Update 'user.js'

 Synced with Desktop version
 Synced all the buildIDs with Tor's ones
 Sanitized app.releaseNotesURL
️ Disabled Firefox Developer Tools
️ Disabled search suggestions prompt "blue" bar
️ Disabled ping to Mozilla for Man-in-the-Middle detection
️ Disabled deprecated TLS versions
️ Disabled all the WebAssembly remaining prefs
️ Disabled more telemetry | FF71+
ℹ️ Remove all the timeout prefs 
ℹ️ Reordered and renamed some prefs with better criteria
ℹ️ Moved some preferences from FF70+ into deprecated section (keeping them active for ESR68.x)
This commit is contained in:
quindecim 2019-12-04 16:55:28 -05:00
parent dcbca3051f
commit 42d26d118e
1 changed files with 115 additions and 46 deletions

159
user.js
View File

@ -146,7 +146,6 @@ user_pref("services.sync.prefs.sync.browser.formfill.enable", false); // [DESKTO
user_pref("services.sync.prefs.sync.browser.link.open_newwindow", false); // [DESKTOP] user_pref("services.sync.prefs.sync.browser.link.open_newwindow", false); // [DESKTOP]
user_pref("services.sync.prefs.sync.browser.newtabpage.enabled", false); // [DESKTOP] user_pref("services.sync.prefs.sync.browser.newtabpage.enabled", false); // [DESKTOP]
user_pref("services.sync.prefs.sync.browser.newtabpage.pinned", false); // [DESKTOP] user_pref("services.sync.prefs.sync.browser.newtabpage.pinned", false); // [DESKTOP]
user_pref("services.sync.prefs.sync.browser.offline-apps.notify", false); // [DESKTOP]
user_pref("services.sync.prefs.sync.browser.search.update", false); // [DESKTOP] user_pref("services.sync.prefs.sync.browser.search.update", false); // [DESKTOP]
user_pref("services.sync.prefs.sync.browser.startup.homepage", false); // [DESKTOP] user_pref("services.sync.prefs.sync.browser.startup.homepage", false); // [DESKTOP]
user_pref("services.sync.prefs.sync.browser.startup.page", false); // [DESKTOP] user_pref("services.sync.prefs.sync.browser.startup.page", false); // [DESKTOP]
@ -242,8 +241,6 @@ user_pref("services.sync.prefs.sync.privacy.fuzzyfox.clockgrainus", false); // [
user_pref("services.sync.prefs.sync.privacy.fuzzyfox.enabled", false); // [DESKTOP] user_pref("services.sync.prefs.sync.privacy.fuzzyfox.enabled", false); // [DESKTOP]
user_pref("services.sync.prefs.sync.signon.rememberSignons", false); // [DESKTOP] user_pref("services.sync.prefs.sync.signon.rememberSignons", false); // [DESKTOP]
user_pref("services.sync.serverURL", ""); // [DESKTOP] user_pref("services.sync.serverURL", ""); // [DESKTOP]
user_pref("services.sync.fxa.privacyURL", ""); // [DESKTOP]
user_pref("services.sync.fxa.termsURL", ""); // [DESKTOP]
user_pref("services.sync.lastversion", ""); // [DESKTOP] user_pref("services.sync.lastversion", ""); // [DESKTOP]
user_pref("sync.serverURL", ""); // [DEPRECATED] // [DESKTOP] user_pref("sync.serverURL", ""); // [DEPRECATED] // [DESKTOP]
user_pref("sync.jpake.serverURL", ""); // [DEPRECATED] // [DESKTOP] user_pref("sync.jpake.serverURL", ""); // [DEPRECATED] // [DESKTOP]
@ -259,7 +256,6 @@ user_pref("services.sync.prefs.sync.extensions.activeThemeID", false);
// https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_auto-update-checking // https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_auto-update-checking
user_pref("browser.search.update", false); user_pref("browser.search.update", false);
user_pref("browser.search.update.log", false); user_pref("browser.search.update.log", false);
// user_pref("browser.search.update.interval", 0);
// ------------------------------------- // -------------------------------------
// Pref : Tell the search service that we don't really expose the "current engine" // Pref : Tell the search service that we don't really expose the "current engine"
user_pref("browser.search.noCurrentEngine", true); // [DEFAULT: true] // [FENNEC] user_pref("browser.search.noCurrentEngine", true); // [DEFAULT: true] // [FENNEC]
@ -304,6 +300,7 @@ user_pref("toolkit.telemetry.ecosystemtelemetry.enabled", false); // [DESKTOP]
user_pref("security.protectionspopup.recordEventTelemetry", false); // [DESKTOP] user_pref("security.protectionspopup.recordEventTelemetry", false); // [DESKTOP]
user_pref("toolkit.telemetry.geckoview.streaming", false); user_pref("toolkit.telemetry.geckoview.streaming", false);
user_pref("toolkit.telemetry.isGeckoViewMode", false); user_pref("toolkit.telemetry.isGeckoViewMode", false);
user_pref("toolkit.telemetry.testing.overrideProductsCheck", false);
// ------------------------------------- // -------------------------------------
// Pref : Disable Telemetry Coverage // Pref : Disable Telemetry Coverage
