- remove some search engines

This commit would allow overriding prefs
(locked or otherwise) with a user accessible file even
on sandboxed/restricted releases (like AppImage or Flatpak).

This works because the last specific pref value that is parsed
during startup is the one that gets actually applied; this way
an empty / non existing overrides file will not have any effect,
and only prefs changed in this file will be changed, while other
prefs from the `librewolf.cfg` will still be applied.

The difference to a `user.js` is that at this stage / with this
file, even locked prefs can still be modified.

Should we desire to have some prefs _really_ locked down (which we
do not want to be changeable with this override method), we could
just place them after the changes from this MR - so they would be
parsed after those defined in the overrides file and could override
pref changes made there.

Somewhat related to #45, #27; should partially fix #8 and basically
mitigate the recurring issues of users unable to edit some locked
settings when using a more restricted release variant.

Should probably be added to the docs, once merged.

README.md

@@ -0,0 +1,27 @@
+# LibreWolf settings
+
+LibreWolf settings for all platforms.
+
+The configuration file was revamped and it includes improvements in usability, a more curated and focused selection of privacy settings, as well as the ability to override preferences with an external file.
+The old configuration (now tagged as `legacy`) should be considered deprecated and it will no longer be maintained.
+
+We encourage users to find **their own setup** and to use our default configuration as something to build on top of. This is now easier thanks to the overrides, just place your own preferences in the proper location, according to your OS and install method:
+- Most distros and macOS -> `~/.librewolf/librewolf.overrides.cfg`
+- Flatpak -> `~/.var/app/io.gitlab.librewolf-community/.librewolf/librewolf.overrides.cfg`
+- Windows -> `%USERPROFILE%\.librewolf\librewolf.overrides.cfg`
+
+## Useful links
+- [FAQ](https://gitlab.com/librewolf-community/settings/-/wikis/FAQ): to help you creating your own pref file.
+- [LibreWolf distributions](https://gitlab.com/librewolf-community/browser)
+- [Issue tracker](https://gitlab.com/librewolf-community/settings/-/issues)
+- Our community on [gitter](https://gitter.im/librewolf-community/librewolf)
+- [Website](https://librewolf-community.gitlab.io/)
+- [r/LibreWolf](https://www.reddit.com/r/LibreWolf/)
+
+## Notes and thanks
+This repository benefits from the knowledge and research provided by [arkenfox](https://github.com/arkenfox), their documentation was vital to this revamp, so special thanks to their project.
+We do not use arkenfox's user.js but we try to keep up with it, and we also consider it a great resource for users who want to find their own setup.
+
+Some of the older prefs in this project are taken from [pyllyukko](https://github.com/pyllyukko/user.js/) and many more were investigated on [bugzilla](https://bugzilla.mozilla.org/home).
+
+Thank you to the whole LibreWolf community as once again this is entirely a community effort.

defaults/pref/local-settings.js

@@ -1,7 +1,25 @@
 // Sets up the .cfg file.
 
 //Specifies the .cfg filename (path cannot be changed)
-pref("general.config.filename", "librewolf.cfg"); 
+pref("general.config.filename", "foxgirl.cfg"); 
 
 //Allows .cfg file to be stored in plain text without obfuscation
-pref("general.config.obscure_value", 0); 
+pref("general.config.obscure_value", 0);
+
+pref("browser.tabs.drawInTitlebar", false); 
+pref("browser.newtabpage.activity-stream.feeds.topsites", false); 
+pref("devtools.selfxss.count", 5); 
+pref("general.smoothScroll", false); 
+pref("signon.autofillForms", false);
+pref("signon.generation.enabled", false);
+pref("signon.management.page.breach-alerts.enabled", false);
+pref("signon.rememberSignons", false);
+pref("signon.storeWhenAutocompleteOff", false);
+pref("signon.autofillForms.autocompleteOff", false);
+pref("signon.privateBrowsingCapture.enabled", false);
+pref("signon.backup.enabled", false);
+pref("signon.generation.available", false);
+
+pref("browser.menu.showViewImageInfo", true);
+
+pref("browser.download.autohideButton", false);

