From 7ca0961b15bfc1ee242348935053a99c34a03f86 Mon Sep 17 00:00:00 2001 From: yokoffing Date: Sun, 28 Mar 2021 12:02:37 -0400 Subject: [PATCH] update samesite cookie --- TinkerFox.js | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/TinkerFox.js b/TinkerFox.js index fe53cda..452d4af 100644 --- a/TinkerFox.js +++ b/TinkerFox.js @@ -44,6 +44,15 @@ // PREF: about:home startup cache user_pref("browser.startup.homepage.abouthome_cache.enabled", true); +// PREF: Samesite Cookies +// [1] https://www.jardinesoftware.net/2019/10/28/samesite-by-default-in-2020/ +// [2] https://web.dev/schemeful-samesite/ +user_pref("network.cookie.sameSite.laxByDefault", true); +user_pref("network.cookie.sameSite.noneRequiresSecure", true); +// treat cookies from the same domain, but with different schemes (e.g. http://example.com and https://example.com) +// as cross-site instead of same-site. Improves security, but potentially introduces breakage. +// user_pref("network.cookie.sameSite.schemeful", true); + // PREF: CSS: Constructable Stylesheets user_pref("layout.css.constructable-stylesheets.enabled", true); @@ -60,7 +69,7 @@ user_pref("fission.autostart", true) user_pref("network.http.http3.enabled", true); // PREF: Multiple Picture-in-Picture Support -user_pref("media.videocontrols.picture-in-picture.allow-multiple", true); +// user_pref("media.videocontrols.picture-in-picture.allow-multiple", true); // PREF: Address Bar: show results during IME composition // user_pref("browser.urlbar.keepPanelOpenDuringImeComposition", true); @@ -72,7 +81,7 @@ user_pref("dom.forms.inputmode", true); // user_pref("dom.webgpu.enabled", true); // PREF: Microphone and camera kill switch -user_pref("privacy.webrtc.globalMuteToggles", true); +// user_pref("privacy.webrtc.globalMuteToggles", true); // PREF: Evolution of ESNI for DNS-over-HTTPS // user_pref("network.dns.echconfig.enabled", true);