anchor.diff:      # and torLibPath for accuracy, but this is more convenient ...
       libPath=${libPath}:$TBB_IN_STORE:$TBB_IN_STORE/TorBrowser/Tor
   
  +    # apulse uses a non-standard library path.  For now special-case it.
  +    ${optionalString (audioSupport && !pulseaudioSupport) ''
  +      libPath=${apulse}/lib/apulse:$libPath
  +    ''}
  +
       # Fixup paths to pluggable transports.
       sed -i TorBrowser/Data/Tor/torrc-defaults \
           -e "s,./TorBrowser,$TBB_IN_STORE/TorBrowser,g"
  
positive.code: , pango
  
  , audioSupport ? mediaSupport
  , pulseaudioSupport ? audioSupport
  , libpulseaudio
  
  # Media support (implies pulseaudio support)
  , mediaSupport ? false
  , gstreamer
  , gst-plugins-base
  
negative.code:     // Optionally disable multiprocess support.  We always set this to ensure that
      // toggling the pref takes effect.
      lockPref("browser.tabs.remote.autostart.2", ${if disableContentSandbox then "false" else "true"});
  
      // Allow sandbox access to sound devices if using ALSA directly
      ${if (audioSupport && !pulseaudioSupport) then ''
        pref("security.sandbox.content.write_path_whitelist", "/dev/snd/");
      '' else ''
        clearPref("security.sandbox.content.write_path_whitelist");
      ''}
  
      ${optionalString (extraPrefs != "") ''
        ${extraPrefs}
  