From b337af619b931a0b7ee25ad81b7cfb1c012da089 Mon Sep 17 00:00:00 2001
From: intrigeri <intrigeri@boum.org>
Date: Sat, 14 Sep 2019 17:36:17 +0000
Subject: [PATCH] Install an Unsafe Browser red theme compatible with Firefox
 68 (refs: #17055)

https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Themes#Documentation
says that "Lightweight themes have been deprecated", which explains why our old,
custom lightweight theme is ignored.

The only options to fix this are:

 - Create our own theme, get it automatically signed by Mozilla on AMO, download
   the resulting XPI, and somehow make it available at build time.

 - Use an existing theme with a GPL-3+ compliant license.

I've chosen the latter option: this theme is almost identical to the one we
had before.

The XPI is 7.7K so I don't think it's worth devising a more complicated
solution than just adding it to Git.
---
 .../lib/tails-shell-library/chroot-browser.sh    |   9 +++++----
 .../usr/local/sbin/unsafe-browser                |   4 +++-
 .../unsafe-browser/extensions/red-2.0-an+fx.xpi  | Bin 0 -> 7884 bytes
 .../chroot-browsers/unsafe-browser/prefs.js      |   3 +++
 .../chroot-browsers/unsafe-browser/theme.js      |   2 --
 wiki/src/doc/about/license.mdwn                  |   8 ++++++++
 6 files changed, 19 insertions(+), 7 deletions(-)
 create mode 100644 config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/extensions/red-2.0-an+fx.xpi
 delete mode 100644 config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/theme.js

diff --git a/config/chroot_local-includes/usr/local/lib/tails-shell-library/chroot-browser.sh b/config/chroot_local-includes/usr/local/lib/tails-shell-library/chroot-browser.sh
index 01e477dae7..8b31e7d60c 100644
--- a/config/chroot_local-includes/usr/local/lib/tails-shell-library/chroot-browser.sh
+++ b/config/chroot_local-includes/usr/local/lib/tails-shell-library/chroot-browser.sh
@@ -122,7 +122,11 @@ configure_chroot_browser_profile () {
     local extension
     while [ -n "${*:-}" ]; do
         extension="${1}" ; shift
-        ln -s "${extension}" "${browser_ext}"
+        if [ "$(basename "${extension}")" = 'red-2.0-an+fx.xpi' ]; then
+           ln -s "${extension}" "${browser_ext}"/'{91a24c60-0f27-427c-b9a6-96b71f3984a9}.xpi'
+        else
+           ln -s "${extension}" "${browser_ext}"
+        fi
     done
 
     # Set preferences
@@ -137,9 +141,6 @@ configure_chroot_browser_profile () {
             "${browser_prefs}"
     fi
 
-    # Set an appropriate theme
-    cat "${chroot_browser_config}/${browser_name}/theme.js" >> "${browser_prefs}"
-
     # Customize the GUI.
     local browser_chrome="${browser_profile}/chrome/userChrome.css"
     mkdir -p "$(dirname "${browser_chrome}")"
diff --git a/config/chroot_local-includes/usr/local/sbin/unsafe-browser b/config/chroot_local-includes/usr/local/sbin/unsafe-browser
index bf0d711934..d84a80e84a 100755
--- a/config/chroot_local-includes/usr/local/sbin/unsafe-browser
+++ b/config/chroot_local-includes/usr/local/sbin/unsafe-browser
@@ -100,7 +100,9 @@ setup_chroot_for_browser "${CHROOT}" "${COW}" "${BROWSER_USER}" || \
 