// https://blog.mozilla.org/data/2018/08/20/effectively-measuring-search-in-firefox/ // https://blog.mozilla.org/data/2018/08/20/effectively-measuring-search-in-firefox/
@ -370,7 +367,6 @@ user_pref("lightweightThemes.persisted.footerURL", false); // [DESKTOP]
user_pref("lightweightThemes.recommendedThemes", ""); // [DESKTOP] user_pref("lightweightThemes.recommendedThemes", ""); // [DESKTOP]
// ------------------------------------- // -------------------------------------
// Pref : Disable Studies and SHIELD // Pref : Disable Studies and SHIELD
// [NOTE] This pref has no effect when Health Reports are disabled
user_pref("app.shield.optoutstudies.enabled", false); // [DESKTOP] user_pref("app.shield.optoutstudies.enabled", false); // [DESKTOP]
// ------------------------------------- // -------------------------------------
// Pref : Disable backlogged Crash Reports // Pref : Disable backlogged Crash Reports
@ -389,10 +385,13 @@ user_pref("extensions.getAddons.discovery.api_url", ""); // [DESKTOP]
user_pref("extensions.recommendations.privacyPolicyUrl", ""); user_pref("extensions.recommendations.privacyPolicyUrl", "");
user_pref("extensions.recommendations.themeRecommendationUrl", ""); user_pref("extensions.recommendations.themeRecommendationUrl", "");
// ------------------------------------- // -------------------------------------
// Pref : Disable report extension option in about:addons // Pref : Disable extension's report option in about:addons
user_pref("extensions.htmlaboutaddons.enabled", false); user_pref("extensions.htmlaboutaddons.enabled", false);
user_pref("extensions.abuseReport.enabled", false); user_pref("extensions.abuseReport.enabled", false);
user_pref("extensions.abuseReport.url", ""); user_pref("extensions.abuseReport.url", "");
user_pref("extensions.abuseReport.amoDetailsURL", "");
user_pref("extensions.abuseReport.amWebAPI.enabled", false);
user_pref("extensions.abuseReport.openDialog", false);
// ------------------------------------- // -------------------------------------
// Pref : Disable Firefox Hello metrics collection // Pref : Disable Firefox Hello metrics collection
// https://groups.google.com/d/topic/mozilla.dev.platform/nyVkCx-_sFw/discussion // https://groups.google.com/d/topic/mozilla.dev.platform/nyVkCx-_sFw/discussion
@ -410,15 +409,21 @@ user_pref("browser.contentblocking.report.manage_devices.url", ""); // [DESKTOP]
user_pref("browser.contentblocking.report.monitor.enabled", false); // [DESKTOP] user_pref("browser.contentblocking.report.monitor.enabled", false); // [DESKTOP]
user_pref("browser.contentblocking.report.monitor.how_it_works.url", ""); // [DESKTOP] user_pref("browser.contentblocking.report.monitor.how_it_works.url", ""); // [DESKTOP]
user_pref("browser.contentblocking.report.monitor.sign_in_url", ""); // [DESKTOP] user_pref("browser.contentblocking.report.monitor.sign_in_url", ""); // [DESKTOP]
user_pref("browser.contentblocking.report.monitor.url", ""); // [DESKTOP]
user_pref("browser.contentblocking.report.proxy.enabled", false); // [DESKTOP] user_pref("browser.contentblocking.report.proxy.enabled", false); // [DESKTOP]
user_pref("browser.contentblocking.report.proxy_extension.url", ""); // [DESKTOP] user_pref("browser.contentblocking.report.proxy_extension.url", ""); // [DESKTOP]
user_pref("browser.contentblocking.report.social.url", ""); // [DESKTOP] user_pref("browser.contentblocking.report.social.url", ""); // [DESKTOP]
user_pref("browser.contentblocking.report.tracker.url", ""); // [DESKTOP] user_pref("browser.contentblocking.report.tracker.url", ""); // [DESKTOP]
user_pref("browser.contentblocking.allowlist.annotations.enabled", false); // [FENNEC]
user_pref("browser.contentblocking.allowlist.storage.enabled", false); // [FENNEC]
// ------------------------------------- // -------------------------------------
// Pref : Disable send content blocking log to about:protections // Pref : Disable send content blocking log to about:protections
// https://bugzilla.mozilla.org/show_bug.cgi?id=1549832 // https://bugzilla.mozilla.org/show_bug.cgi?id=1549832
user_pref("browser.contentblocking.database.enabled", false); user_pref("browser.contentblocking.database.enabled", false);
// ------------------------------------- // -------------------------------------
// Pref : Disable celebrating milestone toast when certain numbers of trackers are blocked
user_pref("browser.contentblocking.cfr-milestone.enabled", false); // [DESKTOP]
// -------------------------------------
// Pref : Onboarding tour disable because of included telemetry // Pref : Onboarding tour disable because of included telemetry
// [NOTE] This setting is just in case it comeback // [NOTE] This setting is just in case it comeback
