|
|
|
@@ -1,8 +1,8 @@
|
|
|
|
|
/******
|
|
|
|
|
* name: ghacks user.js
|
|
|
|
|
* date: 28 May 2019
|
|
|
|
|
* version 67-beta: Barbie Pants
|
|
|
|
|
* "I'm a Barbie pants in a Barbie world. Life in plastic, it's fantastic"
|
|
|
|
|
* date: 18 August 2019
|
|
|
|
|
* version 68-beta: Knock on Pants
|
|
|
|
|
* "It's like thunder, lightning... the way you wear me is frightening"
|
|
|
|
|
* authors: v52+ github | v51- www.ghacks.net
|
|
|
|
|
* url: https://github.com/ghacksuserjs/ghacks-user.js
|
|
|
|
|
* license: MIT: https://github.com/ghacksuserjs/ghacks-user.js/blob/master/LICENSE.txt
|
|
|
|
@@ -112,9 +112,7 @@ user_pref("browser.newtabpage.activity-stream.telemetry.ping.endpoint", "");
|
|
|
|
|
/* 0105b: disable Activity Stream Snippets
|
|
|
|
|
* Runs code received from a server (aka Remote Code Execution) and sends information back to a metrics server
|
|
|
|
|
* [1] https://abouthome-snippets-service.readthedocs.io/ ***/
|
|
|
|
|
user_pref("browser.aboutHomeSnippets.updateUrl", "");
|
|
|
|
|
user_pref("browser.newtabpage.activity-stream.asrouter.providers.snippets", "");
|
|
|
|
|
user_pref("browser.newtabpage.activity-stream.disableSnippets", true);
|
|
|
|
|
user_pref("browser.newtabpage.activity-stream.feeds.snippets", false);
|
|
|
|
|
/* 0105c: disable Activity Stream Top Stories, Pocket-based and/or sponsored content ***/
|
|
|
|
|
user_pref("browser.newtabpage.activity-stream.feeds.section.topstories", false);
|
|
|
|
@@ -202,11 +200,6 @@ user_pref("app.update.auto", false);
|
|
|
|
|
* used when installing/updating an extension, and in daily background update checks: if false, it
|
|
|
|
|
* hides the expanded text description (if it exists) when you "show more details about an addon" ***/
|
|
|
|
|
// user_pref("extensions.getAddons.cache.enabled", false);
|
|
|
|
|
/* 0307: disable auto updating of lightweight themes (LWT)
|
|
|
|
|
* Not to be confused with themes in 0301* + 0302*, which use the FF55+ Theme API
|
|
|
|
|
* Mozilla plan to convert existing LWTs and remove LWT support in the future, see [1]
|
|
|
|
|
* [1] https://blog.mozilla.org/addons/2018/09/20/future-themes-here/ ***/
|
|
|
|
|
user_pref("lightweightThemes.update.enabled", false);
|
|
|
|
|
/* 0308: disable search update
|
|
|
|
|
* [SETTING] General>Firefox Updates>Automatically update search engines ***/
|
|
|
|
|
user_pref("browser.search.update", false);
|
|
|
|
@@ -214,9 +207,13 @@ user_pref("browser.search.update", false);
|
|
|
|
|
user_pref("dom.ipc.plugins.flash.subprocess.crashreporter.enabled", false);
|
|
|
|
|
/* 0310: disable sending the URL of the website where a plugin crashed ***/
|
|
|
|
|
user_pref("dom.ipc.plugins.reportCrashURL", false);
|
|
|
|
|
/* 0320: disable about:addons' Get Add-ons panel (uses Google Analytics) ***/
|
|
|
|
|
/* 0320: disable about:addons' Recommendations pane (uses Google Analytics) ***/
|
|
|
|
|
user_pref("extensions.getAddons.showPane", false); // [HIDDEN PREF]