 echo "* Configuring chroot"
 configure_chroot_browser "${CHROOT}" "${BROWSER_USER}" "${BROWSER_NAME}" \
-    "${HUMAN_READABLE_NAME}" "${HOME_PAGE}" "${TBB_EXT}"/langpack-*.xpi || \
+    "${HUMAN_READABLE_NAME}" "${HOME_PAGE}" \
+    "${TBB_EXT}"/langpack-*.xpi \
+    /usr/share/tails/chroot-browsers/unsafe-browser/extensions/*.xpi || \
         error "`gettext \"Failed to configure browser.\"`"
 # If /etc/resolv-over-clearnet.conf file is empty or doesn't exist, we
 # have no clearnet DNS server.
diff --git a/config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/extensions/red-2.0-an+fx.xpi b/config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/extensions/red-2.0-an+fx.xpi
new file mode 100644
index 0000000000000000000000000000000000000000..3c9bf73d61fb4b5c8d2d9d5718ef6806a20699a9
GIT binary patch
literal 7884
zcmaKRWmH|swl(hV?(XjH4ncxLaCZwHEChEAPJlp=;2hlD-5n0@aBx2Qd+&Dl?f33m
zHEN7qd)HcfN&Q%}rkWxo6c!lV`}n6IzrS!WakR0taC2v|b#ro*ik?E~W<!z=Eb3ig
zH;;Q&8k(<TT-KbX>ptjEEIja6a8wxwZ`L4hYJzm_k{Xj?^v9~hJP8dlZ+8n8;a@ze
z7>0c&FR6v5fsOoS?9xJ0ii%=%SR^Bbc$5D*vChEzX2jn385=&V8fTZNwDc`WF%T9E
z?CniW5f;wJCv4X1-Ji<$srDZ|MtJ{fZDC?=;mYFdXmx~i;Rf7G+&2C6Y4i5R8Q%2M
z=6Y9Wr*m*fL{QL{Z+tx+BqXGnOMDCF&RCMbEfNxuzOW&YB*XUlI)}Nr8rmnda@IvP
zr(wTq=i1SXmcwWyH0RB>6)Zg8AjquJO}=3wi&zfXjKa|m`*d!}@}&EcGF7#Nlsygf
zE+I`hl>scrSs0mM;QtCi`CGL~)VqUE@0tG3A>h34P?pvdXO>ryVKsAdvtapG36f(~
zor2lG`p#dlR%4Jx<HfqcDa^8;r^pf3o7EmL_2yH9&t_PA9n!K}TU&QujIN^499VRa
zMkx0S4ofQz%3#Ez;To{7ILj&y=oh)>keUtWt}TB?{7$)<n*-|L+p&T6va3@J0TFJj
z_G4rnmVUp-Wu2~6)qEw}AkV@@afn$G?B?vT&*VduW1KvSOD;>t>3c`NO#24_(6RI~
z&Yv^q@KVx$<<|Mgjg*P3eu-UXo7>^z#=;5rBB__Bd9_<JZ&cA;@IM^#4tB-GgVq!4
zX{tF*QW{gI=^eq9-umtf`{n#S`u{5U>MI2C(fdm7J%9f>Tj>8ITW&U1vs%7fvkz}M
z6Qk+kmB_YzYUw||f}-&ySpd|t<*5e64P2a-2B!TM(^BRzAyfr=bwkX6Ss4n~2yyjP
z+Yygy`DXNdb-?rZZsXI++D6WK;KsG^#)H{7kiQD}^8e?=^$q*BwY36?x|k&97ql2y
z3Hmt$D5BsVbOkmWvbaQcH2z4DVafO`EF>xPkKp)N-NX^yooj1w1Y(8|=InS3yxpQ~
z@s$n($jJL&r@dbdP`cnYsb{qCR?jsE%cAbi)G8-TibL~G_s>Tzf%mp8)e=1~8BD=A
zlgUJ4pJpWh1|&K11F&!6{WBp=U@bB^VlY%<5XOPN3xk+%NI{!d9Uh`YlZH#Goc0#o