user_pref("browser.onboarding.notification.finished", true); // [DESKTOP] // [DEPRECATED] user_pref("browser.onboarding.notification.finished", true); // [DESKTOP] // [DEPRECATED]
@ -446,8 +451,8 @@ user_pref("extensions.screenshots.upload-disabled", true); // [DESKTOP]
// https://support.mozilla.org/en-US/kb/how-do-i-use-firefox-spell-checker // https://support.mozilla.org/en-US/kb/how-do-i-use-firefox-spell-checker
user_pref("layout.spellcheckDefault", 0); // [DESKTOP] user_pref("layout.spellcheckDefault", 0); // [DESKTOP]
// ------------------------------------- // -------------------------------------
// Pref : Disable Firefox internal page warnings // Pref : Enable Firefox internal pages and disable the related warnings
user_pref("network.warnOnAboutNetworking", false); user_pref("general.aboutConfig.enable", true);
user_pref("general.warnOnAboutConfig", false); user_pref("general.warnOnAboutConfig", false);
user_pref("browser.aboutConfig.showWarning", false); // [DESKTOP] user_pref("browser.aboutConfig.showWarning", false); // [DESKTOP]
// ------------------------------------- // -------------------------------------
@ -469,6 +474,10 @@ user_pref("full-screen-api.warning.timeout", 0);
// https://git.sny.no/gecko/commit/?id=5701a142f2a5e89b1b716e0edec0f18d5e513678 // https://git.sny.no/gecko/commit/?id=5701a142f2a5e89b1b716e0edec0f18d5e513678
user_pref("media.webvtt.debug.logging", false); user_pref("media.webvtt.debug.logging", false);
user_pref("media.webvtt.testing.events", false); user_pref("media.webvtt.testing.events", false);
// -------------------------------------
// Pref : Disable Firefox Developer Tools
// https://developer.mozilla.org/en-US/docs/Tools
user_pref("devtools.enabled", false);
// //
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
// Section : IJWY To Shut Up // Section : IJWY To Shut Up
@ -481,7 +490,7 @@ user_pref("app.channelURL", ""); // [FENNEC]
user_pref("app.creditsURL", ""); // [FENNEC] user_pref("app.creditsURL", ""); // [FENNEC]
user_pref("app.faqURL", ""); // [FENNEC] user_pref("app.faqURL", ""); // [FENNEC]
user_pref("app.privacyURL", ""); // [FENNEC] user_pref("app.privacyURL", ""); // [FENNEC]
user_pref("app.releaseNotesURL", ""); user_pref("app.releaseNotesURL", "https://www.mozilla.org/en-US/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=whatsnew"); // [URL SANITIZED]
user_pref("app.support.baseURL", ""); user_pref("app.support.baseURL", "");
user_pref("app.supportURL", ""); // [FENNEC] user_pref("app.supportURL", ""); // [FENNEC]
user_pref("app.vendorURL", ""); // [DESKTOP] user_pref("app.vendorURL", ""); // [DESKTOP]
@ -502,6 +511,7 @@ user_pref("extensions.getAddons.themes.browseURL", ""); // [DESKTOP]
user_pref("security.content.signature.root_hash", ""); user_pref("security.content.signature.root_hash", "");
user_pref("identity.mobilepromo.android", ""); // [DESKTOP] user_pref("identity.mobilepromo.android", ""); // [DESKTOP]
user_pref("identity.mobilepromo.ios", ""); // [DESKTOP] user_pref("identity.mobilepromo.ios", ""); // [DESKTOP]
user_pref("identity.sendtabpromo.url", ""); // [DESKTOP]
user_pref("toolkit.datacollection.infoURL", ""); // [DESKTOP] user_pref("toolkit.datacollection.infoURL", ""); // [DESKTOP]
user_pref("dom.keyboardevent.keypress.hack.dispatch_non_printable_keys", ""); user_pref("dom.keyboardevent.keypress.hack.dispatch_non_printable_keys", "");
user_pref("dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode", ""); user_pref("dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode", "");
@ -538,7 +548,6 @@ user_pref("browser.translation.ui.show", false); // [DESKTOP]
// ------------------------------------- // -------------------------------------
// Pref : Disable useragent updates and site specific overrides // Pref : Disable useragent updates and site specific overrides
user_pref("general.useragent.updates.enabled", false); // [FENNEC] user_pref("general.useragent.updates.enabled", false); // [FENNEC]
user_pref("general.useragent.site_specific_overrides", false); // [DESKTOP]
user_pref("general.useragent.updates.url", ""); // [FENNEC] user_pref("general.useragent.updates.url", ""); // [FENNEC]
// ------------------------------------- // -------------------------------------
// Pref : Decrease vendor useragent info leakage to Mozilla // Pref : Decrease vendor useragent info leakage to Mozilla
@ -555,6 +564,10 @@ user_pref("mailnews.mx_service_url", ""); // [DESKTOP]
user_pref("browser.newtabpage.activity-stream.default.sites", ""); // [DESKTOP] user_pref("browser.newtabpage.activity-stream.default.sites", ""); // [DESKTOP]
