[mozilla-https-everywhere] Update source file. update spec to 3.0.0, WORK IN PROGRESS

Russell William Golden niveusluna at fedoraproject.org
Tue Oct 9 19:25:11 UTC 2012


commit dd7337d851593e987a77ea7683454127580dcf83
Author: Russell Golden <niveusluna at niveusluna.org>
Date:   Tue Oct 9 14:24:37 2012 -0500

    Update source file. update spec to 3.0.0, WORK IN PROGRESS

 .gitignore                    |    1 +
 mozilla-https-everywhere.spec |  525 +++++++++++++++++++----------------------
 sources                       |    2 +-
 3 files changed, 247 insertions(+), 281 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index cb9c1e2..d0bb393 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,3 +12,4 @@
 /https-everywhere-2.2.1.xpi
 /https-everywhere-2.2.2.xpi
 /https-everywhere-2.2.3.xpi
+/https-everywhere-3.0.0.xpi
diff --git a/mozilla-https-everywhere.spec b/mozilla-https-everywhere.spec
index 91ed75f..3f1ce4a 100644
--- a/mozilla-https-everywhere.spec
+++ b/mozilla-https-everywhere.spec
@@ -1,280 +1,245 @@
-%global moz_extensions %{_datadir}/mozilla/extensions
-
-%global firefox_app_id \{ec8030f7-c20a-464f-9b0e-13a3a9e97384\}
-%global src_ext_id https-everywhere at eff.org
-%global firefox_inst_dir %{moz_extensions}/%{firefox_app_id}/%{src_ext_id}
-
-%global seamonkey_app_id \{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
-%global seamonkey_inst_dir %{moz_extensions}/%{seamonkey_app_id}
-
-Name:           mozilla-https-everywhere
-Version:        2.2.3
-Release:        1%{?dist}
-Summary:        HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
-
-Group:          Applications/Internet
-License:        GPLv2+
-URL:            https://eff.org/https-everywhere
-# A git repo is available at git://git.torproject.org/https-everywhere.git
-Source0:        https://www.eff.org/files/https-everywhere-%{version}.xpi
-Patch0:         appManaged.patch
-
-
-BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
-
-BuildRequires:  dos2unix
-%if 0%{?rhel}
-Requires:       firefox
-%else
-Requires:       mozilla-filesystem
-%endif
-BuildArch:      noarch
-
-
-%description
-HTTPS Everywhere is a Firefox extension produced as a collaboration between
-The Tor Project and the Electronic Frontier Foundation. It encrypts your
-communications with a number of major websites.
-
-Many sites on the web offer some limited support for encryption over HTTPS,
-but make it difficult to use. For instance, they may default to unencrypted
-HTTP, or fill encrypted pages with links that go back to the unencrypted site.
-
-The HTTPS Everywhere extension fixes these problems by rewriting all requests
-to these sites to HTTPS.
