While working on #26962 (moved), Kathy and I discovered that first party isolation breaks the behavior of the default uitour permissions (listed in browser/app/permissions). This bug makes it impossible to use a default permission for an https:// site. We have a patch which we will post soon.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Child items ...
Show closed items
Linked items 0
Link issues together to show that they're related.
Learn more.
(Meanwhile I landed this on tor-browser-60.1.0esr-8.0-1 (commit d55b7bb578cf644e780d27efa2355c2046bcf689) to get nightly builds going with it, but I'd still like to have a second review)