[tbb-dev] What protections are present in the hardened Tor Browser?

I wanted to know what exactly is different in the hardened series.

The master..hardened-builds diff has many spurious changes and is not that clear: https://gitweb.torproject.org/builders/tor-browser-bundle.git/diff/?id=harde...

The best I can tell, the differences are: * ASan * --enable-expensive-hardening for tor (enables -fsanitize=address, -fsanitize=undefined, and -fno-omit-frame-pointer) * selfrando