zKQNIFMMMl#(oH6Z8Ib__?V-0~$8mN^L9-ug0ncnWGml;fNrX_L7s!F_`f><g(Ymos
z#Ng7x5Vz1yJP+HSduLs*)zK*c{x#mV=TF*O`^Zg$;x4^pl<`J;CvDfuWqIv_M<K>1
zY1_FMUQNAaNUZs`XU5Yt>_z@f?(Hvn(mhmHqbzIqO-45)hnf1mu8A=Fig(BGv0i70
zuguF=$!;>QiLU$nZwp8}WS3hMG&Zw1UzxS}kI?up`3mjyl113i*}TKv5J3TuT8)>j
zH#0Kspt|30WyW}*8&_FmmFnV&bN2#2+c*ial+Nq^Ndu!_Mbs`GBT};x;`0J2%i=0F
zon?v8C7@|aM?&|aOuF{QN-`A{L2TGUIfbv|m9+ErdW{XQi!(UZ<?>v3x=j&ByE@Hc
zFu9)k9=8i)61dh29povF2Edea_k*tNCdhnEn%n{j?~b0zU5-Xw{yAat-6z0AqXORX
zoLNL&SC&xLqmUwC(Y%1i#-1Ze2hdzCX@~$yWs~~K(MRixNqVq=Mj#twQ#VnBAlfhs
zWJ(`g2&hY3@RsVs7HFg%>uXm`=5T7GOFSdGSnKdSXwe|X9^yvywBnUH==tutaw{UY
zf<#0hzCw)7`clXHY_zuAS~F2Cy>?mBs!l-I=cIrEB67O7(GHHyr=u}aU0oDdv7O{d
z?LTLhr*k&<1mI<FviCjQLSGYxAN{IDo#@`My;(Kntvq|I7;sGbW})JtYB}c{zQ*|o
zUqRXSeG?821{*G)iY#<HhzMb;GD2Jd914mV5*l7TG|z$x13X+!OgZ?LN(W`I;0JFZ
z89hB0#O0h)CW0LIkI2k9+!zbM82&X-%l8s`+ePGML7t2*b<`t1*nq4Ftx#R}Z8=K&
zF1d%d$>^>Sr6C=#7yjKFLVWA;?e}3A8dUTL4p`~fc<Xf>2?`h6<^Un1i;t9rZ%)FL
zG;81R39Ru(5g;}cc1;olJMV-9^O$=HH~>T>Q9V71ql!Rc6pNP!s!0snSG#WGLNs!h
z(#DkuV6>(7f`+4kKUbsU7H-bdK~FWKm+i`!Wb-N_ibLaiHi=a@@!?#x^^Ml@qLt-&
zLGiM*?wkE1(Dg+>>$IcPy`7j3(3*8!&i*Rj%JbO2$2FZKF={b!jT*ybn1q>xQ)<1S
zoAM}oH#Sj%grz^I<z(Sh%!~FZ++5}OX9=6s1H__)Z-GNe)lp3EGUTlN@2<l0Wh;Y-
zXGE(FX1rX7#e2A{tjckT#uzhDLMbk}U}zHSLveJ_5N)f~=-Ad$naITLlawEajm`P$
zEfBZjc=z0*8NJLxu%Vb(Xy2RdcyBc=dH1^(Y3bUn;r@VY9L)4|Oam8)j#vb*gLAH^
zYSGpV^udlFZ7$@?qz5YO?<XQSaD5s+{SCDt=8Zij;RXh`H2+y1v2~C=!GNHhNbQ_{
zzCM{;_DNM6<!!cdw!M$>QqlLQu(`$h-s4=XvgG=fTTrd%N>$}Svx7i^aIA7YL6epV
z-mCvdFwc(*bwHyxC-$kF0VU5q>)7F`PnmWod&aF_q+9i)h&rM$2ZvRPMUda{ppCtH
zM!H;<rx=nbqUBEDXPln6@X&F-xK9#mQ!4;+CUupOc$PoqeZUz@tGCLE73vbfePqbl
zzP+f;L6O-#A|NeTcQdF8Jo)^+<<<~Jo&C+BP_YkqSECKC*<HF=lA>g<?J0p_ZetK1
z|0Is4C}}hr?kq>ZfeDvj^#v`!zDT4<%S|X#g>|s)$v6BJl$`v-aSSZNS|SgR5VK>R
z8O$8w!xgI19fbI_amq7me1GSuJ)EtWG{hvHHv@<*Toweh_Pwu-MZ*eujx<OfTPT9V
z%WExAyL;1oVId?BkK&@7jG!up?}X$@2&P4+R}$)pb`0j_G*N@IH{;a6SYtw%1cM3V
zLF4z-?IusYS%8HKm09eLuR-N7k5+vgATq`wyt;RR#Z$8>DoAE_uQH1YusjOWMKpln
z!Gj(<S%_7#_a${LcAjXVMAXyVJGlDop6xVUg9ue5=KN4q8WjtkURC<kI5?*lF<URj
zyq_z%pf8~&;{%SmMMBDx_gk4Bs(?NMd60?Jj3>%QfrfnuDlr2!Xv>TapA8=gBS9IW
