forked from d3cim/mozilla.cfg
Update 'config/mozilla.cfg'
Synced all the buildIDs with Tor's ones ✅ Enabled all the internal pages and disabled the related warnings | FF71+ ✅ Sanitized app.releaseNotesURL ✅ Forget about last download directory used ⛔️ Disabled celebrating milestone toast when certain numbers of trackers are blocked | FF71+ ⛔️ Disabled ping to Mozilla for Man-in-the-Middle detection ⛔️ Disabled deprecated TLS versions ⛔️ Disabled all the WebAssembly remaining prefs ⛔️ Disabled telemetry | FF71+ ⛔️ Disabled report browser errors in Nightly to Mozilla ℹ️ Remove all the timeout prefs ℹ️ Reordered and renamed some prefs with better criteria ℹ️ Moved some preferences from FF70+ into deprecated section (keeping them active for ESR68.x)
This commit is contained in:
parent
be4501dcdd
commit
24e23267a3
|
@ -6,8 +6,8 @@
|
|||
*********************************************************************************/
|
||||
//
|
||||
// Author : quindecim : https://git.nixnet.xyz/quindecim
|
||||
// https://git.lelux.fi/quindecim | MIRROR
|
||||
// https://git.lushka.al/quindecim | MIRROR
|
||||
// https://git.lelux.fi/quindecim | MIRROR
|
||||
//
|
||||
//
|
||||
// Based on : gHacks : https://github.com/ghacksuserjs/ghacks-user.js
|
||||
|
@ -151,7 +151,6 @@ lockPref("services.sync.prefs.sync.browser.formfill.enable", false); // [DESKTOP
|
|||
lockPref("services.sync.prefs.sync.browser.link.open_newwindow", false); // [DESKTOP]
|
||||
lockPref("services.sync.prefs.sync.browser.newtabpage.enabled", false); // [DESKTOP]
|
||||
lockPref("services.sync.prefs.sync.browser.newtabpage.pinned", false); // [DESKTOP]
|
||||
lockPref("services.sync.prefs.sync.browser.offline-apps.notify", false); // [DESKTOP]
|
||||
lockPref("services.sync.prefs.sync.browser.search.update", false); // [DESKTOP]
|
||||
lockPref("services.sync.prefs.sync.browser.startup.homepage", false); // [DESKTOP]
|
||||
lockPref("services.sync.prefs.sync.browser.startup.page", false); // [DESKTOP]
|
||||
|
@ -247,8 +246,6 @@ lockPref("services.sync.prefs.sync.privacy.fuzzyfox.clockgrainus", false); // [D
|
|||
lockPref("services.sync.prefs.sync.privacy.fuzzyfox.enabled", false); // [DESKTOP]
|
||||
lockPref("services.sync.prefs.sync.signon.rememberSignons", false); // [DESKTOP]
|
||||
lockPref("services.sync.serverURL", ""); // [DESKTOP]
|
||||
lockPref("services.sync.fxa.privacyURL", ""); // [DESKTOP]
|
||||
lockPref("services.sync.fxa.termsURL", ""); // [DESKTOP]
|
||||
lockPref("services.sync.lastversion", ""); // [DESKTOP]
|
||||
lockPref("sync.serverURL", ""); // [DEPRECATED] // [DESKTOP]
|
||||
lockPref("sync.jpake.serverURL", ""); // [DEPRECATED] // [DESKTOP]
|
||||
|
@ -264,7 +261,6 @@ lockPref("services.sync.prefs.sync.extensions.activeThemeID", false);
|
|||
// https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_auto-update-checking
|
||||
lockPref("browser.search.update", false);
|
||||
lockPref("browser.search.update.log", false);
|
||||
// lockPref("browser.search.update.interval", 0);
|
||||
// -------------------------------------
|
||||
// Pref : Tell the search service that we don't really expose the "current engine"
|
||||
lockPref("browser.search.noCurrentEngine", true); // [DEFAULT: true] // [FENNEC]
|
||||
|
@ -309,6 +305,7 @@ lockPref("toolkit.telemetry.ecosystemtelemetry.enabled", false); // [DESKTOP]
|
|||
lockPref("security.protectionspopup.recordEventTelemetry", false); // [DESKTOP]
|
||||
lockPref("toolkit.telemetry.geckoview.streaming", false);
|
||||
lockPref("toolkit.telemetry.isGeckoViewMode", false);
|
||||
lockPref("toolkit.telemetry.testing.overrideProductsCheck", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable Telemetry Coverage
|
||||
// https://blog.mozilla.org/data/2018/08/20/effectively-measuring-search-in-firefox/
|
||||
|
@ -375,7 +372,6 @@ lockPref("lightweightThemes.persisted.footerURL", false); // [DESKTOP]
|
|||
lockPref("lightweightThemes.recommendedThemes", ""); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
// Pref : Disable Studies and SHIELD
