Compare commits

..

91 Commits

Author SHA1 Message Date
b4e0b2ad86 tiny edit.. nothing to see 2017-03-14 06:15:41 +13:00
37505e3461 0800 revamp 2017-03-14 02:50:47 +13:00
668c307ffb release info edit 2017-03-12 16:10:41 +13:00
76bd6c9399 release policy update
"releases" which is the github term, is purposed for archiving legacy versions of the user.js. This is done *near* the end of each version's stable cycle (a week?), for the reasons given in the user.js. As soon as a "release" is done, the "live" version is incremented to the upcoming stable, and changes are started based on the diffs provided by earthlng.
2017-03-12 12:42:17 +13:00
5d427e2a15 Update user.js 2017-03-11 18:19:34 +01:00
0a58b3e91c 2800 revamp 2017-03-12 05:58:14 +13:00
616ce65772 2204->active 2017-03-12 04:52:33 +13:00
f01f99f7d1 clipboard.autocopy->linux 2017-03-11 21:13:18 +13:00
369678e02b 3025 removed see #42 2017-03-11 07:02:19 +13:00
eb0694e8bc 2204 double use fix 2017-03-10 23:38:31 +13:00
49df457954 2698c description fix 2017-03-10 22:47:22 +13:00
1eca16f9b4 Set theme jekyll-theme-midnight 2017-03-10 21:21:11 +13:00
e10fe65024 [TEST] tags 2017-03-09 18:45:23 +13:00
08b0a7cc92 see earthlng 2017-03-09 08:19:43 +13:00
de21ffd178 security.csp.experimentalEnabled 2017-03-09 08:08:12 +13:00
3ddbd01811 3021c description fixup 2017-03-09 07:24:41 +13:00
5f8b3b52e0 earthlng tiny nits 2017-03-09 06:15:43 +13:00
e18a85adb8 1600 header edits 2017-03-09 04:43:13 +13:00
1ca7ef1442 minor edits 2017-03-09 04:04:35 +13:00
e66fbf1335 #44 [SETTING] tags
#44
2017-03-09 03:56:05 +13:00
c78b02a5de update 1224
with info that those older cipher also still exist in FF52
2017-03-08 13:06:07 +01:00
b27811b0f9 i am beginning to really hate referers 2017-03-09 00:48:28 +13:00
bb1e02220c FPI updates 2017-03-08 23:40:59 +13:00
6504744cc8 javascript.options.wasm 2017-03-08 20:09:04 +13:00
3e27f5bb78 Merge pull request #38 from ghacksuserjs/earthlng-patch-1
signon.autofillForms.http + contextual warning
2017-03-08 14:36:46 +13:00
b924d1ef98 start transition to 52 2017-03-08 06:57:27 +13:00
6a04e894e3 added font.system.whitelist 2017-03-08 06:41:57 +13:00
f7ecc665b0 minor edits 2017-03-08 06:28:11 +13:00
7be1dad1cd Merge pull request #39 from ghacksuserjs/earthlng-patch-2
network.cookie.leave-secure-alone
2017-03-08 05:38:50 +13:00
13133749a4 deprecated battery API 2017-03-08 05:33:56 +13:00
b64439a9b2 damnit part 2
what the hell is that setting again, the that screws up the wsyiwyg so that i lose all line breaks?
2017-03-08 04:39:44 +13:00
d6d62a0ea8 damnit 2017-03-08 04:32:34 +13:00
f87a860188 1600 revamp & 52+53 new prefs 2017-03-08 04:24:22 +13:00
530f7bc39d 0325 typo -> 3025 2017-03-08 03:37:15 +13:00
26d3718dc0 0820 search reset -> personal section as 0325
0800 is getting a major revamp (patch review to be posted for discussion soon). Search reset does not belong here, dumping in personal settiing
2017-03-08 03:34:12 +13:00
cb2386da6c FPI updates 2017-03-07 22:16:49 +13:00
cae26373c3 privacy.donottrackheader.value -> deprecated 2017-03-07 17:13:19 +13:00
9767982e8c tiny edit.. nothing to see.. move along
I know it was there before 52, but it was flipped to true in 52 - unless someone wants to find when it was actually introduced, this is sufficient for people to use to be effective for versioning
2017-03-06 16:03:46 +13:00
022610258d 52 deprecation EME & Telephony 2017-03-06 15:37:11 +13:00
38bfb4ca50 Merge pull request #40 from ghacksuserjs/earthlng-patch-3
52 deprecation network.http.sendSecureXSiteReferrer
2017-03-06 15:29:17 +13:00
53d37bbafa adding (FF52+) indicator 2017-03-04 14:35:13 +01:00
0aed6c57db added (FF52+) indicator 2017-03-04 14:33:42 +01:00
b48b4935ec network.http.sendSecureXSiteReferrer
move network.http.sendSecureXSiteReferrer to 9997 and enable a safe alternative for now until we re-work the Referrer-Section
2017-03-03 12:59:25 +01:00
85fbbde60d network.cookie.leave-secure-alone 2017-03-03 12:48:16 +01:00
3ce8350fec signon.autofillForms.http + contextual warning 2017-03-03 12:43:41 +01:00
f7c1c6791c Added Travis CI configuration 2017-03-01 00:11:05 +02:00
f10a6d89c9 Merge pull request #35 from ghacksuserjs/earthlng-patch-1
add static-rsa prefs
2017-03-01 02:07:42 +13:00
443a6cdf83 Merge pull request #36 from ghacksuserjs/earthlng-patch-2
add accessibility.typeaheadfind
2017-03-01 02:06:43 +13:00
4248af6b78 accessibility.typeaheadfind
added inactive under 3000: PERSONAL SETTINGS
2017-02-28 12:58:49 +01:00
2b2b9133a4 add static-rsa prefs
commented out as per proposal (C) @ https://github.com/ghacksuserjs/ghacks-user.js/issues/24#issue-209476365
2017-02-28 12:30:16 +01:00
acf5a7a54d change 9997 title
it got lost
2017-02-28 12:21:14 +01:00
ebdd81c764 0906: description 2017-02-28 04:28:14 +13:00
e0e7fc4c32 +dom.mozTCPSocket.enabled -> deprecated 2017-02-28 02:46:51 +13:00
9d3fb13d76 #30
no preference value changes or active/inactive status, just descriptions and formatting
2017-02-28 00:04:23 +13:00
4a6fbddb01 1222->2672 and 2613->2512 2017-02-27 23:39:26 +13:00
d4d6440be9 browser.usedOnWindows10.introURL -> deprecated 2017-02-27 13:31:26 +13:00
46157a5659 browser.xul.error_pages.expert_bad_cert -> true
#26
2017-02-24 05:39:20 +13:00
32c4e5a1dc UA Spoofing own section, all inactive 2017-02-24 04:34:52 +13:00
ffbbb43110 add 1219 ref links 2017-02-24 01:34:25 +13:00
7b80d3c733 spacing silly wsywig editor hates pastes 2017-02-23 20:56:05 +13:00
df1e1e42e8 enforce CSP 2017-02-23 20:54:43 +13:00
2fcd21083e enforce HSTS preload list 2017-02-23 20:30:18 +13:00
d17fa573a9 minor edits 2017-02-23 05:53:57 +13:00
3af7679932 1220 security.nocertdb clarify & add warning 2017-02-23 03:32:09 +13:00
49d8b9f6d6 description ambiguity fix 2017-02-23 02:36:16 +13:00
1898460071 activate 1221 2017-02-23 02:31:10 +13:00
bb206ec8fb minor description edits 2017-02-22 13:08:00 +13:00
b73324e391 added browser.ssl_override_behavior
see https://github.com/pyllyukko/user.js/issues/210 - basically instead of a value 2, a value of 1 will save a cert pre-fetch
2017-02-22 11:40:38 +13:00
31c77a6225 update dom.disable_beforeunload
see discussion fca0827603 (commitcomment-20981489)
2017-02-22 09:49:44 +13:00
bb605524c0 remove spaces, even out lines 2017-02-22 08:40:27 +13:00
1438b4ac4f Merge pull request #19 from ghacksuserjs/earthlng-patch-1
adding network.IDN_show_punycode;true
2017-02-21 20:06:58 +01:00
fd3311297d Merge pull request #22 from ghacksuserjs/earthlng-patch-2
network.IDN_show_punycode draft modifications
2017-02-21 20:04:41 +01:00
e00a80fd8b network.IDN_show_punycode
removed the 'period' at the end of the pref description (we usually don't have one there) and aligned the 2nd line of the downside a bit nicer.
2017-02-21 19:54:25 +01:00
00e99d2b65 removed to investigate section
#20
2017-02-22 07:42:08 +13:00
069d821413 mods to earthlng patch #19
shortened and evened out lines, added that extra link. I changed "Internationalized Domain Names" to IDNs to save space and then realized the kb and wiki articles don;t even say what IDN stands for, so I put it back.

