From 6bce0eb4a323b90fc1be6140e8c4a34f47a2d619 Mon Sep 17 00:00:00 2001 From: fxbrit Date: Wed, 12 May 2021 00:35:18 +0200 Subject: [PATCH] unlock sereral prefs to work best with overrides --- distribution/policies.json | 1 - docs/Changelog.md | 74 +++++++++++++++++ librewolf.cfg | 162 ++++++++++++++++++------------------- 3 files changed, 155 insertions(+), 82 deletions(-) diff --git a/distribution/policies.json b/distribution/policies.json index 7918488..99b50ab 100644 --- a/distribution/policies.json +++ b/distribution/policies.json @@ -41,7 +41,6 @@ "twitter@search.mozilla.org" ] }, - "SearchSuggestEnabled": false, "SearchEngines": { "PreventInstalls": false, "Remove": [ diff --git a/docs/Changelog.md b/docs/Changelog.md index a291070..f45e831 100755 --- a/docs/Changelog.md +++ b/docs/Changelog.md @@ -583,6 +583,80 @@ defaultPref("extensions.blocklist.itemURL", ""); defaultPref("security.OCSP.enabled", 0); // someone might want to have it on for security concerns defaultPref("security.OCSP.require", false); defaultPref("reader.parse-on-load.enabled", false); +defaultPref("webgl.enable-webgl2", false); +defaultPref("geo.provider.network.url", ""); +defaultPref("geo.provider.network.logging.enabled", false); +defaultPref("network.http.referer.XOriginTrimmingPolicy", 2); +defaultPref("network.http.referer.XOriginPolicy", 0); +defaultPref("browser.download.manager.addToRecentDocs", false); +defaultPref("accessibility.force_disabled", 1); +defaultPref("network.manage-offline-status", false); +defaultPref("browser.helperApps.deleteTempFileOnExit", true); +defaultPref("dom.push.enabled", false); +defaultPref("dom.push.connection.enabled", false); +defaultPref("dom.push.serverURL", ""); //default "wss://push.services.mozilla.com/" +defaultPref("dom.push.userAgentID", ""); +defaultPref("dom.targetBlankNoOpener.enabled", true); +defaultPref("dom.disable_window_move_resize", true); +defaultPref("dom.disable_beforeunload", true); +defaultPref("dom.popup_maximum", 4); +defaultPref("dom.vr.enabled", false); +defaultPref("dom.vibrator.enabled", false); +defaultPref("network.stricttransportsecurity.preloadlist", false); +defaultPref("browser.ssl_override_behavior", 1); +defaultPref("security.tls.version.fallback-limit", 3); +defaultPref("browser.xul.error_pages.expert_bad_cert", true); // advanced ui infos +defaultPref("extensions.enabledScopes", 5); +defaultPref("extensions.autoDisableScopes", 11); +defaultPref("xpinstall.signatures.devInfoURL", ""); +defaultPref("security.cert_pinning.enforcement_level", 2); +defaultPref("devtools.performance.recording.ui-base-url", "http://localhost:55555"); // Default Value : https://profiler.firefox.com +defaultPref("devtools.devices.url", ""); +defaultPref("devtools.remote.adb.extensionURL", ""); // [FF64+] +defaultPref("devtools.remote.adb.extensionID", ""); // default adb@mozilla.org [FF64+] +defaultPref("browser.safebrowsing.id", ""); +defaultPref("browser.safebrowsing.blockedURIs.enabled", false); +defaultPref("browser.safebrowsing.provider.google4.pver", ""); +defaultPref("browser.safebrowsing.provider.google4.advisoryName", ""); +defaultPref("browser.safebrowsing.provider.google4.advisoryURL", ""); +defaultPref("browser.safebrowsing.provider.google4.dataSharing.enabled", false); +defaultPref("browser.safebrowsing.provider.google4.dataSharingURL", ""); +defaultPref("browser.safebrowsing.provider.google4.gethashURL", ""); +defaultPref("browser.safebrowsing.provider.google4.lists", ""); +defaultPref("browser.safebrowsing.provider.google4.reportMalwareMistakeURL", ""); +defaultPref("browser.safebrowsing.provider.google4.reportPhishMistakeURL", ""); +defaultPref("browser.safebrowsing.provider.google4.reportURL", ""); +defaultPref("browser.safebrowsing.provider.google4.updateURL", ""); +defaultPref("browser.safebrowsing.provider.google4.lastupdatetime", ""); +defaultPref("browser.safebrowsing.provider.google4.nextupdatetime", ""); +defaultPref("browser.safebrowsing.provider.google.advisoryName", ""); +defaultPref("browser.safebrowsing.provider.google.advisoryURL", ""); +defaultPref("browser.safebrowsing.provider.google.gethashURL", ""); +defaultPref("browser.safebrowsing.provider.google.lastupdatetime", ""); +defaultPref("browser.safebrowsing.provider.google.lists", ""); +defaultPref("browser.safebrowsing.provider.google.nextupdatetime", ""); +defaultPref("browser.safebrowsing.provider.google.pver", ""); +defaultPref("browser.safebrowsing.provider.google.reportMalwareMistakeURL", ""); +defaultPref("browser.safebrowsing.provider.google.reportPhishMistakeURL", ""); +defaultPref("browser.safebrowsing.provider.google.reportURL", ""); +defaultPref("browser.safebrowsing.provider.google.updateURL", ""); +defaultPref("browser.safebrowsing.provider.mozilla.pver", ""); +defaultPref("browser.safebrowsing.provider.mozilla.lists", ""); +defaultPref("browser.safebrowsing.provider.mozilla.lists.base", ""); +defaultPref("browser.safebrowsing.provider.mozilla.lists.content", ""); +defaultPref("browser.safebrowsing.provider.mozilla.updateURL", ""); +defaultPref("browser.safebrowsing.provider.mozilla.gethashURL", ""); +defaultPref("browser.safebrowsing.provider.mozilla.lastupdatetime", ""); +defaultPref("browser.safebrowsing.provider.mozilla.nextupdatetime", ""); +defaultPref("browser.safebrowsing.reportPhishURL", ""); +defaultPref("browser.safebrowsing.malware.enabled", false); +defaultPref("browser.safebrowsing.passwords.enabled", false); +defaultPref("browser.safebrowsing.phishing.enabled", false); +defaultPref("browser.urlbar.trimURLs", false); +defaultPref("browser.search.suggest.enabled", false); +defaultPref("browser.search.region", "US"); +defaultPref("browser.urlbar.suggest.searches", false); +defaultPref("browser.search.update", false); ``` #### To discuss diff --git a/librewolf.cfg b/librewolf.cfg index c885719..bd8bab6 100755 --- a/librewolf.cfg +++ b/librewolf.cfg @@ -73,12 +73,12 @@ lockPref("signon.formlessCapture.enabled", false); defaultPref("browser.urlbar.dnsResolveSingleWordsAfterSearch", 0); lockPref("browser.urlbar.speculativeConnect.enabled", false); -lockPref("browser.urlbar.trimURLs", false); -lockPref("browser.search.suggest.enabled", false); -lockPref("browser.search.region", "US"); +defaultPref("browser.urlbar.trimURLs", false); +defaultPref("browser.search.suggest.enabled", false); +defaultPref("browser.search.region", "US"); lockPref("browser.fixup.alternate.enabled", false); -lockPref("browser.urlbar.suggest.searches", false); -lockPref("browser.search.update", false); +defaultPref("browser.urlbar.suggest.searches", false); +defaultPref("browser.search.update", false); // -------------------------------- // # SANITIZING, COOKIES AND HISTORY @@ -87,7 +87,7 @@ lockPref("browser.search.update", false); defaultPref("network.cookie.cookieBehavior", 5); // dFPI, previously set to 1 defaultPref("network.cookie.lifetimePolicy", 2); defaultPref("network.cookie.thirdparty.sessionOnly", true); -lockPref("network.cookie.thirdparty.nonsecureSessionOnly", true); +defaultPref("network.cookie.thirdparty.nonsecureSessionOnly", true); // includes