From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:20:39 +0200

  Subject: [PATCH 01/13] Point to local omni.ja files, not remote server

  [1] https://remote-settings.readthedocs.io/en/latest/introduction.html

  [2] https://www.gnu.org/distros/free-system-distribution-guidelines.en.html#license-rules

  ---

   .../components/ASRouterAdmin/ASRouterAdmin.jsx            | 2 +-

   .../newtab/data/content/activity-stream.bundle.js         | 2 +-

   services/settings/Utils.sys.mjs                           | 2 +-

   .../components/search/docs/SearchEngineConfiguration.rst  | 2 +-

   toolkit/modules/AppConstants.sys.mjs                      | 4 ++--

   toolkit/mozapps/defaultagent/RemoteSettings.cpp           | 2 +-

  diff --git a/browser/components/newtab/content-src/components/ASRouterAdmin/ASRouterAdmin.jsx b/browser/components/newtab/content-src/components/ASRouterAdmin/ASRouterAdmin.jsx

  index 3762be9c99..1a9c5028ff 100644

  --- a/browser/components/newtab/content-src/components/ASRouterAdmin/ASRouterAdmin.jsx

                     >

                       nimbus-desktop-experiments

  diff --git a/browser/components/newtab/data/content/activity-stream.bundle.js b/browser/components/newtab/data/content/activity-stream.bundle.js

  --- a/browser/components/newtab/data/content/activity-stream.bundle.js

  +++ b/browser/components/newtab/data/content/activity-stream.bundle.js

           label = /*#__PURE__*/external_React_default().createElement("span", null, "remote settings (", /*#__PURE__*/external_React_default().createElement("a", {

             className: "providerUrl",

             target: "_blank",

           }, "nimbus-desktop-experiments"), ")");

         }

  diff --git a/services/settings/Utils.sys.mjs b/services/settings/Utils.sys.mjs

  --- a/services/settings/Utils.sys.mjs

  +++ b/services/settings/Utils.sys.mjs

  @@ -100,7 +100,7 @@ export var Utils = {

   // --preview: enable Remote Settings and Experiment previews.

   //

  diff --git a/toolkit/components/search/SearchUtils.sys.mjs b/toolkit/components/search/SearchUtils.sys.mjs

  --- a/toolkit/components/search/SearchUtils.sys.mjs

  +++ b/toolkit/components/search/SearchUtils.sys.mjs

  @@ -152,13 +152,13 @@ export var SearchUtils = {

   #define PROD_CID "windows-default-browser-agent"

   #define PROD_ID "state"

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:34:08 +0200

  Subject: [PATCH 02/13] Remove polling triggered by push broadcasts

   2 files changed, 15 insertions(+), 9 deletions(-)

  diff --git a/dom/push/PushBroadcastService.sys.mjs b/dom/push/PushBroadcastService.sys.mjs

  --- a/dom/push/PushBroadcastService.sys.mjs

  +++ b/dom/push/PushBroadcastService.sys.mjs

       }

     }

      * Call the listeners of the specified broadcasts.

      *

  diff --git a/services/settings/remote-settings.sys.mjs b/services/settings/remote-settings.sys.mjs

  --- a/services/settings/remote-settings.sys.mjs

  +++ b/services/settings/remote-settings.sys.mjs

         moduleURI: import.meta.url,

         symbolName: "remoteSettingsBroadcastHandler",

       };

     };

     return remoteSettings;

         `Push notification received (version=${version} phase=${phase})`

       );

     },

   };

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:41:54 +0200

  Subject: [PATCH 03/13] Remove timer that triggers polling for changes

  -# see syntax https://searchfox.org/mozilla-central/rev/cc280c4be94ff8cf64a27cc9b3d6831ffa49fa45/toolkit/components/timermanager/UpdateTimerManager.jsm#155

  -category update-timer RemoteSettingsComponents @mozilla.org/services/settings;1,getService,services-settings-poll-changes,services.settings.poll_interval,86400,259200

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:47:41 +0200

  Subject: [PATCH 04/13] Utils: fetch timestamps of each collection locally

   create mode 100644 services/settings/dumps/monitor/moz.build

  diff --git a/browser/installer/package-manifest.in b/browser/installer/package-manifest.in

