From 31b1f6624e0a289b37e51a4520a8dee5dcef3598 Mon Sep 17 00:00:00 2001
From: earthlng <earthlng@users.noreply.github.com>
Date: Fri, 18 Aug 2017 12:28:12 +0200
Subject: [PATCH] subresource-img-cross-origin-http-auth-allow;false

https://github.com/ghacksuserjs/ghacks-user.js/issues/144#issuecomment-321980962
https://github.com/ghacksuserjs/ghacks-user.js/issues/144#issuecomment-322903835
---
 user.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/user.js b/user.js
index d8c26a4..d768202 100644
--- a/user.js
+++ b/user.js
@@ -529,6 +529,9 @@ user_pref("signon.formlessCapture.enabled", false);
  * [3] https://bugzilla.mozilla.org/show_bug.cgi?id=1319119 ***/
 user_pref("signon.autofillForms.http", false);
 user_pref("security.insecure_field_warning.contextual.enabled", true);
+/* 0911: prevent cross-origin images from triggering an HTTP-Authentication prompt (FF55+)
+ * [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1357835 ***/
+user_pref("network.auth.subresource-img-cross-origin-http-auth-allow", false);
 
 /*** 1000: CACHE [SETUP] ***/
 user_pref("ghacks_user.js.parrot", "1000 syntax error: the parrot's gone to meet 'is maker!");