Update 'user.js'

 Created new section "Deprecated": moved inside it the already existing prefs and added some missing ones that have been removed, renamed or changed over time (these prefs remain active for ESR60.x versions)
ℹ️ Fixed some descriptions for a better explanation
This commit is contained in:
quindecim 2019-07-18 12:08:43 +03:00
parent cca57d3de5
commit fbdf9498e8
1 changed files with 152 additions and 90 deletions

242
user.js
View File

@ -29,7 +29,6 @@ user_pref("browser.newtab.url", "about:blank"); // [DESKTOP]
// -------------------------------------
// Pref : Disable Extension Recommendations (CFR: "Contextual Feature Recommender"
// https://support.mozilla.org/en-US/kb/extension-recommendations
user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr", false); // [DESKTOP])
user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", false); // [DESKTOP]
user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features", false); // [DESKTOP]
// -------------------------------------
@ -50,9 +49,7 @@ user_pref("browser.startup.homepage", "about:blank"); // [DESKTOP]
// Pref : Disable Activity Stream Snippets
// Runs code received from a server (aka Remote Code Execution) and sends information back to a metrics server
// https://abouthome-snippets-service.readthedocs.io/
user_pref("browser.aboutHomeSnippets.updateUrl", ""); // [DESKTOP]
user_pref("browser.newtabpage.activity-stream.asrouter.providers.snippets", ""); // [DESKTOP]
user_pref("browser.newtabpage.activity-stream.disableSnippets", true); // [DESKTOP]
user_pref("browser.newtabpage.activity-stream.feeds.snippets", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable Activity Stream telemetry
@ -113,7 +110,6 @@ user_pref("browser.startup.homepage_override.mstone", "ignore");
// Section : Quiet Fox
// >>>>>>>>>>>>>>>>>>>>>
// Pref : Disable app from auto-update
user_pref("app.update.enabled", false);
user_pref("app.update.auto", false); // [DESKTOP]
user_pref("app.update.autodownload", "never"); // [TEST] // [FENNEC]
user_pref("app.update.channel", "");
@ -385,10 +381,6 @@ user_pref("network.connectivity-service.IPv6.url", "");
user_pref("network.connectivity-service.DNSv4.domain", "");
user_pref("network.connectivity-service.DNSv6.domain", "");
// -------------------------------------
// Pref : Opt-out of themes (Persona) updates
// https://support.mozilla.org/t5/Firefox/how-do-I-prevent-autoamtic-updates-in-a-50-user-environment/td-p/144287
user_pref("lightweightThemes.update.enabled", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable auto updating of lightweight themes (LWT)
// Not to be confused with themes, which use the Theme API
// Mozilla plan to convert existing LWTs and remove LWT support in the future
@ -437,29 +429,11 @@ user_pref("extensions.abuseReport.url", "");
// https://groups.google.com/d/topic/mozilla.dev.platform/nyVkCx-_sFw/discussion
user_pref("loop.logDomains", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable Browser Error Reporter
// https://support.mozilla.org/en-US/kb/firefox-nightly-error-collection
// https://firefox-source-docs.mozilla.org/browser/browser/BrowserErrorReporter.html
user_pref("browser.chrome.errorReporter.enabled", false); // [DESKTOP]
user_pref("browser.chrome.errorReporter.submitUrl", ""); // [DESKTOP]
user_pref("browser.chrome.errorReporter.infoURL", ""); // [DESKTOP]
// -------------------------------------
// Pref : Disable contentblocking reportBreakage
user_pref("browser.contentblocking.reportBreakage.enabled", false); // [DESKTOP]
user_pref("browser.contentblocking.reportBreakage.url", ""); // [DESKTOP]
user_pref("browser.contentblocking.rejecttrackers.reportBreakage.enabled", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable Onboarding
// [NOTE] This setting is just in case it comeback
// Onboarding is an interactive tour/setup for new installs/profiles and features. Every time
// about:home or about:newtab is opened, the onboarding overlay is injected into that page