  --- a/browser/installer/package-manifest.in

  +++ b/browser/installer/package-manifest.in

   @RESPATH@/browser/defaults/settings/last_modified.json

   @RESPATH@/browser/defaults/settings/blocklists

   @RESPATH@/browser/defaults/settings/main

   ; Warning: changing the path to channel-prefs.js can cause bugs (Bug 756325)

  diff --git a/services/settings/Utils.sys.mjs b/services/settings/Utils.sys.mjs

  --- a/services/settings/Utils.sys.mjs

  +++ b/services/settings/Utils.sys.mjs

  @@ -369,7 +369,7 @@ export var Utils = {

   ]

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:52:10 +0200

  Subject: [PATCH 05/13] Utils: disable offline checking

   1 file changed, 10 deletions(-)

  diff --git a/services/settings/Utils.sys.mjs b/services/settings/Utils.sys.mjs

  --- a/services/settings/Utils.sys.mjs

  +++ b/services/settings/Utils.sys.mjs

  @@ -183,16 +183,6 @@ export var Utils = {

     },

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 17:56:02 +0200

  Subject: [PATCH 06/13] Refactor hashing logic to a separate function

     /**

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 18:05:02 +0200

  Subject: [PATCH 07/13] Client: Fetch and hash records from local dump

   1 file changed, 28 insertions(+), 38 deletions(-)

  diff --git a/services/settings/RemoteSettingsClient.sys.mjs b/services/settings/RemoteSettingsClient.sys.mjs

  --- a/services/settings/RemoteSettingsClient.sys.mjs

  +++ b/services/settings/RemoteSettingsClient.sys.mjs

             // If the data is up-to-date but don't have metadata (records loaded from dump),

             // we fetch them and validate the signature immediately.

               await this.db.importChanges(metadata);

               // We don't bother validating the signature if the dump was just loaded. We do

               // if the dump was loaded at some other point (eg. from .get()).

      * @returns {Promise}

      */

     async _validateCollectionSignature(records, timestamp, metadata) {

       }

     }

      * @param since timestamp of last sync (optional)

      */

     async _fetchChangeset(expectedTimestamp, since) {

         remoteRecords,

       };

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 18:42:56 +0200

  Subject: [PATCH 08/13] Client: start deferred sync on get() or on()

   1 file changed, 26 insertions(+), 1 deletion(-)

  diff --git a/services/settings/RemoteSettingsClient.sys.mjs b/services/settings/RemoteSettingsClient.sys.mjs

  --- a/services/settings/RemoteSettingsClient.sys.mjs

  +++ b/services/settings/RemoteSettingsClient.sys.mjs

     ClientEnvironmentBase:

       "resource://gre/modules/components-utils/ClientEnvironment.sys.mjs",

     Database: "resource://services-settings/Database.sys.mjs",

     IDBHelpers: "resource://services-settings/IDBHelpers.sys.mjs",

     KintoHttpClient: "resource://services-common/kinto-http-client.sys.mjs",

     ObjectUtils: "resource://gre/modules/ObjectUtils.sys.mjs",

   });

   const TELEMETRY_COMPONENT = "remotesettings";

   ChromeUtils.defineLazyGetter(lazy, "console", () => lazy.Utils.log);

       this._lastCheckTimePref = lastCheckTimePref;

       this._verifier = null;

       this._syncRunning = false;

       // This attribute allows signature verification to be disabled, when running tests

       // or when pulling data from a dev server.

       this.db.identifier = this.identifier;

     }

     get identifier() {

       return `${this.bucketName}/${this.collectionName}`;

     }

         let lastModified = forceSync ? null : await this.db.getLastModified();

         let hasLocalData = lastModified !== null;

         if (forceSync) {

           if (!this._importingPromise) {

             this._importingPromise = (async () => {

         // No need to verify signature on JSON dumps.

         // If local DB cannot be read, then we don't even try to do anything,

         // we return results early.

       }

       lazy.console.debug(

       return final;

     }

      * Synchronize the local database with the remote server.