|
||||
// [NOTE] This pref has no effect when Health Reports are disabled
|
||||
lockPref("app.shield.optoutstudies.enabled", false); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
// Pref : Disable backlogged Crash Reports
|
||||
|
@ -394,10 +390,13 @@ lockPref("extensions.getAddons.discovery.api_url", ""); // [DESKTOP]
|
|||
lockPref("extensions.recommendations.privacyPolicyUrl", "");
|
||||
lockPref("extensions.recommendations.themeRecommendationUrl", "");
|
||||
// -------------------------------------
|
||||
// Pref : Disable report extension option in about:addons
|
||||
// Pref : Disable extension's report option in about:addons
|
||||
lockPref("extensions.htmlaboutaddons.enabled", false);
|
||||
lockPref("extensions.abuseReport.enabled", false);
|
||||
lockPref("extensions.abuseReport.url", "");
|
||||
lockPref("extensions.abuseReport.amoDetailsURL", "");
|
||||
lockPref("extensions.abuseReport.amWebAPI.enabled", false);
|
||||
lockPref("extensions.abuseReport.openDialog", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable Firefox Hello metrics collection
|
||||
// https://groups.google.com/d/topic/mozilla.dev.platform/nyVkCx-_sFw/discussion
|
||||
|
@ -405,7 +404,6 @@ lockPref("loop.logDomains", false); // [DESKTOP]
|
|||
// -------------------------------------
|
||||
// Pref : Disable contentblocking reports
|
||||
lockPref("browser.contentblocking.reportBreakage.url", ""); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.rejecttrackers.reportBreakage.enabled", false); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.report.cookie.url", ""); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.report.cryptominer.url", ""); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.report.fingerprinter.url", ""); // [DESKTOP]
|
||||
|
@ -416,15 +414,21 @@ lockPref("browser.contentblocking.report.manage_devices.url", ""); // [DESKTOP]
|
|||
lockPref("browser.contentblocking.report.monitor.enabled", false); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.report.monitor.how_it_works.url", ""); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.report.monitor.sign_in_url", ""); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.report.monitor.url", ""); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.report.proxy.enabled", false); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.report.proxy_extension.url", ""); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.report.social.url", ""); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.report.tracker.url", ""); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.allowlist.annotations.enabled", false); // [FENNEC]
|
||||
lockPref("browser.contentblocking.allowlist.storage.enabled", false); // [FENNEC]
|
||||
// -------------------------------------
|
||||
// Pref : Disable send content blocking log to about:protections
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=1549832
|
||||
lockPref("browser.contentblocking.database.enabled", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable celebrating milestone toast when certain numbers of trackers are blocked
|
||||
lockPref("browser.contentblocking.cfr-milestone.enabled", false); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
// Pref : Onboarding tour disable because of included telemetry
|
||||
// [NOTE] This setting is just in case it comeback
|
||||
lockPref("browser.onboarding.notification.finished", true); // [DESKTOP] // [DEPRECATED]
|
||||
|
@ -452,8 +456,8 @@ lockPref("extensions.screenshots.upload-disabled", true); // [DESKTOP]
|
|||
// https://support.mozilla.org/en-US/kb/how-do-i-use-firefox-spell-checker
|
||||
defaultPref("layout.spellcheckDefault", 0); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
// Pref : Disable Firefox internal page warnings
|
||||
lockPref("network.warnOnAboutNetworking", false);
|
||||
// Pref : Enable Firefox internal pages and disable the related warnings
|
||||
lockPref("general.aboutConfig.enable", true);
|
||||
lockPref("general.warnOnAboutConfig", false);
