1
0
mirror of https://github.com/yokoffing/Betterfox.git synced 2026-06-12 07:30:47 +05:30

Updated Optional Hardening (markdown)

HJ
2023-08-22 21:33:32 -04:00
parent 4002ee1e22
commit 81f36c1d39
+4 -2
@@ -20,10 +20,11 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", "");
### HTTPS-Only Mode
We already:
* [block](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages
* [block](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages, including insecure downloads
* [attempt](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L545-L550) to upgrade HTTP site navigation to HTTPS
#### Option 1: Enable in [private windows](https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history) only
#### Option 1: Enable in private windows only
Firefox will get explicit permission from you before connecting to a site insecurely in [Private Browsing](https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history) (Firefox [incognito mode](https://support.mozilla.org/en-US/kb/common-myths-about-private-browsing)).
```
// PREF: enable HTTPS-Only Mode
// Strict HTTPS site navigation in Private Browsing.
@@ -32,6 +33,7 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true);
```
#### Option 2: Enable in all windows
Firefox will get explicit permission from you before connecting to a site insecurely in Normal and Private Browsing.
```
// PREF: enable HTTPS-Only Mode
// Strict HTTPS site navigation in Normal and Private Browsing.