Update 'config/mozilla.cfg'

Synced all the buildIDs with Tor's ones
 Enabled all the internal pages and disabled the related warnings | FF71+
 Sanitized app.releaseNotesURL
 Forget about last download directory used
️ Disabled celebrating milestone toast when certain numbers of trackers are blocked | FF71+
️ Disabled ping to Mozilla for Man-in-the-Middle detection
️ Disabled deprecated TLS versions
️ Disabled all the WebAssembly remaining prefs
️ Disabled telemetry | FF71+
️ Disabled report browser errors in Nightly to Mozilla
ℹ️ Remove all the timeout prefs 
ℹ️ Reordered and renamed some prefs with better criteria
ℹ️ Moved some preferences from FF70+ into deprecated section (keeping them active for ESR68.x)
This commit is contained in:
quindecim 2019-12-04 16:55:45 -05:00
parent be4501dcdd
commit 24e23267a3
1 changed files with 117 additions and 50 deletions

View File

@ -6,8 +6,8 @@
*********************************************************************************/
//
// Author : quindecim : https://git.nixnet.xyz/quindecim
// https://git.lelux.fi/quindecim | MIRROR
// https://git.lushka.al/quindecim | MIRROR
// https://git.lelux.fi/quindecim | MIRROR
//
//
// Based on : gHacks : https://github.com/ghacksuserjs/ghacks-user.js
@ -151,7 +151,6 @@ lockPref("services.sync.prefs.sync.browser.formfill.enable", false); // [DESKTOP
lockPref("services.sync.prefs.sync.browser.link.open_newwindow", false); // [DESKTOP]
lockPref("services.sync.prefs.sync.browser.newtabpage.enabled", false); // [DESKTOP]
lockPref("services.sync.prefs.sync.browser.newtabpage.pinned", false); // [DESKTOP]
lockPref("services.sync.prefs.sync.browser.offline-apps.notify", false); // [DESKTOP]
lockPref("services.sync.prefs.sync.browser.search.update", false); // [DESKTOP]
lockPref("services.sync.prefs.sync.browser.startup.homepage", false); // [DESKTOP]
lockPref("services.sync.prefs.sync.browser.startup.page", false); // [DESKTOP]
@ -247,8 +246,6 @@ lockPref("services.sync.prefs.sync.privacy.fuzzyfox.clockgrainus", false); // [D
lockPref("services.sync.prefs.sync.privacy.fuzzyfox.enabled", false); // [DESKTOP]
lockPref("services.sync.prefs.sync.signon.rememberSignons", false); // [DESKTOP]
lockPref("services.sync.serverURL", ""); // [DESKTOP]
lockPref("services.sync.fxa.privacyURL", ""); // [DESKTOP]
lockPref("services.sync.fxa.termsURL", ""); // [DESKTOP]
lockPref("services.sync.lastversion", ""); // [DESKTOP]
lockPref("sync.serverURL", ""); // [DEPRECATED] // [DESKTOP]
lockPref("sync.jpake.serverURL", ""); // [DEPRECATED] // [DESKTOP]
@ -264,7 +261,6 @@ lockPref("services.sync.prefs.sync.extensions.activeThemeID", false);
// https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_auto-update-checking
lockPref("browser.search.update", false);
lockPref("browser.search.update.log", false);
// lockPref("browser.search.update.interval", 0);
// -------------------------------------
// Pref : Tell the search service that we don't really expose the "current engine"
lockPref("browser.search.noCurrentEngine", true); // [DEFAULT: true] // [FENNEC]
@ -309,6 +305,7 @@ lockPref("toolkit.telemetry.ecosystemtelemetry.enabled", false); // [DESKTOP]
lockPref("security.protectionspopup.recordEventTelemetry", false); // [DESKTOP]
lockPref("toolkit.telemetry.geckoview.streaming", false);
lockPref("toolkit.telemetry.isGeckoViewMode", false);
lockPref("toolkit.telemetry.testing.overrideProductsCheck", false);
// -------------------------------------
// Pref : Disable Telemetry Coverage
// https://blog.mozilla.org/data/2018/08/20/effectively-measuring-search-in-firefox/
@ -375,7 +372,6 @@ lockPref("lightweightThemes.persisted.footerURL", false); // [DESKTOP]
lockPref("lightweightThemes.recommendedThemes", ""); // [DESKTOP]
// -------------------------------------
// Pref : Disable Studies and SHIELD
// [NOTE] This pref has no effect when Health Reports are disabled
lockPref("app.shield.optoutstudies.enabled", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable backlogged Crash Reports
@ -394,10 +390,13 @@ lockPref("extensions.getAddons.discovery.api_url", ""); // [DESKTOP]
lockPref("extensions.recommendations.privacyPolicyUrl", "");
lockPref("extensions.recommendations.themeRecommendationUrl", "");
// -------------------------------------
