271 lines
12 KiB
JavaScript
271 lines
12 KiB
JavaScript
/** SPECULATIVE LOADING ***/
|
|
user_pref("browser.send_pings", false); // [DEFAULT: false]
|
|
|
|
/** SEARCH / URL BAR ***/
|
|
user_pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false); // [FF95+]
|
|
user_pref("browser.urlbar.suggest.quicksuggest.sponsored", false); // [FF92+]
|
|
user_pref("browser.urlbar.suggest.searches", false);
|
|
user_pref("browser.search.separatePrivateDefault", true); // [FF70+]
|
|
|
|
/** PASSWORDS ***/
|
|
user_pref("signon.autofillForms", false);
|
|
user_pref("signon.formlessCapture.enabled", false);
|
|
|
|
/** SAFE BROWSING ***/
|
|
user_pref("browser.safebrowsing.malware.enabled", false);
|
|
user_pref("browser.safebrowsing.phishing.enabled", false);
|
|
user_pref("browser.safebrowsing.downloads.enabled", false);
|
|
user_pref("browser.safebrowsing.downloads.remote.url", ""); // Defense-in-depth
|
|
user_pref("browser.safebrowsing.downloads.remote.block_uncommon", false);
|
|
|
|
/** CRASH REPORTS ***/
|
|
user_pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); // [DEFAULT: false]
|
|
|
|
/** MOZILLA UI ***/
|
|
user_pref("browser.shopping.experience2023.enabled", false); // [DEFAULT: false]
|
|
|
|
/** URL BAR ***/
|
|
user_pref("browser.urlbar.addons.featureGate", false); // [FF115+]
|
|
user_pref("browser.urlbar.fakespot.featureGate", false); // [FF130+] [DEFAULT: false]
|
|
user_pref("browser.urlbar.mdn.featureGate", false); // [FF117+] [HIDDEN PREF]
|
|
user_pref("browser.urlbar.pocket.featureGate", false); // [FF116+] [DEFAULT: false]
|
|
user_pref("browser.urlbar.weather.featureGate", false); // [FF108+] [DEFAULT: false]
|
|
user_pref("browser.urlbar.yelp.featureGate", false); // [FF124+]
|
|
user_pref("browser.urlbar.clipboard.featureGate", false);
|
|
|
|
/** SSL / OCSP **/
|
|
user_pref("security.ssl.require_safe_negotiation", true);
|
|
user_pref("security.OCSP.enabled", 1); // [DEFAULT: 1] // CHANGE IN user.js UPAR UPAR
|
|
user_pref("security.OCSP.require", true);
|
|
|
|
****************************************************************************
|
|
* START: MY OVERRIDES *
|
|
****************************************************************************/
|
|
// visit https://github.com/yokoffing/Betterfox/wiki/Common-Overrides
|
|
// visit https://github.com/yokoffing/Betterfox/wiki/Optional-Hardening
|
|
// Enter your personal overrides below this line:
|
|
|
|
// PREF: restore login manager
|
|
user_pref("signon.rememberSignons", true);
|
|
|
|
// PREF: restore Top Sites on New Tab page
|
|
user_pref("browser.newtabpage.activity-stream.feeds.topsites", true);
|
|
|
|
// PREF: enable container tabs
|
|
user_pref("privacy.userContext.enabled", true);
|
|
|
|
// Search bar
|
|
user_pref("browser.urlbar.suggest.history", false);
|
|
// user_pref("browser.urlbar.suggest.bookmark", false);
|
|
// user_pref("browser.urlbar.suggest.openpage", false);
|
|
// user_pref("browser.urlbar.suggest.topsites", false);
|
|
|
|
// Autofill
|
|
user_pref("extensions.formautofill.addresses.enabled", false); // [FF55+]
|
|
user_pref("extensions.formautofill.creditCards.enabled", false); // [FF56+]
|
|
|
|
/* 5018: limit events that can cause a pop-up ***/
|
|
user_pref("dom.popup_allowed_events", "click dblclick mousedown pointerdown");
|
|
|
|
/****************************************************************************
|
|
|
|
/****************************************************************************
|
|
* HARDENING *
|
|
***************************************************************************/
|
|
|
|
// PREF: disable Firefox Sync
|
|
user_pref("identity.fxaccounts.enabled", false);
|
|
|
|
// PREF: disable the Firefox View tour from popping up
|
|
user_pref("browser.firefox-view.feature-tour", '{"screen":"","complete":true}');
|
|
|
|
// PREF: enable HTTPS-Only Mode
|
|
// Warn me before loading sites that don't support HTTPS
|
|
// in both Normal and Private Browsing windows.
|
|
user_pref("dom.security.https_only_mode", true);
|
|
user_pref("dom.security.https_only_mode_error_page_user_suggestions", true);
|
|
|
|
// PREF: disable captive portal detection
|
|
// [WARNING] Do NOT use for mobile devices!