-
-
-%prep
-%setup -q -c
-dos2unix -f LICENSE.txt
-%patch0 -p 1
-
-%build
-
-
-%install
-rm -rf %{buildroot}
-install -Dp -m 644 chrome.manifest %{buildroot}%{firefox_inst_dir}/chrome.manifest
-install -Dp -m 644 install.rdf %{buildroot}%{firefox_inst_dir}/install.rdf
-install -Dp -m 644 Changelog %{buildroot}%{firefox_inst_dir}/Changelog
-install -Dp -m 644 LICENSE.txt %{buildroot}%{firefox_inst_dir}/LICENSE.txt
-install -Dp -m 644 components/https-everywhere.js %{buildroot}%{firefox_inst_dir}/components/https-everywhere.js
-install -Dp -m 644 components/ssl-observatory.js %{buildroot}%{firefox_inst_dir}/components/ssl-observatory.js
-install -Dp -m 644 chrome/content/about.xul %{buildroot}%{firefox_inst_dir}/chrome/content/about.xul
-install -Dp -m 644 chrome/content/meta-preferences.xul %{buildroot}%{firefox_inst_dir}/chrome/content/meta-preferences.xul
-install -Dp -m 644 chrome/content/observatory-popup.xul %{buildroot}%{firefox_inst_dir}/chrome/content/observatory-popup.xul
-install -Dp -m 644 chrome/content/observatory-preferences.xul %{buildroot}%{firefox_inst_dir}/chrome/content/observatory-preferences.xul
-install -Dp -m 644 chrome/content/observatory-warning.xul %{buildroot}%{firefox_inst_dir}/chrome/content/observatory-warning.xul
-install -Dp -m 644 chrome/content/observatory-xul.js %{buildroot}%{firefox_inst_dir}/chrome/content/observatory-xul.js
-install -Dp -m 644 chrome/content/preferences.css %{buildroot}%{firefox_inst_dir}/chrome/content/preferences.css
-install -Dp -m 644 chrome/content/preferences.js %{buildroot}%{firefox_inst_dir}/chrome/content/preferences.js
-install -Dp -m 644 chrome/content/preferences.xul %{buildroot}%{firefox_inst_dir}/chrome/content/preferences.xul
-install -Dp -m 644 chrome/content/toolbar_button.js %{buildroot}%{firefox_inst_dir}/chrome/content/toolbar_button.js
-install -Dp -m 644 chrome/content/toolbar_button.xul %{buildroot}%{firefox_inst_dir}/chrome/content/toolbar_button.xul
-install -Dp -m 644 chrome/content/code/ApplicableList.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/ApplicableList.js
-install -Dp -m 644 chrome/content/code/ChannelReplacement.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/ChannelReplacement.js
-install -Dp -m 644 chrome/content/code/Cookie.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/Cookie.js
-install -Dp -m 644 chrome/content/code/HTTPS.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/HTTPS.js
-install -Dp -m 644 chrome/content/code/HTTPSRules.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/HTTPSRules.js
-install -Dp -m 644 chrome/content/code/IOUtil.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/IOUtil.js
-install -Dp -m 644 chrome/content/code/Root-CAs.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/Root-CAs.js
-install -Dp -m 644 chrome/content/code/sha256.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/sha256.js
-install -Dp -m 644 chrome/content/code/STS.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/STS.js
-install -Dp -m 644 chrome/content/code/Thread.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/Thread.js
-install -Dp -m 644 chrome/content/code/X509ChainWhitelist.js %{buildroot}%{firefox_inst_dir}/chrome/content/code/X509ChainWhitelist.js
-install -Dp -m 644 chrome/content/rules/00README %{buildroot}%{firefox_inst_dir}/chrome/content/rules/00README
-install -Dp -m 644 chrome/content/rules/default.rulesets %{buildroot}%{firefox_inst_dir}/chrome/content/rules/default.rulesets
-install -Dp -m 644 chrome/locale/en/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/en/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/en/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/en/https-everywhere.properties
-install -Dp -m 644 chrome/locale/en/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/en/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/ar/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/ar/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/ar/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/ar/https-everywhere.properties
-install -Dp -m 644 chrome/locale/ar/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/ar/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/de/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/de/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/de/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/de/https-everywhere.properties
-install -Dp -m 644 chrome/locale/de/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/de/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/es/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/es/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/es/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/es/https-everywhere.properties
-install -Dp -m 644 chrome/locale/es/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/es/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/fa/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/fa/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/fa/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/fa/https-everywhere.properties
