Skip to content

Commit

Permalink
Update
Browse files Browse the repository at this point in the history 
Signed-off-by: celenity <[email protected]>
  • Loading branch information
@celenityy
celenityy committed Dec 3, 2024
1 parent fac6d82 commit e61d7b1
Show file tree
Hide file tree
Showing 21 changed files with 372 additions and 187 deletions.
38 changes: 23 additions & 15 deletions configs/Dev/Firefox-UI-Fix/dev.cfg
View file
Original file line number Diff line number Diff line change
Expand Up @@ -100,6 +100,7 @@ lockPref("browser.places.interactions.enabled", false); // https://searchfox.org
lockPref("browser.privacySegmentation.preferences.show", false);
lockPref("browser.rights.3.shown", true);
lockPref("browser.search.serpEventTelemetryCategorization.enabled", false);
lockPref("browser.search.serpEventTelemetryCategorization.regionEnabled", false);
lockPref("browser.search.serpMetricsRecordedCounter", 0);
lockPref("browser.urlbar.quicksuggest.dataCollection.enabled", false);
lockPref("browser.urlbar.quicksuggest.onboardingDialogChoice", "reject_2"); // [HIDDEN] https://searchfox.org/mozilla-central/source/browser/components/urlbar/docs/firefox-suggest-telemetry.rst https://searchfox.org/mozilla-central/source/toolkit/components/telemetry/docs/data/environment.rst https://searchfox.org/mozilla-central/source/browser/components/urlbar/tests/quicksuggest/browser/browser_quicksuggest_onboardingDialog.js
Expand All @@ -113,19 +114,13 @@ lockPref("datareporting.policy.dataSubmissionEnabled", false);
lockPref("datareporting.policy.dataSubmissionPolicyAccepted", false);
lockPref("datareporting.policy.dataSubmissionPolicyBypassNotification", true);
lockPref("datareporting.policy.firstRunURL", "");
lockPref("dom.ipc.processHangMonitor", false);
lockPref("dom.ipc.reportProcessHangs", false);
lockPref("dom.security.unexpected_system_load_telemetry_enabled", false);
lockPref("hangmonitor.timeout", 0);
lockPref("network.jar.record_failure_reason", false);
lockPref("network.traffic_analyzer.enabled", false);
lockPref("network.jar.record_failure_reason", false); // https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#14271
lockPref("network.traffic_analyzer.enabled", false); // https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#13191
lockPref("network.trr.confirmation_telemetry_enabled", false);
lockPref("identity.fxaccounts.telemetry.clientAssociationPing.enabled", false);
lockPref("identity.fxaccounts.account.telemetry.sanitized_uid", "");
lockPref("privacy.trackingprotection.emailtracking.data_collection.enabled", false);
lockPref("security.app_menu.recordEventTelemetry", false);
lockPref("security.certerrors.recordEventTelemetry", false);
lockPref("security.protectionspopup.recordEventTelemetry", false);
lockPref("toolkit.content-background-hang-monitor.disabled", true);
lockPref("toolkit.telemetry.archive.enabled", false);
lockPref("toolkit.telemetry.bhrPing.enabled", false);
Expand Down Expand Up @@ -601,6 +596,7 @@ lockPref("browser.tabs.searchclipboardfor.middleclick", false);
/// Enforce using HTTPS as much as possible

lockPref("dom.security.https_first", true);
lockPref("dom.security.https_first_for_custom_ports", true); // [DEFAULT, DEFENSE IN DEPTH]
lockPref("dom.security.https_first_pbm", true); // [DEFAULT]
lockPref("dom.security.https_first_schemeless", true);
lockPref("dom.security.https_only_mode", true);
Expand All @@ -613,6 +609,10 @@ lockPref("security.mixed_content.upgrade_display_content.audio", true); // [DEFA
lockPref("security.mixed_content.upgrade_display_content.image", true); // [DEFAULT]
lockPref("security.mixed_content.upgrade_display_content.video", true); // [DEFAULT]

/// Prevent sending HTTP requests to websites that do not respond quickly to check if they support HTTPS

defaultPref("dom.security.https_only_mode_send_http_background_request", false);

