--- title: General --- ## `browser.onboarding.notification.finished` Status: **locked** Value: `true` *Onboarding tour disabled because of included telemetry* ## `browser.onboarding.tour.onboarding-tour-customize.completed` Status: **locked** Value: `true` ## `browser.onboarding.tour.onboarding-tour-performance.completed` Status: **locked** Value: `true` ## `devtools.onboarding.telemetry.logged` Status: **locked** Value: `false` ## `services.sync.engine.addresses.available` Status: **locked** Value: `false` ## `browser.bookmarks.restore_default_bookmarks` Status: **locked** Value: `false` ## `pdfjs.previousHandler.alwaysAskBeforeHandling` Status: **locked** Value: `true` ## `pdfjs.enabledCache.state` Status: **locked** Value: `false` *Caching for integrated PDF* ## `pref.general.disable_button.default_browser` Status: **locked** Value: `false` ## `pref.privacy.disable_button.view_passwords` Status: **locked** Value: `false` ## `identity.mobilepromo.android` Status: **locked** Value: `""` ## `extensions.systemAddon.update.url` Status: **locked** Value: `""` ## `datareporting.healthreport.infoURL` Status: **locked** Value: `""` ## `browser.urlbar.daysBeforeHidingSuggestionsPrompt` Status: **locked** Value: `0` ## `browser.urlbar.searchSuggestionsChoice` Status: **locked** Value: `false` ## `browser.urlbar.timesBeforeHidingSuggestionsHint` Status: **locked** Value: `0` ## `browser.shell.didSkipDefaultBrowserCheckOnFirstRun` Status: **locked** Value: `true` ## `app.feedback.baseURL` Status: **locked** Value: `""` ## `app.normandy.enabled` Status: **locked** Value: `false` ## `app.normandy.api_url` Status: **locked** Value: `""` ## `app.normandy.first_run` Status: **locked** Value: `false` ## `app.normandy.user_id` Status: **locked** Value: `""` ## `app.releaseNotesURL` Status: **locked** Value: `""` ## `app.update.auto` Status: **locked** Value: `false` ## `extensions.update.autoUpdateDefault` Status: **unlocked** Value: `false` ## `app.update.staging.enabled` Status: **locked** Value: `false` ## `app.update.silent` Status: **locked** Value: `false` ## `app.update.lastUpdateTime.telemetry_modules_ping` Status: **locked** Value: `0` ## `app.update.url.details` Status: **locked** Value: `"https://gitlab.com/librewolf-community/browser"` ## `app.update.url.manual` Status: **locked** Value: `"https://gitlab.com/librewolf-community/browser"` ## `app.vendorURL` Status: **locked** Value: `""` ## `breakpad.reportURL` Status: **locked** Value: `""` ## `browser.chrome.errorReporter.submitUrl` Status: **locked** Value: `""` ## `browser.chrome.errorReporter.enabled` Status: **locked** Value: `false` ## `browser.ping-centre.staging.endpoint` Status: **locked** Value: `""` ## `browser.ping-centre.telemetry` Status: **locked** Value: `false` ## `browser.safebrowsing.id` Status: **locked** Value: `""` *Google Safe Browsing (blocks dangerous and deceptive contents)* ## `browser.safebrowsing.provider.google4.pver` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.mozilla.pver` Status: **locked** Value: `""` ## `browser.safebrowsing.allowOverride` Status: **locked** Value: `false` ## `browser.safebrowsing.blockedURIs.enabled` Status: **locked** Value: `false` ## `browser.safebrowsing.downloads.enabled` Status: **locked** Value: `false` ## `browser.safebrowsing.downloads.remote.block_dangerous` Status: **locked** Value: `false` ## `browser.safebrowsing.downloads.remote.block_dangerous_host` Status: **locked** Value: `false` ## `browser.safebrowsing.downloads.remote.block_potentially_unwanted` Status: **locked** Value: `false` ## `browser.safebrowsing.downloads.remote.block_uncommon` Status: **locked** Value: `false` ## `browser.safebrowsing.downloads.remote.enabled` Status: **locked** Value: `false` ## `browser.safebrowsing.downloads.remote.url` Status: **locked** Value: `""` ## `browser.safebrowsing.malware.enabled` Status: **locked** Value: `false` ## `browser.safebrowsing.passwords.enabled` Status: **locked** Value: `false` ## `browser.safebrowsing.phishing.enabled` Status: **locked** Value: `false` ## `browser.safebrowsing.provider.google4.advisoryURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google4.dataSharing.enabled` Status: **locked** Value: `false` ## `browser.safebrowsing.provider.google4.dataSharingURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google4.gethashURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google4.lists` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google4.reportMalwareMistakeURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google4.reportPhishMistakeURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google4.reportURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google4.updateURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google4.lastupdatetime` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google4.nextupdatetime` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google.advisoryURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google.gethashURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google.lastupdatetime` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google.lists` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google.nextupdatetime` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google.pver` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google.reportMalwareMistakeURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google.reportPhishMistakeURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google.reportURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.google.updateURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.mozilla.gethashURL` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.mozilla.lastupdatetime` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.mozilla.nextupdatetime` Status: **locked** Value: `""` ## `browser.safebrowsing.provider.mozilla.updateURL` Status: **locked** Value: `""` ## `browser.safebrowsing.reportPhishURL` Status: **locked** Value: `""` ## `browser.search.suggest.enabled` Status: **locked** Value: `false` ## `captivedetect.canonicalURL` Status: **locked** Value: `""` ## `datareporting.policy.firstRunURL` Status: **locked** Value: `""` ## `devtools.devedition.promo.url` Status: **locked** Value: `""` ## `devtools.devices.url` Status: **locked** Value: `""` ## `devtools.gcli.imgurUploadURL` Status: **locked** Value: `""` ## `devtools.gcli.jquerySrc` Status: **locked** Value: `""` ## `devtools.gcli.underscoreSrc` Status: **locked** Value: `""` ## `devtools.telemetry.supported_performance_marks` Status: **locked** Value: `""` ## `devtools.telemetry.tools.opened.version` **Unused Setting** Status: **locked** Value: `""` *Fix ESR Devtools* ## `dom.battery.enabled` Status: **locked** Value: `false` ## `dom.permissions.enabled` Status: **locked** Value: `false` ## `dom.popup_maximum` Status: **locked** Value: `4` *Maximum popups that may be launched at the same time* ## `dom.registerProtocolHandler.insecure.enabled` Status: **locked** Value: `true` ## `extensions.blocklist.detailsURL` Status: **locked** Value: `""` ## `extensions.blocklist.itemURL` Status: **locked** Value: `""` ## `extensions.blocklist.url` Status: **locked** Value: `""` *Block list url disabled* ## `extensions.update.background.url` Status: **unlocked** Value: `""` ## `extensions.getAddons.showPane` Status: **unlocked** Value: `false` ## `extensions.webservice.discoverURL` Status: **locked** Value: `""` ## `gecko.handlerService.schemes.mailto.0.uriTemplate` Status: **locked** Value: `""` ## `gecko.handlerService.schemes.mailto.1.uriTemplate` Status: **locked** Value: `""` ## `gecko.handlerService.schemes.webcal.0.uriTemplate` Status: **locked** Value: `""` ## `geo.enabled` Status: **locked** Value: `false` ## `geo.wifi.uri` Status: **locked** Value: `""` ## `geo.provider.ms-windows-location` Status: **locked** Value: `false` *Disable using the OS's geolocation service: Windows* ## `geo.provider.use_corelocation` Status: **locked** Value: `false` *Disable using the OS's geolocation service: Mac* ## `geo.provider.use_gpsd` Status: **locked** Value: `false` *Disable using the OS's geolocation service: Linux* ## `identity.fxaccounts.auth.uri` Status: **locked** Value: `""` ## `identity.fxaccounts.remote.oauth.uri` Status: **locked** Value: `""` ## `identity.fxaccounts.remote.profile.uri` Status: **locked** Value: `""` ## `identity.mobilepromo.ios` Status: **locked** Value: `""` ## `remote.enabled` Status: **locked** Value: `false` ## `remote.force-local` Status: **locked** Value: `true` ## `remote.log.level` Status: **locked** Value: `"Info"` ## `layout.css.visited_links_enabled` Status: **locked** Value: `false` ## `lpbmode.enabled` Status: **locked** Value: `true` ## `mailnews.messageid_browser.url` Status: **locked** Value: `""` ## `mailnews.mx_service_url` Status: **locked** Value: `""` ## `network.predictor.enabled` Status: **locked** Value: `false` *Disable predictor / prefetching* ## `network.predictor.cleaned-up` Status: **locked** Value: `true` ## `network.predictor.enable-prefetch` Status: **locked** Value: `false` ## `network.connectivity-service.enabled` Status: **locked** Value: `false` ## `network.connectivity-service.IPv6.url` Status: **locked** Value: `"http://0.0.0.0"` ## `network.connectivity-service.IPv4.url` Status: **locked** Value: `"http://0.0.0.0"` ## `network.connectivity-service.DNSv6.domain` Status: **locked** Value: `""` ## `network.connectivity-service.DNSv4.domain` Status: **locked** Value: `""` ## `plugins.crash.supportUrl` Status: **locked** Value: `""` ## `services.sync.clients.lastSync` Status: **locked** Value: `"0"` ## `services.sync.clients.lastSyncLocal` Status: **locked** Value: `"0"` ## `services.sync.declinedEngines` Status: **locked** Value: `""` ## `services.sync.enabled` Status: **locked** Value: `false` ## `services.sync.globalScore` Status: **locked** Value: `0` ## `services.sync.jpake.serverURL` Status: **locked** Value: `""` ## `services.sync.migrated` Status: **locked** Value: `true` ## `services.sync.nextSync` Status: **locked** Value: `0` ## `services.sync.prefs.sync.browser.safebrowsing.downloads.enabled` Status: **locked** Value: `false` ## `services.sync.prefs.sync.browser.safebrowsing.malware.enabled` Status: **locked** Value: `false` ## `services.sync.prefs.sync.browser.safebrowsing.passwords.enabled` Status: **locked** Value: `false` ## `services.sync.prefs.sync.browser.safebrowsing.phishing.enabled` Status: **locked** Value: `false` ## `services.sync.serverURL` Status: **locked** Value: `""` ## `services.sync.tabs.lastSync` Status: **locked** Value: `"0"` ## `services.sync.tabs.lastSyncLocal` Status: **locked** Value: `"0"` ## `sync.enabled` Status: **locked** Value: `false` ## `sync.jpake.serverURL` Status: **locked** Value: `""` ## `sync.serverURL` Status: **locked** Value: `""` ## `toolkit.crashreporter.infoURL` Status: **locked** Value: `""` ## `toolkit.telemetry.archive.enabled` Status: **locked** Value: `false` *Disable telemetry* ## `toolkit.telemetry.updatePing.enabled` Status: **locked** Value: `false` *Disable telemetry* ## `toolkit.telemetry.bhrPing.enabled` Status: **locked** Value: `false` *Disable telemetry* ## `toolkit.telemetry.cachedClientID` Status: **locked** Value: `""` ## `toolkit.telemetry.enabled` Status: **locked** Value: `false` *Disable telemetry* ## `toolkit.telemetry.firstShutdownPing.enabled` Status: **locked** Value: `false` *Disable telemetry* ## `toolkit.telemetry.hybridContent.enabled` Status: **locked** Value: `false` *Disable telemetry* ## `toolkit.telemetry.infoURL` Status: **locked** Value: `""` ## `toolkit.telemetry.newProfilePing.enabled` Status: **locked** Value: `false` *Disable telemetry* ## `toolkit.telemetry.previousBuildID` Status: **locked** Value: `""` ## `toolkit.telemetry.prompted` Status: **locked** Value: `2` ## `toolkit.telemetry.rejected` Status: **locked** Value: `true` ## `toolkit.telemetry.reportingpolicy.firstRun` Status: **locked** Value: `false` ## `toolkit.telemetry.server` Status: **locked** Value: `"data:,"` ## `toolkit.telemetry.server_owner` Status: **locked** Value: `""` ## `toolkit.telemetry.shutdownPingSender.enabled` Status: **locked** Value: `false` *Disable telemetry* ## `toolkit.telemetry.unified` Status: **locked** Value: `false` ## `toolkit.telemetry.coverage.opt-out` Status: **locked** Value: `true` *Disable telemetry* ## `toolkit.telemetry.ecosystemtelemetry.enabled` Status: **locked** Value: `false` ## `webextensions.storage.sync.serverURL` Status: **locked** Value: `""` ## `extensions.screenshots.upload-disabled` Status: **locked** Value: `true` ## `network.http.referer.trimmingPolicy` Status: **locked** Value: `0` *Referer: ALL: control the amount of information to send* ## `browser.tabs.closeTabByDblclick` Status: **locked** Value: `true` *Close tab* ## `datareporting.healthreport.uploadEnabled` Status: **locked** Value: `false` *Disable collection/sending of the health report (healthreport.sqlite*)* ### References [https://support.mozilla.org/en-US/kb/firefox-health-report-understand-your-browser-perf](https://support.mozilla.org/en-US/kb/firefox-health-report-understand-your-browser-perf) [https://gecko.readthedocs.org/en/latest/toolkit/components/telemetry/telemetry/preferences.html](https://gecko.readthedocs.org/en/latest/toolkit/components/telemetry/telemetry/preferences.html) ## `datareporting.policy.dataSubmissionEnabled` Status: **locked** Value: `false` ## `dom.event.contextmenu.enabled` Status: **locked** Value: `false` *Disable right-click menu manipulation via JavaScript (disabled)* ## `dom.event.clipboardevents.enabled` Status: **locked** Value: `false` *Disable clipboard event detection (onCut/onCopy/onPaste) via Javascript* ### References [https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/Preference_reference/dom.event.clipboardevents.enabled](https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/Preference_reference/dom.event.clipboardevents.enabled) ## `network.IDN_show_punycode` Status: **locked** Value: `true` *Force Punycode for Internationalized Domain Names* ### References [http://kb.mozillazine.org/Network.IDN_show_punycode](http://kb.mozillazine.org/Network.IDN_show_punycode) [https://www.xudongz.com/blog/2017/idn-phishing/](https://www.xudongz.com/blog/2017/idn-phishing/) [https://wiki.mozilla.org/IDN_Display_Algorithm](https://wiki.mozilla.org/IDN_Display_Algorithm) [https://en.wikipedia.org/wiki/IDN_homograph_attack](https://en.wikipedia.org/wiki/IDN_homograph_attack) [https://www.mozilla.org/en-US/security/advisories/mfsa2017-02/](https://www.mozilla.org/en-US/security/advisories/mfsa2017-02/) ## `extensions.pocket.enabled` Status: **locked** Value: `false` *Disable Pocket* ### References [https://support.mozilla.org/en-US/kb/save-web-pages-later-pocket-firefox](https://support.mozilla.org/en-US/kb/save-web-pages-later-pocket-firefox) [https://github.com/pyllyukko/user.js/issues/143](https://github.com/pyllyukko/user.js/issues/143) ## `extensions.pocket.site` Status: **locked** Value: `""` ## `extensions.pocket.oAuthConsumerKey` Status: **locked** Value: `""` ## `extensions.pocket.api` Status: **locked** Value: `""` ## `browser.aboutHomeSnippets.updateUrl` Status: **locked** Value: `""` *Disable downloading homepage snippets/messages from Mozilla* ### References [https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_mozilla-content](https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_mozilla-content) [https://wiki.mozilla.org/Firefox/Projects/Firefox_Start/Snippet_Service](https://wiki.mozilla.org/Firefox/Projects/Firefox_Start/Snippet_Service) ## `general.buildID.override` Status: **locked** Value: `"20100101"` *Don't reveal build ID* ### References [https://bugzilla.mozilla.org/show_bug.cgi?id=583181](https://bugzilla.mozilla.org/show_bug.cgi?id=583181) ## `browser.startup.homepage_override.buildID` Status: **locked** Value: `"20100101"` *Don't reveal build ID* ### References [https://bugzilla.mozilla.org/show_bug.cgi?id=583181](https://bugzilla.mozilla.org/show_bug.cgi?id=583181) ## `browser.send_pings` Status: **locked** Value: `false` *Disable pinging URIs specified in HTML ping= attributes* ### References [http://kb.mozillazine.org/Browser.send_pings](http://kb.mozillazine.org/Browser.send_pings) ## `browser.send_pings.require_same_host` Status: **locked** Value: `true` *When browser pings are enabled, only allow pinging the origin page's host* ### References [http://kb.mozillazine.org/Browser.send_pings.require_same_host](http://kb.mozillazine.org/Browser.send_pings.require_same_host) ## `browser.cache.offline.enable` Status: **locked** Value: `false` *Do not download URLs for the offline