user_pref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.havePinned", ""); // [DESKTOP] user_pref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.havePinned", ""); // [DESKTOP]
user_pref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.searchEngines", ""); // [DESKTOP] user_pref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.searchEngines", ""); // [DESKTOP]
// -------------------------------------
// Pref : Disable report browser errors in Nightly to Mozilla
// https://bugzilla.mozilla.org/show_bug.cgi?id=1426482
user_pref("browser.chrome.errorReporter.infoURL", "");
// //
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
// Section : Miscellaneous // Section : Miscellaneous
@ -671,16 +684,12 @@ user_pref("gfx.font_rendering.opentype_svg.enabled", false);
// Pref : Ensure you have a security delay when installing add-ons (milliseconds) // Pref : Ensure you have a security delay when installing add-ons (milliseconds)
user_pref("security.dialog_enable_delay", 700); user_pref("security.dialog_enable_delay", 700);
// ------------------------------------- // -------------------------------------
// Pref : Disable WebIDE to prevent remote debugging and ADB extension download // Pref : Disable ADB extension download
// https://developer.mozilla.org/docs/Tools/WebIDE // https://developer.mozilla.org/docs/Tools/WebIDE
// https://trac.torproject.org/projects/tor/ticket/16222 // https://trac.torproject.org/projects/tor/ticket/16222
user_pref("devtools.debugger.remote-enabled", false); user_pref("devtools.debugger.remote-enabled", false);
user_pref("devtools.webide.enabled", false); // [DESKTOP]
user_pref("devtools.webide.autoinstallADBExtension", false); // [DESKTOP]
user_pref("devtools.remote.adb.extensionURL", ""); // [DESKTOP] user_pref("devtools.remote.adb.extensionURL", ""); // [DESKTOP]
user_pref("devtools.remote.adb.extensionID", ""); // [DESKTOP] user_pref("devtools.remote.adb.extensionID", ""); // [DESKTOP]
user_pref("devtools.webide.adaptersAddonURL", ""); // [DESKTOP]
user_pref("devtools.webide.templatesURL", ""); // [DESKTOP]
// ------------------------------------- // -------------------------------------
// Pref : Force local debugging // Pref : Force local debugging
// https://developer.mozilla.org/en-US/docs/Tools/Remote_Debugging/Debugging_Firefox_Desktop // https://developer.mozilla.org/en-US/docs/Tools/Remote_Debugging/Debugging_Firefox_Desktop
@ -724,12 +733,14 @@ user_pref("webchannel.allowObject.urlWhitelist", "");
// [NOTE] May cause black on black for elements with undefined colors // [NOTE] May cause black on black for elements with undefined colors
// https://bugzilla.mozilla.org/buglist.cgi?bug_id=232227,1330876 // https://bugzilla.mozilla.org/buglist.cgi?bug_id=232227,1330876
// user_pref("ui.use_native_colors", true); // user_pref("ui.use_native_colors", true);
// -------------------------------------
// Pref : Discourage downloading to desktop (0=desktop 1=downloads 2=last used) // Pref : Discourage downloading to desktop (0=desktop 1=downloads 2=last used)
user_pref("browser.download.folderList", 2); user_pref("browser.download.folderList", 2);
// ------------------------------------- // -------------------------------------
// Pref : Enforce user interaction for security by always asking the user where to download // Pref : Enforce user interaction, for security, by always asking the user where to download and then forget
// [FENNEC] Fix for images not downloading // [FENNEC] Fix for downloading issues
user_pref("browser.download.useDownloadDir", true); // user_pref("browser.download.useDownloadDir", false);
user_pref("browser.download.lastDir", ""); // [DESKTOP]
// ------------------------------------- // -------------------------------------
// Pref : Disable adding downloads to the system's "recent documents" list // Pref : Disable adding downloads to the system's "recent documents" list
user_pref("browser.download.manager.addToRecentDocs", false); user_pref("browser.download.manager.addToRecentDocs", false);
@ -750,7 +761,8 @@ user_pref("extensions.autoDisableScopes", 15); // [DEFAULT: 15]
// Pref : Enable warning when websites try to install add-ons // Pref : Enable warning when websites try to install add-ons
user_pref("xpinstall.whitelist.required", true); // [DEFAULT: true] user_pref("xpinstall.whitelist.required", true); // [DEFAULT: true]
// ------------------------------------- // -------------------------------------
// Pref : Enable CSP (Content Security Policy) // Pref : Enforce CSP (Content Security Policy)
// [WARNING] CSP is a very important and widespread security feature. Don't disable it!