|
|
|
|
|
user_pref("extensions.webservice.discoverURL", "");
|
|
|
|
|
/* 0321: disable recommendations in about:addons' Extensions and Themes panes [FF68+] ***/
|
|
|
|
|
user_pref("extensions.getAddons.discovery.api_url", "");
|
|
|
|
|
user_pref("extensions.htmlaboutaddons.discover.enabled", false);
|
|
|
|
|
user_pref("extensions.htmlaboutaddons.recommendations.enabled", false);
|
|
|
|
|
/* 0330: disable telemetry
|
|
|
|
|
* the pref (.unified) affects the behaviour of the pref (.enabled)
|
|
|
|
|
* IF unified=false then .enabled controls the telemetry module
|
|
|
|
@@ -230,7 +227,6 @@ user_pref("toolkit.telemetry.unified", false);
|
|
|
|
|
user_pref("toolkit.telemetry.enabled", false); // see [NOTE] above FF58+
|
|
|
|
|
user_pref("toolkit.telemetry.server", "data:,");
|
|
|
|
|
user_pref("toolkit.telemetry.archive.enabled", false);
|
|
|
|
|
user_pref("toolkit.telemetry.cachedClientID", "");
|
|
|
|
|
user_pref("toolkit.telemetry.newProfilePing.enabled", false); // [FF55+]
|
|
|
|
|
user_pref("toolkit.telemetry.shutdownPingSender.enabled", false); // [FF55+]
|
|
|
|
|
user_pref("toolkit.telemetry.updatePing.enabled", false); // [FF56+]
|
|
|
|
@@ -481,7 +477,7 @@ user_pref("browser.sessionhistory.max_entries", 10);
|
|
|
|
|
/* 0805: disable CSS querying page history - CSS history leak
|
|
|
|
|
* [NOTE] This has NEVER been fully "resolved": in Mozilla/docs it is stated it's
|
|
|
|
|
* only in 'certain circumstances', also see latest comments in [2]
|
|
|
|
|
* [TEST] http://lcamtuf.coredump.cx/yahh/ (see github wiki APPENDIX C on how to use)
|
|
|
|
|
* [TEST] http://lcamtuf.coredump.cx/yahh/ (see github wiki APPENDIX A on how to use)
|
|
|
|
|
* [1] https://dbaron.org/mozilla/visited-privacy
|
|
|
|
|
* [2] https://bugzilla.mozilla.org/147777
|
|
|
|
|
* [3] https://developer.mozilla.org/docs/Web/CSS/Privacy_and_the_:visited_selector ***/
|
|
|
|
@@ -528,10 +524,6 @@ user_pref("browser.formfill.enable", false);
|
|
|
|
|
* [NOTE] We also clear history and downloads on exiting Firefox (see 2803)
|
|
|
|
|
* [SETTING] Privacy & Security>History>Custom Settings>Remember browsing and download history ***/
|
|
|
|
|
// user_pref("places.history.enabled", false);
|
|
|
|
|
/* 0864: disable date/time picker
|
|
|
|
|
* This can leak your locale if not en-US
|
|
|
|
|
* [1] https://trac.torproject.org/projects/tor/ticket/21787 ***/
|
|
|
|
|
user_pref("dom.forms.datetime", false);
|
|
|
|
|
/* 0870: disable Windows jumplist [WINDOWS] ***/
|
|
|
|
|
user_pref("browser.taskbar.lists.enabled", false);
|
|
|
|
|
user_pref("browser.taskbar.lists.frequent.enabled", false);
|
|
|
|
@@ -658,10 +650,7 @@ user_pref("security.ssl.require_safe_negotiation", true);
|
|
|
|
|
/* 1202: control TLS versions with min and max
|
|
|
|
|
* 1=TLS 1.0, 2=TLS 1.1, 3=TLS 1.2, 4=TLS 1.3
|
|
|
|
|
* [WARNING] Leave these at default, otherwise you alter your TLS fingerprint.
