diff --git a/config/mozilla.cfg b/config/mozilla.cfg index b3ee0ee..6652cd4 100644 --- a/config/mozilla.cfg +++ b/config/mozilla.cfg @@ -6,8 +6,8 @@ *********************************************************************************/ // // Author : quindecim : https://git.nixnet.xyz/quindecim -// https://git.lelux.fi/quindecim | MIRROR // https://git.lushka.al/quindecim | MIRROR +// https://git.lelux.fi/quindecim | MIRROR // // // Based on : gHacks : https://github.com/ghacksuserjs/ghacks-user.js @@ -151,7 +151,6 @@ lockPref("services.sync.prefs.sync.browser.formfill.enable", false); // [DESKTOP lockPref("services.sync.prefs.sync.browser.link.open_newwindow", false); // [DESKTOP] lockPref("services.sync.prefs.sync.browser.newtabpage.enabled", false); // [DESKTOP] lockPref("services.sync.prefs.sync.browser.newtabpage.pinned", false); // [DESKTOP] -lockPref("services.sync.prefs.sync.browser.offline-apps.notify", false); // [DESKTOP] lockPref("services.sync.prefs.sync.browser.search.update", false); // [DESKTOP] lockPref("services.sync.prefs.sync.browser.startup.homepage", false); // [DESKTOP] lockPref("services.sync.prefs.sync.browser.startup.page", false); // [DESKTOP] @@ -247,8 +246,6 @@ lockPref("services.sync.prefs.sync.privacy.fuzzyfox.clockgrainus", false); // [D lockPref("services.sync.prefs.sync.privacy.fuzzyfox.enabled", false); // [DESKTOP] lockPref("services.sync.prefs.sync.signon.rememberSignons", false); // [DESKTOP] lockPref("services.sync.serverURL", ""); // [DESKTOP] -lockPref("services.sync.fxa.privacyURL", ""); // [DESKTOP] -lockPref("services.sync.fxa.termsURL", ""); // [DESKTOP] lockPref("services.sync.lastversion", ""); // [DESKTOP] lockPref("sync.serverURL", ""); // [DEPRECATED] // [DESKTOP] lockPref("sync.jpake.serverURL", ""); // [DEPRECATED] // [DESKTOP] @@ -264,7 +261,6 @@ lockPref("services.sync.prefs.sync.extensions.activeThemeID", false); // https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_auto-update-checking lockPref("browser.search.update", false); lockPref("browser.search.update.log", false); -// lockPref("browser.search.update.interval", 0); // ------------------------------------- // Pref : Tell the search service that we don't really expose the "current engine" lockPref("browser.search.noCurrentEngine", true); // [DEFAULT: true] // [FENNEC] @@ -309,6 +305,7 @@ lockPref("toolkit.telemetry.ecosystemtelemetry.enabled", false); // [DESKTOP] lockPref("security.protectionspopup.recordEventTelemetry", false); // [DESKTOP] lockPref("toolkit.telemetry.geckoview.streaming", false); lockPref("toolkit.telemetry.isGeckoViewMode", false); +lockPref("toolkit.telemetry.testing.overrideProductsCheck", false); // ------------------------------------- // Pref : Disable Telemetry Coverage // https://blog.mozilla.org/data/2018/08/20/effectively-measuring-search-in-firefox/ @@ -375,7 +372,6 @@ lockPref("lightweightThemes.persisted.footerURL", false); // [DESKTOP] lockPref("lightweightThemes.recommendedThemes", ""); // [DESKTOP] // ------------------------------------- // Pref : Disable Studies and SHIELD -// [NOTE] This pref has no effect when Health Reports are disabled lockPref("app.shield.optoutstudies.enabled", false); // [DESKTOP] // ------------------------------------- // Pref : Disable backlogged Crash Reports @@ -394,10 +390,13 @@ lockPref("extensions.getAddons.discovery.api_url", ""); // [DESKTOP] lockPref("extensions.recommendations.privacyPolicyUrl", ""); lockPref("extensions.recommendations.themeRecommendationUrl", ""); // ------------------------------------- -// Pref : Disable report extension option in about:addons +// Pref : Disable extension's report option in about:addons lockPref("extensions.htmlaboutaddons.enabled", false); lockPref("extensions.abuseReport.enabled", false); lockPref("extensions.abuseReport.url", ""); +lockPref("extensions.abuseReport.amoDetailsURL", ""); +lockPref("extensions.abuseReport.amWebAPI.enabled", false); +lockPref("extensions.abuseReport.openDialog", false); // ------------------------------------- // Pref : Disable Firefox Hello metrics collection // https://groups.google.com/d/topic/mozilla.dev.platform/nyVkCx-_sFw/discussion @@ -405,7 +404,6 @@ lockPref("loop.logDomains", false); // [DESKTOP] // ------------------------------------- // Pref : Disable contentblocking reports lockPref("browser.contentblocking.reportBreakage.url", ""); // [DESKTOP] -lockPref("browser.contentblocking.rejecttrackers.reportBreakage.enabled", false); // [DESKTOP] lockPref("browser.contentblocking.report.cookie.url", ""); // [DESKTOP] lockPref("browser.contentblocking.report.cryptominer.url", ""); // [DESKTOP] lockPref("browser.contentblocking.report.fingerprinter.url", ""); // [DESKTOP] @@ -416,15 +414,21 @@ lockPref("browser.contentblocking.report.manage_devices.url", ""); // [DESKTOP] lockPref("browser.contentblocking.report.monitor.enabled", false); // [DESKTOP] lockPref("browser.contentblocking.report.monitor.how_it_works.url", ""); // [DESKTOP] lockPref("browser.contentblocking.report.monitor.sign_in_url", ""); // [DESKTOP] +lockPref("browser.contentblocking.report.monitor.url", ""); // [DESKTOP] lockPref("browser.contentblocking.report.proxy.enabled", false); // [DESKTOP] lockPref("browser.contentblocking.report.proxy_extension.url", ""); // [DESKTOP] lockPref("browser.contentblocking.report.social.url", ""); // [DESKTOP] lockPref("browser.contentblocking.report.tracker.url", ""); // [DESKTOP] +lockPref("browser.contentblocking.allowlist.annotations.enabled", false); // [FENNEC] +lockPref("browser.contentblocking.allowlist.storage.enabled", false); // [FENNEC] // ------------------------------------- // Pref : Disable send content blocking log to about:protections // https://bugzilla.mozilla.org/show_bug.cgi?id=1549832 lockPref("browser.contentblocking.database.enabled", false); // ------------------------------------- +// Pref : Disable celebrating milestone toast when certain numbers of trackers are blocked +lockPref("browser.contentblocking.cfr-milestone.enabled", false); // [DESKTOP] +// ------------------------------------- // Pref : Onboarding tour disable because of included telemetry // [NOTE] This setting is just in case it comeback lockPref("browser.onboarding.notification.finished", true); // [DESKTOP] // [DEPRECATED] @@ -452,8 +456,8 @@ lockPref("extensions.screenshots.upload-disabled", true); // [DESKTOP] // https://support.mozilla.org/en-US/kb/how-do-i-use-firefox-spell-checker defaultPref("layout.spellcheckDefault", 0); // [DESKTOP] // ------------------------------------- -// Pref : Disable Firefox internal page warnings -lockPref("network.warnOnAboutNetworking", false); +// Pref : Enable Firefox internal pages and disable the related warnings +lockPref("general.aboutConfig.enable", true); lockPref("general.warnOnAboutConfig", false); lockPref("browser.aboutConfig.showWarning", false); // [DESKTOP] // ------------------------------------- @@ -475,6 +479,10 @@ lockPref("full-screen-api.warning.timeout", 0); // https://git.sny.no/gecko/commit/?id=5701a142f2a5e89b1b716e0edec0f18d5e513678 lockPref("media.webvtt.debug.logging", false); lockPref("media.webvtt.testing.events", false); +// ------------------------------------- +// Pref : Disable Firefox Developer Tools +// https://developer.mozilla.org/en-US/docs/Tools +// lockPref("devtools.enabled", false); // // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // Section : IJWY To Shut Up @@ -487,7 +495,7 @@ lockPref("app.channelURL", ""); // [FENNEC] lockPref("app.creditsURL", ""); // [FENNEC] lockPref("app.faqURL", ""); // [FENNEC] lockPref("app.privacyURL", ""); // [FENNEC] -lockPref("app.releaseNotesURL", ""); +lockPref("app.releaseNotesURL", "https://www.mozilla.org/en-US/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=whatsnew"); // [URL SANITIZED] lockPref("app.support.baseURL", ""); lockPref("app.supportURL", ""); // [FENNEC] lockPref("app.vendorURL", ""); // [DESKTOP] @@ -508,6 +516,7 @@ lockPref("extensions.getAddons.themes.browseURL", ""); // [DESKTOP] lockPref("security.content.signature.root_hash", ""); lockPref("identity.mobilepromo.android", ""); // [DESKTOP] lockPref("identity.mobilepromo.ios", ""); // [DESKTOP] +lockPref("identity.sendtabpromo.url", ""); // [DESKTOP] lockPref("toolkit.datacollection.infoURL", ""); // [DESKTOP] lockPref("dom.keyboardevent.keypress.hack.dispatch_non_printable_keys", ""); lockPref("dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode", ""); @@ -544,7 +553,6 @@ lockPref("browser.translation.ui.show", false); // [DESKTOP] // ------------------------------------- // Pref : Disable useragent updates and site specific overrides lockPref("general.useragent.updates.enabled", false); // [FENNEC] -lockPref("general.useragent.site_specific_overrides", false); // [DESKTOP] lockPref("general.useragent.updates.url", ""); // [FENNEC] // ------------------------------------- // Pref : Decrease vendor useragent info leakage to Mozilla @@ -561,6 +569,10 @@ lockPref("mailnews.mx_service_url", ""); // [DESKTOP] lockPref("browser.newtabpage.activity-stream.default.sites", ""); // [DESKTOP] lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.havePinned", ""); // [DESKTOP] lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.searchEngines", ""); // [DESKTOP] +// ------------------------------------- +// Pref : Disable report browser errors in Nightly to Mozilla +// https://bugzilla.mozilla.org/show_bug.cgi?id=1426482 +lockPref("browser.chrome.errorReporter.infoURL", ""); // // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // Section : Miscellaneous @@ -677,16 +689,12 @@ lockPref("gfx.font_rendering.opentype_svg.enabled", false); // Pref : Ensure you have a security delay when installing add-ons (milliseconds) lockPref("security.dialog_enable_delay", 700); // ------------------------------------- -// Pref : Disable WebIDE to prevent remote debugging and ADB extension download +// Pref : Disable ADB extension download // https://developer.mozilla.org/docs/Tools/WebIDE // https://trac.torproject.org/projects/tor/ticket/16222 defaultPref("devtools.debugger.remote-enabled", false); -lockPref("devtools.webide.enabled", false); // [DESKTOP] -lockPref("devtools.webide.autoinstallADBExtension", false); // [DESKTOP] lockPref("devtools.remote.adb.extensionURL", ""); // [DESKTOP] lockPref("devtools.remote.adb.extensionID", ""); // [DESKTOP] -lockPref("devtools.webide.adaptersAddonURL", ""); // [DESKTOP] -lockPref("devtools.webide.templatesURL", ""); // [DESKTOP] // ------------------------------------- // Pref : Force local debugging // https://developer.mozilla.org/en-US/docs/Tools/Remote_Debugging/Debugging_Firefox_Desktop @@ -730,12 +738,14 @@ lockPref("webchannel.allowObject.urlWhitelist", ""); // [NOTE] May cause black on black for elements with undefined colors // https://bugzilla.mozilla.org/buglist.cgi?bug_id=232227,1330876 // lockPref("ui.use_native_colors", true); +// ------------------------------------- // Pref : Discourage downloading to desktop (0=desktop 1=downloads 2=last used) lockPref("browser.download.folderList", 2); // ------------------------------------- -// Pref : Enforce user interaction for security by always asking the user where to download -// [FENNEC] Fix for images not downloading -defaultPref("browser.download.useDownloadDir", false); +// Pref : Enforce user interaction, for security, by always asking the user where to download and then forget +// [FENNEC] Fix for downloading issues +lockPref("browser.download.useDownloadDir", false); +lockPref("browser.download.lastDir", ""); // [DESKTOP] // ------------------------------------- // Pref : Disable adding downloads to the system's "recent documents" list lockPref("browser.download.manager.addToRecentDocs", false); @@ -756,7 +766,8 @@ lockPref("extensions.autoDisableScopes", 15); // [DEFAULT: 15] // Pref : Enable warning when websites try to install add-ons