|
|
user_pref("captivedetect.canonicalURL", "");
|
|
user_pref("network.captive-portal-service.enabled", false);
|
|
user_pref("network.connectivity-service.enabled", false);
|
|
|
|
// PREF: set DoH provider
|
|
user_pref("network.trr.uri", "https://family.dns.mullvad.net/dns-query");
|
|
user_pref("network.trr.custom_uri", "https://family.dns.mullvad.net/dns-query");
|
|
|
|
// PREF: enforce DNS-over-HTTPS (DoH)
|
|
user_pref("network.trr.mode", 3);
|
|
|
|
// PREF: enforce certificate pinning
|
|
// [ERROR] MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE
|
|
// 1 = allow user MiTM (such as your antivirus) (default)
|
|
// 2 = strict
|
|
user_pref("security.cert_pinning.enforcement_level", 2);
|
|
|
|
/* 1224: enable CRLite [FF73+]
|
|
* 0 = disabled
|
|
* 1 = consult CRLite but only collect telemetry
|
|
* 2 = consult CRLite and enforce both "Revoked" and "Not Revoked" results
|
|
* 3 = consult CRLite and enforce "Not Revoked" results, but defer to OCSP for "Revoked" (default)
|
|
* [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=1429800,1670985,1753071
|
|
* [2] https://blog.mozilla.org/security/tag/crlite/ ***/
|
|
user_pref("security.remote_settings.crlite_filters.enabled", true); // [DEFAULT: true FF137+]
|
|
|
|
/* 1244: enable HTTPS-Only mode in all windows
|
|
* When the top-level is HTTPS, insecure subresources are also upgraded (silent fail)
|
|
* [SETTING] to add site exceptions: Padlock>HTTPS-Only mode>On (after "Continue to HTTP Site")
|
|
* [SETTING] Privacy & Security>HTTPS-Only Mode (and manage exceptions)
|
|
* [TEST] http://example.com [upgrade]
|
|
* [TEST] http://httpforever.com/ | http://http.rip [no upgrade] ***/
|
|
user_pref("dom.security.https_only_mode", true); // [FF76+]
|
|
user_pref("dom.security.https_only_mode_pbm", true); // [FF80+]
|
|
|
|
// PREF: delete all browsing data on shutdown
|
|
user_pref("privacy.sanitize.sanitizeOnShutdown", true);
|
|
user_pref("privacy.clearOnShutdown_v2.cache", true);
|
|
user_pref("privacy.clearOnShutdown_v2.formdata", true);
|
|
|
|
// PREF: after crashes or restarts, do not save extra session data
|
|
// such as form content, scrollbar positions, and POST data
|
|
user_pref("browser.sessionstore.privacy_level", 2);
|
|
|
|
// PREF: disable all DRM content
|
|
user_pref("media.eme.enabled", false);
|
|
|
|
// [SETTING] General>Language>Choose your preferred language for displaying pages>Choose>Request English...
|
|
user_pref("privacy.spoof_english", 1);
|
|
|
|
/** CONTAINERS **/
|
|
user_pref("privacy.userContext.enabled", true);
|
|
user_pref("privacy.userContext.ui.enabled", true);
|
|
|
|
/** DOM (DOCUMENT OBJECT MODEL) **/
|
|
// Prevent scripts from moving and resizing open windows
|
|
user_pref("dom.disable_window_move_resize", true);
|
|
|
|
// Disable UI Tour
|
|
user_pref("browser.uitour.url", ""); // Defense-in-depth
|
|
|
|
// Disable remote debugging
|
|
user_pref("devtools.debugger.remote-enabled", false); // [DEFAULT: false]
|
|
|
|
/** disable websites overriding Firefox's keyboard shortcuts [FF58+]
|
|
* 0 (default) or 1=allow, 2=block
|
|
* [SETTING] to add site exceptions: Ctrl+I>Permissions>Override Keyboard Shortcuts ***/
|
|
// user_pref("permissions.default.shortcuts", 2);
|
|
**/
|
|
|
|
// PDFJS
|
|
user_pref("pdfjs.disabled", false); // [DEFAULT: false]
|
|
user_pref("pdfjs.enableScripting", false); // [FF86+]
|
|
|
|
// DLP Agents Content Analysis
|
|
user_pref("browser.contentanalysis.enabled", false); // [FF121+] [DEFAULT: false]
|
|
user_pref("browser.contentanalysis.default_result", 0); // [FF127+] [DEFAULT: 0]
|
|
|
|
// Downloads
|
|
user_pref("browser.download.always_ask_before_handling_new_types", true);
|
|
|
|
// Fingerprint Protection
|
|
user_pref("privacy.fingerprintingProtection.pbmode", true);
|
|
user_pref("privacy.fingerprintingProtection.remoteOverrides.enabled", false);
|
|
|
|
// Disable WebGL (Web Graphics Library)
|
|
// user_pref("webgl.disabled", true);
|
|
|
|
// Disable IPv6
|
|
user_pref("network.dns.disableIPv6", true);
|
|
|
|
// Enfore Firefox blocklist
|
|
user_pref("extensions.blocklist.enabled", true); // [DEFAULT: true]
|
|
|
|
// Enfore no referer spoofing
|
|
user_pref("network.http.referer.spoofSource", false); // [DEFAULT: false]
|
|
|
|
// Security delay on confirmation dialogues
|
|
user_pref("security.dialog_enable_delay", 1000); // [DEFAULT: 1000]
|
|
|
|
// Enfore no First Party Isolation
|
|
user_pref("privacy.firstparty.isolate", false); // [DEFAULT: false]
|
|
|
|
// Enfore SmartBlock shims
|
|
user_pref("extensions.webcompat.enable_shims", true); // [HIDDEN PREF] [DEFAULT: true]
|
|
|
|
// Enforce no TLS 1.0/1.1 downgrades
|
|
user_pref("security.tls.version.enable-deprecated", false); // [DEFAULT: false]
|
|
|
|
// Enforce disabling of Web Compatibility Reporter [FF56+]
|
|
user_pref("extensions.webcompat-reporter.enabled", false); // [DEFAULT: false]
|
|
|
|
// Enforce Quarantined Domains [FF115+]
|
|
user_pref("extensions.quarantinedDomains.enabled", true); // [DEFAULT: true]
|
|
|
|
/* 7001: disable APIs
|
|
* Location-Aware Browsing, Full Screen
|
|
* [WHY] The API state is easily fingerprintable.
