diff --git a/config/mozilla.cfg b/config/mozilla.cfg index a76f93d..299724e 100644 --- a/config/mozilla.cfg +++ b/config/mozilla.cfg @@ -58,11 +58,11 @@ defaultPref("geo.provider.network.url", "https://location.services.mozilla.com/v // lockPref("geo.provider.network.logging.enabled", true); // [HIDDEN PREF] // ------------------------------------- // Disable using the OS's geolocation service -lockPref("geo.provider.ms-windows-location", false); // [WINDOWS] -lockPref("geo.provider.use_corelocation", false); // [MAC] -lockPref("geo.provider.use_gpsd", false); // [LINUX] -lockPref("geo.provider.geoclue.always_high_accuracy", false); // [LINUX] -lockPref("geo.provider.use_geoclue", false); // [FF102+] [LINUX] +defaultPref("geo.provider.ms-windows-location", false); // [WINDOWS] +defaultPref("geo.provider.use_corelocation", false); // [MAC] +defaultPref("geo.provider.use_gpsd", false); // [LINUX] +defaultPref("geo.provider.geoclue.always_high_accuracy", false); // [LINUX] +defaultPref("geo.provider.use_geoclue", false); // [FF102+] [LINUX] // ------------------------------------- // Disable region updates lockPref("browser.region.network.url", ""); // [FF78+] @@ -390,7 +390,7 @@ lockPref("browser.shell.shortcutFavicons", false); // >>>>>>>>>>>>>>>>>>>>> // // Require safe negotiation -lockPref("security.ssl.require_safe_negotiation", true); +defaultPref("security.ssl.require_safe_negotiation", true); // ------------------------------------- // Disable TLS1.3 0-RTT (round-trip time) [FF51+] lockPref("security.tls.enable_0rtt_data", false); @@ -451,12 +451,8 @@ lockPref("dom.security.https_only_mode_send_http_background_request", false); // Display warning on the padlock for "broken security" lockPref("security.ssl.treat_unsafe_negotiation_as_broken", true); // ------------------------------------- -// Control "Add Security Exception" dialog on SSL warnings -// 0=do neither, 1=pre-populate, url 2=pre-populate url + pre-fetch cert (default) -lockPref("browser.ssl_override_behavior", 1); -// ------------------------------------- // Display advanced information on Insecure Connection warning pages -lockPref("browser.xul.error_pages.expert_bad_cert", true); +defaultPref("browser.xul.error_pages.expert_bad_cert", true); // // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // FONTS @@ -523,9 +519,6 @@ defaultPref("browser.eme.ui.enabled", false); // DOM (DOCUMENT OBJECT MODEL) // >>>>>>>>>>>>>>>>>>>>> // -// Disable "Confirm you want to leave" dialog on page close -lockPref("dom.disable_beforeunload", true); -// ------------------------------------- // Prevent scripts from moving and resizing open windows lockPref("dom.disable_window_move_resize", true); // ------------------------------------- @@ -555,9 +548,6 @@ lockPref("browser.pagethumbnails.capturing_disabled", true); // [HIDDEN PREF] lockPref("browser.uitour.enabled", false); lockPref("browser.uitour.url", ""); // ------------------------------------- -// Disable various developer tools in browser context -defaultPref("devtools.chrome.enabled", false); -// ------------------------------------- // Reset remote debugging to disabled defaultPref("devtools.debugger.remote-enabled", false); // [DEFAULT: false] // ------------------------------------- @@ -860,24 +850,13 @@ lockPref("security.tls.version.enable-deprecated", false); // [DEFAULT: false] // Enforce disabling of Web Compatibility Reporter [FF56+] lockPref("extensions.webcompat-reporter.enabled", false); // [DEFAULT: false] // ------------------------------------- -// PrefsCleaner: reset items removed from arkenfox FF92+ -// lockPref("browser.urlbar.trimURLs", ""); -// lockPref("dom.caches.enabled", ""); -// lockPref("dom.storageManager.enabled", ""); -// lockPref("dom.storage_access.enabled", ""); -// lockPref("dom.targetBlankNoOpener.enabled", ""); -// lockPref("network.cookie.thirdparty.sessionOnly", ""); -// lockPref("network.cookie.thirdparty.nonsecureSessionOnly", ""); -// lockPref("privacy.firstparty.isolate.block_post_message", ""); -// lockPref("privacy.firstparty.isolate.restrict_opener_access", ""); -// lockPref("privacy.firstparty.isolate.use_site", ""); -// lockPref("privacy.window.name.update.enabled", ""); -// lockPref("security.insecure_connection_text.enabled", ""); -// ------------------------------------- -// PrefsCleaner: reset items removed from arkenfox FF102+ +// prefsCleaner: reset items removed from arkenfox FF102 // defaultPref("browser.newtab.preload", ""); // defaultPref("browser.newtabpage.activity-stream.feeds.discoverystreamfeed", ""); // defaultPref("browser.newtabpage.activity-stream.feeds.snippets", ""); +// defaultPref("browser.ssl_override_behavior", ""); +// defaultPref("devtools.chrome.enabled", ""); +// defaultPref("dom.disable_beforeunload", ""); // defaultPref("extensions.formautofill.available", ""); // defaultPref("extensions.formautofill.addresses.supported", ""); // defaultPref("extensions.formautofill.creditCards.available", ""); @@ -891,7 +870,6 @@ lockPref("extensions.webcompat-reporter.enabled", false); // [DEFAULT: false] defaultPref("geo.enabled", false); // lockPref("full-screen-api.enabled", false); defaultPref("browser.cache.offline.enable", false); -defaultPref("dom.vr.enabled", false); // [DEFAULT: false FF97+] // ------------------------------------- // Set default permissions // 0=always ask (default), 1=allow, 2=block @@ -902,14 +880,14 @@ defaultPref("permissions.default.desktop-notification", 2); defaultPref("permissions.default.xr", 2); // Virtual Reality // ------------------------------------- // Disable non-modern cipher suites -lockPref("security.ssl3.ecdhe_ecdsa_aes_256_sha", false); -lockPref("security.ssl3.ecdhe_ecdsa_aes_128_sha", false); -lockPref("security.ssl3.ecdhe_rsa_aes_128_sha", false); -lockPref("security.ssl3.ecdhe_rsa_aes_256_sha", false); -lockPref("security.ssl3.rsa_aes_128_gcm_sha256", false); // no PFS -lockPref("security.ssl3.rsa_aes_256_gcm_sha384", false); // no PFS -lockPref("security.ssl3.rsa_aes_128_sha", false); // no PFS -lockPref("security.ssl3.rsa_aes_256_sha", false); // no PFS +defaultPref("security.ssl3.ecdhe_ecdsa_aes_256_sha", false); +defaultPref("security.ssl3.ecdhe_ecdsa_aes_128_sha", false); +defaultPref("security.ssl3.ecdhe_rsa_aes_128_sha", false); +defaultPref("security.ssl3.ecdhe_rsa_aes_256_sha", false); +defaultPref("security.ssl3.rsa_aes_128_gcm_sha256", false); // no PFS +defaultPref("security.ssl3.rsa_aes_256_gcm_sha384", false); // no PFS +defaultPref("security.ssl3.rsa_aes_128_sha", false); // no PFS +defaultPref("security.ssl3.rsa_aes_256_sha", false); // no PFS // ------------------------------------- // Control TLS versions // lockPref("security.tls.version.min", 3); // [DEFAULT: 3] @@ -933,7 +911,6 @@ lockPref("security.ssl3.rsa_aes_256_sha", false); // no PFS // ------------------------------------- // Disable HTTP Alternative Services [FF37+] // lockPref("network.http.altsvc.enabled", false); -// lockPref("network.http.altsvc.oe", false); // [DEFAULT: false FF94+] // ------------------------------------- // Disable website control over browser right-click context menu // lockPref("dom.event.contextmenu.enabled", false); @@ -985,46 +962,42 @@ defaultPref("dom.push.userAgentID", ""); // DON'T BOTHER: FINGERPRINTING // >>>>>>>>>>>>>>>>>>>>> // -// Disable APIs -lockPref("device.sensors.enabled", false); +// prefsCleaner: reset items useless for anti-fingerprinting +// lockPref("browser.zoom.siteSpecific", false); // lockPref("dom.enable_performance", false); // lockPref("dom.enable_resource_timing", false); -lockPref("dom.gamepad.enabled", false); -lockPref("dom.netinfo.enabled", false); // [DEFAULT: false NON-ANDROID: false ANDROID FF99+] -lockPref("dom.webaudio.enabled", false); -lockPref("dom.vibrator.enabled", false); -// ------------------------------------- -// Disable