From fbdf9498e85fcb5490ca0dd1c09e287fb833b034 Mon Sep 17 00:00:00 2001 From: quindecim Date: Thu, 18 Jul 2019 12:08:43 +0300 Subject: [PATCH] Update 'user.js' MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ✅ Created new section "Deprecated": moved inside it the already existing prefs and added some missing ones that have been removed, renamed or changed over time (these prefs remain active for ESR60.x versions) ℹ️ Fixed some descriptions for a better explanation --- user.js | 242 +++++++++++++++++++++++++++++++++++--------------------- 1 file changed, 152 insertions(+), 90 deletions(-) diff --git a/user.js b/user.js index 82b4567..47637a1 100644 --- a/user.js +++ b/user.js @@ -29,7 +29,6 @@ user_pref("browser.newtab.url", "about:blank"); // [DESKTOP] // ------------------------------------- // Pref : Disable Extension Recommendations (CFR: "Contextual Feature Recommender" // https://support.mozilla.org/en-US/kb/extension-recommendations -user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr", false); // [DESKTOP]) user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", false); // [DESKTOP] user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features", false); // [DESKTOP] // ------------------------------------- @@ -50,9 +49,7 @@ user_pref("browser.startup.homepage", "about:blank"); // [DESKTOP] // Pref : Disable Activity Stream Snippets // Runs code received from a server (aka Remote Code Execution) and sends information back to a metrics server // https://abouthome-snippets-service.readthedocs.io/ -user_pref("browser.aboutHomeSnippets.updateUrl", ""); // [DESKTOP] user_pref("browser.newtabpage.activity-stream.asrouter.providers.snippets", ""); // [DESKTOP] -user_pref("browser.newtabpage.activity-stream.disableSnippets", true); // [DESKTOP] user_pref("browser.newtabpage.activity-stream.feeds.snippets", false); // [DESKTOP] // ------------------------------------- // Pref : Disable Activity Stream telemetry @@ -113,7 +110,6 @@ user_pref("browser.startup.homepage_override.mstone", "ignore"); // Section : Quiet Fox // >>>>>>>>>>>>>>>>>>>>> // Pref : Disable app from auto-update -user_pref("app.update.enabled", false); user_pref("app.update.auto", false); // [DESKTOP] user_pref("app.update.autodownload", "never"); // [TEST] // [FENNEC] user_pref("app.update.channel", ""); @@ -385,10 +381,6 @@ user_pref("network.connectivity-service.IPv6.url", ""); user_pref("network.connectivity-service.DNSv4.domain", ""); user_pref("network.connectivity-service.DNSv6.domain", ""); // ------------------------------------- -// Pref : Opt-out of themes (Persona) updates -// https://support.mozilla.org/t5/Firefox/how-do-I-prevent-autoamtic-updates-in-a-50-user-environment/td-p/144287 -user_pref("lightweightThemes.update.enabled", false); // [DESKTOP] -// ------------------------------------- // Pref : Disable auto updating of lightweight themes (LWT) // Not to be confused with themes, which use the Theme API // Mozilla plan to convert existing LWTs and remove LWT support in the future @@ -437,29 +429,11 @@ user_pref("extensions.abuseReport.url", ""); // https://groups.google.com/d/topic/mozilla.dev.platform/nyVkCx-_sFw/discussion user_pref("loop.logDomains", false); // [DESKTOP] // ------------------------------------- -// Pref : Disable Browser Error Reporter -// https://support.mozilla.org/en-US/kb/firefox-nightly-error-collection -// https://firefox-source-docs.mozilla.org/browser/browser/BrowserErrorReporter.html -user_pref("browser.chrome.errorReporter.enabled", false); // [DESKTOP] -user_pref("browser.chrome.errorReporter.submitUrl", ""); // [DESKTOP] -user_pref("browser.chrome.errorReporter.infoURL", ""); // [DESKTOP] -// ------------------------------------- // Pref : Disable contentblocking reportBreakage user_pref("browser.contentblocking.reportBreakage.enabled", false); // [DESKTOP] user_pref("browser.contentblocking.reportBreakage.url", ""); // [DESKTOP] user_pref("browser.contentblocking.rejecttrackers.reportBreakage.enabled", false); // [DESKTOP] // ------------------------------------- -// Pref : Disable Onboarding -// [NOTE] This setting is just in case it comeback -// Onboarding is an interactive tour/setup for new installs/profiles and features. Every time -// about:home or about:newtab is opened, the onboarding overlay is injected into that page -// [NOTE] Onboarding uses Google Analytics, and leaks resource://URIs -// https://wiki.mozilla.org/Firefox/Onboarding -// https://github.com/mozilla/onboard/commit/db4d6c8726c89a5d6a241c1b1065827b525c5baf -// https://bugzilla.mozilla.org/863246#c154 -user_pref("browser.onboarding.enabled", false); // [DESKTOP] // [DEPRECATED] -user_pref("browser.onboarding.notification.tour-ids-queue", ""); // [DESKTOP] // [DEPRECATED] -// ------------------------------------- // Pref : Onboarding tour disable because of included telemetry // [NOTE] This setting is just in case it comeback user_pref("browser.onboarding.notification.finished", true); // [DESKTOP] // [DEPRECATED] @@ -488,10 +462,6 @@ user_pref("extensions.screenshots.upload-disabled", true); // [DESKTOP] // https://support.mozilla.org/en-US/kb/how-do-i-use-firefox-spell-checker user_pref("layout.spellcheckDefault", 0); // [DESKTOP] // ------------------------------------- -// Pref : Disable "Savant" Shield study -// https://bugzilla.mozilla.org/1457226 -user_pref("shield.savant.enabled", false); // [DESKTOP] -// ------------------------------------- // Pref : Disable social integration with FF user_pref("social.directories", ""); // [DEPRECATED] // [DESKTOP] user_pref("social.remote-install.enabled", false); // [DEPRECATED] // [DESKTOP] @@ -715,12 +685,10 @@ user_pref("security.dialog_enable_delay", 700); user_pref("devtools.debugger.remote-enabled", false); user_pref("devtools.webide.enabled", false); // [DESKTOP] user_pref("devtools.webide.autoinstallADBExtension", false); // [DESKTOP] -user_pref("devtools.webide.autoinstallADBHelper", false); // [DESKTOP] user_pref("devtools.webide.autoinstallFxdtAdapters", false); // [DESKTOP] user_pref("devtools.remote.adb.extensionURL", ""); // [DESKTOP] user_pref("devtools.remote.adb.extensionID", ""); // [DESKTOP] -user_pref("devtools.webide.adaptersAddonURL", ""); // [DESKTOP] // [DEPRECATED] -user_pref("devtools.webide.adbAddonURL", ""); // [DESKTOP] // [DEPRECATED] +user_pref("devtools.webide.adaptersAddonURL", ""); // [DESKTOP] user_pref("devtools.webide.templatesURL", ""); // [DESKTOP] // ------------------------------------- // Pref : Force local debugging @@ -867,16 +835,6 @@ user_pref("browser.tabs.remote.allowLinkedWebInFileUriProcess", false); // [DESK // http://kb.mozillazine.org/Browser.urlbar.filter.javascript user_pref("browser.urlbar.filter.javascript", true); // [DESKTOP] // ------------------------------------- -// Pref : Disable JAR from opening Unsafe File Types -// https://bugzilla.mozilla.org/1427726 -user_pref("network.jar.open-unsafe-types", false); // [DESKTOP] -// ------------------------------------- -// Pref : Disable remote JAR files being opened, regardless of content type -// https://bugzilla.mozilla.org/1173171 -// https://www.fxsitecompat.com/en-CA/docs/2015/jar-protocol-support-has-been-disabled-by-default/ -// https://bugzilla.mozilla.org/1427726 -user_pref("network.jar.block-remote-files", true); // [DEPRECATED] // [DESKTOP] -// ------------------------------------- // Pref : Disable Firefox's built-in PDF reader // This setting controls if the option "Display in Firefox" is available in the setting below and by effect controls whether PDFs are handled in-browser or externally ("Ask" or "Open With") // PROS: pdfjs is lightweight, open source, and as secure/vetted as any pdf reader out there (more than most) @@ -899,7 +857,7 @@ user_pref("security.xpconnect.plugin.unrestricted", false); // [DESKTOP] user_pref("ui.use_standins_for_native_colors", true); // [DESKTOP] // ------------------------------------- // Pref : Close tab with double click action -// user_pref("browser.tabs.closeTabByDblclick", true); // [DESKTOP] +user_pref("browser.tabs.closeTabByDblclick", true); // [DESKTOP] // ------------------------------------- // Pref : Remove special permissions