user.js file for configuring and hardening Fennec F-Droid privacy, security and anti-fingerprinting.
This repository has been archived on 2020-10-12. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
quindecim fea114e16a
Update user.js
 Fully synced with gHacks and pyllukko user.js
 Reviewed and added all the "HIDDEN PREFS" from gHacks and pyllyukko
 Reordered some prefs and fixed some text descriptions
 Enabled only whitelisted URL protocol handlers
 Enabled CSP 1.1 script-nonce directive support
 Enabled OCSP Must-Staple support
 Enabled Subresource Integrity by default
 Enabled GCM, ECDHE and key size > 128bits, ChaCha20 and Poly1305 ciphers
 reEnabled ssl3.rsa_aes_128/256_sha due compatibility reasons
 Enforce US English locale regardless of the system locale (hidden pref)
 Enforced websites to ask to store data for offline use

️ Disabled SSDP (Simple Service Discovery Protocol)
️ Disable auto updating of lightweight themes [FENNEC]
️ Romeved some unused prefs
️ Disabled page thumbnail collection
️ Disabled automatic send selection to clipboard (autocopy)
️Disabled middle mouse click paste (useless on android)
️ Disabled clipboard commands (cut/copy) from "non-privileged" content
️ Disabled WebAssembly
️ Disabled DNS prefetching from HTTPS too
️ Disable SSL session tracking by default
️ Disabled GIO as a potential proxy bypass vector
️ Disabled one more GeoIP lookup on your address (hidden pref)
️ Rejected .onion hostnames before passing the to DNS

ℹ️ Set to "2" bookmarks backups in case of system crash
ℹ️ Removed Set browser, os and app locale prefs (figure out that are useless)
ℹ️ Set how often in minutes Firefox should ask for the master password = 1
ℹ️ Set "Delete Search and Form History" from "180" days to "0"
2019-05-07 08:26:05 +00:00
LICENSE.txt Added MIT license 2019-05-01 21:19:59 +00:00
user.js Update user.js 2019-05-07 08:26:05 +00:00