docs/Changelog.md

@@ -0,0 +1,296 @@
+This changelog will be used from now on to document changes in a precise manner, with a list of changes for each setting version.
+Setting versions are documented using the pref `librewolf.cfg.version`, available in about:config.
+
+## 2.0
+
+**References**:
+- [web content can no longer access the battery api](https://bugzilla.mozilla.org/show_bug.cgi?id=1313580).
+- http alternative services are [isolated by network partitioning and FPI](https://github.com/arkenfox/user.js/blob/269cf965bd51022ca69823f8f66a8e402280d856/user.js#L1350) and they are unchanged even in tor browser. from a security standpoint, the alternate service will need to provide the certificate of the origin in order to be considered trusthworthy.
+- let the user decide what to manually clear, including the timespan.
+- drm prefs have been trimmed as a quality of life improvement. the end result is the same, with less hassle for users who want to access drm-protected content.
+- DNT header has been proved to not work and it is used to fingerprint.
+- VR access is behind a prompt and, despite being unlikely, it could be fingerprinted. with all this on the table it's just not worth and overkill.
+- vibrator API is so nieche that even tor does not change it. best to trim where possible.
+- `extensions.getAddons.link.url"` is showed only when no extension is installed and it's not a bad suggestion to get addons from addons.mozilla.org so we can remove it.
+- `browser.safebrowsing.downloads.remote.*` are all controlled by the prefs already in the .cfg, which is the same approach taken by tor browser.
+- graphite [is no longer as concerning](https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=firefox+graphite) and blocking it is likely fingerprintable.
+- the pdf prefs and the bookmark backup are not really relevant to librewolf.
+- as reported [here](https://bugzilla.mozilla.org/show_bug.cgi?id=1606624) the shared memory pref is no longer needed, so we can switch it back to default.
+- new tab page section now includes a new design and no longer an empty page. all the unnecessary preferences have been removed and users can also customize as the most essential ones have been unlocked.
+- UI bug in tracking protection section is fixed.
+- a bunch of dead links are fixed.
+- for screensharing see [testing provided at this link](https://github.com/arkenfox/user.js/issues/1245)
+- disable new firefox suggests feature
+
+**Notes**
+Recent changes in the category `MISC > set librewolf support and releases urls` require to create a couple header for the landing page.
+
+#### Removed preferences
+```
+defaultPref("general.warnOnAboutConfig", false); // deprecated
+defaultPref("dom.battery.enabled", false);
+lockPref("network.http.altsvc.enabled", false);
+lockPref("network.http.altsvc.oe", false);
+lockPref("signon.storeWhenAutocompleteOff", false); // we do not suggest lockwise in the first place
+defaultPref("signon.management.page.breach-alerts.enabled", false); // no harm for lockwise users
+defaultPref("signon.management.page.breachAlertUrl", ""); // no harm for lockwise users
+defaultPref("privacy.history.custom", true); // redundant
+defaultPref("privacy.cpd.cookies", false);
+defaultPref("privacy.cpd.offlineApps", false); // default
+defaultPref("privacy.sanitize.timeSpan", 0);
+defaultPref("media.gmp-widevinecdm.visible", false);
+defaultPref("media.gmp-widevinecdm.enabled", false);
+defaultPref("privacy.donottrackheader.enabled", true);
+defaultPref("dom.vr.enabled", false);
+defaultPref("dom.vibrator.enabled", false);
+defaultPref("dom.push.connection.enabled", false); // redundant
+defaultPref("dom.security.https_only_mode_pbm", true); // redundant
+defaultPref("security.tls.version.fallback-limit", 3); // default is for, no need to enforce further
+lockPref("extensions.webextensions.identity.redirectDomain", ""); // outdated and unchanged even in tor
+defaultPref("extensions.getAddons.link.url", ""); // https://addons.mozilla.org/%LOCALE%/firefox/
+defaultPref("extensions.getAddons.get.url", ""); // redundant
+lockPref("extensions.getAddons.discovery.api_url", ""); // redundant
+lockPref("webextensions.storage.sync.serverURL", ""); // sync not supported
+lockPref("extensions.webservice.discoverURL", ""); // deprecated
+defaultPref("xpinstall.signatures.devInfoURL", ""); // link to wiki page
+lockPref("app.normandy.user_id", ""); // redundant
+lockPref("app.normandy.shieldLearnMoreUrl", ""); // redundant
+lockPref("security.mixed_content.block_active_content", true); // default
+defaultPref("security.insecure_connection_text.pbmode.enabled", true); // redundant
+lockPref("browser.safebrowsing.downloads.remote.block_dangerous", false);
+lockPref("browser.safebrowsing.downloads.remote.block_dangerous_host", false);
+lockPref("gfx.font_rendering.graphite.enabled", false); // consider removing
+defaultPref("pdfjs.previousHandler.alwaysAskBeforeHandling", true);
+defaultPref("pdfjs.enabledCache.state", false);
+lockPref("remote.enabled", false); // removed in FF90
+lockPref("browser.shell.didSkipDefaultBrowserCheckOnFirstRun", true); // redundant
+defaultPref("browser.bookmarks.max_backups", 2);
+defaultPref("devtools.performance.recording.ui-base-url", "http://localhost:55555"); // unharmful
+defaultPref("devtools.devices.url", ""); // unharmful
+lockPref("media.decoder-doctor.new-issue-endpoint", ""); // redundant
+lockPref("identity.sync.tokenserver.uri", ""); // redundant
+defaultPref("accessibility.support.url", ""); // redundant
+lockPref("browser.dictionaries.download.url", ""); // dictionaries are hidden already
+lockPref("browser.uitour.themeOrigin", ""); // redundant
+lockPref("toolkit.datacollection.infoURL", ""); // redundant
+lockPref("identity.mobilepromo.android", ""); // redundant
+lockPref("identity.mobilepromo.ios", ""); // redundant
+defaultPref("identity.sendtabpromo.url", ""); // redundant
+lockPref("datareporting.healthreport.infoURL", ""); // redundant
+lockPref("browser.chrome.errorReporter.infoURL", ""); // redundant
+lockPref("datareporting.policy.firstRunURL", ""); // redundant
+lockPref("javascript.options.shared_memory", false);
+lockPref("app.update.staging.enabled", false); // not relevant
+lockPref("app.update.lastUpdateTime.telemetry_modules_ping", 0); // redundant
+lockPref("network.connectivity-service.IPv6.url", "http://0.0.0.0"); // redundant
+lockPref("network.connectivity-service.IPv4.url", "http://0.0.0.0"); // redundant
+lockPref("network.connectivity-service.DNSv6.domain", ""); // redundant
+lockPref("network.connectivity-service.DNSv4.domain", ""); // redundant
+lockPref("browser.crashReports.unsubmittedCheck.enabled", false); // default
+lockPref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); // default
+lockPref("browser.newtabpage.activity-stream.feeds.newtabinit", false);
+lockPref("browser.newtabpage.activity-stream.feeds.places", false);
+lockPref("browser.newtabpage.activity-stream.feeds.systemtick", false);
+lockPref("browser.newtabpage.activity-stream.feeds.system.topsites", false);
+lockPref("browser.newtabpage.activity-stream.asrouter.providers.messaging-experiments", "");
+lockPref("browser.newtabpage.activity-stream.asrouter.providers.message-groups", "");
+lockPref("browser.newtabpage.activity-stream.asrouter.providers.cfr-fxa", "");
+lockPref("browser.newtabpage.activity-stream.asrouter.providers.cfr", "");
+lockPref("browser.newtabpage.activity-stream.asrouter.providers.whats-new-panel", "{\"id\":\"whats-new-panel\",\"enabled\":false}");
+lockPref("browser.newtabpage.activity-stream.asrouter.devtoolsEnableds", true);
+lockPref("browser.newtabpage.activity-stream.telemetry.structuredIngestion.endpoint", "");
+lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts", false);
+lockPref("browser.newtabpage.activity-stream.improvesearch.handoffToAwesomebar", false);
+lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.searchEngines", "");
+lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.havePinned", "");
+defaultPref("dom.push.userAgentID", ""); // push notifications are already disabled
+lockPref("services.settings.server", ""); // redundant with patches
+lockPref("webchannel.allowObject.urlWhitelist", ""); // deprecated
+defaultPref("media.getusermedia.browser.enabled", false);
+defaultPref("media.getusermedia.screensharing.enabled", false);
+defaultPref("media.getusermedia.audiocapture.enabled", false);
+defaultPref("dom.storage.next_gen", true); // default from v92.0
+```
+
+#### Added preferences
+```
+defaultPref("browser.download.useDownloadDir", false); // force user interaction on downloads, by always asking location
+// defaultPref("security.remote_settings.crlite_filters.enabled", true);
+// defaultPref("security.pki.crlite_mode", 2);
+pref("browser.urlbar.quicksuggest.scenario", ""); // disable firefox suggests and hide its UI
+```
+
+#### Commented prefs
+```
+// pref("network.trr.mode", 2); // previously uncommented defaultPref with value 5 
+// pref("network.trr.uri", "https://dns.quad9.net/dns-query"); // previously uncommented defaultPref with empty value
+```
+
+#### Changed preferences
+previously empty, set to proper value
+```
+defaultPref("network.trr.confirmationNS", "skip");
+defaultPref("browser.search.searchEnginesURL", "https://gitlab.com/librewolf-community/settings/-/wikis/support#search");
+defaultPref("browser.geolocation.warning.infoURL", "https://gitlab.com/librewolf-community/settings/-/wikis/support#location");
+defaultPref("app.feedback.baseURL", "https://gitlab.com/librewolf-community/settings/-/wikis/support");
+defaultPref("app.releaseNotesURL", "https://gitlab.com/librewolf-community/browser");
+defaultPref("app.releaseNotesURL.aboutDialog", "https://gitlab.com/librewolf-community/browser");
+```
+
+#### Unlocked preferences
+```
+defaultPref("signon.rememberSignons", false);
+defaultPref("signon.autofillForms", false);
+defaultPref("signon.formlessCapture.enabled", false);
+defaultPref("browser.urlbar.speculativeConnect.enabled", false);
+defaultPref("browser.contentblocking.report.lockwise.enabled", false);
+defaultPref("browser.contentblocking.report.monitor.enabled", false);
+defaultPref("network.dns.disablePrefetch", true);
+defaultPref("security.ssl.treat_unsafe_negotiation_as_broken",	true);
+defaultPref("browser.startup.blankWindow", false);
+defaultPref("extensions.htmlaboutaddons.recommendations.enabled", false);
+defaultPref("extensions.systemAddon.update.enabled", false);
+defaultPref("extensions.systemAddon.update.url", "");
+defaultPref("security.mixed_content.block_display_content", true);
+defaultPref("security.insecure_connection_text.enabled", true);
+defaultPref("gfx.font_rendering.opentype_svg.enabled", false);
+defaultPref("browser.shell.shortcutFavicons", false);
+defaultPref("network.gio.supported-protocols", "");
+defaultPref("network.IDN_show_punycode", true);
+defaultPref("browser.shell.checkDefaultBrowser", false);
+defaultPref("middlemouse.contentLoadURL", false);
+defaultPref("browser.pagethumbnails.capturing_disabled", true);
+defaultPref("browser.privatebrowsing.forceMediaMemoryCache", true);
+defaultPref("app.update.url.details", "https://gitlab.com/librewolf-community/browser");
+defaultPref("app.update.url.manual", "https://gitlab.com/librewolf-community/browser");
+defaultPref("network.protocol-handler.external.ms-windows-store", false);
+defaultPref("browser.newtab.preload", false);
+defaultPref("browser.newtabpage.activity-stream.section.highlights.includeDownloads", false);
+defaultPref("browser.newtabpage.activity-stream.section.highlights.includeVisited", false);
+defaultPref("browser.newtabpage.activity-stream.feeds.topsites", false);
+defaultPref("browser.safebrowsing.downloads.enabled", false);
+```
+
+## 1.6
+
+**target commit**:
+
+**base librewolf version**: 91.x
+
+**References**:
+- [reasoning on webgl2](https://github.com/arkenfox/user.js/commit/41c3c0ec26ef4392169fa1d04fd5783ac03bfc8e) from arkenfox's maintainer, basically disabling webgl is enough for those who don't need it. users who want it have one less pref to change.
+
+#### Removed preferences
+```
+defaultPref("dom.targetBlankNoOpener.enabled", true); // default since v79.0
+defaultPref("webgl.enable-webgl2", false);
+lockPref("browser.newtabpage.activity-stream.feeds.section.highlights", false); // default
+```
+
+## 1.5
+
+**target commit**: 23d1bff4f4ae3456df8e50e67f657ea6288eef29
+
+**base librewolf version**: 91.x
+
+**References**:
+- [comment](https://github.com/arkenfox/user.js/commit/3bb9fc713f141d794fc4adfb38d3fcf86c9307ab#commitcomment-53916786) from arkenfox's maintainer regarding tls version pref
+- [mozilla update service](https://support.mozilla.org/en-US/kb/enable-background-updates-firefox-windows)
+- extension firewall has been revisited
+
+#### Removed preferences
+```
+lockPref("security.dialog_enable_delay", 700); // default 1000, no need to enforce this
+```
+
+#### Added preferences
+```
+defaultPref("app.update.background.scheduling.enabled", false); // Win specific update service
+defaultPref("security.tls.version.enable-deprecated", false); // default but helps resetting the preference
+// defaultPref("extensions.webextensions.base-content-security-policy.v3", "default-src 'none'; script-src 'none'; object-src 'none';");
+```
+
+#### Changed preferences
+```
+// defaultPref("extensions.webextensions.base-content-security-policy", "default-src 'none'; script-src 'none'; object-src 'none';");
+```
+
+## 1.4
+**target commit**: 2e21db4c3018321a077d9af2ec44b29675c57adf
+
+**base librewolf version**: 90.x
+
+#### Removed preferences
+```
+lockPref("security.tls.version.enable-deprecated", false); // default
+```
+
+## 1.3
+**target commit**: 60e75e30c6018a5c909a2f00f40831ed3f1948a6
+
+**base librewolf version**: 90.x
+
+#### Added preferences
+```
+defaultPref("network.http.windows-sso.enabled", false);
+```
+
+#### Removed preferences
+```
+lockPref("browser.cache.offline.storage.enable", false); // pref does not exist anymore as it became default behavior
+```
+
+## 1.2
+**target commit**: 294724fae38ffa4ebcf6dfb0854787fb7022d1e6
+
+**base librewolf version**: 89.x
+
+**References**:
+- issue [#65](https://gitlab.com/librewolf-community/settings/-/issues/65) from settings
+- issue [#22](https://gitlab.com/librewolf-community/browser/common/-/issues/22) from common
+
+#### Removed preferences
+```
+defaultPref("dom.webaudio.enabled", false);
+defaultPref("media.navigator.enabled", false);
+```
+
+#### Changed preferences
+```
+defaultPref("app.support.baseURL", "https://gitlab.com/librewolf-community/settings/-/wikis/support#");
+```
+
+## 1.1
+**target commit**: cf0a2cc88acdbc51b138228353a0d7c9ea0db7c3
+
+**base librewolf version**: 89.x
+
+**References**:
+- issue [#54](https://gitlab.com/librewolf-community/settings/-/issues/54) from settings
+- merge request [#5](https://gitlab.com/librewolf-community/browser/common/-/merge_requests/5) from common
+
+#### Removed preferences
+```
+defaultPref("security.OCSP.require", false); // default value
+defaultPref("extensions.update.url", "");
+defaultPref("extensions.update.background.url", "");
+defaultPref("extensions.getAddons.search.browseURL", "");
+```
+
+#### Changed preferences
+```
+defaultPref("geo.provider.network.url", "https://location.services.mozilla.com/v1/geolocate?key=%MOZILLA_API_KEY%");
+```
+
+#### Added preferences
+```
+lockPref("privacy.override_rfp_for_color_scheme", false);
+```
+
+
+## 1.0
+**target commit**: 2b8dc4ac6d7fb6fdf8f172d04c27912098268257
+
+**base librewolf version**: 89.x
+
+This is the initial release from which we start tagging and versioning settings.