for certain mozilla domains // resource://app/defaults/permissions @@ -1011,10 +969,6 @@ user_pref("dom.IntersectionObserver.enabled", false); // https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/ user_pref("javascript.options.shared_memory", false); // [DEFAULT: false] // ------------------------------------- -// Pref : Enforce DOMHighResTimeStamp API -// [WARNING] Required for normalization of timestamps and any timer resolution mitigations -user_pref("dom.event.highrestimestamp.enabled", true); // [DEFAULT: true] -// ------------------------------------- // Pref : Enable (limited but sufficient) window.opener protection // Makes rel=noopener implicit for target=_blank in anchor and area elements when no rel attribute is set user_pref("dom.targetBlankNoOpener.enabled", true); // [DEFAULT: false] @@ -1108,7 +1062,7 @@ user_pref("media.autoplay.enabled.user-gestures-needed", true); // [DEFAULT: tru // ------------------------------------- // Pref : Disable audio autoplay in non-active tabs // https://www.ghacks.net/2016/11/14/firefox-51-blocks-automatic-audio-playback-in-non-active-tabs/ -user_pref("media.block-autoplay-until-in-foreground", true); // [DEFAULT: false] +user_pref("media.block-autoplay-until-in-foreground", true); // [DEFAULT: true] // // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // Section : Location Bar / Search Bar / Suggestions / History / Forms @@ -1182,9 +1136,8 @@ user_pref("browser.urlbar.daysBeforeHidingSuggestionsPrompt", 0); // [DESKTOP] user_pref("browser.urlbar.searchSuggestionsChoice", false); // [DESKTOP] user_pref("browser.urlbar.timesBeforeHidingSuggestionsHint", 0); // [DESKTOP] // ------------------------------------- -// Pref : Disable URL bar autocomplete and history/bookmarks suggestions dropdown +// Pref : Disable history/bookmarks/opened pages suggestions dropdown from URL bar // [NOTE] This does not cause privacy/leaking issue -user_pref("browser.urlbar.autocomplete.enabled", false); // [DESKTOP] user_pref("browser.urlbar.suggest.history", false); // [DESKTOP] user_pref("browser.urlbar.suggest.bookmark", false); // [DESKTOP] user_pref("browser.urlbar.suggest.openpage", false); // [DESKTOP] @@ -1209,10 +1162,6 @@ user_pref("network.stricttransportsecurity.preloadlist", true); // https://github.com/pyllyukko/user.js/pull/206#issuecomment-280229645 user_pref("security.tls.version.fallback-limit", 3); // ------------------------------------- -// Pref : Enable CSP 1.1 script-nonce directive support -// https://bugzilla.mozilla.org/show_bug.cgi?id=855326 -user_pref("security.csp.experimentalEnabled", true); -// ------------------------------------- // Pref : Enable OCSP Must-Staple support // https://blog.mozilla.org/security/2015/11/23/improving-revocation-ocsp-must-staple-and-short-lived-certificates/ // https://www.entrust.com/ocsp-must-staple/ @@ -1801,17 +1750,14 @@ user_pref("toolkit.winRegisterApplicationRestart", false); // [WINDOWS] // [DESK // >>>>>>>>>>>>>>>>>>>> // Pref : Disable geolocation user_pref("geo.enabled", false); -// user_pref("geo.wifi.xhr.timeout", 0); // ------------------------------------- // Pref : Disable GeoIP lookup on your address to set default search engine region // https://trac.torproject.org/projects/tor/ticket/16254 // https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_geolocation-for-default-search-engine -user_pref("browser.search.countryCode", "US"); // [HIDDEN PREF] user_pref("browser.search.region", "US"); user_pref("browser.search.geoip.url", ""); user_pref("browser.search.geoSpecificDefaults.url", ""); user_pref("browser.snippets.geoUrl", ""); -// user_pref("browser.search.geoip.timeout", 0); // ------------------------------------- // Pref : Set Accept-Language HTTP header user_pref("intl.accept_languages", "en-US, en"); @@ -1938,11 +1884,6 @@ user_pref("media.gmp-widevinecdm.autoupdate", false); // [DESKTOP] // https://www.ghacks.net/2013/07/09/how-to-make-sure-that-a-firefox-plugin-never-activates-again/ user_pref("plugin.state.flash", 0); // [DESKTOP] // ------------------------------------- -// Pref : Disable Java