      *

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 18:53:51 +0200

  Subject: [PATCH 09/13] Client: deep compare records if timestamps match

   1 file changed, 5 insertions(+), 1 deletion(-)

  diff --git a/services/settings/RemoteSettingsClient.sys.mjs b/services/settings/RemoteSettingsClient.sys.mjs

  --- a/services/settings/RemoteSettingsClient.sys.mjs

  +++ b/services/settings/RemoteSettingsClient.sys.mjs

  @@ -9,6 +9,7 @@ import { Downloader } from "resource://services-settings/Attachments.sys.mjs";

     ClientEnvironmentBase:

       "resource://gre/modules/components-utils/ClientEnvironment.sys.mjs",

     Database: "resource://services-settings/Database.sys.mjs",

           const old = oldById.get(r.id);

           if (old) {

             oldById.delete(r.id);

             }

           } else {

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 19:01:39 +0200

  Subject: [PATCH 10/13] Client: delete more data on cleanup

   1 file changed, 9 insertions(+), 3 deletions(-)

  diff --git a/services/settings/RemoteSettingsClient.sys.mjs b/services/settings/RemoteSettingsClient.sys.mjs

  --- a/services/settings/RemoteSettingsClient.sys.mjs

  +++ b/services/settings/RemoteSettingsClient.sys.mjs

         allRecords

           .filter(r => !!r.attachment)

           .map(r =>

           )

       );

     }

             // Signature failed, clear local DB because it contains

             // bad data (local + remote changes).

             lazy.console.debug(`${this.identifier} clear local data`);

             // Local data was tampered, throw and it will retry from empty DB.

             lazy.console.error(`${this.identifier} local data was corrupted`);

             throw new CorruptedDataError(this.identifier);

               // _importJSONDump() only clears DB if dump is available,

               // therefore do it here!

               if (imported < 0) {

               }

             }

           }

       return syncResult;

     }

      * Fetch information from changeset endpoint.

      *

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 19:07:56 +0200

  Subject: [PATCH 11/13] Client: remove comparison of collection timestamps

   1 file changed, 5 deletions(-)

  diff --git a/services/settings/RemoteSettingsClient.sys.mjs b/services/settings/RemoteSettingsClient.sys.mjs

  --- a/services/settings/RemoteSettingsClient.sys.mjs

  +++ b/services/settings/RemoteSettingsClient.sys.mjs

         updated: [],

         deleted: [],

       };

       await this.db.importChanges(metadata, remoteTimestamp, remoteRecords, {

         clear: retry,

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 19:15:44 +0200

  Subject: [PATCH 12/13] Attachments: load only from dump and drop cached

     /**

  -- 

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Wed, 30 Dec 2020 19:22:20 +0200

  Subject: [PATCH 13/13] Disable CRLite entirely for now

   2 files changed, 2 insertions(+), 1 deletion(-)

  diff --git a/modules/libpref/init/StaticPrefList.yaml b/modules/libpref/init/StaticPrefList.yaml

  --- a/modules/libpref/init/StaticPrefList.yaml

  +++ b/modules/libpref/init/StaticPrefList.yaml

   # 3: Consult CRLite and enforce "Not Revoked" results, but defer to OCSP for "Revoked".

   - name: security.pki.crlite_mode

     type: RelaxedAtomicUint32

   - name: security.tls.version.min

  diff --git a/security/manager/ssl/nsNSSComponent.cpp b/security/manager/ssl/nsNSSComponent.cpp

  --- a/security/manager/ssl/nsNSSComponent.cpp

  +++ b/security/manager/ssl/nsNSSComponent.cpp

     CRLiteMode defaultCRLiteMode = CRLiteMode::Disabled;

     CRLiteMode crliteMode =

         static_cast<CRLiteMode>(StaticPrefs::security_pki_crlite_mode());

       case CRLiteMode::Disabled:

       case CRLiteMode::TelemetryOnly:

  -- 

  From 2fec68a4597270e7fce1c0a4e3a328be4766a2d3 Mon Sep 17 00:00:00 2001

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Sun, 4 Apr 2021 13:09:05 +0300

  The idea for Iceweasel is to reference only services which can be

  self-hosted using 100% free software stack.