/// Show suggestions when an HTTPS page can not be found

defaultPref("dom.security.https_only_mode_error_page_user_suggestions", true);
Expand Down Expand Up @@ -1389,7 +1389,9 @@ lockPref("media.clearkey.test-key-systems.enabled", false); // [DEFAULT]
lockPref("media.eme.enabled", false);
lockPref("media.eme.encrypted-media-encryption-scheme.enabled", false);
lockPref("media.eme.hdcp-policy-check.enabled", false);
lockPref("media.eme.playready.enabled", false);
lockPref("media.eme.require-app-approval", true); // [DEFENSE IN DEPTH]: Enforce locking DRM behind permission https://searchfox.org/mozilla-central/source/mobile/android/app/geckoview-prefs.js#304
lockPref("media.eme.wmf.clearkey.enabled", false); // [DEFAULT]
lockPref("media.gmp-widevinecdm.enabled", false);
lockPref("media.gmp-widevinecdm.visible", false);
lockPref("media.gmp-widevinecdm-l1.enabled", false);
Expand Down Expand Up @@ -1843,6 +1845,18 @@ defaultPref("services.sync.prefs.sync.webgl.disabled", true);

//lockPref("widget.non-native-theme.enabled", true); // [DEFAULT]

// TELEMETRY
// Removed https://github.com/arkenfox/user.js/issues/1918
//lockPref("security.app_menu.recordEventTelemetry", false);
//lockPref("security.certerrors.recordEventTelemetry", false);
//lockPref("security.protectionspopup.recordEventTelemetry", false);

// Harmless, actually useful to know when a site/plugin is misbehaving...
// https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#3013
//lockPref("dom.ipc.processHangMonitor", false);
//lockPref("dom.ipc.reportProcessHangs", false);
//lockPref("hangmonitor.timeout", 0);

// Advanced hardening.

// We can do better.
Expand Down Expand Up @@ -1916,13 +1930,7 @@ defaultPref("network.http.referer.XOriginPolicy", 2);

defaultPref("javascript.options.wasm", false);

// 006 MISC. SECURITY

/// Prevent sending HTTP requests to websites that do not respond quickly to check if they support HTTPS

defaultPref("dom.security.https_only_mode_send_http_background_request", false);

// 007 MISC.
// 006 MISC.

/// Prevent sites from automatically refreshing

Expand Down
38 changes: 23 additions & 15 deletions configs/Dev/dev.cfg
View file
Original file line number Diff line number Diff line change
Expand Up @@ -100,6 +100,7 @@ lockPref("browser.places.interactions.enabled", false); // https://searchfox.org
lockPref("browser.privacySegmentation.preferences.show", false);
lockPref("browser.rights.3.shown", true);
lockPref("browser.search.serpEventTelemetryCategorization.enabled", false);
lockPref("browser.search.serpEventTelemetryCategorization.regionEnabled", false);
lockPref("browser.search.serpMetricsRecordedCounter", 0);
lockPref("browser.urlbar.quicksuggest.dataCollection.enabled", false);
lockPref("browser.urlbar.quicksuggest.onboardingDialogChoice", "reject_2"); // [HIDDEN] https://searchfox.org/mozilla-central/source/browser/components/urlbar/docs/firefox-suggest-telemetry.rst https://searchfox.org/mozilla-central/source/toolkit/components/telemetry/docs/data/environment.rst https://searchfox.org/mozilla-central/source/browser/components/urlbar/tests/quicksuggest/browser/browser_quicksuggest_onboardingDialog.js
Expand All @@ -113,19 +114,13 @@ lockPref("datareporting.policy.dataSubmissionEnabled", false);
lockPref("datareporting.policy.dataSubmissionPolicyAccepted", false);
lockPref("datareporting.policy.dataSubmissionPolicyBypassNotification", true);
lockPref("datareporting.policy.firstRunURL", "");
lockPref("dom.ipc.processHangMonitor", false);
lockPref("dom.ipc.reportProcessHangs", false);
lockPref("dom.security.unexpected_system_load_telemetry_enabled", false);
lockPref("hangmonitor.timeout", 0);
lockPref("network.jar.record_failure_reason", false);
lockPref("network.traffic_analyzer.enabled", false);
lockPref("network.jar.record_failure_reason", false); // https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#14271
lockPref("network.traffic_analyzer.enabled", false); // https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#13191
lockPref("network.trr.confirmation_telemetry_enabled", false);
lockPref("identity.fxaccounts.telemetry.clientAssociationPing.enabled", false);
lockPref("identity.fxaccounts.account.telemetry.sanitized_uid", "");
lockPref("privacy.trackingprotection.emailtracking.data_collection.enabled", false);
lockPref("security.app_menu.recordEventTelemetry", false);
lockPref("security.certerrors.recordEventTelemetry", false);
lockPref("security.protectionspopup.recordEventTelemetry", false);
lockPref("toolkit.content-background-hang-monitor.disabled", true);
lockPref("toolkit.telemetry.archive.enabled", false);
lockPref("toolkit.telemetry.bhrPing.enabled", false);
Expand Down Expand Up @@ -601,6 +596,7 @@ lockPref("browser.tabs.searchclipboardfor.middleclick", false);
/// Enforce using HTTPS as much as possible