// [NOTE] Onboarding uses Google Analytics, and leaks resource://URIs
// https://wiki.mozilla.org/Firefox/Onboarding
// https://github.com/mozilla/onboard/commit/db4d6c8726c89a5d6a241c1b1065827b525c5baf
// https://bugzilla.mozilla.org/863246#c154
user_pref("browser.onboarding.enabled", false); // [DESKTOP] // [DEPRECATED]
user_pref("browser.onboarding.notification.tour-ids-queue", ""); // [DESKTOP] // [DEPRECATED]
// -------------------------------------
// Pref : Onboarding tour disable because of included telemetry
// [NOTE] This setting is just in case it comeback
user_pref("browser.onboarding.notification.finished", true); // [DESKTOP] // [DEPRECATED]
@ -488,10 +462,6 @@ user_pref("extensions.screenshots.upload-disabled", true); // [DESKTOP]
// https://support.mozilla.org/en-US/kb/how-do-i-use-firefox-spell-checker
user_pref("layout.spellcheckDefault", 0); // [DESKTOP]
// -------------------------------------
// Pref : Disable "Savant" Shield study
// https://bugzilla.mozilla.org/1457226
user_pref("shield.savant.enabled", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable social integration with FF
user_pref("social.directories", ""); // [DEPRECATED] // [DESKTOP]
user_pref("social.remote-install.enabled", false); // [DEPRECATED] // [DESKTOP]
@ -715,12 +685,10 @@ user_pref("security.dialog_enable_delay", 700);
user_pref("devtools.debugger.remote-enabled", false);
user_pref("devtools.webide.enabled", false); // [DESKTOP]
user_pref("devtools.webide.autoinstallADBExtension", false); // [DESKTOP]
user_pref("devtools.webide.autoinstallADBHelper", false); // [DESKTOP]
user_pref("devtools.webide.autoinstallFxdtAdapters", false); // [DESKTOP]
user_pref("devtools.remote.adb.extensionURL", ""); // [DESKTOP]
user_pref("devtools.remote.adb.extensionID", ""); // [DESKTOP]
user_pref("devtools.webide.adaptersAddonURL", ""); // [DESKTOP] // [DEPRECATED]
user_pref("devtools.webide.adbAddonURL", ""); // [DESKTOP] // [DEPRECATED]
user_pref("devtools.webide.adaptersAddonURL", ""); // [DESKTOP]
user_pref("devtools.webide.templatesURL", ""); // [DESKTOP]
// -------------------------------------
// Pref : Force local debugging
@ -867,16 +835,6 @@ user_pref("browser.tabs.remote.allowLinkedWebInFileUriProcess", false); // [DESK
// http://kb.mozillazine.org/Browser.urlbar.filter.javascript
user_pref("browser.urlbar.filter.javascript", true); // [DESKTOP]
// -------------------------------------
// Pref : Disable JAR from opening Unsafe File Types
// https://bugzilla.mozilla.org/1427726
user_pref("network.jar.open-unsafe-types", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable remote JAR files being opened, regardless of content type
// https://bugzilla.mozilla.org/1173171
// https://www.fxsitecompat.com/en-CA/docs/2015/jar-protocol-support-has-been-disabled-by-default/
// https://bugzilla.mozilla.org/1427726
user_pref("network.jar.block-remote-files", true); // [DEPRECATED] // [DESKTOP]
// -------------------------------------
// Pref : Disable Firefox's built-in PDF reader
// This setting controls if the option "Display in Firefox" is available in the setting below and by effect controls whether PDFs are handled in-browser or externally ("Ask" or "Open With")
// PROS: pdfjs is lightweight, open source, and as secure/vetted as any pdf reader out there (more than most)
@ -899,7 +857,7 @@ user_pref("security.xpconnect.plugin.unrestricted", false); // [DESKTOP]
user_pref("ui.use_standins_for_native_colors", true); // [DESKTOP]
// -------------------------------------
// Pref : Close tab with double click action
// user_pref("browser.tabs.closeTabByDblclick", true); // [DESKTOP]
user_pref("browser.tabs.closeTabByDblclick", true); // [DESKTOP]
// -------------------------------------
// Pref : Remove special permissions for certain mozilla domains
// resource://app/defaults/permissions
@ -1011,10 +969,6 @@ user_pref("dom.IntersectionObserver.enabled", false);
// https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/