lockPref("xpinstall.whitelist.required", true); // [DEFAULT: true] // ------------------------------------- -// Pref : Enable CSP (Content Security Policy) +// Pref : Enforce CSP (Content Security Policy) +// [WARNING] CSP is a very important and widespread security feature. Don't disable it! // https://developer.mozilla.org/docs/Web/HTTP/CSP defaultPref("security.csp.enable", true); // [DEFAULT: true] // ------------------------------------- @@ -944,6 +955,12 @@ lockPref("javascript.options.native_regexp", false); // https://en.wikipedia.org/wiki/WebAssembly // https://trac.torproject.org/projects/tor/ticket/21549 lockPref("javascript.options.wasm", false); +lockPref("javascript.options.wasm_baselinejit", false); +lockPref("javascript.options.wasm_cranelift", false); +lockPref("javascript.options.wasm_gc", false); +lockPref("javascript.options.wasm_ionjit", false); +lockPref("javascript.options.wasm_trustedprincipals", false); +lockPref("javascript.options.wasm_verbose", false); // ------------------------------------- // Pref : Disable Intersection Observer API // Almost a year to complete, three versions late to stable (as default false), number #1 cause of crashes in nightly numerous times, and is (primarily) an ad network API for "ad viewability checks" down to a pixel level @@ -964,9 +981,9 @@ lockPref("dom.targetBlankNoOpener.enabled", true); // [DEFAULT: false] // Pref : Don't reveal build ID // Value taken from Tor Browser for Desktop // https://bugzilla.mozilla.org/show_bug.cgi?id=583181 -lockPref("browser.startup.homepage_override.buildID", "20190402010101"); -lockPref("extensions.lastAppBuildId", "20190402010101"); -lockPref("media.gmp-manager.buildID", "20190402010101"); +lockPref("browser.startup.homepage_override.buildID", "20190402030101"); +lockPref("extensions.lastAppBuildId", "20190402030101"); +lockPref("media.gmp-manager.buildID", "20190402030101"); lockPref("browser.sessionstore.upgradeBackup.latestBuildID", ""); // [DESKTOP] lockPref("general.buildID.override", "20100101"); // ------------------------------------- @@ -1074,7 +1091,9 @@ lockPref("browser.sessionhistory.max_entries", 20); // [DEFAULT: 50] lockPref("layout.css.visited_links_enabled", false); // ------------------------------------- // Pref : Disable search suggestions in the search bar -lockPref("browser.search.suggest.enabled", false); // [DESKTOP] +lockPref("browser.search.suggest.enabled", false); +lockPref("browser.search.suggest.enabled.private", false); +lockPref("browser.search.suggest.prompted", true); // [FENNEC] // ------------------------------------- // Pref : Disable "Show search suggestions in location bar results" lockPref("browser.urlbar.suggest.searches", false); // [DESKTOP] @@ -1224,6 +1243,14 @@ lockPref("toolkit.startup.max_resumed_crashes", -1); // [DESKTOP] // Pref : Force Encrypted Server Name Indication (eSNI) for TLS 1.3 if TRR/DoH is enabled // [NOTE] I don't encourage DoH (but it is a useful and valid mechanism for those who need it) lockPref("network.security.esni.enabled", true); +// ------------------------------------- +// Pref : Disable ping to Mozilla for Man-in-the-Middle detection +// https://blog.torproject.org/new-release-tor-browser-901 +lockPref("security.certerrors.mitm.priming.enabled", false); // [DESKTOP] +lockPref("security.certerrors.mitm.priming.endpoint", ""); // [DESKTOP] +lockPref("security.pki.mitm_canary_issuer", ""); +lockPref("security.pki.mitm_canary_issuer.enabled", false); +lockPref("security.pki.mitm_detected", false); // // >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> // Section : Block Implicit Outbound @@ -1236,7 +1263,7 @@ lockPref("network.prefetch-next", false); // Pref : Disable DNS prefetching // https://developer.mozilla.org/en-US/docs/Web/HTTP/Controlling_DNS_prefetching lockPref("network.dns.disablePrefetch", true); -lockPref("network.dns.disablePrefetchFromHTTPS", true); // [HIDDEN PREF] +lockPref("network.dns.disablePrefetchFromHTTPS", true); // [HIDDEN