docs/changelog-legacy.md

@@ -0,0 +1,711 @@
+## Changelog
+This is a list of all the changes in librewolf prefs, in the transition from legacy up to the release of 89.0. After this all the changes will be documented in a better [changelog](./changelod.md) that includes a list of removed and added stuff on each release.
+
+#### Added
+Previously missing, now added
+```
+defaultPref("pdfjs.enableScripting", false);
+lockPref("browser.contentblocking.category", "custom"); // changing to other options is currently broken anyway
+lockPref("browser.contentblocking.cfr-milestone.enabled", false);
+lockPref("browser.contentblocking.database.enabled", false);
+lockPref("browser.contentblocking.cryptomining.preferences.ui.enabled", false);
+lockPref("browser.contentblocking.fingerprinting.preferences.ui.enabled", false);
+lockPref("browser.contentblocking.report.hide_vpn_banner", true);
+lockPref("browser.contentblocking.report.show_mobile_app", false);
+defaultPref("extensions.formautofill.creditCards.available", false);
+defaultPref("extensions.formautofill.addresses.capture.enabled", false);
+defaultPref("extensions.formautofill.section.enabled", false); // hide formautofill section in settings, which is useless and buggy atm
+defaultPref("media.peerconnection.ice.proxy_only_if_behind_proxy", true);
+lockPref("network.trr.send_empty_accept-encoding_headers", false);
+lockPref("browser.newtabpage.activity-stream.section.highlights.includePocket", false);
+lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts", false);
+lockPref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts.havePinned", "");
+lockPref("browser.newtabpage.activity-stream.showSponsoredTopSites", false);
+lockPref("browser.newtabpage.activity-stream.feeds.topsites",	false);
+lockPref("browser.newtabpage.activity-stream.feeds.system.topsites",    false);
+lockPref("browser.newtabpage.activity-stream.feeds.system.topstories",	false);
+lockPref("app.normandy.dev_mode", false);
+lockPref("toolkit.telemetry.shutdownPingSender.enabledFirstSession", false);
+defaultPref("browser.urlbar.dnsResolveSingleWordsAfterSearch", 0);
+defaultPref("dom.security.https_only_mode_pbm", true);
+lockPref("browser.ping-centre.telemetry", false);
+lockPref("browser.region.network.url", "");
+lockPref("browser.region.update.enabled", false);
+defaultPref("dom.popup_allowed_events", "click dblclick mousedown pointerdown");
+defaultPref("extensions.postDownloadThirdPartyPrompt", false);
+defaultPref("general.warnOnAboutConfig", false);
+defaultPref("network.auth.subresource-http-auth-allow", 1);
+defaultPref("browser.display.use_system_colors", false);
+defaultPref("browser.cache.disk.enable", false);
+defaultPref("fission.autostart", true); // commented for now
+```
+
+#### Modified
+Updated some present prefs to better one
+```
+defaultPref("network.cookie.cookieBehavior", 5); // dFPI, previously set to 1
+lockPref("browser.cache.offline.storage.enable", false); // Previously browser.cache.offline.insecure.enable
+lockPref("network.http.referer.XOriginTrimmingPolicy", 2); // Previously set to 0
+lockPref("network.http.referer.XOriginPolicy", 0); // Previously set to 1
+defaultPref("privacy.clearOnShutdown.offlineApps", false); // For consistency with new cookie behavior
+defaultPref("privacy.cpd.offlineApps", false); // For consistency with new cookie behavior
+lockPref("devtools.performance.recording.ui-base-url", "http://localhost:55555"); // Previously redirected to localhost:4242
+defaultPref("media.autoplay.blocking_policy", 2); // Previously media.autoplay.enabled.user-gestures-needed
+defaultPref("media.memory_cache_max_size", 65536); // previously lockPref("media.memory_cache_max_size", 16384);
+```
+
+#### Removed
+Active prefs that were removed
+```
+lockPref("network.cookie.same-site.enabled", true); // Deprecated
+lockPref("network.cookie.leave-secure-alone", true); // Deprecated
+lockPref("browser.contentblocking.reportBreakage.enabled", false); // Deprecated
+lockPref("browser.contentblocking.rejecttrackers.reportBreakage.enabled", false); // Deprecated
+lockPref("browser.contentblocking.rejecttrackers.ui.enabled", false); // Deprecated
+lockPref("browser.contentblocking.trackingprotection.control-center.ui.enabled", false); // Deprecated
+lockPref("browser.contentblocking.trackingprotection.ui.enabled", false); // Deprecated
+pref("signon.management.page.mobileAndroidURL", ""); // Deprecated
+pref("signon.management.page.mobileAppleURL", ""); // Deprecated
+lockPref("browser.urlbar.openViewOnFocus", false); // Handled through patch
+lockPref("browser.urlbar.update1", false); // Handled through patch
+lockPref("browser.urlbar.update1.interventions", false); // Handled through patch
+lockPref("browser.urlbar.update1.searchTips", false); // Handled through patch
+defaultPref("places.history.expiration.max_pages", 2147483647); // Useless
+defaultPref("media.gmp-manager.url.override", "data:text/plain,"); // To easily enable DRM
+defaultPref("media.gmp-manager.updateEnabled", false); // Deprecated
+defaultPref("media.gmp-widevinecdm.autoupdate", false); // Deprecated
+defaultPref("media.gmp-eme-adobe.enabled", false); // Deprecated
+defaultPref("media.gmp-manager.certs.2.commonName", ""); // To easily enable DRM
+defaultPref("media.gmp-manager.certs.1.commonName", ""); // To easily enable DRM
+defaultPref("media.gmp.trial-create.enabled", false); // To easily enable DRM
+lockPref("dom.indexedDB.enabled", true); // Deprecated
+lockPref("dom.w3c_pointer_events.enabled", false); // Deprecated
+lockPref("offline-apps.allow_by_default", false); // Deprecated
+lockPref("ui.use_standins_for_native_colors", true); // Interferes with RFP
+lockPref("dom.event.highrestimestamp.enabled", true); // Deprecated
+lockPref("browser.urlbar.usepreloadedtopurls.enabled", false); // Deprecated
+lockPref("browser.urlbar.oneOffSearches", false); // Deprecated
+lockPref("dom.disable_window_open_feature.close", true); // Deprecated
+lockPref("dom.disable_window_open_feature.location", true); // Deprecated
+lockPref("dom.disable_window_open_feature.menubar", true); // Deprecated
+lockPref("dom.disable_window_open_feature.minimizable", true); // Deprecated
+lockPref("dom.disable_window_open_feature.personalbar", true); // Deprecated
+lockPref("dom.disable_window_open_feature.resizable", true); // Deprecated
+lockPref("dom.disable_window_open_feature.status", true); // Deprecated
+lockPref("dom.disable_window_open_feature.titlebar", true); // Deprecated
+lockPref("dom.disable_window_open_feature.toolbar", true); // Deprecated
+lockPref("security.csp.experimentalEnabled", true); // Deprecated
+lockPref("security.csp.enable_violation_events", false); // Deprecated
+lockPref("gecko.handlerService.schemes.ircs.0.uriTemplate", ""); // Duplicated in the file
+lockPref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr", false); // Deprecated
+lockPref("extensions.htmlaboutaddons.discover.enabled", false); // Deprecated
+lockPref("browser.messaging-system.fxatoolbarbadge.enabled", false); // Deprecated
+lockPref("browser.onboarding.notification.tour-ids-queue", ""); // Deprecated
+lockPref("devtools.gcli.lodashSrc", ""); // Deprecated
+lockPref("devtools.webide.templatesURL", ""); // Deprecated
+lockPref("browser.ping-centre.production.endpoint", ""); // Deprecated
+lockPref("gecko.handlerService.schemes.ircs.0.name", ""); // Duplicated in the file
+lockPref("services.sync.fxa.privacyURL", ""); // Deprecated
+lockPref("services.settings.default_signer", ""); // Deprecated
+lockPref("app.productInfo.baseURL", ""); // Deprecated
+lockPref("devtools.webide.adbAddonURL", ""); // Deprecated
+lockPref("lightweightThemes.recommendedThemes", ""); // Deprecated
+defaultPref("media.gmp-gmpopenh264.autoupdate", false); // Adroid FF only
+lockPref("browser.newtabpage.activity-stream.prerender", false); // Deprecated
+lockPref("browser.newtabpage.activity-stream.aboutHome.enabled", false); // Deprecated
+lockPref("browser.newtabpage.activity-stream.disableSnippets", true); // Deprecated
+lockPref("privacy.donottrackheader.value", 1); // Deprecated
+defaultPref("privacy.userContext.longPressBehavior", 2); // Deprecated
+defaultPref("browser.tabs.closeWindowWithLastTab", true); // Already default
+lockPref("dom.forms.datetime", false); // Deprecated
+lockPref("browser.download.hide_plugins_without_extensions", false); // Deprecated
+lockPref("services.sync.clients.lastSync", "0"); // Deprecated