|
|
|
|
|
* Firefox telemetry (April 2019) shows only 0.5% of TLS web traffic uses 1.0 or 1.1
|
|
|
|
|
* [1] http://kb.mozillazine.org/Security.tls.version.*
|
|
|
|
|
* [2] https://www.ssl.com/how-to/turn-off-ssl-3-0-and-tls-1-0-in-your-browser/
|
|
|
|
|
* [2] archived: https://archive.is/hY2Mm ***/
|
|
|
|
|
* Firefox telemetry (April 2019) shows only 0.5% of TLS web traffic uses 1.0 or 1.1 ***/
|
|
|
|
|
// user_pref("security.tls.version.min", 3);
|
|
|
|
|
// user_pref("security.tls.version.max", 4);
|
|
|
|
|
/* 1203: disable SSL session tracking [FF36+]
|
|
|
|
@@ -784,19 +773,10 @@ user_pref("security.insecure_connection_text.enabled", true); // [FF60+]
|
|
|
|
|
/*** [SECTION 1400]: FONTS ***/
|
|
|
|
|
user_pref("_user.js.parrot", "1400 syntax error: the parrot's bereft of life!");
|
|
|
|
|
/* 1401: disable websites choosing fonts (0=block, 1=allow)
|
|
|
|
|
* [WARNING] Blocking fonts can *sometimes* reduce JS font enumeration, but not entropy.
|
|
|
|
|
* There are also other methods to fingerprint fonts. Wait for RFP (4500) to cover this.
|
|
|
|
|
* This can limit most (but not all) JS font enumeration which is a high entropy fingerprinting vector
|
|
|
|
|
* [SETUP-WEB] Disabling fonts can uglify the web a fair bit.
|
|
|
|
|
* [SETTING] General>Language and Appearance>Fonts & Colors>Advanced>Allow pages to choose... ***/
|
|
|
|
|
// user_pref("browser.display.use_document_fonts", 0);
|
|
|
|
|
/* 1402: set more legible default fonts
|
|
|
|
|
* [NOTE] Example below for Windows/Western only
|
|
|
|
|
* [SETTING] General>Language and Appearance>Fonts & Colors>Advanced>Serif|Sans-serif|Monospace ***/
|
|
|
|
|
// user_pref("font.name.serif.x-unicode", "Georgia");
|
|
|
|
|
// user_pref("font.name.serif.x-western", "Georgia"); // default: Times New Roman
|
|
|
|
|
// user_pref("font.name.sans-serif.x-unicode", "Arial");
|
|
|
|
|
// user_pref("font.name.sans-serif.x-western", "Arial"); // default: Arial
|
|
|
|
|
// user_pref("font.name.monospace.x-unicode", "Lucida Console");
|
|
|
|
|
// user_pref("font.name.monospace.x-western", "Lucida Console"); // default: Courier New
|
|
|
|
|
user_pref("browser.display.use_document_fonts", 0);
|
|
|
|
|
/* 1403: disable icon fonts (glyphs) and local fallback rendering
|
|
|
|
|
* [1] https://bugzilla.mozilla.org/789788
|
|
|
|
|
* [2] https://trac.torproject.org/projects/tor/ticket/8455 ***/
|
|
|
|
@@ -807,13 +787,6 @@ user_pref("_user.js.parrot", "1400 syntax error: the parrot's bereft of life!");
|
|
|
|
|
user_pref("gfx.font_rendering.opentype_svg.enabled", false);
|
|
|
|
|
/* 1405: disable WOFF2 (Web Open Font Format) [FF35+] ***/
|
|
|
|
|
// user_pref("gfx.downloadable_fonts.woff2.enabled", false);
|
|
|
|
|
/* 1406: disable CSS Font Loading API
|
|
|
|
|
* [NOTE] Disabling fonts can uglify the web a fair bit. ***/
|
|
|
|
|
user_pref("layout.css.font-loading-api.enabled", false);
|
|
|
|
|
/* 1407: disable special underline handling for a few fonts which you will probably never use [RESTART]
|
|
|
|
|
* Any of these fonts on your system can be enumerated for fingerprinting.