Also swapped the order and wording of the pref to make it consistent with the action. Instead of
- "2672: eliminate possible .. show_punycode", true)"
- "2672: force Punycode .. show_punycode", true)"
2017-02-22 07:32:52 +13:00
4d0e5825a2 network.IDN_show_punycode
my draft for network.IDN_show_punycode
added under 2600 but it would maybe also fit under 0800 (?)
the title and that one line are quite long, feel free to improve the wording etc.
2017-02-21 18:29:05 +01:00
a00316d1c9 dyslexic moment fixup 2017-02-21 20:53:07 +13:00
3bf64d5714 moved appendix of add-ons to wiki 2017-02-21 07:38:19 +13:00
eba5ae463a 0808 info fixup 2017-02-20 19:00:19 +13:00
1eccc39ca5 0808 update 2017-02-20 18:50:14 +13:00
b5a1e3ff5d added suggested info to 0001: pb mode 2017-02-20 15:58:12 +13:00
894dda6d60 still drafting... 2017-02-20 15:45:58 +13:00
6435c2795a Update user.js
replace all bugzil.la links
2017-02-20 13:43:26 +13:00
01263ad61f typo 2017-02-19 17:24:25 +01:00
9ab13cec87 more typos
beware of the big bad grammar nazi 😱
2017-02-19 17:20:20 +01:00
4ca669951d draft readme outline 2017-02-20 03:39:05 +13:00
fe50cf94b5 added inactive pref 0001: start in PB mode 2017-02-20 01:29:56 +13:00
bd226c716e removed tor uplift investigation section
I have created three issues for tracking items of interest from the tor uplift: #7 `resistFingerprinting`, #8 `FPI` and #15 `the rest`
2017-02-19 23:53:45 +13:00
5e94428cb3 removed unsupported palemoon section 2017-02-19 19:45:57 +13:00
f507603cec moved appendix of test sites to wiki 2017-02-19 19:18:45 +13:00
27ac8f97f8 tidied spacings 2017-02-19 05:17:00 +13:00
4 changed files with 1122 additions and 1207 deletions