cache* ### References [http://kb.mozillazine.org/Browser.cache.offline.enable](http://kb.mozillazine.org/Browser.cache.offline.enable) ## `network.prefetch-next` Status: **locked** Value: `false` *Disable prefetching of URLs* ### References [http://kb.mozillazine.org/Network.prefetch-next](http://kb.mozillazine.org/Network.prefetch-next) [https://developer.mozilla.org/en-US/docs/Web/HTTP/Link_prefetching_FAQ#Is_there_a_preference_to_disable_link_prefetching.3F](https://developer.mozilla.org/en-US/docs/Web/HTTP/Link_prefetching_FAQ#Is_there_a_preference_to_disable_link_prefetching.3F) ## `network.http.speculative-parallel-limit` Status: **locked** Value: `0` *Disable speculative pre-connections* ### References [https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_speculative-pre-connections](https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_speculative-pre-connections) [https://bugzilla.mozilla.org/show_bug.cgi?id=814169](https://bugzilla.mozilla.org/show_bug.cgi?id=814169) ## `media.peerconnection.enabled` Status: **locked** Value: `false` ## `dom.enable_performance` Status: **locked** Value: `false` ## `dom.enable_performance_navigation_timing` Status: **locked** Value: `false` *Disable DOM timing API* ### References [https://wiki.mozilla.org/Security/Reviews/Firefox/NavigationTimingAPI](https://wiki.mozilla.org/Security/Reviews/Firefox/NavigationTimingAPI) [https://www.w3.org/TR/navigation-timing/#privacy](https://www.w3.org/TR/navigation-timing/#privacy) ## `dom.enable_user_timing` Status: **locked** Value: `false` *Make sure the User Timing API does not provide a new high resolution timestamp* ### References [https://trac.torproject.org/projects/tor/ticket/16336](https://trac.torproject.org/projects/tor/ticket/16336) [https://www.w3.org/TR/2013/REC-user-timing-20131212/#privacy-security](https://www.w3.org/TR/2013/REC-user-timing-20131212/#privacy-security) ## `dom.webaudio.enabled` Status: **locked** Value: `false` *Disable Web Audio API* ### References [https://bugzilla.mozilla.org/show_bug.cgi?id=1288359](https://bugzilla.mozilla.org/show_bug.cgi?id=1288359) ## `geo.wifi.logging.enabled` Status: **locked** Value: `true` *When geolocation is enabled, don't log geolocation requests to the console* ## `beacon.enabled` Status: **locked** Value: `false` *Disable 'beacon' asynchronous HTTP transfers (used for analytics)* ### References [https://developer.mozilla.org/en-US/docs/Web/API/navigator.sendBeacon](https://developer.mozilla.org/en-US/docs/Web/API/navigator.sendBeacon) ## `media.webspeech.recognition.enable` Status: **locked** Value: `false` *Disable speech recognition* ### References [https://dvcs.w3.org/hg/speech-api/raw-file/tip/speechapi.html](https://dvcs.w3.org/hg/speech-api/raw-file/tip/speechapi.html) [https://developer.mozilla.org/en-US/docs/Web/API/SpeechRecognition](https://developer.mozilla.org/en-US/docs/Web/API/SpeechRecognition) [https://wiki.mozilla.org/HTML5_Speech_API](https://wiki.mozilla.org/HTML5_Speech_API) ## `dom.vr.enabled` Status: **locked** Value: `false` *Disable virtual reality devices APIs* ### References [https://developer.mozilla.org/en-US/Firefox/Releases/36#Interfaces.2FAPIs.2FDOM](https://developer.mozilla.org/en-US/Firefox/Releases/36#Interfaces.2FAPIs.2FDOM) [https://developer.mozilla.org/en-US/docs/Web/API/WebVR_API≈](https://developer.mozilla.org/en-US/docs/Web/API/WebVR_API≈) ## `dom.vibrator.enabled` Status: **locked** Value: `false` *Disable vibrator API* ## `browser.search.region` Status: **locked** Value: `"US"` *Disable GeoIP lookup on your address to set default search engine region* ### References [https://trac.torproject.org/projects/tor/ticket/16254](https://trac.torproject.org/projects/tor/ticket/16254) [https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_geolocation-for-default-search-engine](https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_geolocation-for-default-search-engine) ## `browser.search.geoip.url` Status: **locked** Value: `""` ## `browser.search.geoSpecificDefaults.url` Status: **locked** Value: `""` ## `browser.search.geoSpecificDefaults` Status: **locked** Value: `false` *Don't use Mozilla-provided location-specific