|
||||
lockPref("browser.aboutConfig.showWarning", false); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
|
@ -475,6 +479,10 @@ lockPref("full-screen-api.warning.timeout", 0);
|
|||
// https://git.sny.no/gecko/commit/?id=5701a142f2a5e89b1b716e0edec0f18d5e513678
|
||||
lockPref("media.webvtt.debug.logging", false);
|
||||
lockPref("media.webvtt.testing.events", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable Firefox Developer Tools
|
||||
// https://developer.mozilla.org/en-US/docs/Tools
|
||||
// lockPref("devtools.enabled", false);
|
||||
//
|
||||
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
|
||||
// Section : IJWY To Shut Up
|
||||
|
@ -487,7 +495,7 @@ lockPref("app.channelURL", ""); // [FENNEC]
|
|||
lockPref("app.creditsURL", ""); // [FENNEC]
|
||||
lockPref("app.faqURL", ""); // [FENNEC]
|
||||
lockPref("app.privacyURL", ""); // [FENNEC]
|
||||
lockPref("app.releaseNotesURL", "");
|
||||
lockPref("app.releaseNotesURL", "https://www.mozilla.org/en-US/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=whatsnew"); // [URL SANITIZED]
|
||||
lockPref("app.support.baseURL", "");
|
||||
lockPref("app.supportURL", ""); // [FENNEC]
|
||||
lockPref("app.vendorURL", ""); // [DESKTOP]
|
||||
|
@ -508,6 +516,7 @@ lockPref("extensions.getAddons.themes.browseURL", ""); // [DESKTOP]
|
|||
lockPref("security.content.signature.root_hash", "");
|
||||
lockPref("identity.mobilepromo.android", ""); // [DESKTOP]
|
||||
lockPref("identity.mobilepromo.ios", ""); // [DESKTOP]
|
||||
lockPref("identity.sendtabpromo.url", ""); // [DESKTOP]
|
||||
lockPref("toolkit.datacollection.infoURL", ""); // [DESKTOP]
|
||||
lockPref("dom.keyboardevent.keypress.hack.dispatch_non_printable_keys", "");
|
||||
lockPref("dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode", "");
|
||||
|
@ -544,7 +553,6 @@ lockPref("browser.translation.ui.show", false); // [DESKTOP]
|
|||
// -------------------------------------
|
||||
// Pref : Disable useragent updates and site specific overrides
|
||||
lockPref("general.useragent.updates.enabled", false); // [FENNEC]
|
||||
lockPref("general.useragent.site_specific_overrides", false); // [DESKTOP]
|
||||
lockPref("general.useragent.updates.url", ""); // [FENNEC]
|
||||
// -------------------------------------
|
||||
// Pref : Decrease vendor useragent info leakage to Mozilla
|
||||
|
@ -561,6 +569,10 @@ lockPref("mailnews.mx_service_url", ""); // [DESKTOP]
|
|||
lockPref("browser.newtabpage.activity-stream.default.sites", ""); // [DESKTOP]
|
||||
lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.havePinned", ""); // [DESKTOP]
|
||||
lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.searchEngines", ""); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
// Pref : Disable report browser errors in Nightly to Mozilla
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=1426482
|
||||
lockPref("browser.chrome.errorReporter.infoURL", "");
|
||||
//
|
||||
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
|
||||
// Section : Miscellaneous
|
||||
|
@ -677,16 +689,12 @@ lockPref("gfx.font_rendering.opentype_svg.enabled", false);
|
|||
// Pref : Ensure you have a security delay when installing add-ons (milliseconds)
|
||||
lockPref("security.dialog_enable_delay", 700);
|
||||
// -------------------------------------
|
||||
// Pref : Disable WebIDE to prevent remote debugging and ADB extension download
|
||||
// Pref : Disable ADB extension download
|
||||
// https://developer.mozilla.org/docs/Tools/WebIDE
|
||||
// https://trac.torproject.org/projects/tor/ticket/16222
|
||||
defaultPref("devtools.debugger.remote-enabled", false);
|
||||
lockPref("devtools.webide.enabled", false); // [DESKTOP]
|
||||
lockPref("devtools.webide.autoinstallADBExtension", false); // [DESKTOP]
|
||||
lockPref("devtools.remote.adb.extensionURL", ""); // [DESKTOP]
|
||||
lockPref("devtools.remote.adb.extensionID", ""); // [DESKTOP]
|
||||
lockPref("devtools.webide.adaptersAddonURL", ""); // [DESKTOP]
|
||||
