From 3d5276484a5a278b9881867852c9ce67be7e1494 Mon Sep 17 00:00:00 2001 From: earthlng Date: Mon, 19 Feb 2018 11:40:53 +0100 Subject: [PATCH] 0370 fixup data: works perfectly fine here. No need to use https and no need to connect to localhost because something could be listening there. data is the fastest and best solution. --- user.js | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/user.js b/user.js index 2983814..16dfb41 100644 --- a/user.js +++ b/user.js @@ -205,9 +205,8 @@ user_pref("browser.newtabpage.enabled", false); user_pref("browser.newtabpage.enhanced", false); user_pref("browser.newtabpage.introShown", true); /* 0370: disable "Snippets" (Mozilla content shown on about:home screen) - * MUST use HTTPS - arbitrary content injected into this page via http opens up MiTM attacks * [1] https://wiki.mozilla.org/Firefox/Projects/Firefox_Start/Snippet_Service ***/ -user_pref("browser.aboutHomeSnippets.updateUrl", "https://127.0.0.1"); +user_pref("browser.aboutHomeSnippets.updateUrl", "data:,"); /*** 0400: BLOCKLISTS / SAFE BROWSING / TRACKING PROTECTION This section has security & tracking protection implications vs privacy concerns vs effectiveness