user_pref("javascript.options.shared_memory", false); // [DEFAULT: false]
// -------------------------------------
// Pref : Enforce DOMHighResTimeStamp API
// [WARNING] Required for normalization of timestamps and any timer resolution mitigations
user_pref("dom.event.highrestimestamp.enabled", true); // [DEFAULT: true]
// -------------------------------------
// Pref : Enable (limited but sufficient) window.opener protection
// Makes rel=noopener implicit for target=_blank in anchor and area elements when no rel attribute is set
user_pref("dom.targetBlankNoOpener.enabled", true); // [DEFAULT: false]
@ -1108,7 +1062,7 @@ user_pref("media.autoplay.enabled.user-gestures-needed", true); // [DEFAULT: tru
// -------------------------------------
// Pref : Disable audio autoplay in non-active tabs
// https://www.ghacks.net/2016/11/14/firefox-51-blocks-automatic-audio-playback-in-non-active-tabs/
user_pref("media.block-autoplay-until-in-foreground", true); // [DEFAULT: false]
user_pref("media.block-autoplay-until-in-foreground", true); // [DEFAULT: true]
//
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
// Section : Location Bar / Search Bar / Suggestions / History / Forms
@ -1182,9 +1136,8 @@ user_pref("browser.urlbar.daysBeforeHidingSuggestionsPrompt", 0); // [DESKTOP]
user_pref("browser.urlbar.searchSuggestionsChoice", false); // [DESKTOP]
user_pref("browser.urlbar.timesBeforeHidingSuggestionsHint", 0); // [DESKTOP]
// -------------------------------------
// Pref : Disable URL bar autocomplete and history/bookmarks suggestions dropdown
// Pref : Disable history/bookmarks/opened pages suggestions dropdown from URL bar
// [NOTE] This does not cause privacy/leaking issue
user_pref("browser.urlbar.autocomplete.enabled", false); // [DESKTOP]
user_pref("browser.urlbar.suggest.history", false); // [DESKTOP]
user_pref("browser.urlbar.suggest.bookmark", false); // [DESKTOP]
user_pref("browser.urlbar.suggest.openpage", false); // [DESKTOP]
@ -1209,10 +1162,6 @@ user_pref("network.stricttransportsecurity.preloadlist", true);
// https://github.com/pyllyukko/user.js/pull/206#issuecomment-280229645
user_pref("security.tls.version.fallback-limit", 3);
// -------------------------------------
// Pref : Enable CSP 1.1 script-nonce directive support
// https://bugzilla.mozilla.org/show_bug.cgi?id=855326
user_pref("security.csp.experimentalEnabled", true);
// -------------------------------------
// Pref : Enable OCSP Must-Staple support
// https://blog.mozilla.org/security/2015/11/23/improving-revocation-ocsp-must-staple-and-short-lived-certificates/
// https://www.entrust.com/ocsp-must-staple/
@ -1801,17 +1750,14 @@ user_pref("toolkit.winRegisterApplicationRestart", false); // [WINDOWS] // [DESK
// >>>>>>>>>>>>>>>>>>>>
// Pref : Disable geolocation
user_pref("geo.enabled", false);
// user_pref("geo.wifi.xhr.timeout", 0);
// -------------------------------------
// Pref : Disable GeoIP lookup on your address to set default search engine region
// https://trac.torproject.org/projects/tor/ticket/16254
// https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_geolocation-for-default-search-engine
user_pref("browser.search.countryCode", "US"); // [HIDDEN PREF]
user_pref("browser.search.region", "US");
user_pref("browser.search.geoip.url", "");
user_pref("browser.search.geoSpecificDefaults.url", "");
user_pref("browser.snippets.geoUrl", "");
// user_pref("browser.search.geoip.timeout", 0);
// -------------------------------------
// Pref : Set Accept-Language HTTP header
user_pref("intl.accept_languages", "en-US, en");
@ -1938,11 +1884,6 @@ user_pref("media.gmp-widevinecdm.autoupdate", false); // [DESKTOP]
// https://www.ghacks.net/2013/07/09/how-to-make-sure-that-a-firefox-plugin-never-activates-again/
user_pref("plugin.state.flash", 0); // [DESKTOP]
// -------------------------------------
// Pref : Disable Java plugin
// 0=deactivated, 1=ask, 2=enabled
// https://bugzilla.mozilla.org/1461243