+lockPref("services.sync.clients.lastSyncLocal", "0"); // Deprecated
+lockPref("services.sync.enabled", false); // Deprecated
+lockPref("services.sync.jpake.serverURL", ""); // Deprecated
+lockPref("services.sync.migrated", true); // Deprecated
+lockPref("services.sync.prefs.sync.browser.safebrowsing.downloads.password", false); // Deprecated
+lockPref("services.sync.serverURL", ""); // Deprecated
+lockPref("services.sync.tabs.lastSyncLocal", "0"); // Deprecated
+lockPref("services.sync.engine.bookmarks.buffer", false); // Deprecated
+lockPref("services.sync.prefs.sync.browser.sessionstore.restore_on_demand", false); // Deprecated
+lockPref("services.sync.prefs.sync.browser.urlbar.suggest.history.onlyTyped", false); // Deprecated
+lockPref("services.sync.prefs.sync.browser.urlbar.matchBuckets", false); // Deprecated
+lockPref("services.sync.prefs.sync.browser.urlbar.autocomplete.enabled", false); // Deprecated
+lockPref("services.sync.prefs.sync.extensions.personas.current", false); // Deprecated
+lockPref("services.sync.prefs.sync.lightweightThemes.selectedThemeID", false); // Deprecated
+lockPref("services.sync.prefs.sync.lightweightThemes.usedThemes", false); // Deprecated
+lockPref("services.sync.prefs.sync.pref.advanced.images.disable_button.view_image", false); // Deprecated
+lockPref("services.sync.prefs.sync.pref.advanced.javascript.disable_button.advanced", false); // Deprecated
+lockPref("services.sync.prefs.sync.security.OCSP.enabled", false); // Deprecated
+lockPref("services.sync.prefs.sync.security.OCSP.require", false); // Deprecated
+lockPref("services.sync.prefs.sync.security.tls.version.max", false); // Deprecated
+lockPref("services.sync.prefs.sync.security.tls.version.min", false); // Deprecated
+lockPref("services.sync.prefs.sync.xpinstall.whitelist.required", false); // Deprecated
+lockPref("prio.publicKeyB", ""); // Deprecated
+lockPref("prio.publicKeyA", ""); // Deprecated
+lockPref("browser.chrome.errorReporter.publicKey", ""); // Deprecated
+lockPref("security.insecure_password.ui.enabled", true); // Deprecated
+defaultPref("network.dns.localDomains", "librefox.com"); // Doesn't make sense at all
+lockPref("security.ssl.errorReporting.automatic", false); // Deprecated
+lockPref("security.ssl.errorReporting.url", ""); // Deprecated
+lockPref("security.ssl.errorReporting.enabled", false); // Deprecated
+defaultPref("layout.frame_rate.precise", true); // Deprecated
+defaultPref("layers.offmainthreadcomposition.enabled", true); // Deprecated
+defaultPref("layers.async-video.enabled", true); // Deprecated
+defaultPref("layers.offmainthreadcomposition.async-animations", true); // Default true and not important to set
+defaultPref("html5.offmainthread", true); // Default true and not important to set
+defaultPref("browser.tabs.animate", false); // Deprecated
+lockPref("webgl.disable-extensions", true); // Deprecated
+lockPref("browser.onboarding.notification.finished", true); // Deprecated
+lockPref("browser.onboarding.tour.onboarding-tour-customize.completed", true); // Deprecated
+lockPref("browser.onboarding.tour.onboarding-tour-performance.completed", true); // Deprecated
+lockPref("devtools.onboarding.telemetry.logged", false); // Deprecated
+lockPref("pref.general.disable_button.default_browser", false); // Deprecated
+lockPref("pref.privacy.disable_button.view_passwords", false); // Deprecated
+lockPref("browser.urlbar.daysBeforeHidingSuggestionsPrompt", 0); // Deprecated
+lockPref("browser.urlbar.searchSuggestionsChoice", false); // Deprecated
+lockPref("browser.urlbar.timesBeforeHidingSuggestionsHint", 0); // Deprecated
+lockPref("app.update.silent", false); // Deprecated
+lockPref("app.vendorURL", ""); // Deprecated
+lockPref("browser.chrome.errorReporter.submitUrl", ""); // Deprecated
+lockPref("browser.chrome.errorReporter.enabled", false); // Deprecated
+lockPref("browser.ping-centre.staging.endpoint", ""); // Deprecated
+lockPref("devtools.devedition.promo.url", ""); // Deprecated
+lockPref("devtools.gcli.imgurUploadURL", ""); // Deprecated
+lockPref("devtools.gcli.jquerySrc", ""); // Deprecated
+lockPref("devtools.gcli.underscoreSrc", ""); // Deprecated
+lockPref("devtools.telemetry.supported_performance_marks", ""); // Deprecated
+lockPref("dom.permissions.enabled", false); // Deprecated
+lockPref("extensions.blocklist.url", ""); // Deprecated
+lockPref("geo.wifi.uri", ""); // Deprecated
+lockPref("geo.provider-country.network.scan", false); // Deprecated
+lockPref("geo.provider-country.network.url", ""); // Deprecated
+lockPref("identity.fxaccounts.service.sendLoginUrl", ""); // Deprecated
+lockPref("lpbmode.enabled", true); // Deprecated
+lockPref("mailnews.messageid_browser.url", ""); // Deprecated
+lockPref("mailnews.mx_service_url", ""); // Deprecated
+lockPref("network.predictor.cleaned-up", true); // Deprecated
+lockPref("plugins.crash.supportUrl", ""); // Deprecated
+lockPref("sync.enabled", false); // Deprecated
+lockPref("sync.jpake.serverURL", ""); // Deprecated
+lockPref("sync.serverURL", ""); // Deprecated
+lockPref("toolkit.telemetry.hybridContent.enabled", false); // Deprecated
+lockPref("toolkit.telemetry.infoURL", ""); // Deprecated
+lockPref("toolkit.telemetry.prompted", 2); // Deprecated
+lockPref("toolkit.telemetry.rejected", true); // Deprecated
+lockPref("toolkit.telemetry.coverage.opt-out", true); // Deprecated
+lockPref("browser.aboutHomeSnippets.updateUrl", ""); // Deprecated
+lockPref("dom.enable_user_timing", false); // Deprecated
+lockPref("geo.wifi.logging.enabled", false); // Deprecated
+lockPref("browser.search.geoSpecificDefaults.url", ""); // Deprecated
+lockPref("browser.search.geoSpecificDefaults", false); // Deprecated
+lockPref("browser.fixup.hide_user_pass", true); // Deprecated
+lockPref("privacy.storagePrincipal.enabledForTrackers", false); // redundant with dFPI
+defaultPref("layout.css.visited_links_enabled", false); // https://bugzilla.mozilla.org/show_bug.cgi?id=1632765
+defaultPref("layout.css.always-repaint-on-unvisited", false); // no benefit with RFP enabled -> https://github.com/arkenfox/user.js/issues/933
+defaultPref("layout.css.notify-of-unvisited", false); // no benefit with RFP enabled
+defaultPref("dom.event.contextmenu.enabled", false); // causes breakage with no demonstrated privacy benefit
+lockPref("dom.registerProtocolHandler.insecure.enabled", true); // Deprecated
+defaultPref("dom.security.https_only_mode_ever_enabled", true); // Triggered by dom.security.https_only_mode = true
+lockPref("dom.enable_resource_timing", false); // conflicting with RFP
+lockPref("device.sensors.enabled", false); // conflicting with RFP
+lockPref("dom.gamepad.enabled", false); // conflicting with RFP
+lockPref("dom.netinfo.enabled", false); // conflicting with RFP
+lockPref("media.video_stats.enabled", false); // conflicting with RFP
+lockPref("webgl.enable-debug-renderer-info", false); // conflicting with RFP
+defaultPref("extensions.getAddons.themes.browseURL", ""); // Deprecated
+lockPref("extensions.getAddons.compatOverides.url", ""); // Used for tests on localhost:8888
+defaultPref("extensions.ui.experiment.hidden", false); // Deprecated
+defaultPref("extensions.webextensions.tabhide.enabled", false); // Deprecated
+lockPref("dom.enable_performance", false); // conflicting with RFP
+lockPref("dom.enable_performance_navigation_timing", false);  // conflicting with RFP
+lockPref("security.mixed_content.upgrade_display_content", true); // not worth having https://github.com/arkenfox/user.js/issues/754
+lockPref("security.ssl3.ecdhe_ecdsa_rc4_128_sha", false); // Deprecated
+lockPref("security.ssl3.ecdhe_rsa_rc4_128_sha", false); // Deprecated
+lockPref("security.ssl3.rsa_rc4_128_md5", false); // Deprecated
+lockPref("security.ssl3.rsa_rc4_128_sha", false); // Deprecated
+lockPref("security.tls.unrestricted_rc4_fallback", false); // Deprecated
+lockPref("security.ssl3.ecdh_ecdsa_rc4_128_sha", false); // Deprecated
+lockPref("security.ssl3.ecdh_rsa_rc4_128_sha", false); // Deprecated
+lockPref("security.ssl3.rsa_seed_sha", false); // Deprecated
+lockPref("security.ssl3.rsa_des_ede3_sha", false); // known to leak and increase fingerprint
+lockPref("security.ssl3.rsa_aes_256_sha", false); // known to leak and increase fingerprint
+lockPref("security.ssl3.rsa_aes_128_sha", false); // known to leak and increase fingerprint
+lockPref("browser.safebrowsing.allowOverride", false); // we do not have SB enabled so we don't care if the bypass button is shown