PREF ESR] [DEFAULT: true] // ------------------------------------- // Pref : Disable pinging URIs specified in HTML ping= attributes lockPref("browser.send_pings", false); @@ -1321,19 +1348,19 @@ lockPref("network.negotiate-auth.allow-insecure-ntlm-v1", false); // [DESKTOP] // Section : HTTPS (SSL/TLS / OCSP / Certs / HPKP / Ciphers) // >>>>>>>>>>>>>>>>>>>> // Pref : Disable old SSL/TLS "insecure" renegotiation (vulnerable to a MiTM attack) -// [SETUP-WEB] <2% of secure sites do NOT support the newer "secure" renegotiation // https://wiki.mozilla.org/Security:Renegotiation -// https://www.ssllabs.com/ssl-pulse/ lockPref("security.ssl.require_safe_negotiation", true); // ------------------------------------- // Pref : Control TLS versions with min and max // 1=TLS 1.0, 2=TLS 1.1, 3=TLS 1.2, 4=TLS 1.3 // [NOTE] Jul-2017: Telemetry indicates approx 2% of TLS web traffic uses 1.0 or 1.1 -// https://www.ssl.com/how-to/turn-off-ssl-3-0-and-tls-1-0-in-your-browser/ -// archived: https://archive.is/hY2Mm +// https://www.ssllabs.com/ssl-pulse/ lockPref("security.tls.version.min", 3); lockPref("security.tls.version.max", 4); // ------------------------------------- +// Pref : Disable deprecated TLS versions +lockPref("security.tls.version.enable-deprecated", false); +// ------------------------------------- // Pref : Disable SSL Error Reporting // https://firefox-source-docs.mozilla.org/browser/base/sslerrorreport/preferences.html lockPref("security.ssl.errorReporting.enabled", false); @@ -1601,6 +1628,7 @@ lockPref("security.password_lifetime", 1); // [DEFAULT: 30] // NOTE] Username & password is still available when you enter the field lockPref("signon.autofillForms", false); lockPref("signon.autofillForms.autocompleteOff", true); +lockPref("signon.showAutoCompleteOrigins", false); // ------------------------------------- // Pref : Disable websites autocomplete // Don't let sites dictate use of saved logins and passwords. @@ -1686,7 +1714,7 @@ lockPref("browser.cache.disk.smart_size.first_run", false); // ------------------------------------- // Pref : Disable memory cache // lockPref("browser.cache.memory.enable", false); -// lockPref("browser.cache.memory.capacity", 0); +// lockPref("browser.cache.memory.capacity", 0); // [HIDDEN PREF ESR] // ------------------------------------- // Pref : Disable fastback cache // To improve performance when pressing back/forward Firefox stores visited pages so they don't have to be re-parsed. This is not the same as memory cache. @@ -1725,7 +1753,7 @@ lockPref("browser.formfill.expire_days", 0); lockPref("browser.shell.shortcutFavicons", false); // [DESKTOP] // ------------------------------------- // Pref : Display "insecure" icon and "Not Secure" text on HTTP sites -lockPref("security.insecure_connection_icon.enabled", true); // [DESKTOP] +lockPref("security.insecure_connection_icon.enabled", true); // [DESKTOP] [DEFAULT: true] lockPref("security.insecure_connection_text.enabled", true); // [DESKTOP] lockPref("security.insecure_connection_icon.pbmode.enabled", true); // [DESKTOP] lockPref("security.insecure_connection_text.pbmode.enabled", true); // [DESKTOP] @@ -1847,6 +1875,7 @@ lockPref("media.gmp-manager.updateEnabled", false); // [DESKTOP] lockPref("media.gmp.trial-create.enabled", false); // [WINDOWS] // [DESKTOP] // ------------------------------------- // Pref : Disable all DRM content (EME: Encryption Media Extension) +// [NOTE] if you need CDM, e.g. Netflix, Amazon Prime, Hulu, whatever // https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next defaultPref("media.eme.enabled", false); // ------------------------------------- @@ -1857,6 +1886,7 @@ lockPref("media.gmp-gmpopenh264.autoupdate", false); // [DESKTOP] lockPref("media.gmp-gmpopenh264.visible", false); // ------------------------------------- // Pref : Disable widevine CDM (Content Decryption Module) +// [NOTE] if you need CDM, e.g. Netflix, Amazon Prime, Hulu, whatever