-install -Dp -m 644 chrome/locale/fa/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/fa/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/lt/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/lt/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/lt/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/lt/https-everywhere.properties
-install -Dp -m 644 chrome/locale/lt/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/lt/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/lv/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/lv/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/lv/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/lv/https-everywhere.properties
-install -Dp -m 644 chrome/locale/lv/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/lv/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/nl/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/nl/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/nl/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/nl/https-everywhere.properties
-install -Dp -m 644 chrome/locale/nl/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/nl/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/pt/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/pt/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/pt/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/pt/https-everywhere.properties
-install -Dp -m 644 chrome/locale/pt/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/pt/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/ru/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/ru/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/ru/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/ru/https-everywhere.properties
-install -Dp -m 644 chrome/locale/ru/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/ru/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/sv/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/sv/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/sv/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/sv/https-everywhere.properties
-install -Dp -m 644 chrome/locale/sv/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/sv/ssl-observatory.dtd
-install -Dp -m 644 chrome/locale/zh-CN/https-everywhere.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/zh-CN/https-everywhere.dtd
-install -Dp -m 644 chrome/locale/zh-CN/https-everywhere.properties %{buildroot}%{firefox_inst_dir}/chrome/locale/zh-CN/https-everywhere.properties
-install -Dp -m 644 chrome/locale/zh-CN/ssl-observatory.dtd %{buildroot}%{firefox_inst_dir}/chrome/locale/zh-CN/ssl-observatory.dtd
-install -Dp -m 644 chrome/skin/cross.png %{buildroot}%{firefox_inst_dir}/chrome/skin/cross.png
-install -Dp -m 644 chrome/skin/https-everywhere-16.png %{buildroot}%{firefox_inst_dir}/chrome/skin/https-everywhere-16.png
-install -Dp -m 644 chrome/skin/https-everywhere-24.png %{buildroot}%{firefox_inst_dir}/chrome/skin/https-everywhere-24.png
-install -Dp -m 644 chrome/skin/https-everywhere-half-24.png %{buildroot}%{firefox_inst_dir}/chrome/skin/https-everywhere-half-24.png
-install -Dp -m 644 chrome/skin/https-everywhere.css %{buildroot}%{firefox_inst_dir}/chrome/skin/https-everywhere.css
-install -Dp -m 644 chrome/skin/https-everywhere.png %{buildroot}%{firefox_inst_dir}/chrome/skin/https-everywhere.png
-install -Dp -m 644 chrome/skin/ssl-observatory-messy.jpg %{buildroot}%{firefox_inst_dir}/chrome/skin/ssl-observatory-messy.jpg
-install -Dp -m 644 chrome/skin/tick-moot.png %{buildroot}%{firefox_inst_dir}/chrome/skin/tick-moot.png
-install -Dp -m 644 chrome/skin/tick-red.png %{buildroot}%{firefox_inst_dir}/chrome/skin/tick-red.png
-install -Dp -m 644 chrome/skin/tick.png %{buildroot}%{firefox_inst_dir}/chrome/skin/tick.png
-install -Dp -m 644 defaults/preferences/preferences.js %{buildroot}%{firefox_inst_dir}/defaults/preferences/preferences.js
-
-# symlink from seamonkey extension to firefox extension
-mkdir -p %{buildroot}%{seamonkey_inst_dir}
-ln -s %{firefox_inst_dir} %{buildroot}%{seamonkey_inst_dir}
-
-%clean
-rm -rf %{buildroot}
-
-
-%files
-%defattr(-,root,root,-)
-%doc LICENSE.txt
-%{firefox_inst_dir}
-%{seamonkey_inst_dir}
-
-
-%changelog
-* Thu Sep 27 2012 Russell Golden <niveusluna at niveusluna.org> - 2.2.3-1
-- Workaround for breakage in Amazon Look Inside the Book (via Cloudfront)
-  -- https://trac.torproject.org/projects/tor/ticket/6848
-- Fix logout for AOL users
-- Other fixes: PassThePopcorn, WhatCD, Antispam.de, RFCeditor,
-  -- Weatherspark / GoogleMaps
-- Disable broken: SVT.se
-
-* Thu Sep 06 2012 Russell Golden <niveusluna at niveusluna.org> - 2.2.2-1
-- Fix a bug that was preventing settings from persisting:
-    https://trac.torproject.org/projects/tor/ticket/6653
-- Fixes and improvements: Lenovo, YahooNew, Pirate Party, OpenDNS, Wordpress
-    https://trac.torproject.org/projects/tor/ticket/6604
-    https://mail1.eff.org/pipermail/https-everywhere-rules/2012-August/001267.html
-- Disable broken rulesets: FAZ, Playboy, Mapquest, Imgur, F-Secure
-
-* Fri Aug 17 2012 Russell Golden <niveusluna at niveusluna.org> - 2.2.1-1
-- Update to upstream 2.2.1. Hopefully this one will actually work.
