diff --git a/user.js b/user.js
index 66c80e5..567af80 100644
--- a/user.js
+++ b/user.js
@@ -62,7 +62,7 @@ user_pref("browser.newtabpage.activity-stream.feeds.favicon", false);
 // Disable Activity Stream Snippets
 // Runs code received from a server (aka Remote Code Execution) and sends information back to a metrics server
 // https://abouthome-snippets-service.readthedocs.io/
-user_pref("browser.newtabpage.activity-stream.feeds.snippets", false);
+user_pref("browser.newtabpage.activity-stream.feeds.snippets", false) // [DEFAULT: false FF89+]
 user_pref("browser.newtabpage.activity-stream.asrouter.providers.snippets", "");
 // -------------------------------------
 // Disable Activity Stream Top Stories, Pocket-based and/or sponsored content
@@ -867,10 +867,6 @@ user_pref("security.mixed_content.block_active_content", true); // [DEFAULT: tru
 // Disable insecure passive content (such as images) on https pages [SETUP-WEB]
 user_pref("security.mixed_content.block_display_content", true);
 // -------------------------------------
-// Lock unencrypted requests from Flash on encrypted pages to mitigate MitM attacks [FF59+]
-// https://bugzilla.mozilla.org/1190623
-user_pref("security.mixed_content.block_object_subrequest", true);
-// -------------------------------------
 // Enable HTTPS-Only mode [FF76+]
 // When "https_only_mode" (all windows) is true, "https_only_mode_pbm" (private windows only) is ignored
 // [SETTING] to add site exceptions: Ctrl+I>HTTPS-Only mode>On/Off/Off temporarily
@@ -1855,6 +1851,11 @@ user_pref("dom.ipc.plugins.flash.subprocess.crashreporter.enabled", false);
 // https://bugzilla.mozilla.org/1682030 [underlying NPAPI code removed]
 user_pref("dom.ipc.plugins.reportCrashURL", false);
 // -------------------------------------
+// Block unencrypted requests from Flash on encrypted pages to mitigate MitM attacks [FF59+]
+// https://bugzilla.mozilla.org/1190623
+// https://bugzilla.mozilla.org/1682030 [underlying NPAPI code removed]
+user_pref("security.mixed_content.block_object_subrequest", true);
+// -------------------------------------
 // Disable Flash plugin
 // 0=deactivated, 1=ask, 2=enabled
 // ESR52.x is the last branch to *fully* support NPAPI, FF52+ stable only supports Flash