|
|
|
|
|
* [1] http://kb.mozillazine.org/Font.blacklist.underline_offset ***/
|
|
|
|
|
user_pref("font.blacklist.underline_offset", "");
|
|
|
|
|
/* 1408: disable graphite which FF49 turned back on by default
|
|
|
|
|
* In the past it had security issues. Update: This continues to be the case, see [1]
|
|
|
|
|
* [1] https://www.mozilla.org/security/advisories/mfsa2017-15/#CVE-2017-7778 ***/
|
|
|
|
@@ -896,7 +869,6 @@ user_pref("privacy.userContext.enabled", true);
|
|
|
|
|
user_pref("privacy.usercontext.about_newtab_segregation.enabled", true); // [DEFAULT: true in FF61+]
|
|
|
|
|
/* 1704: set behaviour on "+ Tab" button to display container menu [FF53+] [SETUP-CHROME]
|
|
|
|
|
* 0=no menu (default), 1=show when clicked, 2=show on long press
|
|
|
|
|
* [NOTE] The menu does not contain a non-container tab option (use Ctrl+T to open non-container tab)
|
|
|
|
|
* [1] https://bugzilla.mozilla.org/1328756 ***/
|
|
|
|
|
user_pref("privacy.userContext.longPressBehavior", 2);
|
|
|
|
|
|
|
|
|
@@ -927,6 +899,8 @@ user_pref("media.eme.enabled", false);
|
|
|
|
|
/*** [SECTION 2000]: MEDIA / CAMERA / MIC ***/
|
|
|
|
|
user_pref("_user.js.parrot", "2000 syntax error: the parrot's snuffed it!");
|
|
|
|
|
/* 2001: disable WebRTC (Web Real-Time Communication)
|
|
|
|
|
* [SETUP-WEB] WebRTC can leak your IP address from behind your VPN, but if this is not
|
|
|
|
|
* in your threat model, and you want Real-Time Communication, this is the pref for you
|
|
|
|
|
* [1] https://www.privacytools.io/#webrtc ***/
|
|
|
|
|
user_pref("media.peerconnection.enabled", false);
|
|
|
|
|
/* 2002: limit WebRTC IP leaks if using WebRTC
|
|
|
|
@@ -936,6 +910,8 @@ user_pref("media.peerconnection.enabled", false);
|
|
|
|
|
user_pref("media.peerconnection.ice.default_address_only", true);
|
|
|
|
|
user_pref("media.peerconnection.ice.no_host", true); // [FF51+]
|
|
|
|
|
/* 2010: disable WebGL (Web Graphics Library)
|
|
|
|
|
* [SETUP-WEB] When disabled, may break some websites. When enabled, provides high entropy,
|
|
|
|
|
* especially with readPixels(). Some of the other entropy is lessened with RFP (see 4501)
|
|
|
|
|
* [1] https://www.contextis.com/resources/blog/webgl-new-dimension-browser-exploitation/
|
|
|
|
|
* [2] https://security.stackexchange.com/questions/13799/is-webgl-a-security-concern ***/
|
|
|
|
|
user_pref("webgl.disabled", true);
|
|
|
|
@@ -964,7 +940,9 @@ user_pref("media.autoplay.default", 1); // [DEFAULT: 1 in FF67+]
|
|
|
|
|
user_pref("media.autoplay.enabled.user-gestures-needed", false);
|
|
|
|
|
/* 2032: disable audio autoplay in non-active tabs [FF51+]
|
|
|
|
|
* [1] https://www.ghacks.net/2016/11/14/firefox-51-blocks-automatic-audio-playback-in-non-active-tabs/ ***/
|
|
|
|
|
user_pref("media.block-autoplay-until-in-foreground", true);
|
|
|
|
|
user_pref("media.block-autoplay-until-in-foreground", true); // [DEFAULT: true]
|
|
|
|
|
/* 2033: disable autoplay for muted videos [FF63+] ***/
|
|
|
|
|
// user_pref("media.autoplay.allow-muted", false);
|
|
|
|
|
|
|
|
|
|
/*** [SECTION 2200]: WINDOW MEDDLING & LEAKS / POPUPS ***/
|
|
|
|
|
user_pref("_user.js.parrot", "2200 syntax error: the parrot's 'istory!");
|
|
|
|
@@ -997,7 +975,7 @@ user_pref("browser.link.open_newwindow.restriction", 0);
|
|
|
|
|
* [SETTING] Privacy & Security>Permissions>Block pop-up windows ***/
|
|
|
|
|
user_pref("dom.disable_open_during_load", true);
|
|
|
|
|
/* 2212: limit events that can cause a popup [SETUP-WEB]
|
|
|
|
|
* default is "change click dblclick mouseup pointerup notificationclick reset submit touchend contextmenu"
|
|
|
|
|
* default is "change click dblclick auxclick mouseup pointerup notificationclick reset submit touchend contextmenu"
|
|
|
|
|
* [1] http://kb.mozillazine.org/Dom.popup_allowed_events ***/
|
|
|
|
|
user_pref("dom.popup_allowed_events", "click dblclick");
|
|
|
|
|
|
|
|
|
@@ -1063,7 +1041,7 @@ user_pref("dom.event.clipboardevents.enabled", false);
|
|
|
|
|
/* 2403: disable clipboard commands (cut/copy) from "non-privileged" content [FF41+]
|
|
|
|
|
* this disables document.execCommand("cut"/"copy") to protect your clipboard
|
|
|
|
|
* [1] https://bugzilla.mozilla.org/1170911 ***/
|
|
|
|
|
user_pref("dom.allow_cut_copy", false); // [HIDDEN PREF]
|
|
|
|
|
user_pref("dom.allow_cut_copy", false);
|
|
|
|
|
/* 2404: disable "Confirm you want to leave" dialog on page close
|
|
|
|
|
* Does not prevent JS leaks of the page close event.