+defaultPref("browser.ctrlTab.recentlyUsedOrder", false); // why should be disable this?
+lockPref("services.blocklist.onecrl.collection", ""); // Deprecated
+lockPref("font.blacklist.underline_offset", ""); // knwown to increase fingerprint
+lockPref("plugin.defaultXpi.state", 1); // Deprecated
+lockPref("remote.log.level", "Info"); // already default and not important in any way
+lockPref("webgl.min_capability_mode", true); // small to no gain according to arkenfox and TOR, breaks websites on the other side
+lockPref("lightweightThemes.update.enabled", false); // Deprecated 
+lockPref("lightweightThemes.persisted.headerURL", false); // Deprecated 
+lockPref("lightweightThemes.persisted.footerURL", false); // Deprecated 
+lockPref("network.protocol-handler.warn-external-default",true); // any real benefit? 
+lockPref("network.protocol-handler.external.javascript",false); // any real benefit? 
+lockPref("network.protocol-handler.external.moz-extension",false); // any real benefit? 
+lockPref("network.protocol-handler.external.ftp",false);// any real benefit? 
+lockPref("network.protocol-handler.external.file",false);// any real benefit? 
+lockPref("network.protocol-handler.external.about",false);// any real benefit? 
+lockPref("network.protocol-handler.external.chrome",false);// any real benefit? 
+lockPref("network.protocol-handler.external.blob",false);// any real benefit? 
+lockPref("network.protocol-handler.external.data",false);// any real benefit? 
+lockPref("network.protocol-handler.expose-all",false);// any real benefit? 
+lockPref("network.protocol-handler.expose.http",true);// any real benefit? 
+lockPref("network.protocol-handler.expose.https",true);// any real benefit? 
+lockPref("network.protocol-handler.expose.javascript",true);// any real benefit? 
+lockPref("network.protocol-handler.expose.moz-extension",true);// any real benefit? 
+lockPref("network.protocol-handler.expose.ftp",true);// any real benefit? 
+lockPref("network.protocol-handler.expose.file",true);// any real benefit? 
+lockPref("network.protocol-handler.expose.about",true);// any real benefit? 
+lockPref("network.protocol-handler.expose.chrome",true);// any real benefit? 
+lockPref("network.protocol-handler.expose.blob",true);// any real benefit? 
+lockPref("network.protocol-handler.expose.data",true);// any real benefit? 
+lockPref("network.protocol-handler.external.http",false);// any real benefit? 
+lockPref("network.protocol-handler.external.https",false);// any real benefit?
+lockPref("shumway.disabled", true); // Deprecated
+lockPref("plugin.state.libgnome-shell-browser-plugin", 0); // Deprecated
+lockPref("plugins.click_to_play", true); // Deprecated
+lockPref("plugin.sessionPermissionNow.intervalInMinutes", 0); // Deprecated
+lockPref("devtools.webide.enabled", false); // Deprecated
+lockPref("devtools.webide.autoinstallADBExtension", false); // Deprecated
+lockPref("network.allow-experiments", false); // Deprecated
+lockPref("browser.urlbar.userMadeSearchSuggestionsChoice", true); // Deprecated
+lockPref("network.netlink.route.check.IPv4", "127.0.0.1"); // Deprecated
+lockPref("network.netlink.route.check.IPv6", "::1"); // Deprecated
+lockPref("network.negotiate-auth.allow-insecure-ntlm-v1", false); // Deprecated
+lockPref("network.negotiate-auth.allow-insecure-ntlm-v1-https", false); // Deprecated
+lockPref("security.tls.version.max", 4); // increases fingerprint
+defaultPref("network.dns.blockDotOnion", true); // TOR is out of scope
+lockPref("network.http.referer.hideOnionSource", true); // TOR is out of scope
+lockPref("browser.onboarding.enabled", false); // Deprecated
+lockPref("dom.mozTCPSocket.enabled", false); // Useless according to https://gitlab.torproject.org/legacy/trac/-/issues/27268#comment:2
+lockPref("devtools.webide.autoinstallADBHelper", false); // Deprecated
+lockPref("app.update.enabled", false); // Deprecated
+lockPref("browser.casting.enabled", false); // Deprecated, probably Android only
+lockPref("browser.newtabpage.activity-stream.enabled", false); // Deprecated
+lockPref("browser.newtabpage.directory.ping", "data:text/plain,"); // Deprecated
+lockPref("browser.newtabpage.directory.source", "data:text/plain,"); // Deprecated
+lockPref("browser.newtabpage.enhanced", false); // Deprecated
+lockPref("browser.selfsupport.url", ""); // Deprecated
+lockPref("camera.control.face_detection.enabled", false); // Deprecated
+lockPref("datareporting.healthreport.about.reportUrl", "data:,"); // Deprecated
+lockPref("datareporting.healthreport.service.enabled", false); // Deprecated
+lockPref("devtools.webide.autoinstallFxdtAdapters", false); // Deprecated
+lockPref("devtools.webide.adaptersAddonURL", ""); // Deprecated
+lockPref("dom.flyweb.enabled", false); // Deprecated
+lockPref("dom.push.udp.wakeupEnabled", false); // Deprecated
+lockPref("dom.telephony.enabled", false); // Deprecated
+lockPref("extensions.shield-recipe-client.enabled", false); // Deprecated
+lockPref("loop.logDomains", false); // Deprecated
+lockPref("network.websocket.enabled", false); // Deprecated
+lockPref("security.xpconnect.plugin.unrestricted", false); // Deprecated
+lockPref("social.directories", ""); // Deprecated
+lockPref("social.remote-install.enabled", false); // Deprecated
+lockPref("social.whitelist", ""); // Deprecated
+lockPref("pref.privacy.disable_button.change_blocklist", true); // seems to have no effect and probably deprecated
+lockPref("pref.privacy.disable_button.tracking_protection_exceptions", true); // seems to have no effect and probably deprecated
+lockPref("browser.pocket.enabled", false); // Deprecated
+defaultPref("toolkit.legacyUserProfileCustomizations.stylesheets", false); // already default value and not that important, can still be flipped easily
+lockPref("plugin.scan.plid.all", false); // Win-only, plugins are disabled so it's redundant
+lockPref("webgl.dxgl.enabled", false); // Win-only, marked as useless https://github.com/arkenfox/user.js/issues/714
+lockPref("browser.search.countryCode", "US"); // Deprecated
+lockPref("experiments.activeExperiment", false); // Deprecated
+lockPref("experiments.enabled", false); // Deprecated
+lockPref("experiments.manifest.uri", ""); // Deprecated
+lockPref("experiments.supported", false); // Deprecated
+lockPref("network.jar.block-remote-files", true); // Deprecated
+lockPref("network.jar.open-unsafe-types", false); // Deprecated
+lockPref("plugin.state.java", 0); // Deprecated
+lockPref("trailhead.firstrun.branches", "join-privacy"); // Deprecated
+lockPref("services.blocklist.update_enabled", false); // Deprecated
+lockPref("shield.savant.enabled", false); // Deprecated
+defaultPref("gfx.direct2d.disabled", false); // Win-only, default and probably out of scope
+defaultPref("layers.acceleration.disabled", false); // default and probably out of scope
+lockPref("browser.taskbar.previews.enable", false); // personal pref
+lockPref("browser.taskbar.lists.enabled", false); // personal pref
+lockPref("browser.taskbar.lists.frequent.enabled", false); // personal pref
+lockPref("browser.taskbar.lists.recent.enabled", false); // personal pref
+lockPref("browser.taskbar.lists.tasks.enabled", false); // personal pref
+defaultPref("webgl.force-enabled", true); // out of scope, not worth
+defaultPref("layers.acceleration.force-enabled", true); // out of scope, not worth
+lockPref("privacy.trackingprotection.testing.report_blocked_node", false); // default false and we have tracking protection disabled
+lockPref("privacy.trackingprotection.origin_telemetry.enabled", false); // default false and we have tracking protection disabled
+lockPref("privacy.trackingprotection.lower_network_priority", false); // default
+lockPref("telemetry.origin_telemetry_test_mode.enabled", false); // default false and we have tracking protection disabled
+lockPref("signon.storeSignons", false); // Deprecated
+lockPref("browser.urlbar.filter.javascript", true); // default
+lockPref("browser.search.geoip.url", ""); // Deprecated
+defaultPref("privacy.clearOnShutdown.siteSettings", false); // default
+defaultPref("privacy.clearOnShutdown.cache", true); // default
+defaultPref("privacy.clearOnShutdown.sessions", true); // default
+defaultPref("privacy.clearOnShutdown.downloads", true); // default
+defaultPref("privacy.clearOnShutdown.formdata", true); // default
+defaultPref("privacy.clearOnShutdown.history", true); // default
+defaultPref("privacy.cpd.siteSettings", false); // default