-
-* Fri Aug 17 2012 Russell Golden <niveusluna at niveusluna.org> - 2.1-5
-- Add appManaged flag to prevent update in user profile directories
-- prompted by release of badly broken 2.2 upstream
-
-* Fri Aug 17 2012 Russell Golden <niveusluna at niveusluna.org> - 2.2-2
-- Prevent ruleset bugs from crashing the UI
-  -- https://trac.torproject.org/projects/tor/ticket/6280
-- Fix the enable/disable button in Firefox 14
-  -- https://trac.torproject.org/projects/tor/ticket/6212
-- Fix a nasty bug in the optional "Search www.google.com" ruleset:
-  -- https://gitweb.torproject.org/https-everywhere.git/commitdiff/50ca41a1e189ef8383781f803e51ec7a06688a3b
-- Disable buggy/broken: ZDNet, Globe and Mail, Blip.tv, Governo Portugês,
-  -- Alton Towers, McAfee :( :( :(
-- Fixes: Yandex, Wikipedia, PirateParty, JBoss, Gentoo
-- Hopefully the last 2.x release before 3.0 stable
-
-* Fri Jul 20 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.1-4
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
-
-* Mon Jul 02 2012 Russell Golden <niveusluna at niveusluna.org> - 2.1-3
-- Change Requires to require firefox on all RHEL versions
-
-* Sun Jun 24 2012 Russell Golden <niveusluna at niveusluna.org> - 2.1-2
-- Fix context menu breakage when URIs lack a host
-- Fixes: CiteULike, MozillaMessaging, Yandex, Demonoid, Pirate Party,
-  --  Gentoo, NYTimes, Microsoft, Wikipedia, Lenovo
-  --  https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001189.html
-  --  https://trac.torproject.org/projects/tor/ticket/6091
-  --  https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001190.html
-  --  https://mail1.eff.org/pipermail/https-everywhere-rules/2012-May/001186.html
-  --  https://mail1.eff.org/pipermail/https-everywhere/2012-May/001433.html
-- Disable broken: MarketWatch, Disqus, Magento, Lavasoft, Project Syndicate,
-  -- Typepad/Say Media
-  --  https://trac.torproject.org/projects/tor/ticket/5899
-  --  https://trac.torproject.org/projects/tor/ticket/5496
-
-* Tue May 01 2012 Russell Golden <niveusluna at niveusluna.org> - 2.0.3-2
-- Add file that I missed in the last build.
-
-* Sat Apr 28 2012 Russell Golden <niveusluna at niveusluna.org> - 2.0.3-1
-- Fix a downgrade attack that might allow attackers to deny HTTPS
-    Everywhere protection for cookies on some domains.
-    https://trac.torproject.org/projects/tor/ticket/5676
-- Minor redirection mechanism fixes
-- Fixes: WordPress, Yandex, OpenDNS, Via.me/AWS
-- Improvements: Mozilla
-- Disable broken: ReadWriteWeb
-
-* Fri Apr 20 2012 Russell Golden <niveusluna at niveusluna.org> - 2.0.2-1
-- Fix a weird wrong DOM-origin bug that occurred while redirects were in
-  --  progress (this might have security implications, although we are unsure
-  --  if it was exploitable).
-  --  https://trac.torproject.org/projects/tor/ticket/5477
-- By default, use https://google.co.cctld instead of
-  --  encrypted.google.com
-- Add an optional ruleset to use https://www.google.com
-  -- instead of encrypted.google.com, too
-- Ruleset fixes: Debian, Kohls, Malwarebytes, Yandex, Wikipedia, Mises.org,
-  -- OpenDNS, Wizards of the Coast, Lenovo, Barnes and Noble
-  --  https://trac.torproject.org/projects/tor/ticket/5509
-  --  https://trac.torproject.org/projects/tor/ticket/5491
-  --  https://trac.torproject.org/projects/tor/ticket/5303
-- Stumble across more horrible security holes in the Verizon website:
-  --  https://mail1.eff.org/pipermail/https-everywhere-rules/2012-February/001003.html
-- Disable the Gentoo ruleset on non-CAcert platforms
-- Disable buggy rulesets: IBM, Scribd, Wunderground :( :( :(
-  --  https://trac.torproject.org/projects/tor/ticket/5344
-  --  https://trac.torproject.org/projects/tor/ticket/5435
-  --  https://trac.torproject.org/projects/tor/ticket/5630
-
-* Wed Feb 29 2012 Russell Golden <niveusluna at niveusluna.org> - 2.0.1-1
-- Sync to upstream 2.0.x branch
-- Too many changes to all list here. None affect the end user experience.
