   * Callback when the TorConnect state, current browser location, or activation

+   * state changes.

+   */

+  _updateButtonVisibility() {

+    if (!this.button) {

+      return;

+    }

+    // NOTE: We do not manage focus when hiding the button. We only expect to

+    // move from "not hidden" to "hidden" when:

+    // + switching tabs to "about:torconnect", or

+    // + starting bootstrapping.

+    //

+    // When switching tabs, the normal tab switching logic will eventually move

+    // focus to the new tab or url bar, so whilst the focus may be lost

+    // temporarily when we hide the button, it will be re-established quickly on

+    // tab switch.

+    //

+    // And we don't expect bootstrapping to start whilst outside of the

+    // "about:torconnect", and the automatic bootstrapping should only trigger

+    // at the initial start.

+    this.button.hidden =

+      !this._isActive ||

+      this._inAboutTorConnectTab ||

+      !TorConnect.enabled ||

+      !TorConnect.canBeginBootstrap;

+    this.button.classList.toggle(

+      "tor-urlbar-button-plain",

+      TorConnect.potentiallyBlocked

+    );

+  },

+};

+    content/browser/torconnect/torConnectUrlbarButton.js           (content/torConnectUrlbarButton.js)

+    content/browser/torconnect/torConnectTitlebarStatus.js         (content/torConnectTitlebarStatus.js)

+    content/browser/torconnect/torConnectTitlebarStatus.css        (content/torConnectTitlebarStatus.css)

+  mask: url("chrome://browser/content/torconnect/onion-slash-fillable.svg");

+    │         │ beginAutoBootstrap()   │ cancelBootstrap()                │

+              let cancelled = false;

+                  cancelled = true;

+                if (cancelled) {

+                  // We ignore this error since it occurred after cancelling (by

+                  // the user). We assume the error is just a side effect of the

+                  // cancelling.

+                  // E.g. If the cancelling is triggered late in the process, we

+                  // get "Building circuits: Establishing a Tor circuit failed".

+                  // TODO: Maybe move this logic deeper in the process to know

+                  // when to filter out such errors triggered by cancelling.

+                  console.log(

+                    `TorConnect: Post-cancel error => ${message}; ${details}`

+                  );

+                  return;

+                }

+

+      // Titlebar status.

+      titlebarStatusName: "Tor connection",

+      titlebarStatusNotConnected: "Not connected",

+      titlebarStatusConnecting: "Connecting…",

+      titlebarStatusPotentiallyBlocked: "Potentially blocked",

+      titlebarStatusConnected: "Connected",

+@import url("chrome://browser/skin/tor-urlbar-button.css");

+<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">

+<g clip-path="url(#clip0_1827_6565)">

+<path d="M6.62435 8.54824C6.23983 8.91273 6 9.42836 6 10C6 11.1046 6.89543 12 8 12C8.57164 12 9.08727 11.7602 9.45176 11.3757L8.74414 10.668C8.56107 10.8718 8.29551 11 8 11C7.44772 11 7 10.5523 7 10C7 9.70449 7.12818 9.43893 7.33197 9.25586L6.62435 8.54824Z" fill-opacity="context-fill-opacity" fill="context-fill"/>

+<path d="M9.99442 10.1505C9.99812 10.1008 10 10.0506 10 10C10 8.89543 9.10457 8 8 8C7.94936 8 7.89915 8.00188 7.84946 8.00558L9.99442 10.1505Z" fill-opacity="context-fill-opacity" fill="context-fill"/>

+<path d="M5.20988 7.13377C4.46354 7.86041 4 8.87607 4 10C4 12.2091 5.79086 14 8 14C9.12393 14 10.1396 13.5365 10.8662 12.7901L10.159 12.0829C9.61343 12.6483 8.84778 13 8 13C6.34315 13 5 11.6569 5 10C5 9.15222 5.35166 8.38657 5.91707 7.84097L5.20988 7.13377Z" fill-opacity="context-fill-opacity" fill="context-fill"/>

+<path d="M10.8331 10.9892C10.9412 10.6795 11 10.3466 11 10C11 8.34315 9.65685 7 8 7C7.65339 7 7.32052 7.05878 7.01079 7.16692L6.24731 6.40343C6.77658 6.14502 7.37135 6 8 6C10.2091 6 12 7.79086 12 10C12 10.6286 11.855 11.2234 11.5966 11.7527L10.8331 10.9892Z" fill-opacity="context-fill-opacity" fill="context-fill"/>

+<path fill-rule="evenodd" clip-rule="evenodd" d="M14 10C14 8.223 13.2275 6.62643 12 5.52779V4C12 1.79086 10.2091 0 8 0C5.79086 0 4 1.79086 4 4V4.15613L5.50811 5.66423C6.2417 5.2417 7.09263 5 8 5C10.7614 5 13 7.23858 13 10C13 10.9074 12.7583 11.7583 12.3358 12.4919L13.0637 13.2199C13.6565 12.2896 14 11.1849 14 10ZM8 4C7.00883 4 6.0738 4.24033 5.25 4.66591V4C5.25 2.48122 6.48122 1.25 8 1.25C9.51878 1.25 10.75 2.48122 10.75 4V4.66591C9.9262 4.24033 8.99117 4 8 4Z" fill-opacity="context-fill-opacity" fill="context-fill"/>

+<path d="M12.2805 14.2044C11.1919 15.3126 9.67621 16 8 16C4.68629 16 2 13.3137 2 10C2 8.32379 2.68736 6.80812 3.79558 5.71948L4.50272 6.42662C3.57545 7.33427 3 8.59993 3 10C3 12.7614 5.23858 15 8 15C9.40007 15 10.6657 14.4246 11.5734 13.4973L12.2805 14.2044Z" fill-opacity="context-fill-opacity" fill="context-fill"/>

+<path fill-rule="evenodd" clip-rule="evenodd" d="M1.25801 3.93806C1.50209 3.69398 1.89782 3.69398 2.14189 3.93806L13.1419 14.9381C13.386 15.1821 13.386 15.5779 13.1419 15.8219C12.8978 16.066 12.5021 16.066 12.258 15.8219L1.25801 4.82194C1.01393 4.57787 1.01393 4.18214 1.25801 3.93806Z" fill="#F90D3F"/>

+</g>

+<defs>

+<clipPath id="clip0_1827_6565">

+<rect width="16" height="16" fill="white"/>

+</clipPath>

+</defs>