Fixes#13857.
This updates the toolbar share button to use Zen's shared icon set
instead of the upstream Firefox asset. The downloads button already
points at the Zen icon set, so this keeps the two toolbar icons visually
consistent.
Validation:
- Checked that `share-tab-button` is the Firefox toolbar share button
id.
- Confirmed the repo lint script requires the generated `engine`
checkout, which is not present in this clone.
Co-authored-by: arieleli01212 <207917221+arieleli01212@users.noreply.github.com>
This PR syncs the upstream Firefox to version 151.0.2.
* ⚠️ Some patches did not apply cleanly. Please review them carefully.
@mr-cheffy please review and merge this PR.
---------
Signed-off-by: mr. m <91018726+mr-cheffy@users.noreply.github.com>
The problem was that `input.value` was getting the raw shortcut and not
really converting it to the normalized displayable string.
There was no method to just get the `displayString` for a shortcut
without creating a new one, so I put that logic into
`gZenZenKeyboardShortcutsManager`. The static function in `KeyShortcut`
class is just to reduce code duplication.
fixes: #13767
* security: enable MAR signature verification for updates
Remove `--enable-unverified-updates` from the common mozconfig. This flag
was disabling all MAR (Mozilla ARchive) signature verification in the
updater binary, meaning update packages were applied without any
cryptographic authenticity check.
With this flag removed, the Mozilla build system will:
- Link NSS and signmar into the updater binary
- Enable SecVerifyTransformCreate-based signature verification on macOS
- Require MAR files to contain valid signatures before applying
REQUIRED FOLLOW-UP (maintainer action):
1. Generate a Zen-specific MAR signing keypair (RSA-PKCS1-SHA384)
See: https://firefox-source-docs.mozilla.org/build/buildsystem/mar.html
2. Place the public key DER file(s) in the source tree at
toolkit/mozapps/update/updater/release_primary.der
3. Sign MAR files during the release build with the private key
4. Set ACCEPTED_MAR_CHANNEL_IDS in update-settings.ini to restrict
which update channels the updater will accept
Ref: GHSA-qpj9-m8jc-mw6q
* no-bug: Added signature steps
* no-bug: Export browser/installer/package-manifest.in
---------
Co-authored-by: Maliq Barnard <maliqbarnard@Maliqs-MacBook-Air.local>
Co-authored-by: Mr. M <mr.m@tuta.com>