// Pref : Disable report extension option in about:addons
// Pref : Disable extension's report option in about:addons
lockPref("extensions.htmlaboutaddons.enabled", false);
lockPref("extensions.abuseReport.enabled", false);
lockPref("extensions.abuseReport.url", "");
lockPref("extensions.abuseReport.amoDetailsURL", "");
lockPref("extensions.abuseReport.amWebAPI.enabled", false);
lockPref("extensions.abuseReport.openDialog", false);
// -------------------------------------
// Pref : Disable Firefox Hello metrics collection
// https://groups.google.com/d/topic/mozilla.dev.platform/nyVkCx-_sFw/discussion
@ -405,7 +404,6 @@ lockPref("loop.logDomains", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable contentblocking reports
lockPref("browser.contentblocking.reportBreakage.url", ""); // [DESKTOP]
lockPref("browser.contentblocking.rejecttrackers.reportBreakage.enabled", false); // [DESKTOP]
lockPref("browser.contentblocking.report.cookie.url", ""); // [DESKTOP]
lockPref("browser.contentblocking.report.cryptominer.url", ""); // [DESKTOP]
lockPref("browser.contentblocking.report.fingerprinter.url", ""); // [DESKTOP]
@ -416,15 +414,21 @@ lockPref("browser.contentblocking.report.manage_devices.url", ""); // [DESKTOP]
lockPref("browser.contentblocking.report.monitor.enabled", false); // [DESKTOP]
lockPref("browser.contentblocking.report.monitor.how_it_works.url", ""); // [DESKTOP]
lockPref("browser.contentblocking.report.monitor.sign_in_url", ""); // [DESKTOP]
lockPref("browser.contentblocking.report.monitor.url", ""); // [DESKTOP]
lockPref("browser.contentblocking.report.proxy.enabled", false); // [DESKTOP]
lockPref("browser.contentblocking.report.proxy_extension.url", ""); // [DESKTOP]
lockPref("browser.contentblocking.report.social.url", ""); // [DESKTOP]
lockPref("browser.contentblocking.report.tracker.url", ""); // [DESKTOP]
lockPref("browser.contentblocking.allowlist.annotations.enabled", false); // [FENNEC]
lockPref("browser.contentblocking.allowlist.storage.enabled", false); // [FENNEC]
// -------------------------------------
// Pref : Disable send content blocking log to about:protections
// https://bugzilla.mozilla.org/show_bug.cgi?id=1549832
lockPref("browser.contentblocking.database.enabled", false);
// -------------------------------------
// Pref : Disable celebrating milestone toast when certain numbers of trackers are blocked
lockPref("browser.contentblocking.cfr-milestone.enabled", false); // [DESKTOP]
// -------------------------------------
// Pref : Onboarding tour disable because of included telemetry
// [NOTE] This setting is just in case it comeback
lockPref("browser.onboarding.notification.finished", true); // [DESKTOP] // [DEPRECATED]
@ -452,8 +456,8 @@ lockPref("extensions.screenshots.upload-disabled", true); // [DESKTOP]
// https://support.mozilla.org/en-US/kb/how-do-i-use-firefox-spell-checker
defaultPref("layout.spellcheckDefault", 0); // [DESKTOP]
// -------------------------------------
// Pref : Disable Firefox internal page warnings
lockPref("network.warnOnAboutNetworking", false);
// Pref : Enable Firefox internal pages and disable the related warnings
lockPref("general.aboutConfig.enable", true);
lockPref("general.warnOnAboutConfig", false);
lockPref("browser.aboutConfig.showWarning", false); // [DESKTOP]
// -------------------------------------
@ -475,6 +479,10 @@ lockPref("full-screen-api.warning.timeout", 0);
// https://git.sny.no/gecko/commit/?id=5701a142f2a5e89b1b716e0edec0f18d5e513678
lockPref("media.webvtt.debug.logging", false);
lockPref("media.webvtt.testing.events", false);
// -------------------------------------
// Pref : Disable Firefox Developer Tools
// https://developer.mozilla.org/en-US/docs/Tools
// lockPref("devtools.enabled", false);
//
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
// Section : IJWY To Shut Up
@ -487,7 +495,7 @@ lockPref("app.channelURL", ""); // [FENNEC]
lockPref("app.creditsURL", ""); // [FENNEC]
lockPref("app.faqURL", ""); // [FENNEC]
lockPref("app.privacyURL", ""); // [FENNEC]
lockPref("app.releaseNotesURL", "");
lockPref("app.releaseNotesURL", "https://www.mozilla.org/en-US/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=whatsnew"); // [URL SANITIZED]
lockPref("app.support.baseURL", "");
lockPref("app.supportURL", ""); // [FENNEC]