lockPref("devtools.webide.templatesURL", ""); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
// Pref : Force local debugging
|
||||
// https://developer.mozilla.org/en-US/docs/Tools/Remote_Debugging/Debugging_Firefox_Desktop
|
||||
|
@ -730,12 +738,14 @@ lockPref("webchannel.allowObject.urlWhitelist", "");
|
|||
// [NOTE] May cause black on black for elements with undefined colors
|
||||
// https://bugzilla.mozilla.org/buglist.cgi?bug_id=232227,1330876
|
||||
// lockPref("ui.use_native_colors", true);
|
||||
// -------------------------------------
|
||||
// Pref : Discourage downloading to desktop (0=desktop 1=downloads 2=last used)
|
||||
lockPref("browser.download.folderList", 2);
|
||||
// -------------------------------------
|
||||
// Pref : Enforce user interaction for security by always asking the user where to download
|
||||
// [FENNEC] Fix for images not downloading
|
||||
defaultPref("browser.download.useDownloadDir", false);
|
||||
// Pref : Enforce user interaction, for security, by always asking the user where to download and then forget
|
||||
// [FENNEC] Fix for downloading issues
|
||||
lockPref("browser.download.useDownloadDir", false);
|
||||
lockPref("browser.download.lastDir", ""); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
// Pref : Disable adding downloads to the system's "recent documents" list
|
||||
lockPref("browser.download.manager.addToRecentDocs", false);
|
||||
|
@ -756,7 +766,8 @@ lockPref("extensions.autoDisableScopes", 15); // [DEFAULT: 15]
|
|||
// Pref : Enable warning when websites try to install add-ons
|
||||
lockPref("xpinstall.whitelist.required", true); // [DEFAULT: true]
|
||||
// -------------------------------------
|
||||
// Pref : Enable CSP (Content Security Policy)
|
||||
// Pref : Enforce CSP (Content Security Policy)
|
||||
// [WARNING] CSP is a very important and widespread security feature. Don't disable it!
|
||||
// https://developer.mozilla.org/docs/Web/HTTP/CSP
|
||||
defaultPref("security.csp.enable", true); // [DEFAULT: true]
|
||||
// -------------------------------------
|
||||
|
@ -944,6 +955,12 @@ lockPref("javascript.options.native_regexp", false);
|
|||
// https://en.wikipedia.org/wiki/WebAssembly
|
||||
// https://trac.torproject.org/projects/tor/ticket/21549
|
||||
lockPref("javascript.options.wasm", false);
|
||||
lockPref("javascript.options.wasm_baselinejit", false);
|
||||
lockPref("javascript.options.wasm_cranelift", false);
|
||||
lockPref("javascript.options.wasm_gc", false);
|
||||
lockPref("javascript.options.wasm_ionjit", false);
|
||||
lockPref("javascript.options.wasm_trustedprincipals", false);
|
||||
lockPref("javascript.options.wasm_verbose", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable Intersection Observer API
|
||||
// Almost a year to complete, three versions late to stable (as default false), number #1 cause of crashes in nightly numerous times, and is (primarily) an ad network API for "ad viewability checks" down to a pixel level
|
||||
|
@ -964,9 +981,9 @@ lockPref("dom.targetBlankNoOpener.enabled", true); // [DEFAULT: false]
|
|||
// Pref : Don't reveal build ID
|
||||
// Value taken from Tor Browser for Desktop
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=583181
|
||||
lockPref("browser.startup.homepage_override.buildID", "20190402010101");
|
||||
lockPref("extensions.lastAppBuildId", "20190402010101");
|
||||
lockPref("media.gmp-manager.buildID", "20190402010101");
|
||||
lockPref("browser.startup.homepage_override.buildID", "20190402030101");
|
||||
lockPref("extensions.lastAppBuildId", "20190402030101");
|
||||
lockPref("media.gmp-manager.buildID", "20190402030101");
|
||||
lockPref("browser.sessionstore.upgradeBackup.latestBuildID", ""); // [DESKTOP]
|
||||
lockPref("general.buildID.override", "20100101");
|
||||
// -------------------------------------
|
||||
|
@ -1074,7 +1091,9 @@ lockPref("browser.sessionhistory.max_entries", 20); // [DEFAULT: 50]
|
|||
lockPref("layout.css.visited_links_enabled", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable search suggestions in the search bar