user_pref("plugin.state.java", 0); // [DESKTOP]
// -------------------------------------
// Pref : Disable Gnome Shell Integration NPAPI plugin
user_pref("plugin.state.libgnome-shell-browser-plugin",0); // [DESKTOP]
// -------------------------------------
@ -2120,18 +2061,6 @@ user_pref("browser.ping-centre.telemetry", false); // [DESKTOP]
user_pref("extensions.systemAddon.update.enabled", false); // [DESKTOP]
user_pref("extensions.systemAddon.update.url", "");
// -------------------------------------
// Pref : Disable Experiments
// https://wiki.mozilla.org/Telemetry/Experiments
// https://bugzilla.mozilla.org/buglist.cgi?bug_id=1420908,1450801
user_pref("experiments.enabled", false); // [DESKTOP]
user_pref("experiments.manifest.uri", ""); // [DESKTOP]
user_pref("experiments.supported", false); // [DESKTOP]
user_pref("experiments.activeExperiment", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable Mozilla permission to silently opt you into tests
// https://bugzilla.mozilla.org/1415625
user_pref("network.allow-experiments", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable Normandy/Shield
// Shield is an telemetry system (including Heartbeat) that can also push and test "recipes"
// https://wiki.mozilla.org/Firefox/Shield
@ -2235,10 +2164,6 @@ user_pref("offline-apps.allow_by_default", false); // [DEFAULT: true]
// Pref : Disable download history
user_pref("browser.download.manager.retention", 0); // [DESKTOP]
// -------------------------------------
// Pref : When browser.fixup.alternate.enabled is enabled, strip password from 'user:password@...' URLs
// https://github.com/pyllyukko/user.js/issues/290#issuecomment-303560851
user_pref("browser.fixup.hide_user_pass", true); // [DESKTOP]
// -------------------------------------
// Pref : Enable Firefox to clear items on shutdown
user_pref("privacy.sanitize.sanitizeOnShutdown", true); // [DESKTOP]
// -------------------------------------
@ -2402,10 +2327,9 @@ user_pref("media.video_stats.enabled", false); // [DEFAULT: true]
// Fingerprinting attack vector - leaks screen res & actual screen coordinates.
// 0=disabled, 1=enabled, 2=autodetect
// This pref is set to 2 by default, which results in the Touch API being exposed only when touch hardware is present. So we should either set it to "1" (enable) or "0" (disable) to ensure that JS code can't fingerprint the user's hardware.
// [FENNEC - BUG] If disabled, unables you to copy or paste any text.
// https://developer.mozilla.org/docs/Web/API/Touch_events
// https://trac.torproject.org/projects/tor/ticket/10286
user_pref("dom.w3c_touch_events.enabled", 1); // [DEFAULT: 2]
user_pref("dom.w3c_touch_events.enabled", 1); // [DEFAULT: 2] // [FENNEC - BUG] ff disabled, disallow copy/paste any text
// -------------------------------------
// Pref : Disable MediaDevices change detection
// https://developer.mozilla.org/docs/Web/Events/devicechange
@ -2499,10 +2423,9 @@ user_pref("dom.telephony.enabled", false);
// Pref : Disable browser animation
// https://bugzilla.mozilla.org/show_bug.cgi?id=1352069
// user_pref("toolkit.cosmeticAnimations.enabled", false); // [DESKTOP]
// user_pref("browser.tabs.animate", false); // [DESKTOP] // [DEPRECATED]
// user_pref("browser.fullscreen.animate", false); // [DESKTOP] // [DEPRECATED]
// user_pref("browser.download.animateNotifications", false); // [DESKTOP] // [DEPRECATED]
// user_pref("alerts.disableSlidingEffect", false); // [DESKTOP] // [DEPRECATED]
// -------------------------------------
// Pref : Displaying small density by default
// user_pref("browser.uidensity", 1); // [DEFAULT: 0] // [DESKTOP]
//
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
// Section : Personal
@ -2529,9 +2452,6 @@ user_pref("home.sync.updateMode", 1); // [DEFAULT: 0] // [FENNEC]
// Pref : Middle-click mouse enabling auto-scrolling
user_pref("general.autoScroll", true); // [DESKTOP]
// -------------------------------------
// Pref : Displaying small density by default