lockPref("app.vendorURL", ""); // [DESKTOP]
@ -508,6 +516,7 @@ lockPref("extensions.getAddons.themes.browseURL", ""); // [DESKTOP]
lockPref("security.content.signature.root_hash", "");
lockPref("identity.mobilepromo.android", ""); // [DESKTOP]
lockPref("identity.mobilepromo.ios", ""); // [DESKTOP]
lockPref("identity.sendtabpromo.url", ""); // [DESKTOP]
lockPref("toolkit.datacollection.infoURL", ""); // [DESKTOP]
lockPref("dom.keyboardevent.keypress.hack.dispatch_non_printable_keys", "");
lockPref("dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode", "");
@ -544,7 +553,6 @@ lockPref("browser.translation.ui.show", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable useragent updates and site specific overrides
lockPref("general.useragent.updates.enabled", false); // [FENNEC]
lockPref("general.useragent.site_specific_overrides", false); // [DESKTOP]
lockPref("general.useragent.updates.url", ""); // [FENNEC]
// -------------------------------------
// Pref : Decrease vendor useragent info leakage to Mozilla
@ -561,6 +569,10 @@ lockPref("mailnews.mx_service_url", ""); // [DESKTOP]
lockPref("browser.newtabpage.activity-stream.default.sites", ""); // [DESKTOP]
lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.havePinned", ""); // [DESKTOP]
lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.searchEngines", ""); // [DESKTOP]
// -------------------------------------
// Pref : Disable report browser errors in Nightly to Mozilla
// https://bugzilla.mozilla.org/show_bug.cgi?id=1426482
lockPref("browser.chrome.errorReporter.infoURL", "");
//
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
// Section : Miscellaneous
@ -677,16 +689,12 @@ lockPref("gfx.font_rendering.opentype_svg.enabled", false);
// Pref : Ensure you have a security delay when installing add-ons (milliseconds)
lockPref("security.dialog_enable_delay", 700);
// -------------------------------------
// Pref : Disable WebIDE to prevent remote debugging and ADB extension download
// Pref : Disable ADB extension download
// https://developer.mozilla.org/docs/Tools/WebIDE
// https://trac.torproject.org/projects/tor/ticket/16222
defaultPref("devtools.debugger.remote-enabled", false);
lockPref("devtools.webide.enabled", false); // [DESKTOP]
lockPref("devtools.webide.autoinstallADBExtension", false); // [DESKTOP]
lockPref("devtools.remote.adb.extensionURL", ""); // [DESKTOP]
lockPref("devtools.remote.adb.extensionID", ""); // [DESKTOP]
lockPref("devtools.webide.adaptersAddonURL", ""); // [DESKTOP]
lockPref("devtools.webide.templatesURL", ""); // [DESKTOP]
// -------------------------------------
// Pref : Force local debugging
// https://developer.mozilla.org/en-US/docs/Tools/Remote_Debugging/Debugging_Firefox_Desktop
@ -730,12 +738,14 @@ lockPref("webchannel.allowObject.urlWhitelist", "");
// [NOTE] May cause black on black for elements with undefined colors
// https://bugzilla.mozilla.org/buglist.cgi?bug_id=232227,1330876
// lockPref("ui.use_native_colors", true);
// -------------------------------------
// Pref : Discourage downloading to desktop (0=desktop 1=downloads 2=last used)
lockPref("browser.download.folderList", 2);
// -------------------------------------
// Pref : Enforce user interaction for security by always asking the user where to download
// [FENNEC] Fix for images not downloading
defaultPref("browser.download.useDownloadDir", false);
// Pref : Enforce user interaction, for security, by always asking the user where to download and then forget
// [FENNEC] Fix for downloading issues
lockPref("browser.download.useDownloadDir", false);
lockPref("browser.download.lastDir", ""); // [DESKTOP]
// -------------------------------------
// Pref : Disable adding downloads to the system's "recent documents" list
lockPref("browser.download.manager.addToRecentDocs", false);
@ -756,7 +766,8 @@ lockPref("extensions.autoDisableScopes", 15); // [DEFAULT: 15]
// Pref : Enable warning when websites try to install add-ons
lockPref("xpinstall.whitelist.required", true); // [DEFAULT: true]
// -------------------------------------
// Pref : Enable CSP (Content Security Policy)
// Pref : Enforce CSP (Content Security Policy)
// [WARNING] CSP is a very important and widespread security feature. Don't disable it!