|
||||
lockPref("browser.search.suggest.enabled", false); // [DESKTOP]
|
||||
lockPref("browser.search.suggest.enabled", false);
|
||||
lockPref("browser.search.suggest.enabled.private", false);
|
||||
lockPref("browser.search.suggest.prompted", true); // [FENNEC]
|
||||
// -------------------------------------
|
||||
// Pref : Disable "Show search suggestions in location bar results"
|
||||
lockPref("browser.urlbar.suggest.searches", false); // [DESKTOP]
|
||||
|
@ -1224,6 +1243,14 @@ lockPref("toolkit.startup.max_resumed_crashes", -1); // [DESKTOP]
|
|||
// Pref : Force Encrypted Server Name Indication (eSNI) for TLS 1.3 if TRR/DoH is enabled
|
||||
// [NOTE] I don't encourage DoH (but it is a useful and valid mechanism for those who need it)
|
||||
lockPref("network.security.esni.enabled", true);
|
||||
// -------------------------------------
|
||||
// Pref : Disable ping to Mozilla for Man-in-the-Middle detection
|
||||
// https://blog.torproject.org/new-release-tor-browser-901
|
||||
lockPref("security.certerrors.mitm.priming.enabled", false); // [DESKTOP]
|
||||
lockPref("security.certerrors.mitm.priming.endpoint", ""); // [DESKTOP]
|
||||
lockPref("security.pki.mitm_canary_issuer", "");
|
||||
lockPref("security.pki.mitm_canary_issuer.enabled", false);
|
||||
lockPref("security.pki.mitm_detected", false);
|
||||
//
|
||||
// >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
|
||||
// Section : Block Implicit Outbound
|
||||
|
@ -1236,7 +1263,7 @@ lockPref("network.prefetch-next", false);
|
|||
// Pref : Disable DNS prefetching
|
||||
// https://developer.mozilla.org/en-US/docs/Web/HTTP/Controlling_DNS_prefetching
|
||||
lockPref("network.dns.disablePrefetch", true);
|
||||
lockPref("network.dns.disablePrefetchFromHTTPS", true); // [HIDDEN PREF]
|
||||
lockPref("network.dns.disablePrefetchFromHTTPS", true); // [HIDDEN PREF ESR] [DEFAULT: true]
|
||||
// -------------------------------------
|
||||
// Pref : Disable pinging URIs specified in HTML <a> ping= attributes
|
||||
lockPref("browser.send_pings", false);
|
||||
|
@ -1321,19 +1348,19 @@ lockPref("network.negotiate-auth.allow-insecure-ntlm-v1", false); // [DESKTOP]
|
|||
// Section : HTTPS (SSL/TLS / OCSP / Certs / HPKP / Ciphers)
|
||||
// >>>>>>>>>>>>>>>>>>>>
|
||||
// Pref : Disable old SSL/TLS "insecure" renegotiation (vulnerable to a MiTM attack)
|
||||
// [SETUP-WEB] <2% of secure sites do NOT support the newer "secure" renegotiation
|
||||
// https://wiki.mozilla.org/Security:Renegotiation
|
||||
// https://www.ssllabs.com/ssl-pulse/
|
||||
lockPref("security.ssl.require_safe_negotiation", true);
|
||||
// -------------------------------------
|
||||
// Pref : Control TLS versions with min and max
|
||||
// 1=TLS 1.0, 2=TLS 1.1, 3=TLS 1.2, 4=TLS 1.3
|
||||
// [NOTE] Jul-2017: Telemetry indicates approx 2% of TLS web traffic uses 1.0 or 1.1
|
||||
// https://www.ssl.com/how-to/turn-off-ssl-3-0-and-tls-1-0-in-your-browser/
|
||||
// archived: https://archive.is/hY2Mm
|
||||
// https://www.ssllabs.com/ssl-pulse/
|
||||
lockPref("security.tls.version.min", 3);
|
||||
lockPref("security.tls.version.max", 4);
|
||||
// -------------------------------------
|
||||
// Pref : Disable deprecated TLS versions
|
||||
lockPref("security.tls.version.enable-deprecated", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable SSL Error Reporting
|
||||
// https://firefox-source-docs.mozilla.org/browser/base/sslerrorreport/preferences.html
|
||||
lockPref("security.ssl.errorReporting.enabled", false);
|
||||
|
@ -1601,6 +1628,7 @@ lockPref("security.password_lifetime", 1); // [DEFAULT: 30]
|
|||
// NOTE] Username & password is still available when you enter the field
|
||||
lockPref("signon.autofillForms", false);
|
||||
lockPref("signon.autofillForms.autocompleteOff", true);
|
||||
lockPref("signon.showAutoCompleteOrigins", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable websites autocomplete
|
||||
// Don't let sites dictate use of saved logins and passwords.
