From 95d74473d2a68c0d5647beb6ce51778ab88079d6 Mon Sep 17 00:00:00 2001
From: yokoffing <11689349+yokoffing@users.noreply.github.com>
Date: Fri, 7 Nov 2025 12:06:57 -0500
Subject: [PATCH] enforce https only mode

---
 user.js | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/user.js b/user.js
index 6939057..e4ac33d 100644
--- a/user.js
+++ b/user.js
@@ -100,16 +100,15 @@ user_pref("browser.urlbar.groupLabels.enabled", false);
 user_pref("browser.formfill.enable", false);
 user_pref("network.IDN_show_punycode", true);
 
+/** HTTPS-ONLY MODE ***/
+user_pref("dom.security.https_only_mode", true); 
+
 /** PASSWORDS ***/
 user_pref("signon.formlessCapture.enabled", false);
 user_pref("signon.privateBrowsingCapture.enabled", false);
 user_pref("network.auth.subresource-http-auth-allow", 1);
 user_pref("editor.truncate_user_pastes", false);
 
-/** MIXED CONTENT + CROSS-SITE ***/
-user_pref("security.mixed_content.block_display_content", true);
-user_pref("pdfjs.enableScripting", false);
-
 /** EXTENSIONS ***/
 user_pref("extensions.enabledScopes", 5);
 
@@ -119,6 +118,9 @@ user_pref("network.http.referer.XOriginTrimmingPolicy", 2);
 /** CONTAINERS ***/
 user_pref("privacy.userContext.ui.enabled", true);
 
+/** VARIOUS ***/
+user_pref("pdfjs.enableScripting", false);
+
 /** SAFE BROWSING ***/
 user_pref("browser.safebrowsing.downloads.remote.enabled", false);