// https://developer.mozilla.org/docs/Web/HTTP/CSP // https://developer.mozilla.org/docs/Web/HTTP/CSP
user_pref("security.csp.enable", true); // [DEFAULT: true] user_pref("security.csp.enable", true); // [DEFAULT: true]
// ------------------------------------- // -------------------------------------
@ -938,6 +950,12 @@ user_pref("javascript.options.native_regexp", false);
// https://en.wikipedia.org/wiki/WebAssembly // https://en.wikipedia.org/wiki/WebAssembly
// https://trac.torproject.org/projects/tor/ticket/21549 // https://trac.torproject.org/projects/tor/ticket/21549
user_pref("javascript.options.wasm", false); user_pref("javascript.options.wasm", false);
user_pref("javascript.options.wasm_baselinejit", false);
user_pref("javascript.options.wasm_cranelift", false);
user_pref("javascript.options.wasm_gc", false);
user_pref("javascript.options.wasm_ionjit", false);
user_pref("javascript.options.wasm_trustedprincipals", false);
user_pref("javascript.options.wasm_verbose", false);
// ------------------------------------- // -------------------------------------
// Pref : Disable Intersection Observer API // Pref : Disable Intersection Observer API
// Almost a year to complete, three versions late to stable (as default false), number #1 cause of crashes in nightly numerous times, and is (primarily) an ad network API for "ad viewability checks" down to a pixel level // Almost a year to complete, three versions late to stable (as default false), number #1 cause of crashes in nightly numerous times, and is (primarily) an ad network API for "ad viewability checks" down to a pixel level
@ -959,8 +977,8 @@ user_pref("dom.targetBlankNoOpener.enabled", true); // [DEFAULT: false]
// Value taken from Tor Browser for Android // Value taken from Tor Browser for Android
// https://bugzilla.mozilla.org/show_bug.cgi?id=583181 // https://bugzilla.mozilla.org/show_bug.cgi?id=583181
user_pref("browser.startup.homepage_override.buildID", "20100101"); user_pref("browser.startup.homepage_override.buildID", "20100101");
user_pref("extensions.lastAppBuildId", "20190402010101"); user_pref("extensions.lastAppBuildId", "20190402030101");
user_pref("media.gmp-manager.buildID", "20190402010101"); user_pref("media.gmp-manager.buildID", "20190402030101");
user_pref("browser.sessionstore.upgradeBackup.latestBuildID", ""); // [DESKTOP] user_pref("browser.sessionstore.upgradeBackup.latestBuildID", ""); // [DESKTOP]
user_pref("general.buildID.override", "20100101"); user_pref("general.buildID.override", "20100101");
// ------------------------------------- // -------------------------------------
@ -1068,7 +1086,9 @@ user_pref("browser.sessionhistory.max_entries", 20); // [DEFAULT: 50]
user_pref("layout.css.visited_links_enabled", false); user_pref("layout.css.visited_links_enabled", false);
// ------------------------------------- // -------------------------------------
// Pref : Disable search suggestions in the search bar // Pref : Disable search suggestions in the search bar
user_pref("browser.search.suggest.enabled", false); // [DESKTOP] user_pref("browser.search.suggest.enabled", false);
user_pref("browser.search.suggest.enabled.private", false);
user_pref("browser.search.suggest.prompted", true); // [FENNEC]
// ------------------------------------- // -------------------------------------
// Pref : Disable "Show search suggestions in location bar results" // Pref : Disable "Show search suggestions in location bar results"
user_pref("browser.urlbar.suggest.searches", false); // [DESKTOP] user_pref("browser.urlbar.suggest.searches", false); // [DESKTOP]
@ -1218,6 +1238,14 @@ user_pref("toolkit.startup.max_resumed_crashes", -1); // [DESKTOP]
// Pref : Force Encrypted Server Name Indication (eSNI) for TLS 1.3 if TRR/DoH is enabled // Pref : Force Encrypted Server Name Indication (eSNI) for TLS 1.3 if TRR/DoH is enabled
// [NOTE] I don't encourage DoH (but it is a useful and valid mechanism for those who need it) // [NOTE] I don't encourage DoH (but it is a useful and valid mechanism for those who need it)
user_pref("network.security.esni.enabled", true); user_pref("network.security.esni.enabled", true);
// -------------------------------------
// Pref : Disable ping to Mozilla for Man-in-the-Middle detection
// https://blog.torproject.org/new-release-tor-browser-901
user_pref("security.certerrors.mitm.priming.enabled", false); // [DESKTOP]
user_pref("security.certerrors.mitm.priming.endpoint", ""); // [DESKTOP]
user_pref("security.pki.mitm_canary_issuer", "");
user_pref("security.pki.mitm_canary_issuer.enabled", false);
user_pref("security.pki.mitm_detected", false);
// //
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
// Section : Block Implicit Outbound // Section : Block Implicit Outbound
@ -1230,7 +1258,7 @@ user_pref("network.prefetch-next", false);
// Pref : Disable DNS prefetching // Pref : Disable DNS prefetching
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Controlling_DNS_prefetching // https://developer.mozilla.org/en-US/docs/Web/HTTP/Controlling_DNS_prefetching
user_pref("network.dns.disablePrefetch", true); user_pref("network.dns.disablePrefetch", true);
user_pref("network.dns.disablePrefetchFromHTTPS", true); // [HIDDEN PREF] user_pref("network.dns.disablePrefetchFromHTTPS", true); // [HIDDEN PREF ESR] [DEFAULT: true]
// ------------------------------------- // -------------------------------------