|
||||
|
@ -1686,7 +1714,7 @@ lockPref("browser.cache.disk.smart_size.first_run", false);
|
|||
// -------------------------------------
|
||||
// Pref : Disable memory cache
|
||||
// lockPref("browser.cache.memory.enable", false);
|
||||
// lockPref("browser.cache.memory.capacity", 0);
|
||||
// lockPref("browser.cache.memory.capacity", 0); // [HIDDEN PREF ESR]
|
||||
// -------------------------------------
|
||||
// Pref : Disable fastback cache
|
||||
// To improve performance when pressing back/forward Firefox stores visited pages so they don't have to be re-parsed. This is not the same as memory cache.
|
||||
|
@ -1725,7 +1753,7 @@ lockPref("browser.formfill.expire_days", 0);
|
|||
lockPref("browser.shell.shortcutFavicons", false); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
// Pref : Display "insecure" icon and "Not Secure" text on HTTP sites
|
||||
lockPref("security.insecure_connection_icon.enabled", true); // [DESKTOP]
|
||||
lockPref("security.insecure_connection_icon.enabled", true); // [DESKTOP] [DEFAULT: true]
|
||||
lockPref("security.insecure_connection_text.enabled", true); // [DESKTOP]
|
||||
lockPref("security.insecure_connection_icon.pbmode.enabled", true); // [DESKTOP]
|
||||
lockPref("security.insecure_connection_text.pbmode.enabled", true); // [DESKTOP]
|
||||
|
@ -1847,6 +1875,7 @@ lockPref("media.gmp-manager.updateEnabled", false); // [DESKTOP]
|
|||
lockPref("media.gmp.trial-create.enabled", false); // [WINDOWS] // [DESKTOP]
|
||||
// -------------------------------------
|
||||
// Pref : Disable all DRM content (EME: Encryption Media Extension)
|
||||
// [NOTE] if you need CDM, e.g. Netflix, Amazon Prime, Hulu, whatever
|
||||
// https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next
|
||||
defaultPref("media.eme.enabled", false);
|
||||
// -------------------------------------
|
||||
|
@ -1857,6 +1886,7 @@ lockPref("media.gmp-gmpopenh264.autoupdate", false); // [DESKTOP]
|
|||
lockPref("media.gmp-gmpopenh264.visible", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable widevine CDM (Content Decryption Module)
|
||||
// [NOTE] if you need CDM, e.g. Netflix, Amazon Prime, Hulu, whatever
|
||||
lockPref("media.gmp-widevinecdm.enabled", false); // [DESKTOP]
|
||||
lockPref("media.gmp-widevinecdm.visible", false); // [DESKTOP]
|
||||
lockPref("media.mediadrm-widevinecdm.visible", false); // [DEFAULT: true] // [FENNEC]
|
||||
|
@ -1933,7 +1963,7 @@ lockPref("urlclassifier.trackingWhitelistTable", "");
|
|||
// -------------------------------------
|
||||
// Pref : Decrease system information leakage to Mozilla blocklist update servers
|
||||
// https://trac.torproject.org/projects/tor/ticket/16931
|
||||
// https://www.reddit.com/r/firefox/comments/9v5lue/firefox_tip_sanitize_firefox_blocklist_url_so_it/
|
||||
// https://old.reddit.com/r/firefox/comments/9v5lue/firefox_tip_sanitize_firefox_blocklist_url_so_it/
|
||||
lockPref("extensions.blocklist.url", ""); // [URL SANITIZED: https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%20/%20/]
|
||||
// -------------------------------------
|
||||
// Pref : Opt-out of add-on metadata updates
|
||||
|
@ -1988,7 +2018,6 @@ lockPref("browser.safebrowsing.provider.mozilla.nextupdatetime", "");
|
|||
lockPref("browser.safebrowsing.provider.mozilla.pver", "");
|
||||
lockPref("browser.safebrowsing.provider.mozilla.updateURL", "");
|
||||
lockPref("browser.safebrowsing.reportPhishURL", "");
|
||||
// lockPref("browser.safebrowsing.downloads.remote.timeout_ms", 0);
|
||||
// -------------------------------------
|
||||
// Pref : Disable passive Tracking Protection
|
||||
// Passive TP annotates channels to lower the priority of network loads for resources on the tracking protection list.