z*pdmSZ*(+W;s++aJtjibXz_E8)k{fo0S-@T@>5vbMHx|A*}^nPC-HQq3Hx>#EMTY(
zZ%BtUb^cxgAmudttb9nL2NSTw%1j>Ka>Egvr1xl{B>?%GYwRxYDDyLa{oL;8gPSLf
zSF#UeFTI(8+sge_4C2+ef&I&rCh34&cu{Ac_$-A$;Qi5D+V4A(##@AZ-3!aDG!Q4}
zgjZ>`rl1>xc_@eJIeSsx%wt5*J}vMdZM){GhxA<in-TT^k5Yrqom|BBu!&PF;G{h3
zW?;vbg1)&Tdn~dQkPN9Zr6S7b9xof-psOS;f-m3F=9b`BY`ILK$ZEDf**5#t7Vqs6
zY)leQ<L2=sqZ@V!Te{#CJ%&Qxw+5Q41Muj((Oo@Yb}}BUjX4|t;U2vD>KeAXsrRyh
z8+5KmwTr@kx?GT6J;Ud>Qvamgu&~|7+>_m-*ypm{@{;W#{#ChH`sEsbxOt(aT=?2Z
zgN1>6N>7-ZHhfQVy@r$*M-^~yh&O+<=<c8_{b2g!FvfBr8ErdV3L9%xKfdj=Kt18>
z#E94~VxaGIKpxOjvkj6e5q;Dl+TABFgdtSD#L!B8PTaJ1J6~zu7t%9?7qOBtGcN0F
z4x6vlX{;S|v%X3AsnKz&<2xK%M2s0+n>|e`)Z$TXkroqNXjJfWPe4oZmAu-zkNFmz
zx`Ba7O7BxhMPuUOouh<AP1m#klL70ooMqV9zCvR(y6A@hl?ChDb=CWeq~l*PObb3;
zoi$Twq2F~$neC5n0xdeGfvN^elf8&ke86Taki)NOtc?TZhulB=KU#QS$}V^?FdC%)
ztN+9Ld;j;ZMw!LIGI??&wm=LEW>Z*oE9d7I3e#-}Sr+b9dvIt^3w;T8tj29i(U;zv
zIzmoFURqlIH~IEw9;OTADNi2><UWh)j0?_K6C$}uONm!vD|}`|%eW+2wV|Y%E(e7J
z%WZswH@x5`Q<A3}!P*R>N?+Pl-HadMW|MWUe#^*5_|6?B0E>3g9NmKrdubKBu17MS
z#HRjTyLGp58yzsss636-<!muUl-bibCh3dFOkFK1r|R9^f&=M^ddX!FB#YQCDWRYn
z<l}I&*Te9y>*px19dLJ8!)P)@DVOpwZ=n3bICV>W429O?=NkJt?c&a<{akA4+T6!=
z3KXjaZEa}+!lMsXxSr>T7JE$mj`(e8zecI#_&ir5vI%u6%Ik6X13U2|c9=)y@S+jd
zI>nD=h62A~b!d}4ME5AF4L#6non7}oW8m<9(s?@KXvO&^bvD_Xz5OKnd)8b#e_3I9
z57Ehgg3eU=TZ^$j^RjcBMS91dD2M8@=Y!|_DgxsFsvG9N)y>Jr#@^n9#my37Txmj)
ziJn<u4q1_zVSIF=R-J8@a}(jtnQPW#NJ*8MW$IRWbVNy!nWb9&f{r`RS>9#1)SX2U
zalF192{c|ltT1xJTqf5DZNtvN-7}k<kcpXSqGM@!m~OaBpq`1oy|<feWqWvJsGe?&
zadd>AMT&lw0L;!IF*h0MgMJ5Q{{=o0Zv2Bn-(8G<pZ^(r{QKei?;u>=OlH%(`I4VD
z2G(jR3i?wm?9J$-ef!y@YAk+5FfG-LMpyU6Qx~vNB1!O57nLtz>kjyY4t{9Rs7YZ8
z!~Ec$_yee}S~7mlzi|D0YtV7*_2y!{0DNuj0Nwg;EWA9lSMm<7LQ6ZJMsdbGbt00H
z^DDh_#}9QtfP)d?ev|4<@suDh*o-B`APXPz#W$xg5T_ZXf<*u)LsRK0-*K=xS@ehp
zu@ZMe0>SX5n~2G9A#4#P^T-<J`CQc8TQ+6#<zBbe+uP0QCEq&1-o#vgH;NLMAe7mA
zdFAbPc-_k5sHX<Ko{`Tw1SQuu(yo0!qqk5-6gpKd+S(N#y@Q}rpg7PESLinxIy-y4
zAuHc#)c*7WDeN+xw`=^g4H4?;dmj!x_0wmAS~E}-jd?U`1_J&wGSLTRWK;o!>uqs0
z;_!|35Q11T%B^#i*OpBwaim)piM&qFAgRm5XUT&ubEoE67biWsSk&DYOWgc74-G!7
zrsMCDXQY+wD_^e$Wv#acKSO9iYJv-2NMS?d$Z6$UCva=lanVU-g=ePH1eJTBm`j)k