|
|
|
|
|
* [1] https://developer.mozilla.org/docs/Web/Events/beforeunload
|
|
|
|
@@ -1087,14 +1065,11 @@ user_pref("javascript.options.asmjs", false);
|
|
|
|
|
/* 2422: disable WebAssembly [FF52+] [SETUP-PERF]
|
|
|
|
|
* [1] https://developer.mozilla.org/docs/WebAssembly ***/
|
|
|
|
|
user_pref("javascript.options.wasm", false);
|
|
|
|
|
/* 2426: disable Intersection Observer API [FF53+]
|
|
|
|
|
* Almost a year to complete, three versions late to stable (as default false),
|
|
|
|
|
* number #1 cause of crashes in nightly numerous times, and is (primarily) an
|
|
|
|
|
* ad network API for "ad viewability checks" down to a pixel level
|
|
|
|
|
/* 2426: disable Intersection Observer API [FF55+]
|
|
|
|
|
* [1] https://developer.mozilla.org/docs/Web/API/Intersection_Observer_API
|
|
|
|
|
* [2] https://w3c.github.io/IntersectionObserver/
|
|
|
|
|
* [3] https://bugzilla.mozilla.org/1243846 ***/
|
|
|
|
|
user_pref("dom.IntersectionObserver.enabled", false);
|
|
|
|
|
// user_pref("dom.IntersectionObserver.enabled", false);
|
|
|
|
|
/* 2429: enable (limited but sufficient) window.opener protection [FF65+]
|
|
|
|
|
* Makes rel=noopener implicit for target=_blank in anchor and area elements when no rel attribute is set ***/
|
|
|
|
|
user_pref("dom.targetBlankNoOpener.enabled", true);
|
|
|
|
@@ -1212,6 +1187,9 @@ user_pref("pdfjs.disabled", false); // [DEFAULT: false]
|
|
|
|
|
/* 2621: disable links launching Windows Store on Windows 8/8.1/10 [WINDOWS]
|
|
|
|
|
* [1] https://www.ghacks.net/2016/03/25/block-firefox-chrome-windows-store/ ***/
|
|
|
|
|
user_pref("network.protocol-handler.external.ms-windows-store", false);
|
|
|
|
|
/* 2622: disable middlemouse paste leaking on Linux
|
|
|
|
|
* [1] https://bugzilla.mozilla.org/1528289 */
|
|
|
|
|
user_pref("middlemouse.paste", false); // [DEFAULT: false on Windows]
|
|
|
|
|
|
|
|
|
|
/** DOWNLOADS ***/
|
|
|
|
|
/* 2650: discourage downloading to desktop
|
|
|
|
@@ -1248,9 +1226,6 @@ user_pref("extensions.autoDisableScopes", 15); // [DEFAULT: 15]
|
|
|
|
|
/* 2680: enable CSP (Content Security Policy)
|
|
|
|
|
* [1] https://developer.mozilla.org/docs/Web/HTTP/CSP ***/
|
|
|
|
|
user_pref("security.csp.enable", true); // [DEFAULT: true]
|
|
|
|
|
/* 2682: enable CSP 1.1 experimental hash-source directive [FF29+]
|
|
|
|
|
* [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=855326,883975 ***/
|
|
|
|
|
user_pref("security.csp.experimentalEnabled", true);
|
|
|
|
|
/* 2684: enforce a security delay on some confirmation dialogs such as install, open/save
|
|
|
|
|
* [1] http://kb.mozillazine.org/Disable_extension_install_delay_-_Firefox
|
|
|
|
|
* [2] https://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/ ***/
|
|
|
|
@@ -1472,12 +1447,14 @@ user_pref("privacy.firstparty.isolate.restrict_opener_access", true); // [DEFAUL
|
|
|
|
|
** 1485266 - disable exposure of system colors to CSS or canvas (see 4615) (FF67+)
|