// user_pref("browser.uidensity", 1); // [DEFAULT: 0] // [DESKTOP]
// -------------------------------------
// Pref : Disable buttons
user_pref("pref.general.disable_button.default_browser", true); // [DESKTOP]
user_pref("pref.privacy.disable_button.view_passwords", true); // [DESKTOP]
@ -2542,7 +2462,8 @@ user_pref("pref.privacy.disable_button.view_passwords", true); // [DESKTOP]
// Pref : Disable dark theme on forms
user_pref("widget.content.gtk-theme-override", "Adwaita"); // [DESKTOP]
// -------------------------------------
// Pref : Disable ctrl+tab back to the old one
// Pref: Disable "Ctrl+Tab cycles through tabs in recently used order"
// https://bugzilla.mozilla.org/1473595
user_pref("browser.ctrlTab.recentlyUsedOrder", false); // [DESKTOP]
// -------------------------------------
// Pref : Display long lines in view-source page
@ -2557,4 +2478,145 @@ user_pref("browser.urlbar.clickSelectsAll", true);
// Pref : Enable double click selects a string segment in URL bar
user_pref("browser.urlbar.doubleClickSelectsAll", false); // [DESKTOP]
//
//
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
// Section : Deprecated / Removed / Legacy / Renamed
// ESR60.x still uses all the following prefs
// >>>>>>>>>>>>>>>>>>>>
// -------------------------------------
// FF61+
// -------------------------------------
// Pref : Disable Experiments
// https://wiki.mozilla.org/Telemetry/Experiments
// https://bugzilla.mozilla.org/buglist.cgi?bug_id=1420908,1450801
user_pref("experiments.enabled", false);
user_pref("experiments.manifest.uri", "");
user_pref("experiments.supported", false);
user_pref("experiments.activeExperiment", false);
// -------------------------------------
// Pref : Disable remote JAR files being opened, regardless of content type
// https://bugzilla.mozilla.org/1173171
// https://www.fxsitecompat.com/en-CA/docs/2015/jar-protocol-support-has-been-disabled-by-default/
// https://bugzilla.mozilla.org/1427726
user_pref("network.jar.block-remote-files", true);
// -------------------------------------
// Pref : Disable JAR from opening Unsafe File Types
// https://bugzilla.mozilla.org/1427726
user_pref("network.jar.open-unsafe-types", false);
// -------------------------------------
// FF62+
// -------------------------------------
// Pref : Disable Java plugin
// 0=deactivated, 1=ask, 2=enabled
// https://bugzilla.mozilla.org/1461243
user_pref("plugin.state.java", 0);
// -------------------------------------
// FF63+
// -------------------------------------
// Pref : DisableGeoIP-based search results
// [NOTE] May not be hidden if Firefox has changed your settings due to your locale
// https://bugzilla.mozilla.org/1462015
user_pref("browser.search.countryCode", "US"); // [HIDDEN PREF]
// -------------------------------------
// Pref : Disable app from auto-update
user_pref("app.update.enabled", false);
// -------------------------------------
// Pref : Disable "Savant" Shield study
// https://bugzilla.mozilla.org/1457226
user_pref("shield.savant.enabled", false);
// -------------------------------------
// Pref : Disable favicons in tabs and new bookmarks
// Merged into "browser.chrome.site_icons"
// https://bugzilla.mozilla.org/1453751
user_pref("browser.chrome.favicons", false);
// -------------------------------------
// Pref : Disable autoplay of HTML5 media
// Replaced by "media.autoplay.default"
// https://bugzilla.mozilla.org/1470082
user_pref("media.autoplay.enabled", false);
// -------------------------------------
// Pref: Set cookie lifetime in days
// https://bugzilla.mozilla.org/1457170
// user_pref("network.cookie.lifetime.days", 90); // [DEFAULT: 90]
// -------------------------------------
// Pref: Enable "Ctrl+Tab cycles through tabs in recently used order"
// Rreplaced by "browser.ctrlTab.recentlyUsedOrder"
// https://bugzilla.mozilla.org/1473595
user_pref("browser.ctrlTab.previews", true);
// -------------------------------------
// FF64+
// -------------------------------------