-    Being a Mozilla extension, it'll auto-update anyway.
-
-* Wed Jan 11 2012 Russell Golden <niveusluna at niveusluna.org> - 1.2.2-1
-- Google Cache is back!
-- Fixes: Wikipedia, Identi.ca, Verizon, CCC.de, UserScripts, Yandex
-- Improvements: EFF
-- Disable broken: NSF.gov, WHO.int
-
-* Wed Nov 16 2011 Russell Golden <niveusluna at niveusluna.org> - 1.2.1-1
-- Google Cache is broken, remove it from GoogleServices :( :( :(
-- Fix for the Google Image Search homepage
-- Exclude help.duckduckgo.com:
---    https://trac.torproject.org/projects/tor/ticket/4399
-- Disable Yahoo! Mail:
---    https://trac.torproject.org/projects/tor/ticket/4441
-- Installable on Firefox 10
-
-* Tue Nov 15 2011 Russell Golden <niveusluna at niveusluna.org> - 1.2-1
-- Fixes: WordPress, Statcounter, Java, Bahn.de, SICS.se
-- Improvements: use fancy new HTTPS Wikipedia
-- Disable broken: OpenUniversity, TV.com, Random.org, kb.CERT
-
-* Thu Oct 20 2011 Russell Golden <niveusluna at niveusluna.org> - 1.1-1
-- Further tweaks to internals, will hopefully fix a number of weird issues:
---      https://trac.torproject.org/projects/tor/ticket/4194
---      https://trac.torproject.org/projects/tor/ticket/4149
---      https://mail1.eff.org/pipermail/https-everywhere/2011-October/001208.html
-- YouTube is enabled by default!
-- Fixes: Yandex, Statcounter, Polldaddy, SBB.ch
-- Improvements: Facebook+
-- Disable broken: Bloglines, EPEAT
-
-* Sat Oct 8 2011 Russell Golden <niveusluna at niveusluna.org> - 1.0.3-2
-- Changelog added for current version
-
-* Fri Sep 16 2011 Russell Golden <niveusluna at niveusluna.org> - 1.0.1-1
-- Initial packaging for Fedora
-
+%global moz_extensions %{_datadir}/mozilla/extensions
+
+%global firefox_app_id \{ec8030f7-c20a-464f-9b0e-13a3a9e97384\}
+%global src_ext_id https-everywhere at eff.org
+%global firefox_inst_dir %{moz_extensions}/%{firefox_app_id}/%{src_ext_id}
+
+%global seamonkey_app_id \{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
+%global seamonkey_inst_dir %{moz_extensions}/%{seamonkey_app_id}
+
+Name:           mozilla-https-everywhere
+Version:        3.0.0
+Release:        1%{?dist}
+Summary:        HTTPS/HSTS enforcement extension for Mozilla Firefox and SeaMonkey
+
+Group:          Applications/Internet
+License:        GPLv2+
+URL:            https://eff.org/https-everywhere
+# A git repo is available at git://git.torproject.org/https-everywhere.git
+Source0:        https://www.eff.org/files/https-everywhere-%{version}.xpi
+Patch0:         appManaged.patch
+
+
+BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+
+BuildRequires:  dos2unix
+%if 0%{?rhel}
+Requires:       firefox
+%else
+Requires:       mozilla-filesystem
+%endif
+BuildArch:      noarch
+
+
+%description
+HTTPS Everywhere is a Firefox extension produced as a collaboration between
+The Tor Project and the Electronic Frontier Foundation. It encrypts your
+communications with a number of major websites.