|
|
* Geo is behind a prompt (7002). Full screen requires user interaction ***/
|
|
user_pref("geo.enabled", false);
|
|
user_pref("full-screen-api.enabled", false);
|
|
|
|
// DO NOT TRACK HTTP Header
|
|
user_pref("privacy.donottrackheader.enabled", true);
|
|
|
|
// Customize Enhanced Tracking Protection (ETP)
|
|
user_pref("network.cookie.cookieBehavior", 5); // [DEFAULT: 5]
|
|
user_pref("network.cookie.cookieBehavior.optInPartitioning", true); // [ETP FF132+]
|
|
user_pref("network.http.referer.disallowCrossSiteRelaxingDefault", true);
|
|
user_pref("network.http.referer.disallowCrossSiteRelaxingDefault.top_navigation", true); // [FF100+]
|
|
user_pref("privacy.bounceTrackingProtection.mode", 1); // [FF131+] [ETP FF133+]
|
|
user_pref("privacy.fingerprintingProtection", true); // [FF114+] [ETP FF119+]
|
|
user_pref("privacy.partition.network_state.ocsp_cache", true); // [DEFAULT: true]
|
|
user_pref("privacy.query_stripping.enabled", true); // [FF101+]
|
|
user_pref("privacy.trackingprotection.enabled", true);
|
|
user_pref("privacy.trackingprotection.socialtracking.enabled", true);
|
|
user_pref("privacy.trackingprotection.cryptomining.enabled", true); // [DEFAULT: true]
|
|
user_pref("privacy.trackingprotection.fingerprinting.enabled", true); // [DEFAULT: true]
|
|
|
|
// Disable WebRTC
|
|
user_pref("media.peerconnection.enabled", false);
|
|
|
|
// Enable GPC (Global Privacy Control) in non-PB windows
|
|
user_pref("privacy.globalprivacycontrol.enabled", true);
|
|
|
|
/*** [SECTION 0700]: DNS / DoH / PROXY / SOCKS ***/
|
|
user_pref("network.proxy.socks_remote_dns", true);
|
|
|
|
/*** [SECTION 1200]: HTTPS (SSL/TLS / OCSP / CERTS / HPKP)
|
|
user_pref("security.ssl.require_safe_negotiation", true);
|
|
|
|
|
|
/****************************************************************************
|
|
* BEGINNING OF ARKEN FOX *
|
|
***************************************************************************/
|
|
|
|
// Geo-location
|
|
user_pref("geo.provider.use_geoclue", false); // [FF102+] [LINUX]
|
|
|
|
/****************************************************************************
|
|
* END OF ARKEN FOX *
|
|
***************************************************************************/
|
|
|
|
|
|
|
|
/****************************************************************************************
|
|
* OPTION: SHARPEN SCROLLING *
|
|
****************************************************************************************/
|
|
// credit: https://github.com/black7375/Firefox-UI-Fix
|
|
// only sharpen scrolling
|
|
user_pref("apz.overscroll.enabled", true); // DEFAULT NON-LINUX
|
|
user_pref("general.smoothScroll", true); // DEFAULT
|
|
user_pref("mousewheel.min_line_scroll_amount", 10); // adjust this number to your liking; default=5
|
|
user_pref("general.smoothScroll.mouseWheel.durationMinMS", 80); // default=50
|
|
user_pref("general.smoothScroll.currentVelocityWeighting", "0.15"); // default=.25
|
|
user_pref("general.smoothScroll.stopDecelerationWeighting", "0.6"); // default=.4
|
|
// Firefox Nightly only:
|
|
// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1846935
|
|
user_pref("general.smoothScroll.msdPhysics.enabled", false); // [FF122+ Nightly]
|
|
|
|
|