// Pref : Disable pinging URIs specified in HTML <a> ping= attributes // Pref : Disable pinging URIs specified in HTML <a> ping= attributes
user_pref("browser.send_pings", false); user_pref("browser.send_pings", false);
@ -1315,19 +1343,19 @@ user_pref("network.negotiate-auth.allow-insecure-ntlm-v1", false); // [DESKTOP]
// Section : HTTPS (SSL/TLS / OCSP / Certs / HPKP / Ciphers) // Section : HTTPS (SSL/TLS / OCSP / Certs / HPKP / Ciphers)
// >>>>>>>>>>>>>>>>>>>> // >>>>>>>>>>>>>>>>>>>>
// Pref : Disable old SSL/TLS "insecure" renegotiation (vulnerable to a MiTM attack) // Pref : Disable old SSL/TLS "insecure" renegotiation (vulnerable to a MiTM attack)
// [SETUP-WEB] <2% of secure sites do NOT support the newer "secure" renegotiation
// https://wiki.mozilla.org/Security:Renegotiation // https://wiki.mozilla.org/Security:Renegotiation
// https://www.ssllabs.com/ssl-pulse/
user_pref("security.ssl.require_safe_negotiation", true); user_pref("security.ssl.require_safe_negotiation", true);
// ------------------------------------- // -------------------------------------
// Pref : Control TLS versions with min and max // Pref : Control TLS versions with min and max
// 1=TLS 1.0, 2=TLS 1.1, 3=TLS 1.2, 4=TLS 1.3 // 1=TLS 1.0, 2=TLS 1.1, 3=TLS 1.2, 4=TLS 1.3
// [NOTE] Jul-2017: Telemetry indicates approx 2% of TLS web traffic uses 1.0 or 1.1 // [NOTE] Jul-2017: Telemetry indicates approx 2% of TLS web traffic uses 1.0 or 1.1
// https://www.ssl.com/how-to/turn-off-ssl-3-0-and-tls-1-0-in-your-browser/ // https://www.ssllabs.com/ssl-pulse/
// archived: https://archive.is/hY2Mm
user_pref("security.tls.version.min", 3); user_pref("security.tls.version.min", 3);
user_pref("security.tls.version.max", 4); user_pref("security.tls.version.max", 4);
// ------------------------------------- // -------------------------------------
// Pref : Disable deprecated TLS versions
user_pref("security.tls.version.enable-deprecated", false);
// -------------------------------------
// Pref : Disable SSL Error Reporting // Pref : Disable SSL Error Reporting
// https://firefox-source-docs.mozilla.org/browser/base/sslerrorreport/preferences.html // https://firefox-source-docs.mozilla.org/browser/base/sslerrorreport/preferences.html
user_pref("security.ssl.errorReporting.enabled", false); user_pref("security.ssl.errorReporting.enabled", false);
@ -1595,6 +1623,7 @@ user_pref("security.password_lifetime", 1); // [DEFAULT: 30]
// NOTE] Username & password is still available when you enter the field // NOTE] Username & password is still available when you enter the field
user_pref("signon.autofillForms", false); user_pref("signon.autofillForms", false);
user_pref("signon.autofillForms.autocompleteOff", true); user_pref("signon.autofillForms.autocompleteOff", true);
user_pref("signon.showAutoCompleteOrigins", false);
// ------------------------------------- // -------------------------------------
// Pref : Disable websites autocomplete // Pref : Disable websites autocomplete
// Don't let sites dictate use of saved logins and passwords. // Don't let sites dictate use of saved logins and passwords.
@ -1680,7 +1709,7 @@ user_pref("browser.cache.disk.smart_size.first_run", false);
// ------------------------------------- // -------------------------------------
// Pref : Disable memory cache // Pref : Disable memory cache
// user_pref("browser.cache.memory.enable", false); // user_pref("browser.cache.memory.enable", false);
// user_pref("browser.cache.memory.capacity", 0); // user_pref("browser.cache.memory.capacity", 0); // [HIDDEN PREF ESR]
// ------------------------------------- // -------------------------------------
// Pref : Disable fastback cache // Pref : Disable fastback cache
// To improve performance when pressing back/forward Firefox stores visited pages so they don't have to be re-parsed. This is not the same as memory cache. // To improve performance when pressing back/forward Firefox stores visited pages so they don't have to be re-parsed. This is not the same as memory cache.
@ -1719,7 +1748,7 @@ user_pref("browser.formfill.expire_days", 0);
user_pref("browser.shell.shortcutFavicons", false); // [DESKTOP] user_pref("browser.shell.shortcutFavicons", false); // [DESKTOP]
// ------------------------------------- // -------------------------------------
// Pref : Display "insecure" icon and "Not Secure" text on HTTP sites // Pref : Display "insecure" icon and "Not Secure" text on HTTP sites
user_pref("security.insecure_connection_icon.enabled", true); // [DESKTOP] user_pref("security.insecure_connection_icon.enabled", true); // [DESKTOP] [DEFAULT: true]
user_pref("security.insecure_connection_text.enabled", true); // [DESKTOP] user_pref("security.insecure_connection_text.enabled", true); // [DESKTOP]
user_pref("security.insecure_connection_icon.pbmode.enabled", true); // [DESKTOP] user_pref("security.insecure_connection_icon.pbmode.enabled", true); // [DESKTOP]
user_pref("security.insecure_connection_text.pbmode.enabled", true); // [DESKTOP] user_pref("security.insecure_connection_text.pbmode.enabled", true); // [DESKTOP]
@ -1841,6 +1870,7 @@ user_pref("media.gmp-manager.updateEnabled", false); // [DESKTOP]
user_pref("media.gmp.trial-create.enabled", false); // [WINDOWS] // [DESKTOP] user_pref("media.gmp.trial-create.enabled", false); // [WINDOWS] // [DESKTOP]