search engines* ## `browser.urlbar.trimURLs` Status: **locked** Value: `false` *Don't trim HTTP from URLs in the address bar* ### References [https://bugzilla.mozilla.org/show_bug.cgi?id=665580](https://bugzilla.mozilla.org/show_bug.cgi?id=665580) ## `browser.fixup.alternate.enabled` Status: **locked** Value: `false` *Don't try to guess domain names when entering an invalid domain name in URL bar* ### References [http://www-archive.mozilla.org/docs/end-user/domain-guessing.html](http://www-archive.mozilla.org/docs/end-user/domain-guessing.html) ## `browser.fixup.hide_user_pass` Status: **locked** Value: `true` *Strip password from 'user:password@...' URLs* ### References [https://github.com/pyllyukko/user.js/issues/290#issuecomment-303560851](https://github.com/pyllyukko/user.js/issues/290#issuecomment-303560851) ## `network.manage-offline-status` Status: **locked** Value: `false` *Don't monitor OS online/offline connection state* ### References [https://trac.torproject.org/projects/tor/ticket/18945](https://trac.torproject.org/projects/tor/ticket/18945) ## `security.fileuri.strict_origin_policy` Status: **locked** Value: `true` *Set File URI Origin Policy* ### References [http://kb.mozillazine.org/Security.fileuri.strict_origin_policy](http://kb.mozillazine.org/Security.fileuri.strict_origin_policy) ## `gfx.font_rendering.opentype_svg.enabled` Status: **locked** Value: `false` *Disable SVG in OpenType fonts* ### References [https://wiki.mozilla.org/SVGOpenTypeFonts](https://wiki.mozilla.org/SVGOpenTypeFonts) [https://github.com/iSECPartners/publications/tree/master/reports/Tor%20Browser%20Bundle](https://github.com/iSECPartners/publications/tree/master/reports/Tor%20Browser%20Bundle) ## `network.protocol-handler.warn-external-default` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.external.http` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.external.https` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.external.javascript` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.external.moz-extension` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.external.ftp` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.external.file` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.external.about` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.external.chrome` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.external.blob` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.external.data` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose-all` Status: **locked** Value: `false` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose.http` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose.https` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose.javascript` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose.moz-extension` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose.ftp` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose.file` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose.about` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose.chrome` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose.blob` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `network.protocol-handler.expose.data` Status: **locked** Value: `true` *Enable only whitelisted URL protocol handlers* ## `security.dialog_enable_delay` Status: **locked** Value: `700` *Ensure there is a security delay when installing add-ons (milliseconds)* ### References [http://kb.mozillazine.org/Disable_extension_install_delay_-_Firefox](http://kb.mozillazine.org/Disable_extension_install_delay_-_Firefox) [http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/](http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/) ## `extensions.getAddons.cache.enabled` Status: **unlocked** Value: `false` *Opt-out of add-on metadata updates* ### References [https://blog.mozilla.org/addons/how-to-opt-out-of-add-on-metadata-updates/](https://blog.mozilla.org/addons/how-to-opt-out-of-add-on-metadata-updates/) ## `lightweightThemes.update.enabled` Status: **locked** Value: `false` *Opt-out of theme (Persona) updates* ### References [https://support.mozilla.org/t5/Firefox/how-do-I-prevent-autoamtic-updates-in-a-50-user-environment/td-p/144287](https://support.mozilla.org/t5/Firefox/how-do-I-prevent-autoamtic-updates-in-a-50-user-environment/td-p/144287) ## `lightweightThemes.persisted.headerURL` Status: **locked** Value: `false` ## `lightweightThemes.persisted.footerURL` Status: **locked** Value: `false` ## `plugin.state.flash` Status: **locked** Value: `0` *Disable Flash Player NPAPI plugin* ### References [http://kb.mozillazine.org/Flash_plugin](http://kb.mozillazine.org/Flash_plugin) ## `dom.ipc.plugins.flash.subprocess.crashreporter.enabled` Status: **locked** Value: `false` *Disable sending Flash Player crash reports* ## `dom.ipc.plugins.reportCrashURL` Status: **locked** Value: `false` *When Flash Player crash reports are enabled, don't send the visited URL in the crash report* ## `shumway.disabled` Status: **locked** Value: `true` *Disable Shumway (Mozilla Flash renderer)* ### References [https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Shumway](https://developer.mozilla.org/en-US/docs/Mozilla/Projects/Shumway) ## `plugin.state.libgnome-shell-browser-plugin` Status: **locked** Value: `0` *Disable Gnome Shell Integration NPAPI plugin* ## `plugins.click_to_play` Status: **locked** Value: `true` *Enable click-to-play plugin* ### References [https://wiki.mozilla.org/Firefox/Click_To_Play](https://wiki.mozilla.org/Firefox/Click_To_Play) [https://blog.mozilla.org/security/2012/10/11/click-to-play-plugins-blocklist-style/](https://blog.mozilla.org/security/2012/10/11/click-to-play-plugins-blocklist-style/) ## `plugin.sessionPermissionNow.intervalInMinutes` Status: **locked** Value: `0` ## `extensions.update.enabled` Status: **unlocked** Value: `false` *Update addons automatically* ### References [https://blog.mozilla.org/addons/how-to-turn-off-add-on-updates/](https://blog.mozilla.org/addons/how-to-turn-off-add-on-updates/) ## `extensions.blocklist.enabled` Status: **locked** Value: `false` *Enable add-on and certificate blocklists (OneCRL) from Mozilla* ## `extensions.systemAddon.update.enabled` Status: **locked** Value: `false` *Disable system add-on updates (hidden & always-enabled add-ons from Mozilla)* ## `devtools.webide.enabled` Status: **locked** Value: `false` *Disable WebIDE Web Debug* ### References [https://trac.torproject.org/projects/tor/ticket/16222](https://trac.torproject.org/projects/tor/ticket/16222) [https://developer.mozilla.org/docs/Tools/WebIDE](https://developer.mozilla.org/docs/Tools/WebIDE) ## `devtools.webide.autoinstallADBExtension` Status: **locked** Value: `false` ## `devtools.remote.adb.extensionURL` Status: **locked** Value: `""` ## `devtools.remote.adb.extensionID` Status: **locked** Value: `""` ## `devtools.debugger.force-local` Status: **locked** Value: `true` *Disable remote debugging* ### References [https://developer.mozilla.org/en-US/docs/Tools/Remote_Debugging/Debugging_Firefox_Desktop](https://developer.mozilla.org/en-US/docs/Tools/Remote_Debugging/Debugging_Firefox_Desktop) [https://developer.mozilla.org/en-US/docs/Tools/Tools_Toolbox#Advanced_settings](https://developer.mozilla.org/en-US/docs/Tools/Tools_Toolbox#Advanced_settings) ## `network.allow-experiments` Status: **locked** Value: `false` *Disallow Necko to do A/B testing* ### References [https://trac.torproject.org/projects/tor/ticket/13170](https://trac.torproject.org/projects/tor/ticket/13170) ## `browser.tabs.crashReporting.sendReport` Status: **locked** Value: `false` *Disable sending reports of tab crashes to Mozilla (about:tabcrashed)* ### References [https://hg.mozilla.org/mozilla-central/file/tip/browser/app/profile/firefox.js](https://hg.mozilla.org/mozilla-central/file/tip/browser/app/profile/firefox.js) ## `browser.crashReports.unsubmittedCheck.enabled` Status: **locked** Value: `false` *Don't nag user about unsent crash reports* ## `browser.crashReports.unsubmittedCheck.autoSubmit2` Status: **locked** Value: `false` ## `app.shield.optoutstudies.enabled` Status: **locked** Value: `false` *Disable SHIELD* ### References [https://support.mozilla.org/en-US/kb/shield](https://support.mozilla.org/en-US/kb/shield) [https://bugzilla.mozilla.org/show_bug.cgi?id=1370801](https://bugzilla.mozilla.org/show_bug.cgi?id=1370801) ## `browser.newtabpage.activity-stream.feeds.section.topstories` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.section.highlights.includePocket` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.showSponsored` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.aboutHome.enabled` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.asrouter.messageProviders` Status: **locked** Value: `""` ## `browser.newtabpage.activity-stream.asrouter.devtoolsEnableds` Status: **locked** Value: `true` ## `browser.newtabpage.activity-stream.telemetry` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.telemetry.ping.endpoint` Status: **locked** Value: `""` ## `browser.newtabpage.activity-stream.feeds.telemetry` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.feeds.snippets` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.disableSnippets` Status: **locked** Value: `true` ## `browser.newtabpage.activity-stream.default.sites` Status: **locked** Value: `""` ## `browser.newtabpage.activity-stream.discoverystream.config` Status: **locked** Value: `""` ## `browser.newtabpage.activity-stream.discoverystream.endpoints` Status: **locked** Value: `""` ## `browser.newtabpage.activity-stream.feeds.asrouterfeed` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.feeds.discoverystreamfeed` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.feeds.newtabinit` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.feeds.places` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.feeds.systemtick` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.improvesearch.handoffToAwesomebar` Status: **locked** Value: `false` ## `browser.newtab.preload` Status: **locked** Value: `false` ## `browser.urlbar.suggest.searches` Status: **locked** Value: `false` *Disable 'Show search suggestions in location bar results'* ## `browser.urlbar.userMadeSearchSuggestionsChoice` Status: **locked** Value: `true` *Disable 'Show search suggestions in location bar results'* ## `browser.search.update` Status: **locked** Value: `false` *Never check for updates to search engines* ### References [https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_auto-update-checking](https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_auto-update-checking) ## `network.captive-portal-service.enabled` Status: **locked** Value: `false` *Disable automatic captive portal detection* ### References [https://support.mozilla.org/en-US/questions/1157121](https://support.mozilla.org/en-US/questions/1157121) ## `network.negotiate-auth.allow-insecure-ntlm-v1` Status: **locked** Value: `false` *Disallow NTLMv1* ## `network.negotiate-auth.allow-insecure-ntlm-v1-https` Status: **locked** Value: `false` *Disallow NTLMv1 over HTTPS too* ### References [https://bugzilla.mozilla.org/show_bug.cgi?id=828183](https://bugzilla.mozilla.org/show_bug.cgi?id=828183) ## `signon.formlessCapture.enabled` Status: **locked** Value: `false` *Disable formless login capture* ### References [https://bugzilla.mozilla.org/show_bug.cgi?id=1166947](https://bugzilla.mozilla.org/show_bug.cgi?id=1166947) ## `browser.helperApps.deleteTempFileOnExit` Status: **locked** Value: `true` *Delete temporary files on exit* ### References [https://bugzilla.mozilla.org/show_bug.cgi?id=238789](https://bugzilla.mozilla.org/show_bug.cgi?id=238789) ## `browser.pagethumbnails.capturing_disabled` Status: **locked** Value: `true` *Do not create screenshots of visited pages (relates to the 'new tab page' feature)* ### References [https://support.mozilla.org/en-US/questions/973320](https://support.mozilla.org/en-US/questions/973320) [https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/Preference_reference/browser.pagethumbnails.capturing_disabled](https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/Preference_reference/browser.pagethumbnails.capturing_disabled) ## `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features` Status: **locked** Value: `false` ## `browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons` Status: **locked** Value: `false` ## `browser.messaging-system.whatsNewPanel.enabled` Status: **locked** Value: `false`