+
+Many sites on the web offer some limited support for encryption over HTTPS,
+but make it difficult to use. For instance, they may default to unencrypted
+HTTP, or fill encrypted pages with links that go back to the unencrypted site.
+
+The HTTPS Everywhere extension fixes these problems by rewriting all requests
+to these sites to HTTPS.
+
+
+%prep
+%setup -q -c
+dos2unix -f LICENSE.txt
+%patch0 -p 1
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+
+# top level files
+install -Dp -m 644 chrome.manifest %{buildroot}%{firefox_inst_dir}/chrome.manifest
+install -Dp -m 644 install.rdf %{buildroot}%{firefox_inst_dir}/install.rdf
+install -Dp -m 644 Changelog %{buildroot}%{firefox_inst_dir}/Changelog
+install -Dp -m 644 LICENSE.txt %{buildroot}%{firefox_inst_dir}/LICENSE.txt
+
+#top-level chrome directory
+install -D -m  644 chrome/content/{about.xul,fetch-source.js,fetch-source.xul,meta-preferences.xul,observatory-popup.xul,observatory-preferences.xul,observatory-warning.xul,observatory-xul.js,preferences.css,preferences.js,preferences.xul,toolbar_button.js,toolbar_button.xul} %{buildroot}%{firefox_inst_dir}/chrome/content/
+
+
+# symlink from seamonkey extension to firefox extension
+mkdir -p %{buildroot}%{seamonkey_inst_dir}
+ln -s %{firefox_inst_dir} %{buildroot}%{seamonkey_inst_dir}
+
+%clean
+rm -rf %{buildroot}
+
+
+%files
+%defattr(-,root,root,-)
+%doc LICENSE.txt
+%{firefox_inst_dir}
+%{seamonkey_inst_dir}
+
+
+%changelog
+* Tue Oct 09 2012 Russell Golden <niveusluna at niveusluna.org> - 3.0.0-1
+  - Since version 2.x:
+    - 1,455 new active rulesets
+    - UI improvements: 
+      -- right-click to view ruleset source in the config window
+      -- translate some untranslated menus
+      -- better icons in a few places (breaking/redirecting rules,
+        context button)
+    - Numerous improvements to the SSL Observatory internals, including cached
+      submissions on hostile networks, better Tor and Convergence integration,
+      and a new setting to control self-signed cert submission
+    - New translations: Basque, Czech, Danish, French, Greek, Hungarian,
+                        Italian, Korean, Malaysian, Polish, Slovak, Turkish,
+                        Traditional Chinese
+  - Relative to 3.0development.8:
+    - Only promote the Decentralized SSL Observatory to 5% of non-Tor users
+    - Update the SSL Observatory whitelist of common cert chains
+    - Fixes, mostly in the CDN/media playback department: 
+             Akamai/CNN, GO.com/ABC, AWS/Amazon Zeitgeist MP3 player,
+             AWS/Spiegel.tv, Technology Review, Cloudfront/Tunein,
+             Akamai/Discovery Channel, Beyond Security, OCaml, Gentoo,
+             Nokia, Widgetbox.com, Squarespace
+             https://trac.torproject.org/projects/tor/ticket/4199
+             https://trac.torproject.org/projects/tor/ticket/6871
+             https://trac.torproject.org/projects/tor/ticket/6992
+             https://trac.torproject.org/projects/tor/ticket/7000
+             https://trac.torproject.org/projects/tor/ticket/7020
+             https://mail1.eff.org/pipermail/https-everywhere-rules/2012-October/001324.html
+    - Disable buggy: Web.de, AJC.com, Feross, Bestofmedia
+    - Remove a lot of off-by-default rulesets from the code, since they have
+      some costs in terms of startup speed and RAM usage
+
+* Thu Sep 27 2012 Russell Golden <niveusluna at niveusluna.org> - 2.2.3-1
+- Workaround for breakage in Amazon Look Inside the Book (via Cloudfront)
+  -- https://trac.torproject.org/projects/tor/ticket/6848
+- Fix logout for AOL users
+- Other fixes: PassThePopcorn, WhatCD, Antispam.de, RFCeditor,
+  -- Weatherspark / GoogleMaps
+- Disable broken: SVT.se
+
+* Thu Sep 06 2012 Russell Golden <niveusluna at niveusluna.org> - 2.2.2-1
+- Fix a bug that was preventing settings from persisting:
+    https://trac.torproject.org/projects/tor/ticket/6653
+- Fixes and improvements: Lenovo, YahooNew, Pirate Party, OpenDNS, Wordpress
+    https://trac.torproject.org/projects/tor/ticket/6604
+    https://mail1.eff.org/pipermail/https-everywhere-rules/2012-August/001267.html
+- Disable broken rulesets: FAZ, Playboy, Mapquest, Imgur, F-Secure
+
+* Fri Aug 17 2012 Russell Golden <niveusluna at niveusluna.org> - 2.2.1-1
+- Update to upstream 2.2.1. Hopefully this one will actually work.