// https://developer.mozilla.org/docs/Web/HTTP/CSP
defaultPref("security.csp.enable", true); // [DEFAULT: true]
// -------------------------------------
@ -944,6 +955,12 @@ lockPref("javascript.options.native_regexp", false);
// https://en.wikipedia.org/wiki/WebAssembly
// https://trac.torproject.org/projects/tor/ticket/21549
lockPref("javascript.options.wasm", false);
lockPref("javascript.options.wasm_baselinejit", false);
lockPref("javascript.options.wasm_cranelift", false);
lockPref("javascript.options.wasm_gc", false);
lockPref("javascript.options.wasm_ionjit", false);
lockPref("javascript.options.wasm_trustedprincipals", false);
lockPref("javascript.options.wasm_verbose", false);
// -------------------------------------
// Pref : Disable Intersection Observer API
// Almost a year to complete, three versions late to stable (as default false), number #1 cause of crashes in nightly numerous times, and is (primarily) an ad network API for "ad viewability checks" down to a pixel level
@ -964,9 +981,9 @@ lockPref("dom.targetBlankNoOpener.enabled", true); // [DEFAULT: false]
// Pref : Don't reveal build ID
// Value taken from Tor Browser for Desktop
// https://bugzilla.mozilla.org/show_bug.cgi?id=583181
lockPref("browser.startup.homepage_override.buildID", "20190402010101");
lockPref("extensions.lastAppBuildId", "20190402010101");
lockPref("media.gmp-manager.buildID", "20190402010101");
lockPref("browser.startup.homepage_override.buildID", "20190402030101");
lockPref("extensions.lastAppBuildId", "20190402030101");
lockPref("media.gmp-manager.buildID", "20190402030101");
lockPref("browser.sessionstore.upgradeBackup.latestBuildID", ""); // [DESKTOP]
lockPref("general.buildID.override", "20100101");
// -------------------------------------
@ -1074,7 +1091,9 @@ lockPref("browser.sessionhistory.max_entries", 20); // [DEFAULT: 50]
lockPref("layout.css.visited_links_enabled", false);
// -------------------------------------
// Pref : Disable search suggestions in the search bar
lockPref("browser.search.suggest.enabled", false); // [DESKTOP]
lockPref("browser.search.suggest.enabled", false);
lockPref("browser.search.suggest.enabled.private", false);
lockPref("browser.search.suggest.prompted", true); // [FENNEC]
// -------------------------------------
// Pref : Disable "Show search suggestions in location bar results"
lockPref("browser.urlbar.suggest.searches", false); // [DESKTOP]
@ -1224,6 +1243,14 @@ lockPref("toolkit.startup.max_resumed_crashes", -1); // [DESKTOP]
// Pref : Force Encrypted Server Name Indication (eSNI) for TLS 1.3 if TRR/DoH is enabled
// [NOTE] I don't encourage DoH (but it is a useful and valid mechanism for those who need it)
lockPref("network.security.esni.enabled", true);
// -------------------------------------
// Pref : Disable ping to Mozilla for Man-in-the-Middle detection
// https://blog.torproject.org/new-release-tor-browser-901
lockPref("security.certerrors.mitm.priming.enabled", false); // [DESKTOP]
lockPref("security.certerrors.mitm.priming.endpoint", ""); // [DESKTOP]
lockPref("security.pki.mitm_canary_issuer", "");
