|
1 | 1 | /****** |
2 | 2 | * name: arkenfox user.js |
3 | | -* date: 21 November 2022 |
4 | | -* version: 107 |
| 3 | +* date: 9 January 2023 |
| 4 | +* version: 108 |
5 | 5 | * url: https://github.com/arkenfox/user.js |
6 | 6 | * license: MIT: https://github.com/arkenfox/user.js/blob/master/LICENSE.txt |
7 | 7 |
|
@@ -110,13 +110,6 @@ user_pref("geo.provider.ms-windows-location", false); // [WINDOWS] |
110 | 110 | user_pref("geo.provider.use_corelocation", false); // [MAC] |
111 | 111 | user_pref("geo.provider.use_gpsd", false); // [LINUX] |
112 | 112 | user_pref("geo.provider.use_geoclue", false); // [FF102+] [LINUX] |
113 | | -/* 0203: disable region updates |
114 | | - * [1] https://firefox-source-docs.mozilla.org/toolkit/modules/toolkit_modules/Region.html ***/ |
115 | | -user_pref("browser.region.update.enabled", false); // [FF79+] |
116 | | - // user_pref("browser.region.network.url", ""); // [FF78+] Defense-in-depth |
117 | | -/* 0204: set search region |
118 | | - * [NOTE] May not be hidden if Firefox has changed your settings due to your region (0203) ***/ |
119 | | - // user_pref("browser.search.region", "US"); // [HIDDEN PREF] |
120 | 113 | /* 0210: set preferred language for displaying pages |
121 | 114 | * [SETTING] General>Language and Appearance>Language>Choose your preferred language... |
122 | 115 | * [TEST] https://addons.mozilla.org/about ***/ |
@@ -268,6 +261,7 @@ user_pref("_user.js.parrot", "0700 syntax error: the parrot's given up the ghost |
268 | 261 | /* 0701: disable IPv6 |
269 | 262 | * IPv6 can be abused, especially with MAC addresses, and can leak with VPNs: assuming |
270 | 263 | * your ISP and/or router and/or website is IPv6 capable. Most sites will fall back to IPv4 |
| 264 | + * [SETUP-WEB] PR_CONNECT_RESET_ERROR: this pref *might* be the cause |
271 | 265 | * [STATS] Firefox telemetry (Sept 2022) shows ~8% of successful connections are IPv6 |
272 | 266 | * [NOTE] This is an application level fallback. Disabling IPv6 is best done at an |
273 | 267 | * OS/network level, and/or configured properly in VPN setups. If you are not masking your IP, |
@@ -477,7 +471,7 @@ user_pref("security.OCSP.require", true); |
477 | 471 | user_pref("security.family_safety.mode", 0); |
478 | 472 | /* 1223: enable strict PKP (Public Key Pinning) |
479 | 473 | * 0=disabled, 1=allow user MiTM (default; such as your antivirus), 2=strict |
480 | | - * [SETUP-WEB] MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE: If you rely on an AV (antivirus) to protect |
| 474 | + * [SETUP-WEB] MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE |
481 | 475 | * your web browsing by inspecting ALL your web traffic, then override to current default ***/ |
482 | 476 | user_pref("security.cert_pinning.enforcement_level", 2); |
483 | 477 | /* 1224: enable CRLite [FF73+] |
@@ -565,10 +559,8 @@ user_pref("privacy.userContext.ui.enabled", true); |
565 | 559 | /*** [SECTION 2000]: PLUGINS / MEDIA / WEBRTC ***/ |
566 | 560 | user_pref("_user.js.parrot", "2000 syntax error: the parrot's snuffed it!"); |
567 | 561 | /* 2001: disable WebRTC (Web Real-Time Communication) |
568 | | - * Firefox uses mDNS hostname obfuscation on desktop (except Windows7/8) and the |
569 | | - * private IP is NEVER exposed, except if required in TRUSTED scenarios; i.e. after |
570 | | - * you grant device (microphone or camera) access |
571 | | - * [SETUP-HARDEN] Test first. Windows7/8 users only: behind a proxy who never use WebRTC |
| 562 | + * Firefox desktop uses mDNS hostname obfuscation and the private IP is never exposed until |
| 563 | + * required in TRUSTED scenarios; i.e. after you grant device (microphone or camera) access |
572 | 564 | * [TEST] https://browserleaks.com/webrtc |
573 | 565 | * [1] https://groups.google.com/g/discuss-webrtc/c/6stQXi72BEU/m/2FwZd24UAQAJ |
574 | 566 | * [2] https://datatracker.ietf.org/doc/html/draft-ietf-mmusic-mdns-ice-candidates#section-3.1.1 ***/ |
@@ -603,17 +595,14 @@ user_pref("media.eme.enabled", false); |
603 | 595 | user_pref("_user.js.parrot", "2400 syntax error: the parrot's kicked the bucket!"); |
604 | 596 | /* 2402: prevent scripts from moving and resizing open windows ***/ |
605 | 597 | user_pref("dom.disable_window_move_resize", true); |