+
+* Fri Aug 17 2012 Russell Golden <niveusluna at niveusluna.org> - 2.1-5
+- Add appManaged flag to prevent update in user profile directories
+- prompted by release of badly broken 2.2 upstream
+
+* Fri Aug 17 2012 Russell Golden <niveusluna at niveusluna.org> - 2.2-2
+- Prevent ruleset bugs from crashing the UI
+  -- https://trac.torproject.org/projects/tor/ticket/6280
+- Fix the enable/disable button in Firefox 14
+  -- https://trac.torproject.org/projects/tor/ticket/6212
+- Fix a nasty bug in the optional "Search www.google.com" ruleset:
+  -- https://gitweb.torproject.org/https-everywhere.git/commitdiff/50ca41a1e189ef8383781f803e51ec7a06688a3b
+- Disable buggy/broken: ZDNet, Globe and Mail, Blip.tv, Governo Portugês,
+  -- Alton Towers, McAfee :( :( :(
+- Fixes: Yandex, Wikipedia, PirateParty, JBoss, Gentoo
+- Hopefully the last 2.x release before 3.0 stable
+
+* Fri Jul 20 2012 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 2.1-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
+
+* Mon Jul 02 2012 Russell Golden <niveusluna at niveusluna.org> - 2.1-3
+- Change Requires to require firefox on all RHEL versions
+
+* Sun Jun 24 2012 Russell Golden <niveusluna at niveusluna.org> - 2.1-2
+- Fix context menu breakage when URIs lack a host
+- Fixes: CiteULike, MozillaMessaging, Yandex, Demonoid, Pirate Party,
+  --  Gentoo, NYTimes, Microsoft, Wikipedia, Lenovo
+  --  https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001189.html
+  --  https://trac.torproject.org/projects/tor/ticket/6091
+  --  https://mail1.eff.org/pipermail/https-everywhere-rules/2012-June/001190.html
+  --  https://mail1.eff.org/pipermail/https-everywhere-rules/2012-May/001186.html
+  --  https://mail1.eff.org/pipermail/https-everywhere/2012-May/001433.html
+- Disable broken: MarketWatch, Disqus, Magento, Lavasoft, Project Syndicate,
+  -- Typepad/Say Media
+  --  https://trac.torproject.org/projects/tor/ticket/5899
+  --  https://trac.torproject.org/projects/tor/ticket/5496
+
+* Tue May 01 2012 Russell Golden <niveusluna at niveusluna.org> - 2.0.3-2
+- Add file that I missed in the last build.
+
+* Sat Apr 28 2012 Russell Golden <niveusluna at niveusluna.org> - 2.0.3-1
+- Fix a downgrade attack that might allow attackers to deny HTTPS
+    Everywhere protection for cookies on some domains.
+    https://trac.torproject.org/projects/tor/ticket/5676
+- Minor redirection mechanism fixes
+- Fixes: WordPress, Yandex, OpenDNS, Via.me/AWS
+- Improvements: Mozilla
+- Disable broken: ReadWriteWeb
+
+* Fri Apr 20 2012 Russell Golden <niveusluna at niveusluna.org> - 2.0.2-1
+- Fix a weird wrong DOM-origin bug that occurred while redirects were in
+  --  progress (this might have security implications, although we are unsure
+  --  if it was exploitable).
