From d6550acec2ee25ee30d1cba2449a095569b9789b Mon Sep 17 00:00:00 2001 From: Narsil Date: Sun, 28 Feb 2021 14:27:43 -0500 Subject: [PATCH] Update 'user.js' --- user.js | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/user.js b/user.js index bcea519..fd4751d 100644 --- a/user.js +++ b/user.js @@ -542,6 +542,18 @@ user_pref("browser.fixup.alternate.enabled", false); // Display all parts of the url in the location bar ***/ user_pref("browser.urlbar.trimURLs", false); // ------------------------------------- +// Disable coloring of visited links - CSS history leak +// Bulk rapid history sniffing was mitigated in 2010. Slower and more expensive +// redraw timing attacks were largely mitigated in FF77+. Using RFP further hampers timing +// attacks. Don't forget clearing history on close. However, social engineering +// and advanced targeted timing attacks could still produce usable results +// https://developer.mozilla.org/docs/Web/CSS/Privacy_and_the_:visited_selector +// https://dbaron.org/mozilla/visited-privacy +// https://bugzilla.mozilla.org/1632765 +// https://earthlng.github.io/testpages/visited_links.html (see github wiki APPENDIX A on how to use) +// https://lcamtuf.blogspot.com/2016/08/css-mix-blend-mode-is-bad-for-keeping.html ***/ +user_pref("layout.css.visited_links_enabled", false); +// ------------------------------------- // Disable live search suggestions // [NOTE] Both must be true for the location bar to work // [SETUP-CHROME] Change these if you trust and use a privacy respecting search engine @@ -1007,13 +1019,13 @@ user_pref("media.gmp-provider.enabled", false); user_pref("media.gmp-gmpopenh264.enabled", false); // ------------------------------------- // Disable widevine CDM (Content Decryption Module) -// [SETUP-WEB] if you *need* CDM, e.g. Netflix, Amazon Prime, Hulu, whatever ***/ +// [SETUP-WEB] e.g. Netflix, Amazon Prime, Hulu, HBO, Disney+, Showtime, Starz, DirectTV user_pref("media.gmp-widevinecdm.enabled", false); user_pref("media.gmp-manager.url", ""); user_pref("media.gmp-manager.url.override", ""); // ------------------------------------- // Disable all DRM content (EME: Encryption Media Extension) -// [SETUP-WEB] if you *need* EME, e.g. Netflix, Amazon Prime, Hulu, whatever +// [SETUP-WEB] e.g. Netflix, Amazon Prime, Hulu, HBO, Disney+, Showtime, Starz, DirectTV // [SETTING] General>DRM Content>Play DRM-controlled content // https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next ***/ user_pref("media.eme.enabled", false);