new cookie behavior that allows to stay logged with exceptions defaultPref("privacy.clearOnShutdown.cookies", false); @@ -105,8 +105,8 @@ defaultPref("privacy.history.custom", true); // # SESSIONS // -------------------------------------------------------------------- -lockPref("browser.sessionstore.privacy_level", 2); -lockPref("browser.sessionstore.interval", 60000); +defaultPref("browser.sessionstore.privacy_level", 2); +defaultPref("browser.sessionstore.interval", 60000); // --------------------------------- // # AUTOFILL @@ -229,21 +229,21 @@ defaultPref("privacy.donottrackheader.enabled", true); // # DOM // -------------------------------- -lockPref("dom.disable_beforeunload", true); +defaultPref("dom.disable_beforeunload", true); defaultPref("dom.disable_open_during_load", true); -lockPref("dom.push.enabled", false); -lockPref("dom.push.connection.enabled", false); -lockPref("dom.push.serverURL", ""); //default "wss://push.services.mozilla.com/" -lockPref("dom.push.userAgentID", ""); -lockPref("dom.targetBlankNoOpener.enabled", true); -lockPref("dom.disable_window_move_resize", true); +defaultPref("dom.push.enabled", false); +defaultPref("dom.push.connection.enabled", false); +defaultPref("dom.push.serverURL", ""); //default "wss://push.services.mozilla.com/" +defaultPref("dom.push.userAgentID", ""); +defaultPref("dom.targetBlankNoOpener.enabled", true); +defaultPref("dom.disable_window_move_resize", true); defaultPref("dom.serviceWorkers.enabled", false); defaultPref("dom.battery.enabled", false); -lockPref("dom.popup_maximum", 4); +defaultPref("dom.popup_maximum", 4); defaultPref("dom.popup_allowed_events", "click dblclick mousedown pointerdown"); defaultPref("dom.webaudio.enabled", false); -lockPref("dom.vr.enabled", false); -lockPref("dom.vibrator.enabled", false); +defaultPref("dom.vr.enabled", false); +defaultPref("dom.vibrator.enabled", false); defaultPref("dom.storage.next_gen", true); // -------------------------------- @@ -258,8 +258,8 @@ lockPref("permissions.manager.defaultsUrl", ""); // # REFERERS // -------------------------------- -lockPref("network.http.referer.XOriginTrimmingPolicy", 2); -lockPref("network.http.referer.XOriginPolicy", 0); +defaultPref("network.http.referer.XOriginTrimmingPolicy", 2); +defaultPref("network.http.referer.XOriginPolicy", 0); // -------------------------------- // # PROXY @@ -286,14 +286,14 @@ defaultPref("network.auth.subresource-http-auth-allow", 1); defaultPref("security.ssl.require_safe_negotiation", true); lockPref("security.ssl.treat_unsafe_negotiation_as_broken", true); lockPref("security.ssl.disable_session_identifiers", true); -lockPref("browser.ssl_override_behavior", 1); +defaultPref("browser.ssl_override_behavior", 1); lockPref("security.tls.enable_0rtt_data", false); lockPref("security.tls.version.enable-deprecated", false); -lockPref("security.tls.version.fallback-limit", 3); -lockPref("browser.xul.error_pages.expert_bad_cert", true); // advanced ui infos +defaultPref("security.tls.version.fallback-limit", 3); +defaultPref("browser.xul.error_pages.expert_bad_cert", true); // advanced ui infos // to check -lockPref("network.stricttransportsecurity.preloadlist", false); +defaultPref("network.stricttransportsecurity.preloadlist", false); // -------------------------------------- // # RFP @@ -325,8 +325,8 @@ lockPref("extensions.webextensions.identity.redirectDomain", ""); // Redirect ba defaultPref("extensions.webextensions.base-content-security-policy", "script-src 'self' https://* moz-extension: blob: filesystem: 'unsafe-eval' 'unsafe-inline'; object-src 'self' https://* moz-extension: blob: filesystem:;"); // set extensions scopes -lockPref("extensions.enabledScopes", 5); -lockPref("extensions.autoDisableScopes", 11); +defaultPref("extensions.enabledScopes", 5); +defaultPref("extensions.autoDisableScopes", 11); // Relevant for addons and lang packs search defaultPref("extensions.getAddons.search.browseURL", ""); // https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION% @@ -365,7 +365,7 @@ defaultPref("extensions.blocklist.itemURL", ""); lockPref("extensions.systemAddon.update.url", ""); lockPref("extensions.systemAddon.update.enabled", false); -lockPref("xpinstall.signatures.devInfoURL", ""); +defaultPref("xpinstall.signatures.devInfoURL", ""); lockPref("extensions.webservice.discoverURL", ""); lockPref("webextensions.storage.sync.serverURL", ""); lockPref("extensions.screenshots.upload-disabled", true); @@ -386,11 +386,11 @@ lockPref("app.normandy.shieldLearnMoreUrl", ""); // -------------------------------- // certificates -lockPref("security.cert_pinning.enforcement_level", 2); +defaultPref("security.cert_pinning.enforcement_level", 2); defaultPref("security.OCSP.enabled", 0); defaultPref("security.OCSP.require", false); -lockPref("security.ssl.enable_ocsp_stapling", true); -lockPref("security.pki.sha1_enforcement_level", 1); +defaultPref("security.ssl.enable_ocsp_stapling", true); +defaultPref("security.pki.sha1_enforcement_level", 1); // mixed content lockPref("security.mixed_content.block_object_subrequest", true); @@ -408,9 +408,9 @@ lockPref("security.csp.enable", true); // # SAFE BROWSING // ------------------------------------------------------- -lockPref("browser.safebrowsing.malware.enabled", false); -lockPref("browser.safebrowsing.passwords.enabled", false); -lockPref("browser.safebrowsing.phishing.enabled", false); +defaultPref("browser.safebrowsing.malware.enabled", false); +defaultPref("browser.safebrowsing.passwords.enabled", false); +defaultPref("browser.safebrowsing.phishing.enabled", false); // downloads and unwanted software lockPref("browser.safebrowsing.downloads.enabled", false); @@ -422,41 +422,41 @@ lockPref("browser.safebrowsing.downloads.remote.block_uncommon", false); lockPref("browser.safebrowsing.downloads.remote.url", ""); // could try re-enabling some of these urls to see if it causes connections -lockPref("browser.safebrowsing.id", ""); -lockPref("browser.safebrowsing.blockedURIs.enabled", false); -lockPref("browser.safebrowsing.provider.google4.pver", ""); -lockPref("browser.safebrowsing.provider.google4.advisoryName", ""); -lockPref("browser.safebrowsing.provider.google4.advisoryURL", ""); -lockPref("browser.safebrowsing.provider.google4.dataSharing.enabled", false); -lockPref("browser.safebrowsing.provider.google4.dataSharingURL", ""); -lockPref("browser.safebrowsing.provider.google4.gethashURL", ""); -lockPref("browser.safebrowsing.provider.google4.lists", ""); -lockPref("browser.safebrowsing.provider.google4.reportMalwareMistakeURL", ""); -lockPref("browser.safebrowsing.provider.google4.reportPhishMistakeURL", ""); -lockPref("browser.safebrowsing.provider.google4.reportURL", ""); -lockPref("browser.safebrowsing.provider.google4.updateURL", ""); -lockPref("browser.safebrowsing.provider.google4.lastupdatetime", ""); -lockPref("browser.safebrowsing.provider.google4.nextupdatetime", ""); -lockPref("browser.safebrowsing.provider.google.advisoryName", ""); -lockPref("browser.safebrowsing.provider.google.advisoryURL", ""); -lockPref("browser.safebrowsing.provider.google.gethashURL", ""); -lockPref("browser.safebrowsing.provider.google.lastupdatetime", ""); -lockPref("browser.safebrowsing.provider.google.lists", ""); -lockPref("browser.safebrowsing.provider.google.nextupdatetime", ""); -lockPref("browser.safebrowsing.provider.google.pver", ""); -lockPref("browser.safebrowsing.provider.google.reportMalwareMistakeURL", ""); -lockPref("browser.safebrowsing.provider.google.reportPhishMistakeURL", ""); -lockPref("browser.safebrowsing.provider.google.reportURL", ""); -lockPref("browser.safebrowsing.provider.google.updateURL", ""); -lockPref("browser.safebrowsing.provider.mozilla.pver", ""); -lockPref("browser.safebrowsing.provider.mozilla.lists", ""); -lockPref("browser.safebrowsing.provider.mozilla.lists.base", ""); -lockPref("browser.safebrowsing.provider.mozilla.lists.content", ""); -lockPref("browser.safebrowsing.provider.mozilla.updateURL", ""); -lockPref("browser.safebrowsing.provider.mozilla.gethashURL", ""); -lockPref("browser.safebrowsing.provider.mozilla.lastupdatetime", ""); -lockPref("browser.safebrowsing.provider.mozilla.nextupdatetime", ""); -lockPref("browser.safebrowsing.reportPhishURL", ""); +defaultPref("browser.safebrowsing.id", ""); +defaultPref("browser.safebrowsing.blockedURIs.enabled", false); +defaultPref("browser.safebrowsing.provider.google4.pver", ""); +defaultPref("browser.safebrowsing.provider.google4.advisoryName", ""); +defaultPref("browser.safebrowsing.provider.google4.advisoryURL", ""); +defaultPref("browser.safebrowsing.provider.google4.dataSharing.enabled", false); +defaultPref("browser.safebrowsing.provider.google4.dataSharingURL", ""); +defaultPref("browser.safebrowsing.provider.google4.gethashURL", ""); +defaultPref("browser.safebrowsing.provider.google4.lists", ""); +defaultPref("browser.safebrowsing.provider.google4.reportMalwareMistakeURL", ""); +defaultPref("browser.safebrowsing.provider.google4.reportPhishMistakeURL", ""); +defaultPref("browser.safebrowsing.provider.google4.reportURL", ""); +defaultPref("browser.safebrowsing.provider.google4.updateURL", ""); +defaultPref("browser.safebrowsing.provider.google4.lastupdatetime", ""); +defaultPref("browser.safebrowsing.provider.google4.nextupdatetime", ""); +defaultPref("browser.safebrowsing.provider.google.advisoryName", ""); +defaultPref("browser.safebrowsing.provider.google.advisoryURL", ""); +defaultPref("browser.safebrowsing.provider.google.gethashURL", ""); +defaultPref("browser.safebrowsing.provider.google.lastupdatetime", ""); +defaultPref("browser.safebrowsing.provider.google.lists", ""); +defaultPref("browser.safebrowsing.provider.google.nextupdatetime", ""); +defaultPref("browser.safebrowsing.provider.google.pver", ""); +defaultPref("browser.safebrowsing.provider.google.reportMalwareMistakeURL", ""); +defaultPref("browser.safebrowsing.provider.google.reportPhishMistakeURL", ""); +defaultPref("browser.safebrowsing.provider.google.reportURL", ""); +defaultPref("browser.safebrowsing.provider.google.updateURL", ""); +defaultPref("browser.safebrowsing.provider.mozilla.pver", ""); +defaultPref("browser.safebrowsing.provider.mozilla.lists", ""); +defaultPref("browser.safebrowsing.provider.mozilla.lists.base", ""); +defaultPref("browser.safebrowsing.provider.mozilla.lists.content", ""); +defaultPref("browser.safebrowsing.provider.mozilla.updateURL", ""); +defaultPref("browser.safebrowsing.provider.mozilla.gethashURL", ""); +defaultPref("browser.safebrowsing.provider.mozilla.lastupdatetime", ""); +defaultPref("browser.safebrowsing.provider.mozilla.nextupdatetime", ""); +defaultPref("browser.safebrowsing.reportPhishURL", ""); // -------------------------------- // # FONTS @@ -479,7 +479,7 @@ lockPref("browser.shell.shortcutFavicons", false); defaultPref("alerts.showFavicons", false); defaultPref("browser.link.open_newwindow", 3); defaultPref("browser.link.open_newwindow.restriction", 0); -lockPref("network.file.disable_unc_paths", true); // (hidden pref) +defaultPref("network.file.disable_unc_paths", true); // (hidden pref) lockPref("network.gio.supported-protocols", ""); // (hidden pref) lockPref("plugin.default.state", 1); lockPref("network.IDN_show_punycode", true); @@ -511,13 +511,13 @@ defaultPref("privacy.userContext.enabled", true); defaultPref("general.autoScroll", false); defaultPref("clipboard.autocopy", false); defaultPref("browser.tabs.loadBookmarksInTabs", true); -lockPref("browser.download.manager.addToRecentDocs", false); -lockPref("accessibility.force_disabled", 1); +defaultPref("browser.download.manager.addToRecentDocs", false); +defaultPref("accessibility.force_disabled", 1); lockPref("browser.uitour.enabled", false); lockPref("middlemouse.contentLoadURL", false); defaultPref("accessibility.typeaheadfind", false); -lockPref("network.manage-offline-status", false); -lockPref("browser.helperApps.deleteTempFileOnExit", true); +defaultPref("network.manage-offline-status", false); +defaultPref("browser.helperApps.deleteTempFileOnExit", true); lockPref("browser.pagethumbnails.capturing_disabled", true); lockPref("browser.bookmarks.max_backups", 2); defaultPref("reader.parse-on-load.enabled", false); @@ -525,10 +525,10 @@ defaultPref("reader.parse-on-load.enabled", false); // devtools defaultPref("devtools.debugger.remote-enabled", false); defaultPref("devtools.chrome.enabled", false); -lockPref("devtools.performance.recording.ui-base-url", "http://localhost:55555"); // Default Value : https://profiler.firefox.com -lockPref("devtools.devices.url", ""); -lockPref("devtools.remote.adb.extensionURL", ""); // [FF64+] -lockPref("devtools.remote.adb.extensionID", ""); // default adb@mozilla.org [FF64+] +defaultPref("devtools.performance.recording.ui-base-url", "http://localhost:55555"); // Default Value : https://profiler.firefox.com +defaultPref("devtools.devices.url", ""); +defaultPref("devtools.remote.adb.extensionURL", ""); // [FF64+] +defaultPref("devtools.remote.adb.extensionID", ""); // default adb@mozilla.org [FF64+] defaultPref("devtools.selfxss.count", 0); // see https://gitlab.com/librewolf-community/browser/linux/-/issues/80 // ui @@ -586,7 +586,7 @@ defaultPref("media.memory_cache_max_size", 65536); // -------------------------------- defaultPref("webgl.disabled", true); -lockPref("webgl.enable-webgl2", false); +defaultPref("webgl.enable-webgl2", false); // -------------------------------- // # JS @@ -604,12 +604,12 @@ lockPref("javascript.options.shared_memory", false); // # GEO // -------------------------------- -lockPref("geo.enabled", false); +defaultPref("geo.enabled", false); lockPref("geo.provider.ms-windows-location", false); // [WINDOWS] lockPref("geo.provider.use_corelocation", false); // [MAC] lockPref("geo.provider.use_gpsd", false); // [LINUX] -lockPref("geo.provider.network.url", ""); -lockPref("geo.provider.network.logging.enabled", false); +defaultPref("geo.provider.network.url", ""); +defaultPref("geo.provider.network.logging.enabled", false); lockPref("browser.region.network.url", ""); lockPref("browser.region.update.enabled", false);