zyiS5;K@NvrxO`E9;|+xe=M$hD>ylK)xOfmxOE991RMOAHoE1|tixIYF?@9xYaAjcO
zND`SNG39?NO2~@Vn(zxMg<Cr3fBHNw^Fu053#?z{*)8tI?`O%7%oJ1_z{G+Kc1Y~{
z?pzs#Wn$!U^y6jtD$T@0=ESixM2*#bpUTvRO0I_+l~*Jti;A?4PUWG@0YA2=@a86t
z<W_r?Pl<P9BhW6g<Vwk_CDX-8Gs#AByGr&X28d-?=Q}KpyChvcXzu;#3CfSUMSZ*G
z_sE%)`9^Vpn%~HZedN<No8kP8+Sk}V_fldOwQ6sb4KI`8VX{|61%Q*!D&_aS(R}V~
zW&lF(FH`NP_FGh|k}}^`$B%=S=BJ&nJe0b{A!r{06|Ynizw~J-o^2ef@0KLJ+;#a&
zRuGgOTh7Yzt+<c7*E-J}@nr}*)b0J^E#=v$b~M4&^X{W2Wan#yY#`IgB@|hKvtuoX
zD5^ykK+TQyswgvRU<&e#F4n$XI*=NBKdP}p7-Wq4W^v)LL~~7<%rzeD(INeg&mr54
zoV<D*8Y~UIlrU^)^m30`5qpA`FS@T7-LlmK-m+IxIo{SaJOdw>AL!~!DTkr$!AV~^
z!}~0s7gK2ztY-RWgXx$39J1vG%q@_)=alBfPN&B8DvU|SeLvkRO<kSlyvjM=25pUN
z>1oc*ww9hAghl5-!C`HJUEvpz6~e7Xd|6hw0Pn=bLqZUj3Hf=dhtdz}O39ak21XPc
zDj_~}8eYSOu12RPCI?Eo$0aE;p67(lE!%DEK%i7*3aVTQHe~a?;G5}RgQW7Y#&G$p
z91QzY#ZCJ<?*sQ7yru_{_z1DA%YY;APb>uRb8#^4dTXwN)Kmg=)qV{ju5Vl(sN14S
z2OU|2lcyazIRmxa+}r|GJtDkrg_f;#cr8TzBQDZ@#-@&l#hK6PY`kwZFd6$1z7<u7
zZI92VB;74$vAB<1ph!mkaiZkr4E9|N8-fHvtIsMScDWaMV`Poar{xzx;j*>OALxHY
zeocayXg<3VETCdbmwxI;U=>yhFw~jBp3@zj1$#^Qb}_)7(TE$D0KldYc1^A(rZWQ6
zRxK?(hnzt=3FI3>!)uRZtB@T}(pbW#z+}1k{P@l?sVl1~YFE|PX+S1gc7fE5d`m!h
z%-otI#|vqWLkW$W!|#A$#unya>!)-Mz$@~@5&pc~UE-12Mm?tnQP23qO%J=0PFmP4
zV4soAv_kp<!Is)!bfbmUWJBmW#tZz+=>kwM^xNLLnps3z%0r8(HX5*Q)7mt2m0S{o
zmZuRuaQ5!${-D6Z#WjIwqHb2XPcwOIKc7i)K@QAfVz?Qu24;&R0Op*WzU6vVh!1cp
zNL2O9q#_#DRR(ZI#UzRZnYSAH-3^fVCs0RST2!_LVYu9=(pEC-%|NLsDo&B=og&8E
zGhNK=Eo@^jedNtd{`he#e4`#eg?S=snOp*OgnG!ZJ==f#Mq1=$^r`D>n!Fh-d!JPL
z#cqh8jL!?SEC#<Z#(BGmUBb|U|0?OubQ)~5Bkq1Nm8p?Ddbyx=>$89GIf3_G-wzGO
zc*$mRGR#s4j;-JgG{`;R=CgKl)>B|u6cybiGK)me>uVQ-W{pCpu_<;<?whvx&k(41
zuz<FPgiE&vQmBqMM7oYtfxT*V#(Kq_Joz<6P%7~TYu3DDLL8nGDrw1mqTQGws`kkR
z;UNa`n|U4f6V+%hh0NvyPVkyOS!vbbg_XFaSKnGH_2M37x)&Nij!?z3Q2Ar`qEAFE
z5#>?7MrYI@B>jHJuEXiD9OyNqV1I!`U5;9b&^eD0dK^!dN#wQ2iJHa1e#)v;=)~)7
z9S5VBJISpKd#R(FsO=PcH}FsqRX-<Ac-teQ@4G<jOi8MV_O(58<8>!^Yi-{)VC>n>
z6asnYMm?99`n%;hKW&8t+XYX7l^Op{cciWhSa4??ccTK<IwQ@rpJy3lx<eFUTvL6T
zxusrnDM~=y>?xsx9<-x?<|%nH!?z`1MmEubz&VCo!B=$XZ|BNLijmLfrwa8kq8_FW
zh1H=H%mg7`coV}ZxP~RC4D&kna_NT6U#r&FmMIa^0z-U@QOxU%KMxbAneXV8%n=ds