plugin -// 0=deactivated, 1=ask, 2=enabled -// https://bugzilla.mozilla.org/1461243 -user_pref("plugin.state.java", 0); // [DESKTOP] -// ------------------------------------- // Pref : Disable Gnome Shell Integration NPAPI plugin user_pref("plugin.state.libgnome-shell-browser-plugin",0); // [DESKTOP] // ------------------------------------- @@ -2120,18 +2061,6 @@ user_pref("browser.ping-centre.telemetry", false); // [DESKTOP] user_pref("extensions.systemAddon.update.enabled", false); // [DESKTOP] user_pref("extensions.systemAddon.update.url", ""); // ------------------------------------- -// Pref : Disable Experiments -// https://wiki.mozilla.org/Telemetry/Experiments -// https://bugzilla.mozilla.org/buglist.cgi?bug_id=1420908,1450801 -user_pref("experiments.enabled", false); // [DESKTOP] -user_pref("experiments.manifest.uri", ""); // [DESKTOP] -user_pref("experiments.supported", false); // [DESKTOP] -user_pref("experiments.activeExperiment", false); // [DESKTOP] -// ------------------------------------- -// Pref : Disable Mozilla permission to silently opt you into tests -// https://bugzilla.mozilla.org/1415625 -user_pref("network.allow-experiments", false); // [DESKTOP] -// ------------------------------------- // Pref : Disable Normandy/Shield // Shield is an telemetry system (including Heartbeat) that can also push and test "recipes" // https://wiki.mozilla.org/Firefox/Shield @@ -2235,10 +2164,6 @@ user_pref("offline-apps.allow_by_default", false); // [DEFAULT: true] // Pref : Disable download history user_pref("browser.download.manager.retention", 0); // [DESKTOP] // ------------------------------------- -// Pref : When browser.fixup.alternate.enabled is enabled, strip password from 'user:password@...' URLs -// https://github.com/pyllyukko/user.js/issues/290#issuecomment-303560851 -user_pref("browser.fixup.hide_user_pass", true); // [DESKTOP] -// ------------------------------------- // Pref : Enable Firefox to clear items on shutdown user_pref("privacy.sanitize.sanitizeOnShutdown", true); // [DESKTOP] // ------------------------------------- @@ -2402,10 +2327,9 @@ user_pref("media.video_stats.enabled", false); // [DEFAULT: true] // Fingerprinting attack vector - leaks screen res & actual screen coordinates. // 0=disabled, 1=enabled, 2=autodetect // This pref is set to 2 by default, which results in the Touch API being exposed only when touch hardware is present. So we should either set it to "1" (enable) or "0" (disable) to ensure that JS code can't fingerprint the user's hardware. -// [FENNEC - BUG] If disabled, unables you to copy or paste any text. // https://developer.mozilla.org/docs/Web/API/Touch_events // https://trac.torproject.org/projects/tor/ticket/10286 -user_pref("dom.w3c_touch_events.enabled", 1); // [DEFAULT: 2] +user_pref("dom.w3c_touch_events.enabled", 1); // [DEFAULT: 2] // [FENNEC - BUG] ff disabled, disallow copy/paste any text // ------------------------------------- // Pref : Disable MediaDevices change detection // https://developer.mozilla.org/docs/Web/Events/devicechange @@ -2499,10 +2423,9 @@ user_pref("dom.telephony.enabled", false); // Pref : Disable browser animation // https://bugzilla.mozilla.org/show_bug.cgi?id=1352069 // user_pref("toolkit.cosmeticAnimations.enabled", false); // [DESKTOP] -// user_pref("browser.tabs.animate", false); // [DESKTOP] // [DEPRECATED] -// user_pref("browser.fullscreen.animate", false); // [DESKTOP] // [DEPRECATED] -// user_pref("browser.download.animateNotifications", false); // [DESKTOP] // [DEPRECATED] -// user_pref("alerts.disableSlidingEffect", false); // [DESKTOP] // [DEPRECATED] +// ------------------------------------- +// Pref : Displaying small density by default +// user_pref("browser.uidensity", 1); // [DEFAULT: 0] // [DESKTOP] // // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // Section : Personal @@ -2529,9 +2452,6 @@ user_pref("home.sync.updateMode", 1); // [DEFAULT: 0] // [FENNEC] // Pref : Middle-click mouse enabling auto-scrolling user_pref("general.autoScroll", true); // [DESKTOP] // ------------------------------------- -// Pref : Displaying small density by default -// user_pref("browser.uidensity", 1); // [DEFAULT: 0] // [DESKTOP] -// ------------------------------------- // Pref : Disable buttons user_pref("pref.general.disable_button.default_browser", true); // [DESKTOP] user_pref("pref.privacy.disable_button.view_passwords", true); // [DESKTOP] @@ -2542,7 +2462,8 @@ user_pref("pref.privacy.disable_button.view_passwords", true); // [DESKTOP] // Pref : Disable dark theme on forms user_pref("widget.content.gtk-theme-override", "Adwaita"); // [DESKTOP] // ------------------------------------- -// Pref : Disable ctrl+tab back to the old one +// Pref: Disable "Ctrl+Tab cycles through tabs in recently used order" +// https://bugzilla.mozilla.org/1473595 user_pref("browser.ctrlTab.recentlyUsedOrder", false); // [DESKTOP] // ------------------------------------- // Pref : Display long lines in view-source page @@ -2557,4 +2478,145 @@ user_pref("browser.urlbar.clickSelectsAll", true); // Pref : Enable double click selects a string segment in URL bar user_pref("browser.urlbar.doubleClickSelectsAll", false); // [DESKTOP] // -// \ No newline at end of file +// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> +// Section : Deprecated / Removed / Legacy / Renamed +// ESR60.x still uses all the following prefs +// >>>>>>>>>>>>>>>>>>>> +// ------------------------------------- +// FF61+ +// ------------------------------------- +// Pref : Disable Experiments +// https://wiki.mozilla.org/Telemetry/Experiments +// https://bugzilla.mozilla.org/buglist.cgi?bug_id=1420908,1450801 +user_pref("experiments.enabled", false); +user_pref("experiments.manifest.uri", ""); +user_pref("experiments.supported", false); +user_pref("experiments.activeExperiment", false); +// ------------------------------------- +// Pref : Disable remote JAR files being opened, regardless of content type +// https://bugzilla.mozilla.org/1173171 +// https://www.fxsitecompat.com/en-CA/docs/2015/jar-protocol-support-has-been-disabled-by-default/ +// https://bugzilla.mozilla.org/1427726 +user_pref("network.jar.block-remote-files", true); +// ------------------------------------- +// Pref : Disable JAR from opening Unsafe File Types +// https://bugzilla.mozilla.org/1427726 +user_pref("network.jar.open-unsafe-types", false); +// ------------------------------------- +// FF62+ +// ------------------------------------- +// Pref : Disable Java plugin +// 0=deactivated, 1=ask, 2=enabled +// https://bugzilla.mozilla.org/1461243 +user_pref("plugin.state.java", 0); +// ------------------------------------- +// FF63+ +// ------------------------------------- +// Pref : DisableGeoIP-based search results +// [NOTE] May not be hidden if Firefox has changed your settings due to your locale +// https://bugzilla.mozilla.org/1462015 +user_pref("browser.search.countryCode", "US"); // [HIDDEN PREF] +// ------------------------------------- +// Pref : Disable app from auto-update +user_pref("app.update.enabled", false); +// ------------------------------------- +// Pref : Disable "Savant" Shield study +// https://bugzilla.mozilla.org/1457226 +user_pref("shield.savant.enabled", false); +// ------------------------------------- +// Pref : Disable favicons in tabs and new bookmarks +// Merged into "browser.chrome.site_icons" +// https://bugzilla.mozilla.org/1453751 +user_pref("browser.chrome.favicons", false); +// ------------------------------------- +// Pref : Disable autoplay of HTML5 media +// Replaced by "media.autoplay.default" +// https://bugzilla.mozilla.org/1470082 +user_pref("media.autoplay.enabled", false); +// ------------------------------------- +// Pref: Set cookie lifetime in days +// https://bugzilla.mozilla.org/1457170 +// user_pref("network.cookie.lifetime.days", 90); // [DEFAULT: 90] +// ------------------------------------- +// Pref: Enable "Ctrl+Tab cycles through tabs in recently used order" +// Rreplaced by "browser.ctrlTab.recentlyUsedOrder" +// https://bugzilla.mozilla.org/1473595 +user_pref("browser.ctrlTab.previews", true); +// ------------------------------------- +// FF64+ +// ------------------------------------- +// Pref : Disable Onboarding +// [NOTE] This setting is just in case it comeback +// Onboarding is an interactive tour/setup for new installs/profiles and features. Every time +// about:home or about:newtab is opened, the onboarding overlay is injected into that page +// [NOTE] Onboarding uses Google Analytics, and leaks resource://URIs +// https://wiki.mozilla.org/Firefox/Onboarding +// https://github.com/mozilla/onboard/commit/db4d6c8726c89a5d6a241c1b1065827b525c5baf +// https://bugzilla.mozilla.org/863246#c154 +user_pref("browser.onboarding.enabled", false); +user_pref("browser.onboarding.notification.tour-ids-queue", ""); +// ------------------------------------- +// Pref : Disable WebIDE to prevent remote debugging and ADB extension download +// https://developer.mozilla.org/docs/Tools/WebIDE +// https://trac.torproject.org/projects/tor/ticket/16222 +user_pref("devtools.webide.autoinstallADBHelper", false); +user_pref("devtools.webide.adbAddonURL", ""); +// ------------------------------------- +// Pref : Disable CSP violation events +// https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent +// https://bugzilla.mozilla.org/1488165 +user_pref("security.csp.enable_violation_events", false); +// ------------------------------------- +// FF65+ +// ------------------------------------- +// Pref : Disable location bar autocomplete and suggestion types +// https://bugzilla.mozilla.org/1502392 +user_pref("browser.urlbar.autocomplete.enabled", false); +// ------------------------------------- +// Pref : When "browser.fixup.alternate.enabled" is enabled, strip password from 'user:password@...' URLs +// https://github.com/pyllyukko/user.js/issues/290#issuecomment-303560851 +user_pref("browser.fixup.hide_user_pass", true); +// ------------------------------------- +// FF66+ +// ------------------------------------- +// Pref : Disable Browser Error Reporter +// https://support.mozilla.org/en-US/kb/firefox-nightly-error-collection +// https://firefox-source-docs.mozilla.org/browser/browser/BrowserErrorReporter.html +user_pref("browser.chrome.errorReporter.enabled", false); +user_pref("browser.chrome.errorReporter.submitUrl", ""); +user_pref("browser.chrome.errorReporter.infoURL", ""); +// ------------------------------------- +// Pref : Disable Mozilla permission to silently opt you into tests +// https://bugzilla.mozilla.org/1415625 +user_pref("network.allow-experiments", false); +// ------------------------------------- +// FF67+ +// ------------------------------------- +// Pref : Enforce DOMHighResTimeStamp API +// [WARNING] Required for normalization of timestamps and any timer resolution mitigations +user_pref("dom.event.highrestimestamp.enabled", true); // [DEFAULT: true] +// ------------------------------------- +// Pref : Disable Extension Recommendations (CFR: "Contextual Feature Recommender" +// https://support.mozilla.org/en-US/kb/extension-recommendations +user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr", false); +// ------------------------------------- +// FF68+ +// ------------------------------------- +// Pref : Disable Activity Stream Snippets +// Runs code received from a server (aka Remote Code Execution) and sends information back to a metrics server +// https://abouthome-snippets-service.readthedocs.io/ +user_pref("browser.aboutHomeSnippets.updateUrl", ""); +user_pref("browser.newtabpage.activity-stream.disableSnippets", true); +// ------------------------------------- +// Pref : Disable auto updating of lightweight themes (LWT) +// https://blog.mozilla.org/addons/2018/09/20/future-themes-here/ +// https://bugzilla.mozilla.org/1525762 +user_pref("lightweightThemes.update.enabled", false); +// ------------------------------------- +// Pref : Enable CSP 1.1 experimental hash-source directive +// https://bugzilla.mozilla.org/buglist.cgi?bug_id=855326,883975 +// https://bugzilla.mozilla.org/1386214 +user_pref("security.csp.experimentalEnabled", true); +// ------------------------------------- +// FF69+ +// ------------------------------------- \ No newline at end of file