// ------------------------------------- // -------------------------------------
// Pref : Disable all DRM content (EME: Encryption Media Extension) // Pref : Disable all DRM content (EME: Encryption Media Extension)
// [NOTE] if you need CDM, e.g. Netflix, Amazon Prime, Hulu, whatever
// https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next // https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next
user_pref("media.eme.enabled", false); user_pref("media.eme.enabled", false);
// ------------------------------------- // -------------------------------------
@ -1851,6 +1881,7 @@ user_pref("media.gmp-gmpopenh264.autoupdate", false); // [DESKTOP]
user_pref("media.gmp-gmpopenh264.visible", false); user_pref("media.gmp-gmpopenh264.visible", false);
// ------------------------------------- // -------------------------------------
// Pref : Disable widevine CDM (Content Decryption Module) // Pref : Disable widevine CDM (Content Decryption Module)
// [NOTE] if you need CDM, e.g. Netflix, Amazon Prime, Hulu, whatever
user_pref("media.gmp-widevinecdm.enabled", false); // [DESKTOP] user_pref("media.gmp-widevinecdm.enabled", false); // [DESKTOP]
user_pref("media.gmp-widevinecdm.visible", false); // [DESKTOP] user_pref("media.gmp-widevinecdm.visible", false); // [DESKTOP]
user_pref("media.mediadrm-widevinecdm.visible", false); // [DEFAULT: true] // [FENNEC] user_pref("media.mediadrm-widevinecdm.visible", false); // [DEFAULT: true] // [FENNEC]
@ -1927,7 +1958,7 @@ user_pref("urlclassifier.trackingWhitelistTable", "");
// ------------------------------------- // -------------------------------------
// Pref : Decrease system information leakage to Mozilla blocklist update servers // Pref : Decrease system information leakage to Mozilla blocklist update servers
// https://trac.torproject.org/projects/tor/ticket/16931 // https://trac.torproject.org/projects/tor/ticket/16931
// https://www.reddit.com/r/firefox/comments/9v5lue/firefox_tip_sanitize_firefox_blocklist_url_so_it/ // https://old.reddit.com/r/firefox/comments/9v5lue/firefox_tip_sanitize_firefox_blocklist_url_so_it/
user_pref("extensions.blocklist.url", ""); // [URL SANITIZED: https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%20/%20/] user_pref("extensions.blocklist.url", ""); // [URL SANITIZED: https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%20/%20/]
// ------------------------------------- // -------------------------------------
// Pref : Opt-out of add-on metadata updates // Pref : Opt-out of add-on metadata updates
@ -1982,7 +2013,6 @@ user_pref("browser.safebrowsing.provider.mozilla.nextupdatetime", "");
user_pref("browser.safebrowsing.provider.mozilla.pver", ""); user_pref("browser.safebrowsing.provider.mozilla.pver", "");
user_pref("browser.safebrowsing.provider.mozilla.updateURL", ""); user_pref("browser.safebrowsing.provider.mozilla.updateURL", "");
user_pref("browser.safebrowsing.reportPhishURL", ""); user_pref("browser.safebrowsing.reportPhishURL", "");
// user_pref("browser.safebrowsing.downloads.remote.timeout_ms", 0);
// ------------------------------------- // -------------------------------------
// Pref : Disable passive Tracking Protection // Pref : Disable passive Tracking Protection
// Passive TP annotates channels to lower the priority of network loads for resources on the tracking protection list. // Passive TP annotates channels to lower the priority of network loads for resources on the tracking protection list.
@ -2086,7 +2116,7 @@ user_pref("extensions.formautofill.heuristics.enabled", false); // [DESKTOP]
// user_pref("network.cookie.lifetimePolicy", 2); // user_pref("network.cookie.lifetimePolicy", 2);
// ------------------------------------- // -------------------------------------
// Pref : Disable 3rd-party cookies and site-data // Pref : Disable 3rd-party cookies and site-data
// 0=(Allow) cookies and site data, 1=(Block) All third-party cookies, 2=(Block) All cookies, 3=(Block) Cookies from unvisited sites, 4=(Block) Third-party trackers // 0=(Allow) cookies and site data, 1=(Block) All third-party cookies, 2=(Block) All cookies, 3=(Block) Cookies from unvisited websites, 4=(Block) Cross-site and social media trackers
// [NOTE] Can breaks payment gateways // [NOTE] Can breaks payment gateways
user_pref("network.cookie.cookieBehavior", 1); user_pref("network.cookie.cookieBehavior", 1);
// ------------------------------------- // -------------------------------------
@ -2122,16 +2152,10 @@ user_pref("network.cookie.same-site.enabled", true); // [DEFAULT: true]
// user_pref("dom.indexedDB.enabled", false); // [DEFAULT: true] // user_pref("dom.indexedDB.enabled", false); // [DEFAULT: true]
// ------------------------------------- // -------------------------------------
// Pref : Do not download URLs for the offline cache // Pref : Do not download URLs for the offline cache
user_pref("browser.cache.offline.storage.enable", false);
user_pref("browser.cache.offline.enable", false); user_pref("browser.cache.offline.enable", false);
user_pref("browser.cache.offline.capacity", 0); user_pref("browser.cache.offline.capacity", 0);
// ------------------------------------- // -------------------------------------
// Pref : Disable offline cache on insecure sites
// https://blog.mozilla.org/security/2018/02/12/restricting-appcache-secure-contexts/
user_pref("browser.cache.offline.insecure.enable", false);