|
|
|
|
** 1407366 - enable inner window letterboxing (see 4504) (FF67+)
|
|
|
|
|
** 1540726 - return "light" with prefers-color-scheme (FF67+)
|
|
|
|
|
[1] https://developer.mozilla.org/en-US/docs/Web/CSS/@media/prefers-color-scheme
|
|
|
|
|
[1] https://developer.mozilla.org/en-US/docs/Web/CSS/@media/prefers-color-scheme
|
|
|
|
|
** 1564422 - spoof audioContext outputLatency (FF70+)
|
|
|
|
|
***/
|
|
|
|
|
user_pref("_user.js.parrot", "4500 syntax error: the parrot's popped 'is clogs");
|
|
|
|
|
/* 4501: enable privacy.resistFingerprinting [FF41+]
|
|
|
|
|
* This pref is the master switch for all other privacy.resist* prefs unless stated
|
|
|
|
|
* [SETUP-WEB] RFP is not ready for the masses, so expect some website breakage
|
|
|
|
|
* [SETUP-WEB] RFP can cause the odd website to break in strange ways, and has a few side affects,
|
|
|
|
|
* but is largely robust nowadays. Give it a try. Your choice. Also see 4504 (letterboxing).
|
|
|
|
|
* [1] https://bugzilla.mozilla.org/418986 ***/
|
|
|
|
|
user_pref("privacy.resistFingerprinting", true);
|
|
|
|
|
/* 4502: set new window sizes to round to hundreds [FF55+] [SETUP-CHROME]
|
|
|
|
@@ -1485,8 +1462,8 @@ user_pref("privacy.resistFingerprinting", true);
|
|
|
|
|
* The override values are a starting point to round from if you want some control
|
|
|
|
|
* [1] https://bugzilla.mozilla.org/1330882
|
|
|
|
|
* [2] https://hardware.metrics.mozilla.com/ ***/
|
|
|
|
|
// user_pref("privacy.window.maxInnerWidth", 1600); // [HIDDEN PREF]
|
|
|
|
|
// user_pref("privacy.window.maxInnerHeight", 900); // [HIDDEN PREF]
|
|
|
|
|
// user_pref("privacy.window.maxInnerWidth", 1000);
|
|
|
|
|
// user_pref("privacy.window.maxInnerHeight", 1000);
|
|
|
|
|
/* 4503: disable mozAddonManager Web API [FF57+]
|
|
|
|
|
* [NOTE] As a side-effect in FF57-59 this allowed extensions to work on AMO. In FF60+ you also need
|
|
|
|
|
* to sanitize or clear extensions.webextensions.restrictedDomains (see 2662) to keep that side-effect
|
|
|
|
@@ -1496,7 +1473,8 @@ user_pref("privacy.resistFingerprinting.block_mozAddonManager", true); // [HIDDE
|
|
|
|
|
* Dynamically resizes the inner window (FF67; 200w x100h: FF68+; stepped ranges) by applying letterboxing,
|
|
|
|
|
* using dimensions which waste the least content area, If you use the dimension pref, then it will only apply
|
|
|
|
|
* those resolutions. The format is "width1xheight1, width2xheight2, ..." (e.g. "800x600, 1000x1000, 1600x900")
|
|
|
|
|
* [NOTE] This does NOT require RFP (see 4501) **for now**
|
|
|
|
|
* [SETUP-WEB] This does NOT require RFP (see 4501) **for now**, so if you're not using 4501, or you are but you're
|
|
|
|
|
* not taking anti-fingerprinting seriously and a little visual change upsets you, then feel free to flip this pref
|
|
|
|
|
* [WARNING] The dimension pref is only meant for testing, and we recommend you DO NOT USE it
