v108 (#1606)
This commit is contained in:
Thorin-Oakenpants
GitHub
parent
f5e54b4a70
commit
be376afc1e
37
user.js
37
user.js
|
|
@ -1,7 +1,7 @@
|
|||
/******
|
||||
* name: arkenfox user.js
|
||||
* date: 21 November 2022
|
||||
* version: 107
|
||||
* date: 9 January 2023
|
||||
* version: 108
|
||||
* url: https://github.com/arkenfox/user.js
|
||||
* license: MIT: https://github.com/arkenfox/user.js/blob/master/LICENSE.txt
|
||||
|
||||
|
|
@ -110,13 +110,6 @@ user_pref("geo.provider.ms-windows-location", false); // [WINDOWS]
|
|||
user_pref("geo.provider.use_corelocation", false); // [MAC]
|
||||
user_pref("geo.provider.use_gpsd", false); // [LINUX]
|
||||
user_pref("geo.provider.use_geoclue", false); // [FF102+] [LINUX]
|
||||
/* 0203: disable region updates
|
||||
* [1] https://firefox-source-docs.mozilla.org/toolkit/modules/toolkit_modules/Region.html ***/
|
||||
user_pref("browser.region.update.enabled", false); // [FF79+]
|
||||
// user_pref("browser.region.network.url", ""); // [FF78+] Defense-in-depth
|
||||
/* 0204: set search region
|
||||
* [NOTE] May not be hidden if Firefox has changed your settings due to your region (0203) ***/
|
||||
// user_pref("browser.search.region", "US"); // [HIDDEN PREF]
|
||||
/* 0210: set preferred language for displaying pages
|
||||
* [SETTING] General>Language and Appearance>Language>Choose your preferred language...
|
||||
* [TEST] https://addons.mozilla.org/about ***/
|
||||
|
|
@ -268,6 +261,7 @@ user_pref("_user.js.parrot", "0700 syntax error: the parrot's given up the ghost
|
|||
/* 0701: disable IPv6
|
||||
* IPv6 can be abused, especially with MAC addresses, and can leak with VPNs: assuming
|
||||
* your ISP and/or router and/or website is IPv6 capable. Most sites will fall back to IPv4
|
||||
* [SETUP-WEB] PR_CONNECT_RESET_ERROR: this pref *might* be the cause
|
||||
* [STATS] Firefox telemetry (Sept 2022) shows ~8% of successful connections are IPv6
|
||||
* [NOTE] This is an application level fallback. Disabling IPv6 is best done at an
|
||||
* OS/network level, and/or configured properly in VPN setups. If you are not masking your IP,
|
||||
|
|
@ -477,7 +471,7 @@ user_pref("security.OCSP.require", true);
|
|||
user_pref("security.family_safety.mode", 0);
|
||||
/* 1223: enable strict PKP (Public Key Pinning)
|
||||
* 0=disabled, 1=allow user MiTM (default; such as your antivirus), 2=strict
|
||||
* [SETUP-WEB] MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE: If you rely on an AV (antivirus) to protect
|
||||
* [SETUP-WEB] MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE
|
||||
* your web browsing by inspecting ALL your web traffic, then override to current default ***/
|
||||
user_pref("security.cert_pinning.enforcement_level", 2);
|
||||
/* 1224: enable CRLite [FF73+]
|
||||
|
|
@ -565,10 +559,8 @@ user_pref("privacy.userContext.ui.enabled", true);
|
|||
/*** [SECTION 2000]: PLUGINS / MEDIA / WEBRTC ***/
|
||||
user_pref("_user.js.parrot", "2000 syntax error: the parrot's snuffed it!");
|
||||
/* 2001: disable WebRTC (Web Real-Time Communication)
|
||||
* Firefox uses mDNS hostname obfuscation on desktop (except Windows7/8) and the
|
||||
* private IP is NEVER exposed, except if required in TRUSTED scenarios; i.e. after
|
||||
* you grant device (microphone or camera) access
|
||||
* [SETUP-HARDEN] Test first. Windows7/8 users only: behind a proxy who never use WebRTC
|
||||
* Firefox desktop uses mDNS hostname obfuscation and the private IP is never exposed until
|
||||
* required in TRUSTED scenarios; i.e. after you grant device (microphone or camera) access
|
||||
* [TEST] https://browserleaks.com/webrtc
|
||||
* [1] https://groups.google.com/g/discuss-webrtc/c/6stQXi72BEU/m/2FwZd24UAQAJ
|
||||
* [2] https://datatracker.ietf.org/doc/html/draft-ietf-mmusic-mdns-ice-candidates#section-3.1.1 ***/
|
||||
|
|
@ -603,7 +595,7 @@ user_pref("media.eme.enabled", false);
|
|||
user_pref("_user.js.parrot", "2400 syntax error: the parrot's kicked the bucket!");
|
||||
/* 2402: prevent scripts from moving and resizing open windows ***/
