notkshitij/Betterfox
1
0
Fork 0
mirror of https://github.com/yokoffing/Betterfox.git synced 2026-06-12 07:30:47 +05:30
Code Issues Releases Wiki Activity

Updated Optional Hardening (markdown)

yokoffing
2023-10-09 19:24:03 -04:00
parent 26192ee351
commit 933cec09af
1 changed files with 5 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Optional-Hardening.md
+5 -12
@@ -28,21 +28,18 @@ user_pref("browser.firefox-view.feature-tour", "{\"screen\":\"\",\"complete\":tr
***
### Password management across devices
Disable saving passwords, credit cards, and addresses if you use a password manager.
:bulb: We recommend using [Bitwarden](https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/) to manage your credentials on multiple devices.
#### Logins & passwords
Disable saving passwords if you use a password manager.
* `☰` *→ Settings → Privacy & Security → Logins and Passwords → Ask to save logins and passwords for websites*
```javascript
// PREF: disable password manager
user_pref("signon.rememberSignons", false);
```
#### Address & credit card
The same for credit cards and addresses.
* `☰` *→ Settings → Privacy & Security → Forms and Autofill*
```javascript
// PREF: disable address and credit card manager
@@ -63,16 +60,14 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", "");
***
### HTTPS-Only Mode
We already:
* [block](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages, including insecure downloads.
* [attempt](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L545-L550) to upgrade HTTP site navigation to HTTPS.
We already [block](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages and [attempt to upgrade](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L545-L550) HTTP site navigation to HTTPS.
* `☰` *→ Settings → Privacy & Security → HTTPS-Only Mode*
To add to your overrides, choose between two options below.
#### Option 1: Private windows only
Firefox will get explicit permission from you before connecting to a site insecurely in [Private Browsing](https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history) (Firefox [incognito mode](https://support.mozilla.org/en-US/kb/common-myths-about-private-browsing)).
* `☰` *→ Settings → Privacy & Security → HTTPS-Only Mode → Enable HTTPS-Only Mode in private windows only*
```javascript
// PREF: enable HTTPS-Only Mode
// Warn me before loading sites that don't support HTTPS
@@ -83,8 +78,6 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true);
#### Option 2: All windows
Firefox will get explicit permission from you before connecting to a site insecurely in Normal and Private Browsing.
* `☰` *→ Settings → Privacy & Security → HTTPS-Only Mode → Enable HTTPS-Only Mode in all windows*
```javascript
// PREF: enable HTTPS-Only Mode
// Warn me before loading sites that don't support HTTPS