lockPref("dom.security.https_first", true);
lockPref("dom.security.https_first_for_custom_ports", true); // [DEFAULT, DEFENSE IN DEPTH]
lockPref("dom.security.https_first_pbm", true); // [DEFAULT]
lockPref("dom.security.https_first_schemeless", true);
lockPref("dom.security.https_only_mode", true);
Expand All @@ -613,6 +609,10 @@ lockPref("security.mixed_content.upgrade_display_content.audio", true); // [DEFA
lockPref("security.mixed_content.upgrade_display_content.image", true); // [DEFAULT]
lockPref("security.mixed_content.upgrade_display_content.video", true); // [DEFAULT]

/// Prevent sending HTTP requests to websites that do not respond quickly to check if they support HTTPS

defaultPref("dom.security.https_only_mode_send_http_background_request", false);

/// Show suggestions when an HTTPS page can not be found

defaultPref("dom.security.https_only_mode_error_page_user_suggestions", true);
Expand Down Expand Up @@ -1389,7 +1389,9 @@ lockPref("media.clearkey.test-key-systems.enabled", false); // [DEFAULT]
lockPref("media.eme.enabled", false);
lockPref("media.eme.encrypted-media-encryption-scheme.enabled", false);
lockPref("media.eme.hdcp-policy-check.enabled", false);
lockPref("media.eme.playready.enabled", false);
lockPref("media.eme.require-app-approval", true); // [DEFENSE IN DEPTH]: Enforce locking DRM behind permission https://searchfox.org/mozilla-central/source/mobile/android/app/geckoview-prefs.js#304
lockPref("media.eme.wmf.clearkey.enabled", false); // [DEFAULT]
lockPref("media.gmp-widevinecdm.enabled", false);
lockPref("media.gmp-widevinecdm.visible", false);
lockPref("media.gmp-widevinecdm-l1.enabled", false);
Expand Down Expand Up @@ -1843,6 +1845,18 @@ defaultPref("services.sync.prefs.sync.webgl.disabled", true);

//lockPref("widget.non-native-theme.enabled", true); // [DEFAULT]

// TELEMETRY
// Removed https://github.com/arkenfox/user.js/issues/1918
//lockPref("security.app_menu.recordEventTelemetry", false);
//lockPref("security.certerrors.recordEventTelemetry", false);
//lockPref("security.protectionspopup.recordEventTelemetry", false);

// Harmless, actually useful to know when a site/plugin is misbehaving...
// https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#3013
//lockPref("dom.ipc.processHangMonitor", false);
//lockPref("dom.ipc.reportProcessHangs", false);
//lockPref("hangmonitor.timeout", 0);

// Advanced hardening.

// We can do better.
Expand Down Expand Up @@ -1916,13 +1930,7 @@ defaultPref("network.http.referer.XOriginPolicy", 2);

defaultPref("javascript.options.wasm", false);

// 006 MISC. SECURITY

/// Prevent sending HTTP requests to websites that do not respond quickly to check if they support HTTPS

defaultPref("dom.security.https_only_mode_send_http_background_request", false);

// 007 MISC.
// 006 MISC.

