From 84fd992784896c44786ddf4af85da897250f3361 Mon Sep 17 00:00:00 2001 From: quindecim Date: Mon, 8 Jul 2019 12:27:28 +0300 Subject: [PATCH] Update 'user.js' MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ✅ Defaulted to an empty value about DoH resolvers instead Cloudflare and co. (FF68) ⛔️ Disabled entirely add-on and certificate blocklists (OneCRL) from Mozilla ⛔️ Disabled more sync (FF68) ⛔️ Disabled more telemetry (FF68) ⛔️ Disabled recommendations in about:addons Extensions and Themes panes (FF68) ⛔️ Disabled report extension option in about:addons (FF68) ⛔️ Decreased more system information leakage to Mozilla addons update servers ⛔️ Disabled the Enterprise Roots preference (FF68) ⛔️ Disabled access to navigator.mediaDevices features on HTTP web pages (FF68) ⛔️ Disabled FF Remote Agent (FF68) ⛔️ Disabled more VR features (FF68) ℹ️ Fixed some typo ℹ️ Fixed FF doesen't save theme selected by user ℹ️ Removed "Defaulting Proxy settings" because the two values I entered are the same of default now --- user.js | 117 ++++++++++++++++++++++++++++++++++++++++++-------------- 1 file changed, 89 insertions(+), 28 deletions(-) diff --git a/user.js b/user.js index 24fdba1..d618ee9 100644 --- a/user.js +++ b/user.js @@ -269,6 +269,7 @@ user_pref("services.sync.fxa.termsURL", ""); // [DESKTOP] user_pref("services.sync.lastversion", ""); // [DESKTOP] user_pref("sync.serverURL", ""); // [DEPRECATED] // [DESKTOP] user_pref("sync.jpake.serverURL", ""); // [DEPRECATED] // [DESKTOP] +user_pref("services.sync.prefs.sync.browser.contentblocking.features.strict", false); // [DESKTOP] // ------------------------------------- // Pref : Never check updates for search engines // https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_auto-update-checking @@ -318,6 +319,9 @@ user_pref("toolkit.telemetry.prompted", 2); // [DESKTOP] user_pref("toolkit.telemetry.rejected", true); // [DESKTOP] user_pref("security.identitypopup.recordEventElemetry", false); // [DESKTOP] user_pref("security.certerrors.recordEventTelemetry", false); // [DESKTOP] +user_pref("privacy.trackingprotection.origin_telemetry.enabled", false); +user_pref("telemetry.origin_telemetry_test_mode.enabled", false); +user_pref("toolkit.telemetry.ecosystemtelemetry.enabled", false); // [DESKTOP] // ------------------------------------- // Pref : Disable Telemetry Coverage // https://blog.mozilla.org/data/2018/08/20/effectively-measuring-search-in-firefox/ @@ -387,7 +391,7 @@ user_pref("network.connectivity-service.DNSv6.domain", ""); // ------------------------------------- // Pref : Opt-out of themes (Persona) updates // https://support.mozilla.org/t5/Firefox/how-do-I-prevent-autoamtic-updates-in-a-50-user-environment/td-p/144287 -user_pref("lightweightThemes.update.enabled",false); // [DESKTOP] +user_pref("lightweightThemes.update.enabled", false); // [DESKTOP] // ------------------------------------- // Pref : Disable auto updating of lightweight themes (LWT) // Not to be confused with themes, which use the Theme API @@ -395,7 +399,7 @@ user_pref("lightweightThemes.update.enabled",false); // [DESKTOP] // https://blog.mozilla.org/addons/2018/09/20/future-themes-here/ user_pref("lightweightThemes.persisted.headerURL", false); user_pref("lightweightThemes.persistedThemeID", ""); // [FENNEC] -user_pref("lightweightThemes.selectedThemeID", ""); // [FENNEC] +// user_pref("lightweightThemes.selectedThemeID", ""); // [BUG - FF doesen't save theme selected by user] user_pref("lightweightThemes.getMoreURL", ""); // [DESKTOP] user_pref("lightweightThemes.persisted.footerURL", false); // [DESKTOP] user_pref("lightweightThemes.recommendedThemes", ""); // [DESKTOP] @@ -415,13 +419,24 @@ user_pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); // [DESKT // https://trac.torproject.org/projects/tor/ticket/19047 user_pref("browser.selfsupport.url", ""); // [DESKTOP] // ------------------------------------- -// Pref : Disable about:addons Get Add-ons panel (uses Google Analytics) +// Pref : Disable about:addons Recommendations pane (uses Google Analytics) user_pref("extensions.getAddons.showPane", false); // [HIDDEN PREF] // [DESKTOP] user_pref("extensions.webservice.discoverURL", ""); // [DESKTOP] // ------------------------------------- +// Pref : Disable recommendations in about:addons Extensions and Themes panes +// https://www.ghacks.net/2019/05/15/enable-new-firefox-recommended-extensions-suggestions-in-firefox-68-nightly/ +user_pref("extensions.htmlaboutaddons.discover.enabled", false); // [DESKTOP] +user_pref("extensions.htmlaboutaddons.inline-options.enabled", false); +user_pref("extensions.htmlaboutaddons.recommendations.enabled", false); // [FENNEC] +user_pref("extensions.getAddons.discovery.api_url", ""); // [DESKTOP] +// ------------------------------------- +// Pref : Disable report extension option in about:addons +user_pref("extensions.abuseReport.enabled", false); +user_pref("extensions.abuseReport.url", ""); +// ------------------------------------- // Pref : Disable Firefox Hello metrics collection // https://groups.google.com/d/topic/mozilla.dev.platform/nyVkCx-_sFw/discussion -user_pref("loop.logDomains",false); // [DESKTOP] +user_pref("loop.logDomains", false); // [DESKTOP] // ------------------------------------- // Pref : Disable Browser Error Reporter // https://support.mozilla.org/en-US/kb/firefox-nightly-error-collection @@ -528,8 +543,6 @@ user_pref("browser.newtabpage.activity-stream.fxaccounts.endpoint", ""); // [DES user_pref("browser.search.searchEnginesURL", ""); // [DESKTOP] user_pref("extensions.getAddons.themes.browseURL", ""); // [DESKTOP] user_pref("security.content.signature.root_hash", ""); -user_pref("urlclassifier.phishTable", ""); -user_pref("urlclassifier.passwordAllowTable", ""); user_pref("identity.mobilepromo.android", ""); // [DESKTOP] user_pref("identity.mobilepromo.ios", ""); // [DESKTOP] user_pref("prio.publicKeyA", ""); // [DESKTOP] @@ -586,11 +599,6 @@ user_pref("mailnews.mx_service_url", ""); // [DESKTOP] user_pref("browser.newtabpage.activity-stream.default.sites", ""); // [DESKTOP] user_pref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.havePinned", ""); // [DESKTOP] user_pref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.searchEngines", ""); // [DESKTOP] -// ------------------------------------- -// Pref : Disable FF Recommended Extensions suggestions -// https://www.ghacks.net/2019/05/15/enable-new-firefox-recommended-extensions-suggestions-in-firefox-68-nightly/ -user_pref("extensions.htmlaboutaddons.discover.enabled", false); -user_pref("extensions.htmlaboutaddons.inline-options.enabled", false); // // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // Section : Miscellaneous @@ -604,7 +612,7 @@ user_pref("extensions.update.enabled", true); user_pref("extensions.autoupdate.enabled", true); // ------------------------------------- // Pref : Decrease system information leakage to Mozilla addons update servers -user_pref("extensions.getAddons.search.browseURL", "https://addons.mozilla.org/%LOCALE%/android/search?q=%TERMS%"); // [URL SANITIZED] +user_pref("extensions.getAddons.search.browseURL", "https://addons.mozilla.org/android/search?q=%TERMS%"); // [URL SANITIZED] // ------------------------------------- // Pref : Disable Web Compatibility Reporter // Web Compatibility Reporter adds a "Report Site Issue" button to send data to Mozilla @@ -967,7 +975,7 @@ user_pref("dom.vibrator.enabled", false); // Pref : Disable clipboard commands (cut/copy) from "non-privileged" content // This disables document.execCommand("cut"/"copy") to protect your clipboard // https://bugzilla.mozilla.org/1170911 -// user_pref("dom.allow_cut_copy", false); // [HIDDEN PREF] +// user_pref("dom.allow_cut_copy", false); // ------------------------------------- // Pref : Disable asm.js // http://asmjs.org/ @@ -1257,6 +1265,22 @@ user_pref("permissions.default.geo", 2); // [DESKTOP] user_pref("permissions.default.camera", 2); // [DESKTOP] user_pref("permissions.default.microphone", 2); // [DESKTOP] user_pref("permissions.default.desktop-notification", 2); // [DESKTOP] +// ------------------------------------- +// Pref : Disable the Enterprise Roots preference +// https://support.mozilla.org/en-US/kb/how-disable-enterprise-roots-preference +user_pref("security.enterprise_roots.enabled", false); +user_pref("security.certerrors.mitm.auto_enable_enterprise_roots", false); // [DESKTOP] +// ------------------------------------- +// Pref : Disable access to navigator.mediaDevices features on HTTP web pages +// https://developer.mozilla.org/en-US/docs/Web/API/Navigator/mediaDevices +user_pref("media.devices.insecure.enabled", false); +// ------------------------------------- +// Pref : Disable FF Remote Agent +// https://dxr.mozilla.org/mozilla-central/source/remote/README +// https://dxr.mozilla.org/mozilla-central/source/remote/doc/Prefs.md +user_pref("remote.enabled", false); // [DESKTOP] +user_pref("remote.force-local", true); // [DESKTOP] +user_pref("remote.log.level", ""); // [DESKTOP] // // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // Section : Block Implicit Outbound @@ -1321,10 +1345,6 @@ user_pref("network.proxy.socks_remote_dns", true); // https://bugzilla.mozilla.org/1255474 user_pref("network.proxy.autoconfig_url.include_path", false); // [DEFAULT: false] // ------------------------------------- -// Pref : Defaulting Proxy settings -// user_pref("network.proxy.autoconfig_url", ""); // [DEFAULT: ""] -// user_pref("network.proxy.socks_version", 5); // [DEFAULT: 5] -// ------------------------------------- // Pref : Disable (or setup) DNS-over-HTTPS (DoH) // TRR = Trusted Recursive Resolver // .mode: 0=off, 1=race, 2=TRR first, 3=TRR only, 4=race for stats, but always use native result @@ -1332,10 +1352,11 @@ user_pref("network.proxy.autoconfig_url.include_path", false); // [DEFAULT: fals // [BUG] This seem to disable socks_remote_dns ?! need to check with wireshark // If true, just settings urls to null should be enough to disable without impacting socks_remote_dns. // https://www.ghacks.net/2018/04/02/configure-dns-over-https-in-firefox/ -// https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-over-https/ +// https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-over-https/ user_pref("network.trr.mode", 0); user_pref("network.trr.bootstrapAddress", ""); user_pref("network.trr.uri", ""); +user_pref("network.trr.resolvers", "[]"); // ------------------------------------- // Pref : Enable Subresource Integrity // https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity @@ -1596,10 +1617,6 @@ user_pref("privacy.userContext.enabled", true); // Pref : Enable a private container for thumbnail loads user_pref("privacy.usercontext.about_newtab_segregation.enabled", true); // [DEFAULT: true] // ------------------------------------- -// Pref : Changing block list (Tracking protection) -// Default value "test-track-simple,base-track-digest256" -user_pref("urlclassifier.trackingTable", ""); -// ------------------------------------- // Pref : Enable First Party Isolation // [SETUP-WEB] May break cross-domain logins and site functionality until perfected // https://bugzilla.mozilla.org/1260931 @@ -1706,7 +1723,7 @@ user_pref("dom.popup_maximum", 0); // [DEFAULT: 20] // ------------------------------------- // Pref : Limit events that can cause a popup // http://kb.mozillazine.org/Dom.popup_allowed_events -user_pref("dom.popup_allowed_events", "click dblclick"); // [DEFAULT: "change click dblclick mouseup pointerup notificationclick reset submit touchend"] +user_pref("dom.popup_allowed_events", "click dblclick"); // [DEFAULT: "change click dblclick auxclick mouseup pointerup notificationclick reset submit touchend"] // // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // Section : Cache / Session (Re)Store / Favicons @@ -1947,19 +1964,62 @@ user_pref("shumway.disabled", true); // [DESKTOP] // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // Section : Blocklists / Safe Browsing / Tracking Protection // >>>>>>>>>>>>>>>>>>>> -// Pref : Enable add-on and certificate blocklists (OneCRL) from Mozilla +// Pref : Disable add-on and certificate blocklists (OneCRL) from Mozilla +// https://wiki.mozilla.org/Security/Tracking_protection +// https://wiki.mozilla.org/Services/TrackingProtection/Shavar_Server_-_Testing +// https://wiki.mozilla.org/Security/Safe_Browsing // https://wiki.mozilla.org/Blocklisting // https://blocked.cdn.mozilla.net/ // http://kb.mozillazine.org/Extensions.blocklist.enabled // http://kb.mozillazine.org/Extensions.blocklist.url // https://blog.mozilla.org/security/2015/03/03/revoking-intermediate-certificates-introducing-onecrl/ -user_pref("services.blocklist.update_enabled", true); // [DESKTOP] -user_pref("extensions.blocklist.enabled", true); +user_pref("services.blocklist.update_enabled", false); // [DESKTOP] +user_pref("services.blocklist.plugins.signer", ""); +user_pref("services.blocklist.plugins.collection", ""); +user_pref("services.blocklist.pinning.signer", ""); +user_pref("services.blocklist.pinning.enabled", false); +user_pref("services.blocklist.pinning.collection", ""); +user_pref("services.blocklist.pinning.bucket", ""); // [DESKTOP] +user_pref("services.blocklist.onecrl.signer", ""); +user_pref("services.blocklist.onecrl.collection", ""); +user_pref("services.blocklist.gfx.signer", ""); +user_pref("services.blocklist.gfx.collection", ""); +user_pref("services.blocklist.bucket", ""); +user_pref("services.blocklist.addons.signer", ""); // [DESKTOP] +user_pref("services.blocklist.addons.collection", ""); +// user_pref("extensions.blocklist.level", 2); // [DEFAULT: 2] +user_pref("extensions.blocklist.lastModified", ""); // [DESKTOP] +user_pref("extensions.blocklist.itemURL", ""); +user_pref("extensions.blocklist.enabled", false); +user_pref("extensions.blocklist.detailsURL", ""); +user_pref("services.settings.security.onecrl.bucket", ""); +user_pref("services.settings.security.onecrl.collection", ""); +user_pref("services.settings.security.onecrl.signer", ""); +user_pref("urlclassifier.blockedTable", ""); +user_pref("urlclassifier.disallow_completions", ""); +user_pref("urlclassifier.downloadAllowTable", ""); +user_pref("urlclassifier.downloadBlockTable", ""); +user_pref("urlclassifier.flashAllowExceptTable", ""); +user_pref("urlclassifier.flashAllowTable", ""); +user_pref("urlclassifier.flashExceptTable", ""); +user_pref("urlclassifier.flashSubDocExceptTable", ""); +user_pref("urlclassifier.flashSubDocTable", ""); +user_pref("urlclassifier.flashTable", ""); +user_pref("urlclassifier.malwareTable", ""); +user_pref("urlclassifier.passwordAllowTable", ""); +user_pref("urlclassifier.phishTable", ""); +user_pref("urlclassifier.trackingAnnotationSkipURLs", ""); // [DESKTOP] +user_pref("urlclassifier.trackingAnnotationTable", ""); // [DESKTOP] +user_pref("urlclassifier.trackingAnnotationSkipURLs", ""); +user_pref("urlclassifier.trackingAnnotationTable", ""); +user_pref("urlclassifier.trackingAnnotationWhitelistTable", ""); +user_pref("urlclassifier.trackingTable", ""); +user_pref("urlclassifier.trackingWhitelistTable", ""); // ------------------------------------- // Pref : Decrease system information leakage to Mozilla blocklist update servers // https://trac.torproject.org/projects/tor/ticket/16931 // https://www.reddit.com/r/firefox/comments/9v5lue/firefox_tip_sanitize_firefox_blocklist_url_so_it/ -user_pref("extensions.blocklist.url", "https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%20/%20/"); // [URL SANITIZED] +user_pref("extensions.blocklist.url", ""); // [URL SANITIZED: https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%20/%20/] // ------------------------------------- // Pref : Opt-out of add-on metadata updates // https://blog.mozilla.org/addons/how-to-opt-out-of-add-on-metadata-updates/ @@ -2396,6 +2456,7 @@ user_pref("gfx.vr.osvr.clientKitLibPath", ""); user_pref("gfx.vr.osvr.clientLibPath", ""); user_pref("gfx.vr.osvr.commonLibPath", ""); user_pref("gfx.vr.osvr.utilLibPath", ""); +user_pref("dom.vr.process.enabled", false); // ------------------------------------- // Pref : Disable hardware acceleration to reduce graphics fingerprinting // [WARNING] Affects text rendering (fonts will look different), impacts video performance, and parts of Quantum that utilize the GPU will also be affected as they are rolled out @@ -2479,7 +2540,7 @@ user_pref("home.sync.updateMode", 1); // [DEFAULT: 0] // [FENNEC] // user_pref("home.sync.checkIntervalSecs", 3600); // [FENNEC] // ------------------------------------- // Pref : Middle-click mouse enabling auto-scrolling -user_pref("general.autoScroll",true); // [DESKTOP] +user_pref("general.autoScroll", true); // [DESKTOP] // ------------------------------------- // Pref : Displaying small density by default // user_pref("browser.uidensity", 1); // [DEFAULT: 0] // [DESKTOP]