+  --  https://trac.torproject.org/projects/tor/ticket/5477
+- By default, use https://google.co.cctld instead of
+  --  encrypted.google.com
+- Add an optional ruleset to use https://www.google.com
+  -- instead of encrypted.google.com, too
+- Ruleset fixes: Debian, Kohls, Malwarebytes, Yandex, Wikipedia, Mises.org,
+  -- OpenDNS, Wizards of the Coast, Lenovo, Barnes and Noble
+  --  https://trac.torproject.org/projects/tor/ticket/5509
+  --  https://trac.torproject.org/projects/tor/ticket/5491
+  --  https://trac.torproject.org/projects/tor/ticket/5303
+- Stumble across more horrible security holes in the Verizon website:
+  --  https://mail1.eff.org/pipermail/https-everywhere-rules/2012-February/001003.html
+- Disable the Gentoo ruleset on non-CAcert platforms
+- Disable buggy rulesets: IBM, Scribd, Wunderground :( :( :(
+  --  https://trac.torproject.org/projects/tor/ticket/5344
+  --  https://trac.torproject.org/projects/tor/ticket/5435
+  --  https://trac.torproject.org/projects/tor/ticket/5630
+
+* Wed Feb 29 2012 Russell Golden <niveusluna at niveusluna.org> - 2.0.1-1
+- Sync to upstream 2.0.x branch
+- Too many changes to all list here. None affect the end user experience.
+    Being a Mozilla extension, it'll auto-update anyway.
+
+* Wed Jan 11 2012 Russell Golden <niveusluna at niveusluna.org> - 1.2.2-1
+- Google Cache is back!
+- Fixes: Wikipedia, Identi.ca, Verizon, CCC.de, UserScripts, Yandex
+- Improvements: EFF
+- Disable broken: NSF.gov, WHO.int
+
+* Wed Nov 16 2011 Russell Golden <niveusluna at niveusluna.org> - 1.2.1-1
+- Google Cache is broken, remove it from GoogleServices :( :( :(
+- Fix for the Google Image Search homepage
+- Exclude help.duckduckgo.com:
+--    https://trac.torproject.org/projects/tor/ticket/4399
+- Disable Yahoo! Mail:
+--    https://trac.torproject.org/projects/tor/ticket/4441
+- Installable on Firefox 10
+
+* Tue Nov 15 2011 Russell Golden <niveusluna at niveusluna.org> - 1.2-1
+- Fixes: WordPress, Statcounter, Java, Bahn.de, SICS.se
+- Improvements: use fancy new HTTPS Wikipedia
+- Disable broken: OpenUniversity, TV.com, Random.org, kb.CERT
+
+* Thu Oct 20 2011 Russell Golden <niveusluna at niveusluna.org> - 1.1-1
+- Further tweaks to internals, will hopefully fix a number of weird issues:
+--      https://trac.torproject.org/projects/tor/ticket/4194
+--      https://trac.torproject.org/projects/tor/ticket/4149
+--      https://mail1.eff.org/pipermail/https-everywhere/2011-October/001208.html
+- YouTube is enabled by default!
+- Fixes: Yandex, Statcounter, Polldaddy, SBB.ch
+- Improvements: Facebook+
+- Disable broken: Bloglines, EPEAT
+
+* Sat Oct 8 2011 Russell Golden <niveusluna at niveusluna.org> - 1.0.3-2
+- Changelog added for current version
+
+* Fri Sep 16 2011 Russell Golden <niveusluna at niveusluna.org> - 1.0.1-1
+- Initial packaging for Fedora
+
diff --git a/sources b/sources
index f264f28..f5fe9ea 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-1f549d7589383be917db74c446743816  https-everywhere-2.2.3.xpi
+a99cdaeb38b9c8583326e2f4ef14da33  https-everywhere-3.0.0.xpi


More information about the scm-commits mailing list