606 | | -/* 2404: limit events that can cause a popup [SETUP-WEB] ***/ |
| 598 | +/* 2404: limit events that can cause a pop-up [SETUP-WEB] ***/ |
607 | 599 | user_pref("dom.popup_allowed_events", "click dblclick mousedown pointerdown"); |
608 | 600 |
|
609 | 601 | /*** [SECTION 2600]: MISCELLANEOUS ***/ |
610 | 602 | user_pref("_user.js.parrot", "2600 syntax error: the parrot's run down the curtain!"); |
611 | 603 | /* 2601: prevent accessibility services from accessing your browser [RESTART] |
612 | 604 | * [1] https://support.mozilla.org/kb/accessibility-services ***/ |
613 | 605 | user_pref("accessibility.force_disabled", 1); |
614 | | -/* 2602: disable sending additional analytics to web servers |
615 | | - * [1] https://developer.mozilla.org/docs/Web/API/Navigator/sendBeacon ***/ |
616 | | -user_pref("beacon.enabled", false); |
617 | 606 | /* 2603: remove temp files opened with an external application |
618 | 607 | * [1] https://bugzilla.mozilla.org/302433 ***/ |
619 | 608 | user_pref("browser.helperApps.deleteTempFileOnExit", true); |
@@ -829,6 +818,7 @@ user_pref("privacy.sanitize.timeSpan", 0); |
829 | 818 | 531915 - use fdlibm's sin, cos and tan in jsmath (FF93, ESR91.1) |
830 | 819 | 1756280 - enforce navigator.pdfViewerEnabled as true and plugins/mimeTypes as hard-coded values (FF100) |
831 | 820 | 1692609 - reduce JS timing precision to 16.67ms (previously FF55+ was 100ms) (FF102) |
| 821 | + 1422237 - return "srgb" with color-gamut (FF110) |
832 | 822 | ***/ |
833 | 823 | user_pref("_user.js.parrot", "4500 syntax error: the parrot's popped 'is clogs"); |
834 | 824 | /* 4501: enable privacy.resistFingerprinting [FF41+] |
@@ -1034,18 +1024,20 @@ user_pref("privacy.firstparty.isolate", false); // [DEFAULT: false] |
1034 | 1024 | * In FF96+ these are listed in about:compat |
1035 | 1025 | * [1] https://blog.mozilla.org/security/2021/03/23/introducing-smartblock/ ***/ |
1036 | 1026 | user_pref("extensions.webcompat.enable_shims", true); // [DEFAULT: true] |
1037 | | -/* 6010: enforce/reset TLS 1.0/1.1 downgrades to session only |
1038 | | - * [NOTE] In FF97+ the TLS 1.0/1.1 downgrade UX was removed |
| 1027 | +/* 6010: enforce no TLS 1.0/1.1 downgrades |
1039 | 1028 | * [TEST] https://tls-v1-1.badssl.com:1010/ ***/ |
1040 | 1029 | user_pref("security.tls.version.enable-deprecated", false); // [DEFAULT: false] |
1041 | 1030 | /* 6011: enforce disabling of Web Compatibility Reporter [FF56+] |
1042 | 1031 | * Web Compatibility Reporter adds a "Report Site Issue" button to send data to Mozilla |
1043 | 1032 | * [WHY] To prevent wasting Mozilla's time with a custom setup ***/ |
1044 | 1033 | user_pref("extensions.webcompat-reporter.enabled", false); // [DEFAULT: false] |
1045 | | -/* 6050: prefsCleaner: reset items removed from arkenfox FF102+ ***/ |
| 1034 | +/* 6050: prefsCleaner: reset previously active items removed from arkenfox FF102+ ***/ |
| 1035 | + // user_pref("beacon.enabled", ""); |
1046 | 1036 | // user_pref("browser.newtab.preload", ""); |
1047 | 1037 | // user_pref("browser.newtabpage.activity-stream.feeds.discoverystreamfeed", ""); |
1048 | 1038 | // user_pref("browser.newtabpage.activity-stream.feeds.snippets", ""); |
| 1039 | + // user_pref("browser.region.network.url", ""); |
| 1040 | + // user_pref("browser.region.update.enabled", "") |
1049 | 1041 | // user_pref("browser.ssl_override_behavior", ""); |
1050 | 1042 | // user_pref("devtools.chrome.enabled", ""); |
1051 | 1043 | // user_pref("dom.disable_beforeunload", ""); |
@@ -1194,6 +1186,9 @@ user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", fa |
1194 | 1186 | user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features", false); |
1195 | 1187 | /* 9003: disable What's New toolbar icon [FF69+] ***/ |
1196 | 1188 | user_pref("browser.messaging-system.whatsNewPanel.enabled", false); |
| 1189 | +/* 9004: disable seach terms [FF110+] |
| 1190 | + * [SETTING] Search > SearchBar > Use the address bar for search and navigation > Show search terms instead of URL... ***/ |
| 1191 | +user_pref("browser.urlbar.showSearchTerms.enabled", false); |
1197 | 1192 |
|
1198 | 1193 | /*** [SECTION 9999]: DEPRECATED / REMOVED / LEGACY / RENAMED |
1199 | 1194 | Documentation denoted as [-]. Items deprecated prior to FF91 have been archived at [1] |
|
0 commit comments