lockPref("security.pki.mitm_canary_issuer.enabled", false);
lockPref("security.pki.mitm_detected", false);
//
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
// Section : Block Implicit Outbound
@ -1236,7 +1263,7 @@ lockPref("network.prefetch-next", false);
// Pref : Disable DNS prefetching
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Controlling_DNS_prefetching
lockPref("network.dns.disablePrefetch", true);
lockPref("network.dns.disablePrefetchFromHTTPS", true); // [HIDDEN PREF]
lockPref("network.dns.disablePrefetchFromHTTPS", true); // [HIDDEN PREF ESR] [DEFAULT: true]
// -------------------------------------
// Pref : Disable pinging URIs specified in HTML <a> ping= attributes
lockPref("browser.send_pings", false);
@ -1321,19 +1348,19 @@ lockPref("network.negotiate-auth.allow-insecure-ntlm-v1", false); // [DESKTOP]
// Section : HTTPS (SSL/TLS / OCSP / Certs / HPKP / Ciphers)
// >>>>>>>>>>>>>>>>>>>>
// Pref : Disable old SSL/TLS "insecure" renegotiation (vulnerable to a MiTM attack)
// [SETUP-WEB] <2% of secure sites do NOT support the newer "secure" renegotiation
// https://wiki.mozilla.org/Security:Renegotiation
// https://www.ssllabs.com/ssl-pulse/
lockPref("security.ssl.require_safe_negotiation", true);
// -------------------------------------
// Pref : Control TLS versions with min and max
// 1=TLS 1.0, 2=TLS 1.1, 3=TLS 1.2, 4=TLS 1.3
// [NOTE] Jul-2017: Telemetry indicates approx 2% of TLS web traffic uses 1.0 or 1.1
// https://www.ssl.com/how-to/turn-off-ssl-3-0-and-tls-1-0-in-your-browser/
// archived: https://archive.is/hY2Mm
// https://www.ssllabs.com/ssl-pulse/
lockPref("security.tls.version.min", 3);
lockPref("security.tls.version.max", 4);
// -------------------------------------
// Pref : Disable deprecated TLS versions
lockPref("security.tls.version.enable-deprecated", false);
// -------------------------------------
// Pref : Disable SSL Error Reporting
// https://firefox-source-docs.mozilla.org/browser/base/sslerrorreport/preferences.html
lockPref("security.ssl.errorReporting.enabled", false);
@ -1601,6 +1628,7 @@ lockPref("security.password_lifetime", 1); // [DEFAULT: 30]
// NOTE] Username & password is still available when you enter the field
lockPref("signon.autofillForms", false);
lockPref("signon.autofillForms.autocompleteOff", true);
lockPref("signon.showAutoCompleteOrigins", false);
// -------------------------------------
// Pref : Disable websites autocomplete
// Don't let sites dictate use of saved logins and passwords.
@ -1686,7 +1714,7 @@ lockPref("browser.cache.disk.smart_size.first_run", false);
// -------------------------------------
// Pref : Disable memory cache
// lockPref("browser.cache.memory.enable", false);
// lockPref("browser.cache.memory.capacity", 0);
// lockPref("browser.cache.memory.capacity", 0); // [HIDDEN PREF ESR]
// -------------------------------------
// Pref : Disable fastback cache
// To improve performance when pressing back/forward Firefox stores visited pages so they don't have to be re-parsed. This is not the same as memory cache.
