
Bug 16326: Verify cache isolation for Request and Fetch APIs.Bug 15640: Place Canvas MediaStream behind site permission.Bug 18863: Disable MozTCPSocket explicitly.Bug 18802: Remove the JS-based Flash VM (Shumway).Bug 18801: Disable dom.push preferences.Bug 18800: Remove DNS lookup in lockfile code.Bug 18738: Disable Selfsupport and Unified Telemetry.Bug 18603: Disable performance-based WebGL fingerprinting option.Bug 17167: Disable Mozilla's tracking protection.Bug 16673: Disable HTTP Alternative-Services.Bug 16328: Disable MediaDevices.enumerateDevices.Bug 14970: Exempt our extensions from signing requirement.Bug 18848: Disable additional welcome URL shown on first start.Bug 18821: Disable libmdns support for desktop and mobile.Bug 18042: Disable SHA1 certificate support.Bug 19121: The update.xml hash should get checked during update.
Bug 15197 and child tickets: Rebase Tor Browser patches to ESR 45. Bug 18904: Mac OS: meek-http-helper profile not updated. Bug 18371: Symlinks are incompatible with Gatekeeper signing. Bug 11773: Setup wizard UI flow improvements. Bug 18947: Tor Browser is not starting on OS X if put into /Applications. Bug 13252: Do not store data in the application bundle. Bug 17599: Provide shortcuts for New Identity and New Circuit. Bug 16017: Allow users to more easily set a non-tor SSH proxy. Bug 18905: Hide unusable items from help menu.
Bug 18743: Pref to hide 'Sign in to Sync' button in hamburger menu.
Bug 18466: Make Torbutton compatible with Firefox ESR 45. Bug 19212: Fix crash related to network panel in developer tools. Bug 19187: Backport fix for crash related to popup menus. Bug 18884: Don't build the loop extension. Bug 19484: Avoid compilation error when MOZ_UPDATER is not defined. Bug 19269: Icon doesn't appear in Applications folder or Dock. Bug 18513: Favicon requests can bypass New Identity. Bug 19515: Tor Browser is crashing in graphics code. Bug 19585: Fix regression test for keyboard layout fingerprinting. Bug 19714: Remove mercurius4 obfs4 bridge. Bug 19715: Disable the meek-google pluggable transport option. Bug 19689: Use proper parent window for plugin prompt. Bug 20250: Meek fails on macOS Sierra if built with Go < 1.7. Bug 20204: Windows don't drag on macOS Sierra anymore. Bug 20342: Add tor-gencert.exe to expert bundle. Bug 20118: Don't unpack HTTPS Everywhere anymore. Bug 19735: Switch default search engine to DuckDuckGo. Bug 20296: Rotate ports again for default obfs4 bridges. Bug 19838: Add dgoulet's bridge and add another one commented out.