Update 'user.js'

This commit is contained in:
Narsil 2021-02-28 14:27:43 -05:00
parent b2f7247792
commit d6550acec2
1 changed files with 14 additions and 2 deletions

16
user.js
View File

@ -542,6 +542,18 @@ user_pref("browser.fixup.alternate.enabled", false);
// Display all parts of the url in the location bar ***/
user_pref("browser.urlbar.trimURLs", false);
// -------------------------------------
// Disable coloring of visited links - CSS history leak
// Bulk rapid history sniffing was mitigated in 2010. Slower and more expensive
// redraw timing attacks were largely mitigated in FF77+. Using RFP further hampers timing
// attacks. Don't forget clearing history on close. However, social engineering
// and advanced targeted timing attacks could still produce usable results
// https://developer.mozilla.org/docs/Web/CSS/Privacy_and_the_:visited_selector
// https://dbaron.org/mozilla/visited-privacy
// https://bugzilla.mozilla.org/1632765
// https://earthlng.github.io/testpages/visited_links.html (see github wiki APPENDIX A on how to use)
// https://lcamtuf.blogspot.com/2016/08/css-mix-blend-mode-is-bad-for-keeping.html ***/
user_pref("layout.css.visited_links_enabled", false);
// -------------------------------------
// Disable live search suggestions
// [NOTE] Both must be true for the location bar to work
// [SETUP-CHROME] Change these if you trust and use a privacy respecting search engine
@ -1007,13 +1019,13 @@ user_pref("media.gmp-provider.enabled", false);
user_pref("media.gmp-gmpopenh264.enabled", false);
// -------------------------------------
// Disable widevine CDM (Content Decryption Module)
// [SETUP-WEB] if you *need* CDM, e.g. Netflix, Amazon Prime, Hulu, whatever ***/
// [SETUP-WEB] e.g. Netflix, Amazon Prime, Hulu, HBO, Disney+, Showtime, Starz, DirectTV
user_pref("media.gmp-widevinecdm.enabled", false);
user_pref("media.gmp-manager.url", "");
user_pref("media.gmp-manager.url.override", "");
// -------------------------------------
// Disable all DRM content (EME: Encryption Media Extension)
// [SETUP-WEB] if you *need* EME, e.g. Netflix, Amazon Prime, Hulu, whatever
// [SETUP-WEB] e.g. Netflix, Amazon Prime, Hulu, HBO, Disney+, Showtime, Starz, DirectTV
// [SETTING] General>DRM Content>Play DRM-controlled content
// https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next ***/
user_pref("media.eme.enabled", false);