7
.travis.yml Normal file
View File

@ -0,0 +1,7 @@
language: node_js
node_js:
- "node"
before_script:
- npm install -g acorn
script:
- acorn user.js

48
README.md Normal file
View File

@ -0,0 +1,48 @@
## ghacks-user.js
- This is a rough draft, please read the old intro currently at the start of the user.js in the meantime.
- Paragraph here about not jumping in without reading first, and backing up, and understanding the changes
### Origins
- yada yada
### Purpose
- discuss why use a js (enforcement on startup, migration)
- outline trade-offs between security vs privacy etc
- explain expectations and site breakage
- explain this version is a "compromise" or balance that aims (with addons eg you WILL need uBlock Origin or turn safe browsing and tracking protection back on) to provide as much privacy and enhanced security as possible, and to reduce the fingerpritning attack surface as much as possible - while putting up with some incoveniences and as little site breakage as possible (but it will happen). It's only a starting point.
- provide troubleshooting: site breakage will happen. 90=% of the preferences cause no issues. It is only a small core of settings that people may or may not need to look at, depending on their objective.
- no one size fits all, this is a template, fork it! Customize it! (see goals, we won't set you wrong)
### Goals & Standards
To be **THE** template and resource all other user.js' come to for news, links, information and more, which means it needs to be:
- comprehensive (eg some prefs are included at default for completeness/enforcement, a lot are included and changed for future-proofing, etc)
- current and available and change-trackable (hey, we're on github now)
- easy to understand (good, simple, less-technincal descriptions)
- accountable and a resource (lots of links to authorative authors and tech papers, also repo wiki)
- correct and to dispell myths and bad advise (see accountable)
- eassy to follow and report and discuss (logical and numbered structure)
- give good advise (see trade-offs)
- expanded on with more information, such as FF version numbering for introduction and deprecation of preferences, hidden pref tags etc
- archived for each stable release (starting with 51)
- to provide illustrated wiki topics to help (help wanted please!)
- to make it as easy as possible for anyone to use a user.js and get it right for them
- to provide two or three future forks with differnent settings from "painless no-breakage no-addons" thru to a "super-hardened" version: for use with multiple profiles
### Implementation
- expectations of the user
- link to wiki on testing and tweaking in a portable FF first
- backup first: link to wiki article on backup & restore methods
- changing, resetting preferences: user.js and about:config
### Troubleshooting
- wiki links
### Help & Resources
- wiki links, appendices etc
### Acknowledgements
- yada yada

1
_config.yml Normal file
View File

@ -0,0 +1 @@
theme: jekyll-theme-midnight

2273
user.js

File diff suppressed because it is too large Load Diff