|
|
|
|
|
* [1] https://bugzilla.mozilla.org/1407366 ***/
|
|
|
|
|
user_pref("privacy.resistFingerprinting.letterboxing", true); // [HIDDEN PREF]
|
|
|
|
@@ -1641,6 +1619,7 @@ user_pref("_user.js.parrot", "5000 syntax error: this is an ex-parrot!");
|
|
|
|
|
/* APPEARANCE ***/
|
|
|
|
|
// user_pref("browser.download.autohideButton", false); // [FF57+]
|
|
|
|
|
// user_pref("toolkit.cosmeticAnimations.enabled", false); // [FF55+]
|
|
|
|
|
// user_pref("toolkit.legacyUserProfileCustomizations.stylesheets", true); // [FF68+] allow userChrome/userContent
|
|
|
|
|
/* CONTENT BEHAVIOR ***/
|
|
|
|
|
// user_pref("accessibility.typeaheadfind", true); // enable "Find As You Type"
|
|
|
|
|
// user_pref("clipboard.autocopy", false); // disable autocopy default [LINUX]
|
|
|
|
@@ -1652,6 +1631,7 @@ user_pref("_user.js.parrot", "5000 syntax error: this is an ex-parrot!");
|
|
|
|
|
// user_pref("browser.urlbar.decodeURLsOnCopy", true); // see bugzilla 1320061 [FF53+]
|
|
|
|
|
// user_pref("general.autoScroll", false); // middle-click enabling auto-scrolling [WINDOWS] [MAC]
|
|
|
|
|
// user_pref("ui.key.menuAccessKey", 0); // disable alt key toggling the menu bar [RESTART]
|
|
|
|
|
// user_pref("view_source.tab", false); // view "page/selection source" in a new window [FF68+, FF59 and under]
|
|
|
|
|
/* OTHER ***/
|
|
|
|
|
// user_pref("browser.bookmarks.max_backups", 2);
|
|
|
|
|
// user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", false); // disable CFR [FF67+]
|
|
|
|
@@ -1773,6 +1753,22 @@ user_pref("dom.event.highrestimestamp.enabled", true); // [DEFAULT: true]
|
|
|
|
|
// [-] https://bugzilla.mozilla.org/1528953
|
|
|
|
|
// user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr", false);
|
|
|
|
|
// * * * /
|
|
|
|
|
// FF68
|
|
|
|
|
// 0105b: disable Activity Stream Snippets
|
|
|
|
|
// [-] https://bugzilla.mozilla.org/1540939
|
|
|
|
|
user_pref("browser.aboutHomeSnippets.updateUrl", "");
|
|
|
|
|
user_pref("browser.newtabpage.activity-stream.disableSnippets", true);
|
|
|
|
|
// 0307: disable auto updating of lightweight themes (LWT)
|
|
|
|
|
// Not to be confused with themes in 0301* + 0302*, which use the FF55+ Theme API
|
|
|
|
|
// Mozilla plan to convert existing LWTs and remove LWT support in the future, see [1]
|
|
|
|
|
// [1] https://blog.mozilla.org/addons/2018/09/20/future-themes-here/
|
|
|
|
|
// [-] (part3b) https://bugzilla.mozilla.org/1525762
|
|
|
|
|
user_pref("lightweightThemes.update.enabled", false);
|
|
|
|
|
// 2682: enable CSP 1.1 experimental hash-source directive [FF29+]
|
|
|
|
|
// [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=855326,883975
|
|
|
|
|
// [-] https://bugzilla.mozilla.org/1386214
|
|
|
|
|
user_pref("security.csp.experimentalEnabled", true);
|
|
|
|
|
// * * * /
|
|
|
|
|
// ***/
|
|
|
|
|
|
|
|
|
|
/* END: internal custom pref to test for syntax errors ***/
|
|
|
|
|