// Pref : Disable Onboarding
// [NOTE] This setting is just in case it comeback
// Onboarding is an interactive tour/setup for new installs/profiles and features. Every time
// about:home or about:newtab is opened, the onboarding overlay is injected into that page
// [NOTE] Onboarding uses Google Analytics, and leaks resource://URIs
// https://wiki.mozilla.org/Firefox/Onboarding
// https://github.com/mozilla/onboard/commit/db4d6c8726c89a5d6a241c1b1065827b525c5baf
// https://bugzilla.mozilla.org/863246#c154
user_pref("browser.onboarding.enabled", false);
user_pref("browser.onboarding.notification.tour-ids-queue", "");
// -------------------------------------
// Pref : Disable WebIDE to prevent remote debugging and ADB extension download
// https://developer.mozilla.org/docs/Tools/WebIDE
// https://trac.torproject.org/projects/tor/ticket/16222
user_pref("devtools.webide.autoinstallADBHelper", false);
user_pref("devtools.webide.adbAddonURL", "");
// -------------------------------------
// Pref : Disable CSP violation events
// https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent
// https://bugzilla.mozilla.org/1488165
user_pref("security.csp.enable_violation_events", false);
// -------------------------------------
// FF65+
// -------------------------------------
// Pref : Disable location bar autocomplete and suggestion types
// https://bugzilla.mozilla.org/1502392
user_pref("browser.urlbar.autocomplete.enabled", false);
// -------------------------------------
// Pref : When "browser.fixup.alternate.enabled" is enabled, strip password from 'user:password@...' URLs
// https://github.com/pyllyukko/user.js/issues/290#issuecomment-303560851
user_pref("browser.fixup.hide_user_pass", true);
// -------------------------------------
// FF66+
// -------------------------------------
// Pref : Disable Browser Error Reporter
// https://support.mozilla.org/en-US/kb/firefox-nightly-error-collection
// https://firefox-source-docs.mozilla.org/browser/browser/BrowserErrorReporter.html
user_pref("browser.chrome.errorReporter.enabled", false);
user_pref("browser.chrome.errorReporter.submitUrl", "");
user_pref("browser.chrome.errorReporter.infoURL", "");
// -------------------------------------
// Pref : Disable Mozilla permission to silently opt you into tests
// https://bugzilla.mozilla.org/1415625
user_pref("network.allow-experiments", false);
// -------------------------------------
// FF67+
// -------------------------------------
// Pref : Enforce DOMHighResTimeStamp API
// [WARNING] Required for normalization of timestamps and any timer resolution mitigations
user_pref("dom.event.highrestimestamp.enabled", true); // [DEFAULT: true]
// -------------------------------------
// Pref : Disable Extension Recommendations (CFR: "Contextual Feature Recommender"
// https://support.mozilla.org/en-US/kb/extension-recommendations
user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr", false);
// -------------------------------------
// FF68+
// -------------------------------------
// Pref : Disable Activity Stream Snippets
// Runs code received from a server (aka Remote Code Execution) and sends information back to a metrics server
// https://abouthome-snippets-service.readthedocs.io/
user_pref("browser.aboutHomeSnippets.updateUrl", "");
user_pref("browser.newtabpage.activity-stream.disableSnippets", true);
// -------------------------------------
// Pref : Disable auto updating of lightweight themes (LWT)
// https://blog.mozilla.org/addons/2018/09/20/future-themes-here/
// https://bugzilla.mozilla.org/1525762
user_pref("lightweightThemes.update.enabled", false);
// -------------------------------------
// Pref : Enable CSP 1.1 experimental hash-source directive
// https://bugzilla.mozilla.org/buglist.cgi?bug_id=855326,883975
// https://bugzilla.mozilla.org/1386214
user_pref("security.csp.experimentalEnabled", true);
// -------------------------------------
// FF69+
// -------------------------------------