zD0r<OSdTByZaUoOjW7yIC3aW@h?+3(Gb2{6We^WMIFHWg?k-g)=d{S5DEBZTY(>U5
zWH|yv`ELhQR49-oR~pawa$YOssT%Dmi+_vq^oaoK>t8(JM`+6S#uGm4+8el+8~EA*
zZGr8vOHn4Oird%9rT#c&5nZ!)t^3a&VOC=v3z8qnoqEGbzqMi13;3+6Q$8cMIr0_W
zwN>v4_T7&UmH2jmhrv^QQ6j_HUHS@+00Wy3cCmN<1spAJQoGZBA<$~{j!pg~6u#><
zgDra73CVQ#OZ4|Ch`F)AMc6dush&Hnl(l$iT#b~fc_0T~W5Mf~<OCF$8gkbjjuk?0
z1tAz)dMjE#BOl+Vj<TaSB4I5C-4ud@DCE3{Alb&#d=r|@d;>|f$cTRRm%}bDpWnlG
z7l|Q~5H^83`BWO)fw<3*Y=#x2MZYS~9BJlPN%SyRo`n}ZeViLwf92~xY34e-4oUi?
z+5nNKl2k1`^n@R<W$L1tLZP0%O>;8FF<=uOh8w{N`Ehz~jii-l%rDYbs}E)tM1|5e
zs!4lhgp|RSC+fiG%FF%I3VMe_zN~4WOOKxm?OT<qc3m!6yUkRLnMx5OX3qAWwMZmB
z2=l)Q4CEHXGj=Gk39qPI-S%^a=|CX|i_YF8(I=K2?KXi2SF7}x`_q2uG#2)U@)t;2
zhc_PLptMLz7n7q<=7IXMv?U+q)(#7uouek-J7af2JD{gSz^R6-y8kJxdZ1hG-BK23
zJBm%&FzD-p<f<uZiC#3;F~d#n)DHLrvLv|q%qHIQ5FW6wRc_-g^T)ailihK(V+J#5
z@`c@_Bm?_llX3a{uI22+icLLDhOl{a;O2YNjLa~?k?2O5WYp#_k+bqO>ba@|rCP3K
z|HgCeG5J#M1I@MS{+7iV+RBGKZT8Hbj+pjuv2}vKT&VO+GY5hsCGO3Q?v%N1D&S7$
zAiZIDLFz}dhp0d@Q|`O|V#eZTd?`ylJ3hI~*MZ9mGSYPR{S-11#}v92Lee~jTGdu2
zj_8$duJjaBl)}#Bsn()R<g`(dwKb8#)B;4*yaI$C8z0ZXq5IQ7#dF(dGG0r;sPJhR
zoLb7#Aj3FSFqEHr13T$z%<=GA;b35cKOZK#CR8skeb+}_V59@egSP`>bMx-wP>2RV
z+>NC>v+c0lOQeQ)DsVJvF#eaLr3rnRmdwgfO)dP{rQ|<eu&luOqT#nL%G48AJ3uI!
z^<nwvE5sAp+g2J0!7(e*J{+slLIqSLoR~~)jSEYKzr{2nneXTUul+h>9uPk3$Nqpb
zu7xSU7|$am!$@9PiGp+qo!nNmM4QlXzr=|1!Fs7ehlW3C3F}^1J01&m)ro>azP1%i
z#xnGq&160+FtzdltU)Z|UIWm%(|R1`LhgQ~75k`;AAab|>+#D9Q?cd-!fTCfoQ@5I
z;PzI3Y~P7F#tmed?kPsBV9`Y{9%OVCuw8A#2J&BEA53JJZ$+lABc)-`mjX#GkC=88
zrP#vYRDVe-LLF}Iri9=p{@7qyb;mz)7pCef^<QYcSK7YJpCS6~@%<rLFE<tXrxz3Y
ze5N?S>bt~G)uHJKo6r2Zyr0DFMzY#W*bw(<%Vn{&8k#<TleNt-E|Li==wCQ-R5o!0
z8L}TD+k0=%U-~j5Xg3P7nx>uWunV@;vDl%8T6!M(1RJEBn#~J+cOPi(<vuir*?P?I
zz3vfGJRieZwYcvcTdSy}99QO3EterOUkzA~7;f#r5!vAuO=W47?fH<;1y-3kH2LcH
z;<^?7psQSN0ij=Xk9wmNQ|%LQh@FQF_fsk+l~9i&Rw0h0&PKNaWH-ojvHbz}sa5DA
zAj3;9{Aj@s-X-}3zDd8|$4o6$KpttiM~4Iu<4)CA<6^=);8xP?#{bIrFKBn1lSGs8
z&TPWIQ%7ow;1F0~f03VmCmH`BKmT3+yk7W&3jL?*-^sl{SjfMm=Kb+6PV%36f2X<r
zp#J_6k9QFLzY~G~wDI?=l0OKszohUTg#WvZcY5rf>VHS<e?Z#5r11Uj<xllL!*{U!
zr-i@6<v)=9U!srlcME^w{C^twdr|(~1v1qC#lSnpR#SwA`QtaR@1x~CQ%^*Hto|Pp
C-fr#y