// -------------------------------------
// Pref : Display a notification bar when websites offer data for offline use
user_pref("browser.offline-apps.notify", false); // [DEFAULT: true]
// -------------------------------------
// Pref : Disable service workers cache and cache storage // Pref : Disable service workers cache and cache storage
// https://w3c.github.io/ServiceWorker/#privacy // https://w3c.github.io/ServiceWorker/#privacy
// user_pref("dom.caches.enabled", false); // user_pref("dom.caches.enabled", false);
@ -2147,11 +2171,6 @@ user_pref("dom.storageManager.enabled", false);
// https://developer.mozilla.org/en-US/docs/Web/API/Storage_Access_API // https://developer.mozilla.org/en-US/docs/Web/API/Storage_Access_API
user_pref("dom.storage_access.enabled", false); user_pref("dom.storage_access.enabled", false);
// ------------------------------------- // -------------------------------------
// Pref : Enforce websites to ask to store data for offline use
// https://support.mozilla.org/questions/1098540
// https://bugzilla.mozilla.org/959985
user_pref("offline-apps.allow_by_default", false); // [DEFAULT: true]
// -------------------------------------
// Pref : Disable download history // Pref : Disable download history
user_pref("browser.download.manager.retention", 0); // [DESKTOP] user_pref("browser.download.manager.retention", 0); // [DESKTOP]
// ------------------------------------- // -------------------------------------
@ -2396,7 +2415,7 @@ user_pref("dom.network.enabled", false); // [DESKTOP]
// Section : UI (User Interface) // Section : UI (User Interface)
// >>>>>>>>>>>>>>>>>>>>> // >>>>>>>>>>>>>>>>>>>>>
// Pref : Disable third-party cookie UI // Pref : Disable third-party cookie UI
// user_pref("browser.contentblocking.rejecttrackers.ui.enabled", false); // [DESKTOP] user_pref("browser.contentblocking.rejecttrackers.ui.enabled", false);
// ------------------------------------- // -------------------------------------
// Pref : Disable tracking protection UI list editing under preferences // Pref : Disable tracking protection UI list editing under preferences
// user_pref("browser.contentblocking.trackingprotection.ui.enabled", false); // [DESKTOP] // user_pref("browser.contentblocking.trackingprotection.ui.enabled", false); // [DESKTOP]
@ -2546,3 +2565,53 @@ user_pref("signon.management.page.feedbackURL", "");
// Pref : Use APP locale over OS locale in regional preferences // Pref : Use APP locale over OS locale in regional preferences
// https://bugzilla.mozilla.org/buglist.cgi?bug_id=1379420,1364789 // https://bugzilla.mozilla.org/buglist.cgi?bug_id=1379420,1364789
// user_pref("intl.regional_prefs.use_os_locales", false); // user_pref("intl.regional_prefs.use_os_locales", false);
// -------------------------------------
// FF71+
// -------------------------------------
// Pref : Display a notification bar when websites offer data for offline use
// https://bugzilla.mozilla.org/show_bug.cgi?id=1574480
// https://hg.mozilla.org/mozilla-central/rev/9fedd8400ab2
user_pref("browser.offline-apps.notify", false);
user_pref("services.sync.prefs.sync.browser.offline-apps.notify", false);
// -------------------------------------
// Pref : Disable useragent updates and site specific overrides
// https://bugzilla.mozilla.org/show_bug.cgi?id=1513574
// https://hg.mozilla.org/mozilla-central/rev/59d191ed3f5b
user_pref("general.useragent.site_specific_overrides", false);
// -------------------------------------
// Pref : Enable / Disable Firefox internal page, and related warnings
// https://bugzilla.mozilla.org/show_bug.cgi?id=1589387
// https://hg.mozilla.org/integration/autoland/rev/2379847488eb
user_pref("network.warnOnAboutNetworking", false);
// -------------------------------------
// Pref : Enforce websites to ask to store data for offline use
// https://bugzilla.mozilla.org/show_bug.cgi?id=1574480
// https://hg.mozilla.org/mozilla-central/rev/9fedd8400ab2
user_pref("offline-apps.allow_by_default", false);
// -------------------------------------
// Pref : Disable other sync settings (by prevention)
// https://bugzilla.mozilla.org/show_bug.cgi?id=1570567
// https://hg.mozilla.org/mozilla-central/rev/38ae84bb1ca3
user_pref("services.sync.fxa.privacyURL", "");
user_pref("services.sync.fxa.termsURL", "");
// -------------------------------------
// Pref : Disable offline cache on insecure sites
// https://bugzilla.mozilla.org/show_bug.cgi?id=1237782
// https://hg.mozilla.org/mozilla-central/rev/d52a0108ed8e
user_pref("browser.cache.offline.insecure.enable", false);
// -------------------------------------
// Pref : Disable WebIDE to prevent remote debugging
// https://bugzilla.mozilla.org/show_bug.cgi?id=1539462
// https://hg.mozilla.org/integration/autoland/rev/eaa523b98e72
user_pref("devtools.webide.enabled", false);
user_pref("devtools.webide.autoinstallADBExtension", false);
user_pref("devtools.webide.templatesURL", "");
user_pref("devtools.webide.adaptersAddonURL", "");
// -------------------------------------
// Pref : Disable social trackingprotection notification
// https://bugzilla.mozilla.org/show_bug.cgi?id=1570631
// https://hg.mozilla.org/mozilla-central/rev/94c10676584a
user_pref("privacy.socialtracking.notification.enabled", false);
// -------------------------------------
// FF72+
// -------------------------------------