+defaultPref("privacy.cpd.downloads", true); // default
+defaultPref("privacy.cpd.cache", true); // default
+defaultPref("privacy.cpd.formdata", true); // default
+defaultPref("privacy.cpd.history", true); // default
+defaultPref("privacy.cpd.passwords", false); // default
+defaultPref("privacy.cpd.sessions", true); // default
+defaultPref("extensions.formautofill.addresses.capture.enabled", false); // default
+lockPref("signon.autofillForms.http", false); // default
+lockPref("network.trr.send_user-agent_headers", false); // default
+lockPref("network.dns.disablePrefetchFromHTTPS", true); // default
+lockPref("dom.imagecapture.enabled", false); // default
+lockPref("dom.reporting.crash.enabled", false); // default
+defaultPref("network.proxy.autoconfig_url.include_path", false); // default
+lockPref("security.tls.version.min", 3); // default
+defaultPref("extensions.webextensions.background-delayed-startup", true); //default
+defaultPref("xpinstall.signatures.required", true); // default
+lockPref("app.normandy.dev_mode", false); // default
+defaultPref("pdfjs.enableWebGL", false); // default
+lockPref("browser.cache.offline.enable", false); // apparently increases fingerprinting and redundant with browser.cache.offline.storage.enable
+lockPref("network.predictor.enable-prefetch", false); // default
+lockPref("network.http.referer.spoofSource", false);  // default
+defaultPref("network.http.referer.defaultPolicy", 2);  // default
+defaultPref("network.http.referer.defaultPolicy.pbmode", 2);  // default
+defaultPref("layout.spellcheckDefault", 2); // why?
+lockPref("privacy.trackingprotection.introURL", ""); // Deprecated
+defaultPref("general.appname.override", "Netscape"); // no benefit over RFP
+defaultPref("general.appversion.override", "5.0 (Windows)"); // no benefit over RFP, and it doesn't spoof
+defaultPref("general.platform.override", "Win32"); // no benefit over RFP, and it doesn't spoof
+defaultPref("general.oscpu.override", "Windows NT 6.1"); // no benefit over RFP, and it doesn't spoof
+lockPref("general.buildID.override", "20100101"); // no benefit over RFP
+lockPref("browser.startup.homepage_override.buildID", "20100101"); // no benefit over RFP
+defaultPref("general.useragent.override", "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"); // no benefit over RFP and without may increase FP
+lockPref("security.insecure_connection_icon.enabled", true); // Default
+lockPref("security.insecure_connection_icon.pbmode.enabled", true); // Default
+lockPref("browser.bookmarks.restore_default_bookmarks", false); // Default
+lockPref("browser.contentblocking.cfr-milestone.enabled", false); // not needed with contenblocking disabled
+lockPref("app.normandy.first_run", false); // default
+lockPref("browser.send_pings", false); // default
+lockPref("browser.send_pings.require_same_host", true); // default
+defaultPref("browser.tabs.closeTabByDblclick", true); // why?
+lockPref("devtools.debugger.force-local", true); // default
+lockPref("gfx.offscreencanvas.enabled", false); // default
+lockPref("media.webspeech.recognition.enable", false); // default
+lockPref("network.auth.subresource-img-cross-origin-http-auth-allow", false); // default
+lockPref("remote.force-local", true); // default
+lockPref("security.data_uri.block_toplevel_data_uri_navigations", true); // default
+lockPref("security.fileuri.strict_origin_policy", true); // default
+lockPref("security.insecure_field_warning.contextual.enabled", true); // default
+defaultPref("security.remote_settings.intermediates.enabled", true); // default
+lockPref("xpinstall.whitelist.required", true); // default
+lockPref("browser.sessionhistory.max_entries", 20); // why?
+lockPref("extensions.webapi.testing", false); // hidden but default false
+lockPref("canvas.capturestream.enabled", false); // any real benefit?
+lockPref("network.http.redirection-limit", 10); // small benefit from having it at default 20, and break some payments
+defaultPref("dom.event.clipboardevents.enabled", false); // causes breakage with small benefits, moved to hardened setup
+lockPref("webgl.disable-fail-if-major-performance-caveat", true); // default
+lockPref("network.trr.send_empty_accept-encoding_headers", false); // why?
+
+// fxaccounts is disabled in policies
+lockPref("identity.fxaccounts.enabled", false);
+lockPref("identity.fxaccounts.remote.root", "");
+lockPref("identity.fxaccounts.auth.uri", "");
+lockPref("identity.fxaccounts.commands.enabled", false);
+lockPref("identity.fxaccounts.remote.oauth.uri", "");
+lockPref("identity.fxaccounts.remote.profile.uri", "");
+lockPref("identity.fxaccounts.service.monitorLoginUrl", "");
+
+// all handled by lockPref("services.settings.server", "")
+lockPref("services.blocklist.addons.collection", "");
+lockPref("services.blocklist.plugins.collection", "");
+lockPref("services.blocklist.gfx.collection", "");
+lockPref("services.blocklist.addons.signer", "");
+lockPref("services.blocklist.gfx.signer", "");
+lockPref("services.settings.security.onecrl.signer", "");
+lockPref("services.blocklist.pinning.signer", "");
+lockPref("services.blocklist.plugins.signer", "");
+
+// useless as fxaccounts are off
+lockPref("services.sync.addons.trustedSourceHostnames", "");
+lockPref("services.sync.lastversion", "");
+lockPref("services.sync.maxResyncs", 0); // 1
+lockPref("services.sync.telemetry.maxPayloadCount", 0); //500
+lockPref("services.sync.addons.ignoreUserEnabledChanges", true); //false
+lockPref("services.sync.engine.addons", false); //true
+lockPref("services.sync.engine.addresses", false); //false
+lockPref("services.sync.engine.addresses.available", false);
+lockPref("services.sync.engine.bookmarks", false); //true
+lockPref("services.sync.engine.creditcards", false); //false
+lockPref("services.sync.engine.creditcards.available", false); //false
+lockPref("services.sync.engine.history", false); //true
+lockPref("services.sync.engine.passwords", false); //true
+lockPref("services.sync.engine.prefs", false); //true
+lockPref("services.sync.engine.tabs", false); //true
+lockPref("services.sync.log.appender.file.logOnError", false); //true
+lockPref("services.sync.log.appender.file.logOnSuccess", false); //false
+lockPref("services.sync.log.cryptoDebug", false); //false
+lockPref("services.sync.sendVersionInfo", false); //true
+lockPref("services.sync.syncedTabs.showRemoteIcons", true); //true
+lockPref("services.sync.prefs.sync.services.sync.syncedTabs.showRemoteIcons", false); //true
+lockPref("services.sync.prefs.sync.accessibility.blockautorefresh", false); //true
+lockPref("services.sync.prefs.sync.accessibility.browsewithcaret", false); //true
+lockPref("services.sync.prefs.sync.accessibility.typeaheadfind", false); //true
+lockPref("services.sync.prefs.sync.accessibility.typeaheadfind.linksonly", false); //true
+lockPref("services.sync.prefs.sync.addons.ignoreUserEnabledChanges", true); //true
+lockPref("services.sync.prefs.sync.browser.contentblocking.category", false); //true
+lockPref("services.sync.prefs.sync.browser.contentblocking.features.strict", false); //true
+lockPref("services.sync.prefs.sync.browser.ctrlTab.recentlyUsedOrder", false); //true
+lockPref("services.sync.prefs.sync.browser.download.useDownloadDir", false); //true
+lockPref("services.sync.prefs.sync.browser.formfill.enable", false); //true
+lockPref("services.sync.prefs.sync.browser.link.open_newwindow", false); //true
+lockPref("services.sync.prefs.sync.browser.newtabpage.enabled", false); //true
+lockPref("services.sync.prefs.sync.browser.newtabpage.pinned", false); //true
+lockPref("services.sync.prefs.sync.browser.newtabpage.activity-stream.section.highlights.includePocket", false); //true
+lockPref("services.sync.prefs.sync.browser.newtabpage.activity-stream.section.highlights.includeVisited", false); //true
+lockPref("services.sync.prefs.sync.browser.newtabpage.activity-stream.section.highlights.includeBookmarks", false); //true
+lockPref("services.sync.prefs.sync.browser.newtabpage.activity-stream.section.highlights.includeDownloads", false); //true
+lockPref("services.sync.prefs.sync.browser.newtabpage.activity-stream.section.highlights.rows", false); //true
+lockPref("services.sync.prefs.sync.browser.newtabpage.activity-stream.section.topstories.rows", false); //true
+lockPref("services.sync.prefs.sync.browser.offline-apps.notify", false); //true
+lockPref("services.sync.prefs.sync.browser.search.update", false); //true