|
||||
user_pref("dom.disable_window_move_resize", true);
|
||||
/* 2404: limit events that can cause a popup [SETUP-WEB] ***/
|
||||
/* 2404: limit events that can cause a pop-up [SETUP-WEB] ***/
|
||||
user_pref("dom.popup_allowed_events", "click dblclick mousedown pointerdown");
|
||||
|
||||
/*** [SECTION 2600]: MISCELLANEOUS ***/
|
||||
|
|
@ -611,9 +603,6 @@ user_pref("_user.js.parrot", "2600 syntax error: the parrot's run down the curta
|
|||
/* 2601: prevent accessibility services from accessing your browser [RESTART]
|
||||
* [1] https://support.mozilla.org/kb/accessibility-services ***/
|
||||
user_pref("accessibility.force_disabled", 1);
|
||||
/* 2602: disable sending additional analytics to web servers
|
||||
* [1] https://developer.mozilla.org/docs/Web/API/Navigator/sendBeacon ***/
|
||||
user_pref("beacon.enabled", false);
|
||||
/* 2603: remove temp files opened with an external application
|
||||
* [1] https://bugzilla.mozilla.org/302433 ***/
|
||||
user_pref("browser.helperApps.deleteTempFileOnExit", true);
|
||||
|
|
@ -829,6 +818,7 @@ user_pref("privacy.sanitize.timeSpan", 0);
|
|||
531915 - use fdlibm's sin, cos and tan in jsmath (FF93, ESR91.1)
|
||||
1756280 - enforce navigator.pdfViewerEnabled as true and plugins/mimeTypes as hard-coded values (FF100)
|
||||
1692609 - reduce JS timing precision to 16.67ms (previously FF55+ was 100ms) (FF102)
|
||||
1422237 - return "srgb" with color-gamut (FF110)
|
||||
***/
|
||||
user_pref("_user.js.parrot", "4500 syntax error: the parrot's popped 'is clogs");
|
||||
/* 4501: enable privacy.resistFingerprinting [FF41+]
|
||||
|
|
@ -1034,18 +1024,20 @@ user_pref("privacy.firstparty.isolate", false); // [DEFAULT: false]
|
|||
* In FF96+ these are listed in about:compat
|
||||
* [1] https://blog.mozilla.org/security/2021/03/23/introducing-smartblock/ ***/
|
||||
user_pref("extensions.webcompat.enable_shims", true); // [DEFAULT: true]
|
||||
/* 6010: enforce/reset TLS 1.0/1.1 downgrades to session only
|
||||
* [NOTE] In FF97+ the TLS 1.0/1.1 downgrade UX was removed
|
||||
/* 6010: enforce no TLS 1.0/1.1 downgrades
|
||||
* [TEST] https://tls-v1-1.badssl.com:1010/ ***/
|
||||
user_pref("security.tls.version.enable-deprecated", false); // [DEFAULT: false]
|
||||
/* 6011: enforce disabling of Web Compatibility Reporter [FF56+]
|
||||
* Web Compatibility Reporter adds a "Report Site Issue" button to send data to Mozilla
|
||||
* [WHY] To prevent wasting Mozilla's time with a custom setup ***/
|
||||
user_pref("extensions.webcompat-reporter.enabled", false); // [DEFAULT: false]
|
||||
/* 6050: prefsCleaner: reset items removed from arkenfox FF102+ ***/
|
||||
/* 6050: prefsCleaner: reset previously active items removed from arkenfox FF102+ ***/
|
||||
// user_pref("beacon.enabled", "");
|
||||
// user_pref("browser.newtab.preload", "");
|
||||
// user_pref("browser.newtabpage.activity-stream.feeds.discoverystreamfeed", "");
|
||||
// user_pref("browser.newtabpage.activity-stream.feeds.snippets", "");
|
||||
// user_pref("browser.region.network.url", "");
|
||||
// user_pref("browser.region.update.enabled", "")
|
||||
// user_pref("browser.ssl_override_behavior", "");
|
||||
// user_pref("devtools.chrome.enabled", "");
|
||||
// user_pref("dom.disable_beforeunload", "");
|
||||
|
|
@ -1194,6 +1186,9 @@ user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", fa
|
|||
user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features", false);
|
||||
/* 9003: disable What's New toolbar icon [FF69+] ***/
|
||||
user_pref("browser.messaging-system.whatsNewPanel.enabled", false);
|
||||
/* 9004: disable seach terms [FF110+]
|
||||
* [SETTING] Search > SearchBar > Use the address bar for search and navigation > Show search terms instead of URL... ***/
|
||||
user_pref("browser.urlbar.showSearchTerms.enabled", false);
|
||||
|
||||
/*** [SECTION 9999]: DEPRECATED / REMOVED / LEGACY / RENAMED
|
||||
Documentation denoted as [-]. Items deprecated prior to FF91 have been archived at [1]
|
||||
|
|
|
|||
Loading…
Reference in New Issue