The final alpha before TBB 5.0 is ready for testing at: https://people.torproject.org/~mikeperry/builds/5.0a4-build3/
The primary user-facing change in this release is the inclusion of built-in fonts. If someone is willing to run the instructions here to set up a hidden service or other test site so we can test Windows vs Mac vs Linux differences, that would be most helpful: https://trac.torproject.org/projects/tor/ticket/13313#comment:16
I am about to hop on a plane. If no one gets to it, I will try to set something up on Monday and re-post to this list.
Otherwise, the usual tests are also appeciated.
Here is the complete changelog: * All Platforms * Update Tor to 0.2.7.2-alpha with patches: * Bug 15482: Don't allow circuits to change while a site is in use * Update OpenSSL to 1.0.1p * Update HTTPS-Everywhere to 5.0.7 * Update NoScript to 2.6.9.31 * Update Torbutton to 1.9.3.1 * Bug 16268: Show Tor Browser logo on About page * Bug 16639: Check for Updates menu item can cause update download failure * Bug 15781: Remove the sessionstore filter * Bug 15656: Sync privacy.resistFingerprinting with Torbutton pref * Translation updates * Bug 16884: Prefer IPv6 when supported by the current Tor exit * Bug 16488: Remove "Sign in to Sync" from the browser menu * Bug 13313: Bundle a fixed set of fonts to defend againstfingerprinting * Bug 16662: Enable network.http.spdy.* prefs in meek-http-helper * Bug 15646: Prevent keyboard layout fingerprinting in KeyboardEvent (fixup) * Bug 15703: Isolate mediasource URIs and media streams to first party * Bug 16429+16416: Isolate blob URIs to first party * Bug 16632: Turn on the background updater and restart prompting * Bug 16528: Prevent indexedDB Modernizr site breakage on Twitter and elsewhere * Bug 16523: Fix in-browser JavaScript debugger * Bug 16236: Windows updater: avoid writing to the registry * Bug 16005: Restrict WebGL minimal mode a bit (fixup) * Bug 16625: Fully disable network connection prediction * Bug 16495: Fix SVG crash when security level is set to "High" * Build System * Bug 15864: rename sha256sums.txt to sha256sums-unsigned-build.txt