literal 0
HcmV?d00001

diff --git a/config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/prefs.js b/config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/prefs.js
index 3222a6d513..cf6e7600e9 100644
--- a/config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/prefs.js
+++ b/config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/prefs.js
@@ -12,3 +12,6 @@ user_pref("browser.download.panel.shown", true);
 // search engine (this could include credentials, e.g. if something
 // like the following is mistyped: ftp://user:password@host).
 user_pref("keyword.enabled", false);
+
+// Use the red theme
+user_pref("extensions.activeThemeID", "{91a24c60-0f27-427c-b9a6-96b71f3984a9}");
diff --git a/config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/theme.js b/config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/theme.js
deleted file mode 100644
index d78d9b0c61..0000000000
--- a/config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/theme.js
+++ /dev/null
@@ -1,2 +0,0 @@
-user_pref("lightweightThemes.isThemeSelected", true);
-user_pref("lightweightThemes.usedThemes", "[{\"id\":\"1\",\"name\":\"Unsafe Browser\",\"headerURL\":\"file:///usr/share/pixmaps/red_dot.png\",\"footerURL\":\"file:///usr/share/pixmaps/red_dot.png\",\"textcolor\":\"#FFFFFF\",\"accentcolor\":\"#CC0000\",\"updateDate\":0,\"installDate\":0}]");
diff --git a/wiki/src/doc/about/license.mdwn b/wiki/src/doc/about/license.mdwn
index 5b2e4cc10a..57ab8f8fb1 100644
--- a/wiki/src/doc/about/license.mdwn
+++ b/wiki/src/doc/about/license.mdwn
@@ -24,6 +24,14 @@ Debian packages and is neither modified nor recompiled by Tails.
   in the [APT snapshot](http://tagged.snapshots.deb.tails.boum.org/)
   that we created for that version of Tails.
 
+- The [[!tails_gitweb
+  config/chroot_local-includes/usr/share/tails/chroot-browsers/unsafe-browser/extensions/red-2.0-an+fx.xpi
+  desc="red theme"]] used by Tails' _Unsafe Browser_ was downloaded
+  from Mozilla add-ons website
+  (<https://addons.mozilla.org/en-US/firefox/addon/simplyred/>):
+  - license: Creative Commons Attribution 3.0
+  - author: [Firefox user 14030863](https://addons.mozilla.org/en-US/firefox/user/14030863/)
+
 Website
 =======
 
-- 
GitLab