+lockPref("services.sync.prefs.sync.browser.search.widget.inNavBar", false); //true
+lockPref("services.sync.prefs.sync.browser.sessionstore.warnOnQuit", false); //true
+lockPref("services.sync.prefs.sync.browser.startup.homepage", false); //true
+lockPref("services.sync.prefs.sync.browser.startup.page", false); //true
+lockPref("services.sync.prefs.sync.browser.tabs.loadInBackground", false); //true
+lockPref("services.sync.prefs.sync.browser.tabs.warnOnClose", false); //true
+lockPref("services.sync.prefs.sync.browser.tabs.warnOnOpen", false); //true
+lockPref("services.sync.prefs.sync.browser.urlbar.maxRichResults", false); //true
+lockPref("services.sync.prefs.sync.browser.urlbar.suggest.bookmark", false); //true
+lockPref("services.sync.prefs.sync.browser.urlbar.suggest.history", false); //true
+lockPref("services.sync.prefs.sync.browser.urlbar.suggest.engines", false); //true
+lockPref("services.sync.prefs.sync.browser.urlbar.suggest.topsites", false); //true
+lockPref("services.sync.prefs.sync.browser.urlbar.suggest.openpage", false); //true
+lockPref("services.sync.prefs.sync.browser.urlbar.suggest.searches", false); //true
+lockPref("services.sync.prefs.sync.browser.urlbar.resultBuckets", false); //true
+lockPref("services.sync.prefs.sync.browser.urlbar.showSearchSuggestionsFirst", false); //true
+lockPref("services.sync.prefs.sync.dom.disable_open_during_load", false); //true
+lockPref("services.sync.prefs.sync.dom.disable_window_flip", false); //true
+lockPref("services.sync.prefs.sync.dom.disable_window_move_resize", false); //true
+lockPref("services.sync.prefs.sync.dom.event.contextmenu.enabled", false); //true
+lockPref("services.sync.prefs.sync.dom.security.https_only_mode", false); //true
+lockPref("services.sync.prefs.sync.dom.security.https_only_mode_ever_enabled", false); //true
+lockPref("services.sync.prefs.sync.dom.security.https_only_mode_ever_enabled_pbm", false); //true
+lockPref("services.sync.prefs.sync.dom.security.https_only_mode_pbm", false); //true
+lockPref("services.sync.prefs.sync.extensions.activeThemeID", false); //true
+lockPref("services.sync.prefs.sync.extensions.update.enabled", false); //true
+lockPref("services.sync.prefs.sync.intl.accept_languages", false); //true
+lockPref("services.sync.prefs.sync.intl.regional_prefs.use_os_locales", false); //true
+lockPref("services.sync.prefs.sync.layout.spellcheckDefault", false); //true
+lockPref("services.sync.prefs.sync.network.cookie.cookieBehavior", false); //true
+lockPref("services.sync.prefs.sync.network.cookie.lifetimePolicy", false); //true
+lockPref("services.sync.prefs.sync.network.cookie.thirdparty.sessionOnly", false); //true
+lockPref("services.sync.prefs.sync.permissions.default.image", false); //true
+lockPref("services.sync.prefs.sync.pref.downloads.disable_button.edit_actions", false); //true
+lockPref("services.sync.prefs.sync.pref.privacy.disable_button.cookie_exceptions", false); //true
+lockPref("services.sync.prefs.sync.privacy.clearOnShutdown.cache", false); //true
+lockPref("services.sync.prefs.sync.privacy.clearOnShutdown.cookies", false); //true
+lockPref("services.sync.prefs.sync.privacy.clearOnShutdown.downloads", false); //true
+lockPref("services.sync.prefs.sync.privacy.clearOnShutdown.formdata", false); //true
+lockPref("services.sync.prefs.sync.privacy.clearOnShutdown.history", false); //true
+lockPref("services.sync.prefs.sync.privacy.clearOnShutdown.offlineApps", false); //true
+lockPref("services.sync.prefs.sync.privacy.clearOnShutdown.sessions", false); //true
+lockPref("services.sync.prefs.sync.privacy.clearOnShutdown.siteSettings", false); //true
+lockPref("services.sync.prefs.sync.privacy.donottrackheader.enabled", false); //true
+lockPref("services.sync.prefs.sync.privacy.fuzzyfox.clockgrainus", false); //true
+lockPref("services.sync.prefs.sync.privacy.fuzzyfox.enabled", false); //true
+lockPref("services.sync.prefs.sync.privacy.reduceTimerPrecision", false); //true
+lockPref("services.sync.prefs.sync.privacy.resistFingerprinting", false); //true
+lockPref("services.sync.prefs.sync.privacy.resistFingerprinting.reduceTimerPrecision.jitter", false); //true
+lockPref("services.sync.prefs.sync.privacy.resistFingerprinting.reduceTimerPrecision.microseconds", false); //true
+lockPref("services.sync.prefs.sync.privacy.sanitize.sanitizeOnShutdown", false); //true
+lockPref("services.sync.prefs.sync.privacy.trackingprotection.enabled", false); //true
+lockPref("services.sync.prefs.sync.privacy.trackingprotection.pbmode.enabled", false); //true
+lockPref("services.sync.prefs.sync.privacy.trackingprotection.cryptomining.enabled", false); //true
+lockPref("services.sync.prefs.sync.privacy.trackingprotection.fingerprinting.enabled", false); //true
+lockPref("services.sync.prefs.sync.privacy.userContext.enabled", false); //true
+lockPref("services.sync.prefs.sync.privacy.userContext.newTabContainerOnLeftClick.enabled", false); //true
+lockPref("services.sync.prefs.sync.security.default_personal_cert", false); //true
+lockPref("services.sync.prefs.sync.spellchecker.dictionary", false); //true
+lockPref("services.sync.prefs.sync.signon.rememberSignons", false);
+lockPref("services.sync.prefs.sync.signon.management.page.breach-alerts.enabled", false);
+lockPref("services.sync.prefs.sync.signon.generation.enabled", false);
+lockPref("services.sync.prefs.sync.signon.autofillForms", false);
+lockPref("services.sync.declinedEngines", "");
+lockPref("services.sync.globalScore", 0);
+lockPref("services.sync.nextSync", 0);
+lockPref("services.sync.prefs.sync.browser.safebrowsing.downloads.enabled", false);
+lockPref("services.sync.prefs.sync.browser.safebrowsing.malware.enabled", false);
+lockPref("services.sync.prefs.sync.browser.safebrowsing.downloads.remote.block_potentially_unwanted", false);
+lockPref("services.sync.prefs.sync.browser.safebrowsing.phishing.enabled", false);
+lockPref("services.sync.tabs.lastSync", "0");
+
+// useless as ui elements are not in the report page
+lockPref("browser.contentblocking.report.cookie.url", "");
+lockPref("browser.contentblocking.report.cryptominer.url", "");
+lockPref("browser.contentblocking.report.endpoint_url", "");
+lockPref("browser.contentblocking.report.fingerprinter.url", "");
+lockPref("browser.contentblocking.report.lockwise.how_it_works.url", "");
+lockPref("browser.contentblocking.report.manage_devices.url", "");
+lockPref("browser.contentblocking.report.monitor.how_it_works.url", "");
+lockPref("browser.contentblocking.report.monitor.sign_in_url", "");
+lockPref("browser.contentblocking.report.monitor.home_page_url", "");
+lockPref("browser.contentblocking.report.monitor.preferences", "");
+lockPref("browser.contentblocking.report.monitor.url", "");
+lockPref("browser.contentblocking.report.proxy.enabled", false);
+lockPref("browser.contentblocking.report.proxy_extension.url", "");
+lockPref("browser.contentblocking.report.social.url", "");
+lockPref("browser.contentblocking.report.tracker.url", "");
+lockPref("browser.contentblocking.report.vpn.url", "");
+lockPref("browser.contentblocking.report.vpn-promo.url", "");
+lockPref("browser.contentblocking.report.vpn-ios.url", "");
+lockPref("browser.contentblocking.report.vpn-android.url", "");
+
+// urls that do not damage and make re-enabling TP a pain
+lockPref("browser.contentblocking.reportBreakage.url", "");
+defaultPref("browser.safebrowsing.provider.mozilla.pver", "");
+defaultPref("browser.safebrowsing.provider.mozilla.lists", "");
+defaultPref("browser.safebrowsing.provider.mozilla.lists.base", "");
+defaultPref("browser.safebrowsing.provider.mozilla.lists.content", "");
+defaultPref("browser.safebrowsing.provider.mozilla.lastupdatetime", "");
+defaultPref("browser.safebrowsing.provider.mozilla.nextupdatetime", "");
+lockPref("urlclassifier.trackingTable", "");
+lockPref("browser.contentblocking.database.enabled", false);
+
+// all covered by previous prefs
+// defaultPref("media.navigator.video.enabled", false);
+// defaultPref("media.peerconnection.use_document_iceservers", false);
+// defaultPref("media.peerconnection.identity.enabled", false);
+// defaultPref("media.peerconnection.identity.timeout", 1);
+// defaultPref("media.peerconnection.turn.disable", true);
+// defaultPref("media.peerconnection.ice.tcp", false);
+
+lockPref("privacy.trackingprotection.socialtracking.enabled", false); // default
+defaultPref("network.stricttransportsecurity.preloadlist",	false); // nothing wrong with hsts
