From 74f029566ecbd757abac025e1e7ec45add1ac6d6 Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Tue, 4 Dec 2018 10:34:02 +0000 Subject: [PATCH] enforce DOMHighResTimeStamp API #491 flipped true in FF54: https://bugzilla.mozilla.org/show_bug.cgi?id=1026804 but unsure when the pref itself was introduced. note: other timing prefs were always in 2400's see 4602: [2411] disable resource/navigation timing / 4603: [2412] disable timing attacks --- user.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/user.js b/user.js index 14e2c7c..8033427 100644 --- a/user.js +++ b/user.js @@ -1208,6 +1208,9 @@ user_pref("dom.IntersectionObserver.enabled", false); * [1] https://github.com/tc39/ecmascript_sharedmem/blob/master/TUTORIAL.md * [2] https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/ ***/ user_pref("javascript.options.shared_memory", false); +/* 2428: enforce DOMHighResTimeStamp API + * [WARNING] Required for normalization of timestamps and any timer resolution mitigations ***/ +user_pref("dom.event.highrestimestamp.enabled", true); // default: true /*** [SECTION 2500]: HARDWARE FINGERPRINTING ***/ user_pref("_user.js.parrot", "2500 syntax error: the parrot's shuffled off 'is mortal coil!");