|
||||
|
@ -2038,7 +2067,6 @@ lockPref("urlclassifier.features.socialtracking.whitelistTables", "");
|
|||
lockPref("urlclassifier.features.socialtracking.annotate.whitelistTables", "");
|
||||
lockPref("urlclassifier.features.socialtracking.annotate.blacklistTables", "");
|
||||
lockPref("privacy.socialtracking.block_cookies.enabled", false); // [DESKTOP]
|
||||
lockPref("privacy.socialtracking.notification.enabled", false); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
// Pref : Disable PingCentre telemetry (used in several System Add-ons)
|
||||
// Currently blocked by 'datareporting.healthreport.uploadEnabled'
|
||||
|
@ -2092,7 +2120,7 @@ lockPref("extensions.formautofill.heuristics.enabled", false); // [DESKTOP]
|
|||
// defaultPref("network.cookie.lifetimePolicy", 2);
|
||||
// -------------------------------------
|
||||
// Pref : Disable 3rd-party cookies and site-data
|
||||
// 0=(Allow) cookies and site data, 1=(Block) All third-party cookies, 2=(Block) All cookies, 3=(Block) Cookies from unvisited sites, 4=(Block) Third-party trackers
|
||||
// 0=(Allow) cookies and site data, 1=(Block) All third-party cookies, 2=(Block) All cookies, 3=(Block) Cookies from unvisited websites, 4=(Block) Cross-site and social media trackers
|
||||
// [NOTE] Can breaks payment gateways
|
||||
defaultPref("network.cookie.cookieBehavior", 1);
|
||||
// -------------------------------------
|
||||
|
@ -2128,16 +2156,10 @@ lockPref("network.cookie.same-site.enabled", true); // [DEFAULT: true]
|
|||
// lockPref("dom.indexedDB.enabled", false); // [DEFAULT: true]
|
||||
// -------------------------------------
|
||||
// Pref : Do not download URLs for the offline cache
|
||||
lockPref("browser.cache.offline.storage.enable", false);
|
||||
lockPref("browser.cache.offline.enable", false);
|
||||
lockPref("browser.cache.offline.capacity", 0);
|
||||
// -------------------------------------
|
||||
// Pref : Disable offline cache on insecure sites
|
||||
// https://blog.mozilla.org/security/2018/02/12/restricting-appcache-secure-contexts/
|
||||
lockPref("browser.cache.offline.insecure.enable", false);
|
||||
// -------------------------------------
|
||||
// Pref : Display a notification bar when websites offer data for offline use
|
||||
lockPref("browser.offline-apps.notify", false); // [DEFAULT: true]
|
||||
// -------------------------------------
|
||||
// Pref : Disable service workers cache and cache storage
|
||||
// https://w3c.github.io/ServiceWorker/#privacy
|
||||
// lockPref("dom.caches.enabled", false);
|
||||
|
@ -2153,11 +2175,6 @@ lockPref("dom.storageManager.enabled", false);
|
|||
// https://developer.mozilla.org/en-US/docs/Web/API/Storage_Access_API
|
||||
lockPref("dom.storage_access.enabled", false);
|
||||
// -------------------------------------
|
||||
// Pref : Enforce websites to ask to store data for offline use
|
||||
// https://support.mozilla.org/questions/1098540
|
||||
// https://bugzilla.mozilla.org/959985
|
||||
lockPref("offline-apps.allow_by_default", false); // [DEFAULT: true]
|
||||
// -------------------------------------
|
||||
// Pref : Disable download history
|
||||
lockPref("browser.download.manager.retention", 0); // [DESKTOP]
|
||||
// -------------------------------------
|
||||
|
@ -2402,7 +2419,7 @@ lockPref("dom.network.enabled", false); // [DESKTOP]
|
|||
// Section : UI (User Interface)
|
||||
// >>>>>>>>>>>>>>>>>>>>>
|
||||
// Pref : Disable third-party cookie UI
|
||||
lockPref("browser.contentblocking.rejecttrackers.ui.enabled", false); // [DESKTOP]