/// Prevent sites from automatically refreshing

Expand Down
30 changes: 22 additions & 8 deletions configs/Discord/Firefox-UI-Fix/discord.cfg
View file
Original file line number Diff line number Diff line change
Expand Up @@ -100,6 +100,7 @@ lockPref("browser.places.interactions.enabled", false); // https://searchfox.org
lockPref("browser.privacySegmentation.preferences.show", false);
lockPref("browser.rights.3.shown", true);
lockPref("browser.search.serpEventTelemetryCategorization.enabled", false);
lockPref("browser.search.serpEventTelemetryCategorization.regionEnabled", false);
lockPref("browser.search.serpMetricsRecordedCounter", 0);
lockPref("browser.urlbar.quicksuggest.dataCollection.enabled", false);
lockPref("browser.urlbar.quicksuggest.onboardingDialogChoice", "reject_2"); // [HIDDEN] https://searchfox.org/mozilla-central/source/browser/components/urlbar/docs/firefox-suggest-telemetry.rst https://searchfox.org/mozilla-central/source/toolkit/components/telemetry/docs/data/environment.rst https://searchfox.org/mozilla-central/source/browser/components/urlbar/tests/quicksuggest/browser/browser_quicksuggest_onboardingDialog.js
Expand All @@ -113,19 +114,13 @@ lockPref("datareporting.policy.dataSubmissionEnabled", false);
lockPref("datareporting.policy.dataSubmissionPolicyAccepted", false);
lockPref("datareporting.policy.dataSubmissionPolicyBypassNotification", true);
lockPref("datareporting.policy.firstRunURL", "");
lockPref("dom.ipc.processHangMonitor", false);
lockPref("dom.ipc.reportProcessHangs", false);
lockPref("dom.security.unexpected_system_load_telemetry_enabled", false);
lockPref("hangmonitor.timeout", 0);
lockPref("network.jar.record_failure_reason", false);
lockPref("network.traffic_analyzer.enabled", false);
lockPref("network.jar.record_failure_reason", false); // https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#14271
lockPref("network.traffic_analyzer.enabled", false); // https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#13191
lockPref("network.trr.confirmation_telemetry_enabled", false);
lockPref("identity.fxaccounts.telemetry.clientAssociationPing.enabled", false);
lockPref("identity.fxaccounts.account.telemetry.sanitized_uid", "");
lockPref("privacy.trackingprotection.emailtracking.data_collection.enabled", false);
lockPref("security.app_menu.recordEventTelemetry", false);
lockPref("security.certerrors.recordEventTelemetry", false);
lockPref("security.protectionspopup.recordEventTelemetry", false);
lockPref("toolkit.content-background-hang-monitor.disabled", true);
lockPref("toolkit.telemetry.archive.enabled", false);
lockPref("toolkit.telemetry.bhrPing.enabled", false);
Expand Down Expand Up @@ -601,6 +596,7 @@ lockPref("browser.tabs.searchclipboardfor.middleclick", false);
/// Enforce using HTTPS as much as possible

lockPref("dom.security.https_first", true);
lockPref("dom.security.https_first_for_custom_ports", true); // [DEFAULT, DEFENSE IN DEPTH]
lockPref("dom.security.https_first_pbm", true); // [DEFAULT]
lockPref("dom.security.https_first_schemeless", true);
lockPref("dom.security.https_only_mode", true);
Expand All @@ -613,6 +609,10 @@ lockPref("security.mixed_content.upgrade_display_content.audio", true); // [DEFA
lockPref("security.mixed_content.upgrade_display_content.image", true); // [DEFAULT]
lockPref("security.mixed_content.upgrade_display_content.video", true); // [DEFAULT]

/// Prevent sending HTTP requests to websites that do not respond quickly to check if they support HTTPS

defaultPref("dom.security.https_only_mode_send_http_background_request", false);

/// Show suggestions when an HTTPS page can not be found

defaultPref("dom.security.https_only_mode_error_page_user_suggestions", true);
Expand Down Expand Up @@ -1389,7 +1389,9 @@ lockPref("media.clearkey.test-key-systems.enabled", false); // [DEFAULT]
lockPref("media.eme.enabled", false);
lockPref("media.eme.encrypted-media-encryption-scheme.enabled", false);
lockPref("media.eme.hdcp-policy-check.enabled", false);
lockPref("media.eme.playready.enabled", false);
lockPref("media.eme.require-app-approval", true); // [DEFENSE IN DEPTH]: Enforce locking DRM behind permission https://searchfox.org/mozilla-central/source/mobile/android/app/geckoview-prefs.js#304
lockPref("media.eme.wmf.clearkey.enabled", false); // [DEFAULT]
lockPref("media.gmp-widevinecdm.enabled", false);
lockPref("media.gmp-widevinecdm.visible", false);
lockPref("media.gmp-widevinecdm-l1.enabled", false);
Expand Down Expand Up @@ -1843,6 +1845,18 @@ defaultPref("services.sync.prefs.sync.webgl.disabled", true);

//lockPref("widget.non-native-theme.enabled", true); // [DEFAULT]

// TELEMETRY
// Removed https://github.com/arkenfox/user.js/issues/1918
//lockPref("security.app_menu.recordEventTelemetry", false);
//lockPref("security.certerrors.recordEventTelemetry", false);
//lockPref("security.protectionspopup.recordEventTelemetry", false);

// Harmless, actually useful to know when a site/plugin is misbehaving...
// https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#3013
//lockPref("dom.ipc.processHangMonitor", false);
//lockPref("dom.ipc.reportProcessHangs", false);
//lockPref("hangmonitor.timeout", 0);

// Kill Firefox Sync

lockPref("browser.newtabpage.activity-stream.fxaccounts.endpoint", "");
Expand Down
Loading

0 comments on commit e61d7b1

Please sign in to comment.