  From 413f141022f562beb53ed87370146a123872f35b Mon Sep 17 00:00:00 2001

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Sun, 4 Apr 2021 13:49:05 +0300

   about:protections page

  ---

  From 275785d94093d5c2dd46739484a2744642df357f Mon Sep 17 00:00:00 2001

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Tue, 17 Jan 2023 21:59:51 +0100

  * addons.mozilla.org (AMO) is a third-party repository, not compatible

    with the FSDG, because it is not committed to only including free

  From 7c742c2c0e0bd817fd646d0b83a0265c67d6c5fb Mon Sep 17 00:00:00 2001

  From: grizzlyuser <grizzlyuser@protonmail.com>

  Date: Sun, 4 Jun 2023 13:16:40 +0200

  1. Contile (see change context lines) is used to fetch sponsored top

     sites, which are not controlled by Parabola and are likely to not

  -- 

  2.41.0

  pkgname=iceweasel

  epoch=1

  pkgrel=1

  pkgrel+=.parabola1

  _brandingver=115.0

    'BFA8008A8265677063B11BF47171986E4B745536' # Andreas Grapentin

    '3954A7AB837D0EA9CFA9798925DB7D9B5A8D4B40' # bill-auger

  )

              'SKIP'

              '9cdc2602661717712092d28bb494e5b48e518cb930898aca85eaf21f91f7ef58')

  sha256sums+=('b701b4c47fca2661feeabe172e398c76c8015ee08ff4cc3cc2f7c3ef2ed692a7'

               'SKIP'

               '07d6910ddd07f60b803957259e06e3babee6f072f48c6fe31b906a1ea24e3b62'  # 9003-FSDG-urihandlers.patch

               'cd617d892cb3b3888a65b19c06217356d4f97b12c5c438283ec9c2476eecb218'  # 9004-FSDG-misc.patch

               '00cb44a91b42942f17258ad165810866ff123777b667a5691ea0745ba72f4332'  # process-json-files.py

                   'ed3bb281697af7c4353a34067ffb4b18a971d40757bef2d6af3c8bf2d28d42d1'  # firefox-111.0.1-fdlibm.patch

                   '2fb39374fd3d80eea9e346032a2a4b2bc2e357dee7380855b24bcf19b1335d06'  # fix-i686-build-moz-1792159.patch

                   'c3ce181fbb0142055aa6dd17f3cda2ba6a1e54d7a689a8c6e9cce76aa40e6544') # fix-i686-xsimd-incomplete.patch

          'SKIP'

          'f86353bbba05d8994db34c6abb66094aa61d2c37c8599930dbe9d215413f0f718a1ce55a8f2d07a65074c3947e28fc80d44c925bd9be239a870f82d2a1803635')

  b2sums+=('a22044292e464b3922eb2e4a8cf0993524d232eeb4a8602707589d00f690498d3b76e515c8d0ce4995b3bf8a65df9aa814b49de469178aa1f8cc07ec19dd5d32'

           'SKIP'

           'dbb0f9639cbe08bf423faf9e2966b5464a26ab5c6314eea18be0e89edd8ac465bfa04a219821852bdd0801dfed9092999bcca1a982a631035bae9a51408d8dde'  # 9003-FSDG-urihandlers.patch

           'a59bedbb965cbe5eb864158bb82e119ca9594f0d5d1e47afe60495ad6578156d764f5f71d692f0012f22986020a005fa43e26ad191383a866c8ef5eff5ce501d'  # 9004-FSDG-misc.patch

           '085c4631ec8cfdf5842068d882185c783e976b1fde74167bb71ef4d7db8c70c12844177b17e76f858ba3ce2a402848ac8fc19910dcbefd29887abfaf5faac5e4'  # process-json-files.py

    # export MOZ_ENABLE_FULL_SYMBOLS=1                    # anti-feature

    export MACH_BUILD_PYTHON_NATIVE_PACKAGE_SOURCE=system # parabola policy

    # LTO needs more open files

    ulimit -n 4096