@ -1725,7 +1753,7 @@ lockPref("browser.formfill.expire_days", 0);
lockPref("browser.shell.shortcutFavicons", false); // [DESKTOP]
// -------------------------------------
// Pref : Display "insecure" icon and "Not Secure" text on HTTP sites
lockPref("security.insecure_connection_icon.enabled", true); // [DESKTOP]
lockPref("security.insecure_connection_icon.enabled", true); // [DESKTOP] [DEFAULT: true]
lockPref("security.insecure_connection_text.enabled", true); // [DESKTOP]
lockPref("security.insecure_connection_icon.pbmode.enabled", true); // [DESKTOP]
lockPref("security.insecure_connection_text.pbmode.enabled", true); // [DESKTOP]
@ -1847,6 +1875,7 @@ lockPref("media.gmp-manager.updateEnabled", false); // [DESKTOP]
lockPref("media.gmp.trial-create.enabled", false); // [WINDOWS] // [DESKTOP]
// -------------------------------------
// Pref : Disable all DRM content (EME: Encryption Media Extension)
// [NOTE] if you need CDM, e.g. Netflix, Amazon Prime, Hulu, whatever
// https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next
defaultPref("media.eme.enabled", false);
// -------------------------------------
@ -1857,6 +1886,7 @@ lockPref("media.gmp-gmpopenh264.autoupdate", false); // [DESKTOP]
lockPref("media.gmp-gmpopenh264.visible", false);
// -------------------------------------
// Pref : Disable widevine CDM (Content Decryption Module)
// [NOTE] if you need CDM, e.g. Netflix, Amazon Prime, Hulu, whatever
lockPref("media.gmp-widevinecdm.enabled", false); // [DESKTOP]
lockPref("media.gmp-widevinecdm.visible", false); // [DESKTOP]
lockPref("media.mediadrm-widevinecdm.visible", false); // [DEFAULT: true] // [FENNEC]
@ -1933,7 +1963,7 @@ lockPref("urlclassifier.trackingWhitelistTable", "");
// -------------------------------------
// Pref : Decrease system information leakage to Mozilla blocklist update servers
// https://trac.torproject.org/projects/tor/ticket/16931
// https://www.reddit.com/r/firefox/comments/9v5lue/firefox_tip_sanitize_firefox_blocklist_url_so_it/
// https://old.reddit.com/r/firefox/comments/9v5lue/firefox_tip_sanitize_firefox_blocklist_url_so_it/
lockPref("extensions.blocklist.url", ""); // [URL SANITIZED: https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%20/%20/]
// -------------------------------------
// Pref : Opt-out of add-on metadata updates
@ -1988,7 +2018,6 @@ lockPref("browser.safebrowsing.provider.mozilla.nextupdatetime", "");
lockPref("browser.safebrowsing.provider.mozilla.pver", "");
lockPref("browser.safebrowsing.provider.mozilla.updateURL", "");
lockPref("browser.safebrowsing.reportPhishURL", "");
// lockPref("browser.safebrowsing.downloads.remote.timeout_ms", 0);
// -------------------------------------
// Pref : Disable passive Tracking Protection
// Passive TP annotates channels to lower the priority of network loads for resources on the tracking protection list.
@ -2038,7 +2067,6 @@ lockPref("urlclassifier.features.socialtracking.whitelistTables", "");
lockPref("urlclassifier.features.socialtracking.annotate.whitelistTables", "");
lockPref("urlclassifier.features.socialtracking.annotate.blacklistTables", "");
lockPref("privacy.socialtracking.block_cookies.enabled", false); // [DESKTOP]
lockPref("privacy.socialtracking.notification.enabled", false); // [DESKTOP]
// -------------------------------------
// Pref : Disable PingCentre telemetry (used in several System Add-ons)
// Currently blocked by 'datareporting.healthreport.uploadEnabled'
@ -2092,7 +2120,7 @@ lockPref("extensions.formautofill.heuristics.enabled", false); // [DESKTOP]
// defaultPref("network.cookie.lifetimePolicy", 2);
// -------------------------------------
// Pref : Disable 3rd-party cookies and site-data
// 0=(Allow) cookies and site data, 1=(Block) All third-party cookies, 2=(Block) All cookies, 3=(Block) Cookies from unvisited sites, 4=(Block) Third-party trackers
// 0=(Allow) cookies and site data, 1=(Block) All third-party cookies, 2=(Block) All cookies, 3=(Block) Cookies from unvisited websites, 4=(Block) Cross-site and social media trackers
// [NOTE] Can breaks payment gateways
defaultPref("network.cookie.cookieBehavior", 1);
// -------------------------------------
@ -2128,16 +2156,10 @@ lockPref("network.cookie.same-site.enabled", true); // [DEFAULT: true]
// lockPref("dom.indexedDB.enabled", false); // [DEFAULT: true]
// -------------------------------------
// Pref : Do not download URLs for the offline cache
lockPref("browser.cache.offline.storage.enable", false);
lockPref("browser.cache.offline.enable", false);
lockPref("browser.cache.offline.capacity", 0);
// -------------------------------------
// Pref : Disable offline cache on insecure sites