|
||||
lockPref("browser.contentblocking.rejecttrackers.ui.enabled", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable tracking protection UI list editing under preferences
|
||||
lockPref("browser.contentblocking.trackingprotection.ui.enabled", false); // [DESKTOP]
|
||||
|
@ -2552,3 +2569,53 @@ lockPref("signon.management.page.feedbackURL", "");
|
|||
// Pref : Use APP locale over OS locale in regional preferences
|
||||
// https://bugzilla.mozilla.org/buglist.cgi?bug_id=1379420,1364789
|
||||
// lockPref("intl.regional_prefs.use_os_locales", false);
|
||||
// -------------------------------------
|
||||
// FF71+
|
||||
// -------------------------------------
|
||||
// Pref : Display a notification bar when websites offer data for offline use
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=1574480
|
||||
// https://hg.mozilla.org/mozilla-central/rev/9fedd8400ab2
|
||||
lockPref("browser.offline-apps.notify", false);
|
||||
lockPref("services.sync.prefs.sync.browser.offline-apps.notify", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable useragent updates and site specific overrides
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=1513574
|
||||
// https://hg.mozilla.org/mozilla-central/rev/59d191ed3f5b
|
||||
lockPref("general.useragent.site_specific_overrides", false);
|
||||
// -------------------------------------
|
||||
// Pref : Enable / Disable Firefox internal page, and related warnings
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=1589387
|
||||
// https://hg.mozilla.org/integration/autoland/rev/2379847488eb
|
||||
lockPref("network.warnOnAboutNetworking", false);
|
||||
// -------------------------------------
|
||||
// Pref : Enforce websites to ask to store data for offline use
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=1574480
|
||||
// https://hg.mozilla.org/mozilla-central/rev/9fedd8400ab2
|
||||
lockPref("offline-apps.allow_by_default", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable other sync settings (by prevention)
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=1570567
|
||||
// https://hg.mozilla.org/mozilla-central/rev/38ae84bb1ca3
|
||||
lockPref("services.sync.fxa.privacyURL", "");
|
||||
lockPref("services.sync.fxa.termsURL", "");
|
||||
// -------------------------------------
|
||||
// Pref : Disable offline cache on insecure sites
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=1237782
|
||||
// https://hg.mozilla.org/mozilla-central/rev/d52a0108ed8e
|
||||
lockPref("browser.cache.offline.insecure.enable", false);
|
||||
// -------------------------------------
|
||||
// Pref : Disable WebIDE to prevent remote debugging
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=1539462
|
||||
// https://hg.mozilla.org/integration/autoland/rev/eaa523b98e72
|
||||
lockPref("devtools.webide.enabled", false);
|
||||
lockPref("devtools.webide.autoinstallADBExtension", false);
|
||||
lockPref("devtools.webide.templatesURL", "");
|
||||
lockPref("devtools.webide.adaptersAddonURL", "");
|
||||
// -------------------------------------
|
||||
// Pref : Disable social trackingprotection notification
|
||||
// https://bugzilla.mozilla.org/show_bug.cgi?id=1570631
|
||||
// https://hg.mozilla.org/mozilla-central/rev/94c10676584a
|
||||
lockPref("privacy.socialtracking.notification.enabled", false);
|
||||
// -------------------------------------
|
||||
// FF72+
|
||||
// -------------------------------------
|
Loading…
Reference in New Issue