other -defaultPref("browser.display.use_document_fonts", 0); -// lockPref("browser.zoom.siteSpecific", false); -defaultPref("dom.w3c_touch_events.enabled", 1); // [BUG - Scroll doesn't work] -lockPref("media.navigator.enabled", false); -// lockPref("media.ondevicechange.enabled", false); -// lockPref("media.video_stats.enabled", false); -lockPref("media.webspeech.synth.enabled", false); -// lockPref("webgl.enable-debug-renderer-info", false); -// ------------------------------------- -// Spoof -defaultPref("dom.maxHardwareConcurrency", 2); // lockPref("font.system.whitelist", ""); // [HIDDEN PREF] // lockPref("general.appname.override", ""); // [HIDDEN PREF] // lockPref("general.appversion.override", ""); // [HIDDEN PREF] // lockPref("general.buildID.override", "20181001000000"); // [HIDDEN PREF] // lockPref("general.oscpu.override", ""); // [HIDDEN PREF] // lockPref("general.platform.override", ""); // [HIDDEN PREF] -defaultPref("general.useragent.override", "Mozilla/5.0 (Android 10; Mobile; rv:102.0) Gecko/102.0 Firefox/102.0"); // HIDDEN PREF +// lockPref("media.ondevicechange.enabled", false); +// lockPref("media.video_stats.enabled", false); // lockPref("ui.use_standins_for_native_colors", true); +// lockPref("webgl.enable-debug-renderer-info", false); +defaultPref("browser.display.use_document_fonts", 0); +defaultPref("dom.maxHardwareConcurrency", 2); +defaultPref("dom.w3c_touch_events.enabled", 1); // [BUG - Scroll doesn't work] +defaultPref("general.useragent.override", "Mozilla/5.0 (Android 10; Mobile; rv:102.0) Gecko/102.0 Firefox/102.0"); // HIDDEN PREF +lockPref("device.sensors.enabled", false); +lockPref("dom.gamepad.enabled", false); +lockPref("dom.netinfo.enabled", false); +lockPref("dom.vibrator.enabled", false); +lockPref("dom.webaudio.enabled", false); +lockPref("media.navigator.enabled", false); +lockPref("media.webspeech.synth.enabled", false); // // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> -// PERSONAL +// NON-PROJECT RELATED // >>>>>>>>>>>>>>>>>>>>> // // WELCOME & WHAT'S NEW NOTICES // -lockPref("browser.startup.homepage_override.mstone", "ignore"); // master switch -lockPref("startup.homepage_welcome_url", ""); -lockPref("startup.homepage_welcome_url.additional", ""); -lockPref("startup.homepage_override_url", ""); // What's New page after updates +defaultPref("browser.startup.homepage_override.mstone", "ignore"); // master switch +defaultPref("startup.homepage_welcome_url", ""); +defaultPref("startup.homepage_welcome_url.additional", ""); +defaultPref("startup.homepage_override_url", ""); // What's New page after updates // // WARNINGS // @@ -1055,12 +1028,7 @@ defaultPref("browser.search.update", false); // // APPEARANCE // -// lockPref("browser.download.autohideButton", false); // [FF57+] defaultPref("toolkit.legacyUserProfileCustomizations.stylesheets", true); // [FF68+] allow userChrome/userContent -// lockPref("ui.prefersReducedMotion", 1); // disable chrome animations [FF77+] [RESTART] [HIDDEN PREF] -// 0=no-preference, 1=reduce: with RFP this only affects chrome -// lockPref("ui.systemUsesDarkTheme", 1); // [FF67+] [HIDDEN PREF] -// 0=light, 1=dark: with RFP this only affects chrome // // CONTENT BEHAVIOR // @@ -1069,6 +1037,7 @@ defaultPref("clipboard.autocopy", false); // disable autocopy default [LINUX] defaultPref("layout.spellcheckDefault", 0); // 0=none, 1-multi-line, 2=multi-line & single-line // // FIREFOX HOME CONTENT +// defaultPref("browser.newtabpage.activity-stream.feeds.section.topstories", false); // Recommended by Pocket defaultPref("browser.newtabpage.activity-stream.section.highlights.includePocket", false); defaultPref("browser.newtabpage.activity-stream.feeds.topsites", false); @@ -1077,24 +1046,6 @@ defaultPref("browser.newtabpage.activity-stream.section.highlights.includeBookma