// https://blog.mozilla.org/security/2018/02/12/restricting-appcache-secure-contexts/
lockPref("browser.cache.offline.insecure.enable", false);
// -------------------------------------
// Pref : Display a notification bar when websites offer data for offline use
lockPref("browser.offline-apps.notify", false); // [DEFAULT: true]
// -------------------------------------
// Pref : Disable service workers cache and cache storage
// https://w3c.github.io/ServiceWorker/#privacy
// lockPref("dom.caches.enabled", false);
@ -2153,11 +2175,6 @@ lockPref("dom.storageManager.enabled", false);
// https://developer.mozilla.org/en-US/docs/Web/API/Storage_Access_API
lockPref("dom.storage_access.enabled", false);
// -------------------------------------
// Pref : Enforce websites to ask to store data for offline use
// https://support.mozilla.org/questions/1098540
// https://bugzilla.mozilla.org/959985
lockPref("offline-apps.allow_by_default", false); // [DEFAULT: true]
// -------------------------------------
// Pref : Disable download history
lockPref("browser.download.manager.retention", 0); // [DESKTOP]
// -------------------------------------
@ -2402,7 +2419,7 @@ lockPref("dom.network.enabled", false); // [DESKTOP]
// Section : UI (User Interface)
// >>>>>>>>>>>>>>>>>>>>>
// Pref : Disable third-party cookie UI
lockPref("browser.contentblocking.rejecttrackers.ui.enabled", false); // [DESKTOP]
lockPref("browser.contentblocking.rejecttrackers.ui.enabled", false);
// -------------------------------------
// Pref : Disable tracking protection UI list editing under preferences
lockPref("browser.contentblocking.trackingprotection.ui.enabled", false); // [DESKTOP]
@ -2551,4 +2568,54 @@ lockPref("signon.management.page.feedbackURL", "");
// -------------------------------------
// Pref : Use APP locale over OS locale in regional preferences
// https://bugzilla.mozilla.org/buglist.cgi?bug_id=1379420,1364789
// lockPref("intl.regional_prefs.use_os_locales", false);
// lockPref("intl.regional_prefs.use_os_locales", false);
// -------------------------------------
// FF71+
// -------------------------------------
// Pref : Display a notification bar when websites offer data for offline use
// https://bugzilla.mozilla.org/show_bug.cgi?id=1574480
// https://hg.mozilla.org/mozilla-central/rev/9fedd8400ab2
lockPref("browser.offline-apps.notify", false);
lockPref("services.sync.prefs.sync.browser.offline-apps.notify", false);
// -------------------------------------
// Pref : Disable useragent updates and site specific overrides
// https://bugzilla.mozilla.org/show_bug.cgi?id=1513574
// https://hg.mozilla.org/mozilla-central/rev/59d191ed3f5b
lockPref("general.useragent.site_specific_overrides", false);
// -------------------------------------
// Pref : Enable / Disable Firefox internal page, and related warnings
// https://bugzilla.mozilla.org/show_bug.cgi?id=1589387
// https://hg.mozilla.org/integration/autoland/rev/2379847488eb
lockPref("network.warnOnAboutNetworking", false);
// -------------------------------------
// Pref : Enforce websites to ask to store data for offline use
// https://bugzilla.mozilla.org/show_bug.cgi?id=1574480
// https://hg.mozilla.org/mozilla-central/rev/9fedd8400ab2
lockPref("offline-apps.allow_by_default", false);
// -------------------------------------
// Pref : Disable other sync settings (by prevention)
// https://bugzilla.mozilla.org/show_bug.cgi?id=1570567
// https://hg.mozilla.org/mozilla-central/rev/38ae84bb1ca3
lockPref("services.sync.fxa.privacyURL", "");
lockPref("services.sync.fxa.termsURL", "");
// -------------------------------------
// Pref : Disable offline cache on insecure sites
// https://bugzilla.mozilla.org/show_bug.cgi?id=1237782
// https://hg.mozilla.org/mozilla-central/rev/d52a0108ed8e
lockPref("browser.cache.offline.insecure.enable", false);
// -------------------------------------
// Pref : Disable WebIDE to prevent remote debugging
// https://bugzilla.mozilla.org/show_bug.cgi?id=1539462
// https://hg.mozilla.org/integration/autoland/rev/eaa523b98e72
lockPref("devtools.webide.enabled", false);
lockPref("devtools.webide.autoinstallADBExtension", false);
lockPref("devtools.webide.templatesURL", "");
lockPref("devtools.webide.adaptersAddonURL", "");
// -------------------------------------
// Pref : Disable social trackingprotection notification
// https://bugzilla.mozilla.org/show_bug.cgi?id=1570631
// https://hg.mozilla.org/mozilla-central/rev/94c10676584a
lockPref("privacy.socialtracking.notification.enabled", false);
// -------------------------------------
// FF72+
// -------------------------------------