+lockPref("security.ssl.disable_session_identifiers", true); // covered by isolation, large performance hit
+// defaultPref("intl.regional_prefs.use_os_locales", false); // default and already commented
+lockPref("extensions.screenshots.upload-disabled", true); // deprecated feature
+lockPref("dom.ipc.plugins.reportCrashURL", false); // flash is gone, does nothing
+lockPref("dom.ipc.plugins.flash.subprocess.crashreporter.enabled", false); // flash is gone, does nothing
+lockPref("plugin.state.flash", 0); // flash is gone, does nothing
+defaultPref("alerts.showFavicons", false); // default
+lockPref("plugin.default.state", 1); // default
+lockPref("extensions.pocket.enabled", false); // pocket is already disabled
+lockPref("extensions.pocket.site", ""); // pocket is already disabled
+lockPref("extensions.pocket.oAuthConsumerKey", ""); // pocket is already disabled
+lockPref("extensions.pocket.api", ""); // pocket is already disabled
+defaultPref("accessibility.typeaheadfind", false); // default
+defaultPref("reader.parse-on-load.enabled", false); // no need to have it locked, even Tor Browser re-enabled it
+lockPref("gecko.handlerService.schemes.webcal.0.uriTemplate", ""); // default
+defaultPref("network.proxy.socks_version", 5); // default
+defaultPref("network.proxy.autoconfig_url", ""); // default
+defaultPref("extensions.formautofill.section.enabled", false); // no effect
+defaultPref("network.trr.bootstrapAddress", ""); // deprecated
+lockPref("browser.newtabpage.activity-stream.feeds.asrouterfeed", false); // deprecated
+lockPref("browser.newtabpage.activity-stream.telemetry.ping.endpoint", ""); // deprecated
+defaultPref("security.ssl.enable_ocsp_stapling", true); // default
+lockPref("security.mixed_content.block_object_subrequest", true); // useless as rest of flash prefs
+defaultPref("geo.provider.network.logging.enabled", false); // default
+lockPref("toolkit.telemetry.ecosystemtelemetry.enabled", false); // deprecated
+lockPref("browser.contentblocking.report.proxy.enabled", false); // default
+```
+
+#### Commented
+Prefs that need to be addressed and that were disabled for now
+```
+// blocklist is a security feature, best left at default
+// defaultPref("extensions.blocklist.enabled", false);
+// defaultPref("extensions.blocklist.detailsURL", "");
+// defaultPref("extensions.blocklist.itemURL", "");
+
+// commented all below as they do no harm and make enabling SB painful
+// could potentially at some point
+// defaultPref("browser.safebrowsing.id", "");
+// defaultPref("browser.safebrowsing.provider.google4.pver", "");
+// defaultPref("browser.safebrowsing.provider.google4.advisoryName", "");
+// defaultPref("browser.safebrowsing.provider.google4.advisoryURL", "");
+// defaultPref("browser.safebrowsing.provider.google4.lists", "");
+// defaultPref("browser.safebrowsing.provider.google4.reportMalwareMistakeURL", "");
+// defaultPref("browser.safebrowsing.provider.google4.reportPhishMistakeURL", "");
+// defaultPref("browser.safebrowsing.provider.google4.reportURL", "");
+// defaultPref("browser.safebrowsing.provider.google4.lastupdatetime", "");
+// defaultPref("browser.safebrowsing.provider.google4.nextupdatetime", "");
+// defaultPref("browser.safebrowsing.provider.google.advisoryName", "");
+// defaultPref("browser.safebrowsing.provider.google.advisoryURL", "");
+// defaultPref("browser.safebrowsing.provider.google.lastupdatetime", "");
+// defaultPref("browser.safebrowsing.provider.google.lists", "");
+// defaultPref("browser.safebrowsing.provider.google.nextupdatetime", "");
+// defaultPref("browser.safebrowsing.provider.google.pver", "");
+// defaultPref("browser.safebrowsing.provider.google.reportMalwareMistakeURL", "");
+// defaultPref("browser.safebrowsing.provider.google.reportPhishMistakeURL", "");
+// defaultPref("browser.safebrowsing.provider.google.reportURL", "");
+// defaultPref("browser.safebrowsing.reportPhishURL", "");
+```
+
+#### Unlocked
+Locked prefs that were unlocked, more should be unlocked probably
+```
+defaultPref("general.config.filename", "librewolf.cfg");
+defaultPref("privacy.donottrackheader.enabled", true); // Unlocked as some think it increases fingerprint, they can now disable it
+defaultPref("permissions.default.geo", 2); // Unlocked as some think it increases fingerprint, they can now disable it
+defaultPref("extensions.getAddons.themes.browseURL", "")
+defaultPref("pdfjs.enableWebGL", false);
+defaultPref("pdfjs.previousHandler.alwaysAskBeforeHandling", true);
+defaultPref("pdfjs.enabledCache.state", false);
+defaultPref("alerts.showFavicons", false); // default: false
+defaultPref("security.remote_settings.intermediates.enabled", true);
+defaultPref("dom.battery.enabled", false); // Unlocked as some think it increases fingerprint, they can now disable it
+defaultPref("extensions.blocklist.enabled", false);
+defaultPref("extensions.blocklist.detailsURL", "");
+defaultPref("extensions.blocklist.itemURL", "");
+defaultPref("security.OCSP.enabled", 0); // someone might want to have it on for security concerns
+defaultPref("security.OCSP.require", false);
+defaultPref("reader.parse-on-load.enabled", false);
+defaultPref("webgl.enable-webgl2", false);
+defaultPref("geo.provider.network.url", "");
+defaultPref("geo.provider.network.logging.enabled", false);
+defaultPref("network.http.referer.XOriginTrimmingPolicy", 2);
+defaultPref("network.http.referer.XOriginPolicy", 0);
+defaultPref("browser.download.manager.addToRecentDocs", false);
+defaultPref("accessibility.force_disabled", 1);
+defaultPref("network.manage-offline-status", false);
+defaultPref("browser.helperApps.deleteTempFileOnExit", true);
+defaultPref("dom.push.enabled", false);
+defaultPref("dom.push.connection.enabled", false);
+defaultPref("dom.push.serverURL", ""); //default "wss://push.services.mozilla.com/"
+defaultPref("dom.push.userAgentID", "");
+defaultPref("dom.targetBlankNoOpener.enabled", true);
+defaultPref("dom.disable_window_move_resize", true);
+defaultPref("dom.disable_beforeunload", true);
+defaultPref("dom.popup_maximum", 4);
+defaultPref("dom.vr.enabled", false);
+defaultPref("dom.vibrator.enabled", false);
+defaultPref("network.stricttransportsecurity.preloadlist",	false);
+defaultPref("browser.ssl_override_behavior", 1);
+defaultPref("security.tls.version.fallback-limit", 3);
+defaultPref("browser.xul.error_pages.expert_bad_cert", true); // advanced ui infos
+defaultPref("extensions.enabledScopes", 5);
+defaultPref("extensions.autoDisableScopes", 11);
+defaultPref("xpinstall.signatures.devInfoURL", "");
+defaultPref("security.cert_pinning.enforcement_level", 2);
+defaultPref("devtools.performance.recording.ui-base-url", "http://localhost:55555"); // Default Value : https://profiler.firefox.com
+defaultPref("devtools.devices.url", "");
+defaultPref("devtools.remote.adb.extensionURL", ""); // [FF64+]
+defaultPref("devtools.remote.adb.extensionID", ""); // default adb@mozilla.org [FF64+]
+defaultPref("browser.safebrowsing.blockedURIs.enabled", false);
+defaultPref("browser.safebrowsing.provider.google4.gethashURL", "")
+defaultPref("browser.safebrowsing.provider.google4.updateURL", "");
+defaultPref("browser.safebrowsing.provider.google.gethashURL", "");
+defaultPref("browser.safebrowsing.provider.google.updateURL", "");
+defaultPref("browser.safebrowsing.provider.mozilla.updateURL", "");
+defaultPref("browser.safebrowsing.provider.mozilla.gethashURL", "");
+defaultPref("browser.safebrowsing.reportPhishURL", "");
+defaultPref("browser.safebrowsing.malware.enabled", false);
+defaultPref("browser.safebrowsing.passwords.enabled", false);
+defaultPref("browser.safebrowsing.phishing.enabled", false);
+defaultPref("browser.urlbar.trimURLs", false);
+defaultPref("browser.search.suggest.enabled", false);
+defaultPref("browser.search.region", "US");
+defaultPref("browser.urlbar.suggest.searches", false);
+defaultPref("browser.search.update", false);
+defaultPref("browser.contentblocking.cryptomining.preferences.ui.enabled", false); // enable UI elements of TP if you want to use it
+defaultPref("browser.contentblocking.fingerprinting.preferences.ui.enabled", false); // enable UI elements of TP if you want to use it
+defaultPref("privacy.trackingprotection.cryptomining.enabled", false); // user can manually choose what to do once he enables UI with the above prefs
+defaultPref("privacy.trackingprotection.fingerprinting.enabled", false); // user can manually choose what to do once he enables UI with the above prefs
+```