defaultPref("browser.newtabpage.activity-stream.section.highlights.includeDownloads", false); defaultPref("browser.newtabpage.activity-stream.section.highlights.includeVisited", false); // -// HTML5 MEDIA AUTOPLAY -// -// defaultPref("media.autoplay.default", 5); // [FF63+] -// 0=Allow all, 1=Block non-muted media (default), 5=Block all -// defaultPref("media.autoplay.blocking_policy", 2); // disable autoplay if you interacted with the site [FF78+] -// 0=sticky (default), 1=transient, 2=user -// -// UX BEHAVIOR -// -// lockPref("browser.backspace_action", 2); // 0=previous page, 1=scroll up, 2=do nothing -// lockPref("browser.quitShortcut.disabled", true); // disable Ctrl-Q quit shortcut [LINUX] [MAC] [FF87+] -// lockPref("browser.tabs.closeWindowWithLastTab", false); -// lockPref("browser.tabs.loadBookmarksInTabs", true); // open bookmarks in a new tab [FF57+] -// lockPref("browser.urlbar.decodeURLsOnCopy", true); // [FF53+] -// lockPref("general.autoScroll", false); // middle-click enabling auto-scrolling [DEFAULT: false on Linux] -// lockPref("ui.key.menuAccessKey", 0); // disable alt key toggling the menu bar [RESTART] -// lockPref("view_source.tab", false); // view "page/selection source" in a new window [FF68+] -// // UX FEATURES // lockPref("browser.messaging-system.whatsNewPanel.enabled", false); // What's New toolbar icon [FF69+] @@ -1143,55 +1094,13 @@ defaultPref("webgl.enable-webgl2", false); // DEPRECATED / REMOVED / LEGACY / RENAMED // >>>>>>>>>>>>>>>>>>>>> // -// ESR91.x still uses all the following prefs +// ESR102.x still uses all the following prefs // -// FF93 -// Disable non-modern cipher suites -lockPref("security.ssl3.rsa_des_ede3_sha", false); // 3DES -// ------------------------------------- -// FF94 -// Limit font visibility (Windows, Mac, some Linux) [FF79+] -// lockPref("layout.css.font-visibility.level", 1); -// ------------------------------------- -// FF95 -// Disable location bar contextual suggestions [FF92+] -defaultPref("browser.urlbar.suggest.quicksuggest", false); -// ------------------------------------- -// FF96 -// Disable auto-INSTALLING Firefox updates via a background service [FF90+] [WINDOWS] -defaultPref("app.update.background.scheduling.enabled", false); -// ------------------------------------- -// FF97 -// Onions - replaced by new "allowlist" -// lockPref("dom.securecontext.whitelist_onions", true); -// ------------------------------------- -// FF99 -// Enforce CSP (Content Security Policy) -lockPref("security.csp.enable", true); // [DEFAULT: true] -// ------------------------------------- -// FF100 -// Disable HTTP2 -// lockPref("network.http.spdy.enabled", false); -// lockPref("network.http.spdy.enabled.deps", false); -// lockPref("network.http.spdy.enabled.http2", false); -// lockPref("network.http.spdy.websockets", false); // [FF65+] -// ------------------------------------- -// FF102 -// Set when Firefox should prompt for the primary password -// 0=once per session (default), 1=every time it's needed, 2=after n minutes -defaultPref("security.ask_for_password", 2); -// ------------------------------------- -// Set how long in minutes Firefox should remember the primary password -defaultPref("security.password_lifetime", 5); // [DEFAULT: 30] -// ------------------------------------- -// Enforce Local Storage Next Generation (LSNG) [FF65+] -defaultPref("dom.storage.next_gen", true); // [DEFAULT: true FF92+] -// ------------------------------------- // FF103 +// // Delete cookies and site data on exit - replaced by sanitizeOnShutdown -// 0=keep until they expire (default), 2=keep until you close Firefox defaultPref("network.cookie.lifetimePolicy", 2); -// ------------------------------------- +// ------------------------------------- // Disable SHA-1 certificates -defaultPref("security.pki.sha1_enforcement_level", 1); // [DEFAULT: 1 FF102+] +// defaultPref("security.pki.sha1_enforcement_level", 1); // [DEFAULT: 1] // \ No newline at end of file