lockPref("media.gmp-widevinecdm.enabled", false); // [DESKTOP] lockPref("media.gmp-widevinecdm.visible", false); // [DESKTOP] lockPref("media.mediadrm-widevinecdm.visible", false); // [DEFAULT: true] // [FENNEC] @@ -1933,7 +1963,7 @@ lockPref("urlclassifier.trackingWhitelistTable", ""); // ------------------------------------- // Pref : Decrease system information leakage to Mozilla blocklist update servers // https://trac.torproject.org/projects/tor/ticket/16931 -// https://www.reddit.com/r/firefox/comments/9v5lue/firefox_tip_sanitize_firefox_blocklist_url_so_it/ +// https://old.reddit.com/r/firefox/comments/9v5lue/firefox_tip_sanitize_firefox_blocklist_url_so_it/ lockPref("extensions.blocklist.url", ""); // [URL SANITIZED: https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%20/%20/] // ------------------------------------- // Pref : Opt-out of add-on metadata updates @@ -1988,7 +2018,6 @@ lockPref("browser.safebrowsing.provider.mozilla.nextupdatetime", ""); lockPref("browser.safebrowsing.provider.mozilla.pver", ""); lockPref("browser.safebrowsing.provider.mozilla.updateURL", ""); lockPref("browser.safebrowsing.reportPhishURL", ""); -// lockPref("browser.safebrowsing.downloads.remote.timeout_ms", 0); // ------------------------------------- // Pref : Disable passive Tracking Protection // Passive TP annotates channels to lower the priority of network loads for resources on the tracking protection list. @@ -2038,7 +2067,6 @@ lockPref("urlclassifier.features.socialtracking.whitelistTables", ""); lockPref("urlclassifier.features.socialtracking.annotate.whitelistTables", ""); lockPref("urlclassifier.features.socialtracking.annotate.blacklistTables", ""); lockPref("privacy.socialtracking.block_cookies.enabled", false); // [DESKTOP] -lockPref("privacy.socialtracking.notification.enabled", false); // [DESKTOP] // ------------------------------------- // Pref : Disable PingCentre telemetry (used in several System Add-ons) // Currently blocked by 'datareporting.healthreport.uploadEnabled' @@ -2092,7 +2120,7 @@ lockPref("extensions.formautofill.heuristics.enabled", false); // [DESKTOP] // defaultPref("network.cookie.lifetimePolicy", 2); // ------------------------------------- // Pref : Disable 3rd-party cookies and site-data -// 0=(Allow) cookies and site data, 1=(Block) All third-party cookies, 2=(Block) All cookies, 3=(Block) Cookies from unvisited sites, 4=(Block) Third-party trackers +// 0=(Allow) cookies and site data, 1=(Block) All third-party cookies, 2=(Block) All cookies, 3=(Block) Cookies from unvisited websites, 4=(Block) Cross-site and social media trackers // [NOTE] Can breaks payment gateways defaultPref("network.cookie.cookieBehavior", 1); // ------------------------------------- @@ -2128,16 +2156,10 @@ lockPref("network.cookie.same-site.enabled", true); // [DEFAULT: true] // lockPref("dom.indexedDB.enabled", false); // [DEFAULT: true] // ------------------------------------- // Pref : Do not download URLs for the offline cache +lockPref("browser.cache.offline.storage.enable", false); lockPref("browser.cache.offline.enable", false); lockPref("browser.cache.offline.capacity", 0); // ------------------------------------- -// Pref : Disable offline cache on insecure sites -// https://blog.mozilla.org/security/2018/02/12/restricting-appcache-secure-contexts/ -lockPref("browser.cache.offline.insecure.enable", false); -// ------------------------------------- -// Pref : Display a notification bar when websites offer data for offline use -lockPref("browser.offline-apps.notify", false); // [DEFAULT: true] -// ------------------------------------- // Pref : Disable service workers cache and cache storage // https://w3c.github.io/ServiceWorker/#privacy // lockPref("dom.caches.enabled", false); @@ -2153,11 +2175,6 @@ lockPref("dom.storageManager.enabled", false); // https://developer.mozilla.org/en-US/docs/Web/API/Storage_Access_API lockPref("dom.storage_access.enabled", false); // ------------------------------------- -// Pref : Enforce websites to ask to store data for offline use -// https://support.mozilla.org/questions/1098540 -// https://bugzilla.mozilla.org/959985 -lockPref("offline-apps.allow_by_default", false); // [DEFAULT: true] -// ------------------------------------- // Pref : Disable download history lockPref("browser.download.manager.retention", 0); // [DESKTOP] // ------------------------------------- @@ -2402,7 +2419,7 @@ lockPref("dom.network.enabled", false); // [DESKTOP] // Section : UI (User Interface) // >>>>>>>>>>>>>>>>>>>>> // Pref : Disable third-party cookie UI -lockPref("browser.contentblocking.rejecttrackers.ui.enabled", false); // [DESKTOP] +lockPref("browser.contentblocking.rejecttrackers.ui.enabled", false); // ------------------------------------- // Pref : Disable tracking protection UI list editing under preferences lockPref("browser.contentblocking.trackingprotection.ui.enabled", false); // [DESKTOP] @@ -2551,4 +2568,54 @@ lockPref("signon.management.page.feedbackURL", ""); // ------------------------------------- // Pref : Use APP locale over OS locale in regional preferences // https://bugzilla.mozilla.org/buglist.cgi?bug_id=1379420,1364789 -// lockPref("intl.regional_prefs.use_os_locales", false); \ No newline at end of file +// lockPref("intl.regional_prefs.use_os_locales", false); +// ------------------------------------- +// FF71+ +// ------------------------------------- +// Pref : Display a notification bar when websites offer data for offline use +// https://bugzilla.mozilla.org/show_bug.cgi?id=1574480 +// https://hg.mozilla.org/mozilla-central/rev/9fedd8400ab2 +lockPref("browser.offline-apps.notify", false); +lockPref("services.sync.prefs.sync.browser.offline-apps.notify", false); +// ------------------------------------- +// Pref : Disable useragent updates and site specific overrides +// https://bugzilla.mozilla.org/show_bug.cgi?id=1513574 +// https://hg.mozilla.org/mozilla-central/rev/59d191ed3f5b +lockPref("general.useragent.site_specific_overrides", false); +// ------------------------------------- +// Pref : Enable / Disable Firefox internal page, and related warnings +// https://bugzilla.mozilla.org/show_bug.cgi?id=1589387 +// https://hg.mozilla.org/integration/autoland/rev/2379847488eb +lockPref("network.warnOnAboutNetworking", false); +// ------------------------------------- +// Pref : Enforce websites to ask to store data for offline use +// https://bugzilla.mozilla.org/show_bug.cgi?id=1574480 +// https://hg.mozilla.org/mozilla-central/rev/9fedd8400ab2 +lockPref("offline-apps.allow_by_default", false); +// ------------------------------------- +// Pref : Disable other sync settings (by prevention) +// https://bugzilla.mozilla.org/show_bug.cgi?id=1570567 +// https://hg.mozilla.org/mozilla-central/rev/38ae84bb1ca3 +lockPref("services.sync.fxa.privacyURL", ""); +lockPref("services.sync.fxa.termsURL", ""); +// ------------------------------------- +// Pref : Disable offline cache on insecure sites +// https://bugzilla.mozilla.org/show_bug.cgi?id=1237782 +// https://hg.mozilla.org/mozilla-central/rev/d52a0108ed8e +lockPref("browser.cache.offline.insecure.enable", false); +// ------------------------------------- +// Pref : Disable WebIDE to prevent remote debugging +// https://bugzilla.mozilla.org/show_bug.cgi?id=1539462 +// https://hg.mozilla.org/integration/autoland/rev/eaa523b98e72 +lockPref("devtools.webide.enabled", false); +lockPref("devtools.webide.autoinstallADBExtension", false); +lockPref("devtools.webide.templatesURL", ""); +lockPref("devtools.webide.adaptersAddonURL", ""); +// ------------------------------------- +// Pref : Disable social trackingprotection notification +// https://bugzilla.mozilla.org/show_bug.cgi?id=1570631 +// https://hg.mozilla.org/mozilla-central/rev/94c10676584a +lockPref("privacy.socialtracking.notification.enabled", false); +// ------------------------------------- +// FF72+ +// ------------------------------------- \ No newline at end of file