Narsil
/
desktop_user.js
3
1
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update 'user.js'

This commit is contained in:
Narsil 2021-07-10 18:04:34 +00:00
parent cc5cf18c8d
commit 61a6234940
1 changed files with 24 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
user.js
View File

@ -527,9 +527,6 @@ user_pref("network.proxy.socks_remote_dns", true);
// Avoid the client to complete its handshake before starting the actual session
user_pref("security.ssl.enable_false_start", false);
// -------------------------------------
// Disable FTP [FF60+]
// user_pref("network.ftp.enabled", false); // [DEFAULT: false FF88+]
// -------------------------------------
// Disable using UNC (Uniform Naming Convention) paths [FF61+]
// [SETUP-CHROME] Can break extensions for profiles on network shares
// https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/26424 ***/
@ -680,6 +677,10 @@ user_pref("signon.formlessCapture.enabled", false);
// 1=don't allow cross-origin sub-resources to open HTTP authentication credentials dialogs
// 2=allow sub-resources to open HTTP authentication credentials dialogs (default)
user_pref("network.auth.subresource-http-auth-allow", 1);
// -------------------------------------
// Disable automatic authentication on Microsoft sites [FF91+] [WINDOWS]
// https://bugzilla.mozilla.org/buglist.cgi?bug_id=1695693,1719301 ***/
user_pref("network.http.windows-sso.enabled", false);
//
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
// CACHE ***/
@ -946,7 +947,7 @@ user_pref("security.insecure_connection_text.pbmode.enabled", true);
// >>>>>>>>>>>>>>>>>>>>>
// Disable websites choosing fonts (0=block, 1=allow)
// This can limit most (but not all) JS font enumeration which is a high entropy fingerprinting vector
// [WARNING] **DO NOT USE**: in FF80+ RFP covers this, and non-RFP users should use font vis
// [WARNING] DO NOT USE: in FF80+ RFP covers this, and non-RFP users should use font vis
// [SETTING] General>Language and Appearance>Fonts & Colors>Advanced>Allow pages to choose... ***/
user_pref("browser.display.use_document_fonts", 0);
// -------------------------------------
@ -968,7 +969,7 @@ user_pref("gfx.font_rendering.graphite.enabled", false);
// -------------------------------------
// Limit system font exposure to a whitelist [FF52+] [RESTART]
// If the whitelist is empty, then whitelisting is considered disabled and all fonts are allowed
// [WARNING] **DO NOT USE**: in FF80+ RFP covers this, and non-RFP users should use font vis
// [WARNING] DO NOT USE: in FF80+ RFP covers this, and non-RFP users should use font vis
// https://bugzilla.mozilla.org/1121643 ***/
// user_pref("font.system.whitelist", ""); // [HIDDEN PREF]
//
@ -1487,10 +1488,10 @@ user_pref("network.cookie.lifetimePolicy", 2);
// You are better off using an extension for more granular control ***/
// user_pref("dom.storage.enabled", false);
// -------------------------------------
// Enforce no offline cache storage (appCache)
// The API is easily fingerprinted, use the "storage" pref instead ***/
// Disable offline cache (appCache)
// [NOTE] In FF90+ the storage capability has been removed.
// [WARNING] The API is easily fingerprinted, do not disable ***/
// user_pref("browser.cache.offline.enable", false);
user_pref("browser.cache.offline.storage.enable", false); // [FF71+] [DEFAULT: false FF84+]
// -------------------------------------
// Disable service worker cache and cache storage
// [NOTE] We clear service worker cache on exiting Firefox
@ -1621,12 +1622,18 @@ user_pref("extensions.webextensions.identity.redirectDomain", "");
// Dynamically resizes the inner window by applying margins in stepped ranges
// If you use the dimension pref, then it will only apply those resolutions. The format is
// "width1xheight1, width2xheight2, ..." (e.g. "800x600, 1000x1000, 1600x900")
// [WARNING] The dimension pref is only meant for testing, and we recommend you DO NOT USE it
// [WARNING] DO NOT USE: the dimension pref is only meant for testing
// https://bugzilla.mozilla.org/1407366
// https://hg.mozilla.org/mozilla-central/rev/6d2d7856e468#l2.32 ***/
// user_pref("privacy.resistFingerprinting.letterboxing", true); // [HIDDEN PREF]
// user_pref("privacy.resistFingerprinting.letterboxing.dimensions", ""); // [HIDDEN PREF]
// -------------------------------------
// Experimental RFP [FF91+]
// [WARNING] DO NOT USE unless testing
// https://bugzilla.mozilla.org/1635603 ***/
// user_pref("privacy.resistFingerprinting.exemptedDomains", "*.example.invalid");
// user_pref("privacy.resistFingerprinting.testGranularityMask", 0);
// -------------------------------------
// Disable showing about:blank as soon as possible during startup [FF60+]
// When default true this no longer masks the RFP chrome resizing activity
// https://bugzilla.mozilla.org/1448423 ***/
@ -1881,5 +1888,13 @@ user_pref("security.mixed_content.block_object_subrequest", true);
// [NOTE] You can still override individual sites via site permissions
// https://bugzilla.mozilla.org/1682030 [underlying NPAPI code removed]
user_pref("plugin.state.flash", 0); // [DEFAULT: 1]
// -------------------------------------
// Disable FTP [FF60+]
// https://bugzilla.mozilla.org/1574475
// user_pref("network.ftp.enabled", false); // [DEFAULT: false FF88+]
// -------------------------------------
// Enforce no offline cache storage (appCache) [FF71+]
// https://bugzilla.mozilla.org/1694662
user_pref("browser.cache.offline.storage.enable", false); // [DEFAULT: false FF84+]
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
//