Compare commits

..

91 Commits

Author SHA1 Message Date
Roman-Nopantski
b4e0b2ad86 tiny edit.. nothing to see 2017-03-14 06:15:41 +13:00
Roman-Nopantski
37505e3461 0800 revamp 2017-03-14 02:50:47 +13:00
Roman-Nopantski
668c307ffb release info edit 2017-03-12 16:10:41 +13:00
Roman-Nopantski
76bd6c9399 release policy update
"releases" which is the github term, is purposed for archiving legacy versions of the user.js. This is done *near* the end of each version's stable cycle (a week?), for the reasons given in the user.js. As soon as a "release" is done, the "live" version is incremented to the upcoming stable, and changes are started based on the diffs provided by earthlng.
2017-03-12 12:42:17 +13:00
earthlng
5d427e2a15 Update user.js 2017-03-11 18:19:34 +01:00
Roman-Nopantski
0a58b3e91c 2800 revamp 2017-03-12 05:58:14 +13:00
Roman-Nopantski
616ce65772 2204->active 2017-03-12 04:52:33 +13:00
Roman-Nopantski
f01f99f7d1 clipboard.autocopy->linux 2017-03-11 21:13:18 +13:00
Roman-Nopantski
369678e02b 3025 removed see #42 2017-03-11 07:02:19 +13:00
Roman-Nopantski
eb0694e8bc 2204 double use fix 2017-03-10 23:38:31 +13:00
Roman-Nopantski
49df457954 2698c description fix 2017-03-10 22:47:22 +13:00
Roman-Nopantski
1eca16f9b4 Set theme jekyll-theme-midnight 2017-03-10 21:21:11 +13:00
Roman-Nopantski
e10fe65024 [TEST] tags 2017-03-09 18:45:23 +13:00
Roman-Nopantski
08b0a7cc92 see earthlng 2017-03-09 08:19:43 +13:00
Roman-Nopantski
de21ffd178 security.csp.experimentalEnabled 2017-03-09 08:08:12 +13:00
Roman-Nopantski
3ddbd01811 3021c description fixup 2017-03-09 07:24:41 +13:00
Roman-Nopantski
5f8b3b52e0 earthlng tiny nits 2017-03-09 06:15:43 +13:00
Roman-Nopantski
e18a85adb8 1600 header edits 2017-03-09 04:43:13 +13:00
Roman-Nopantski
1ca7ef1442 minor edits 2017-03-09 04:04:35 +13:00
Roman-Nopantski
e66fbf1335 #44 [SETTING] tags
#44
2017-03-09 03:56:05 +13:00
earthlng
c78b02a5de update 1224
with info that those older cipher also still exist in FF52
2017-03-08 13:06:07 +01:00
Roman-Nopantski
b27811b0f9 i am beginning to really hate referers 2017-03-09 00:48:28 +13:00
Roman-Nopantski
bb1e02220c FPI updates 2017-03-08 23:40:59 +13:00
Roman-Nopantski
6504744cc8 javascript.options.wasm 2017-03-08 20:09:04 +13:00
Roman-Nopantski
3e27f5bb78 Merge pull request #38 from ghacksuserjs/earthlng-patch-1
signon.autofillForms.http + contextual warning
2017-03-08 14:36:46 +13:00
Roman-Nopantski
b924d1ef98 start transition to 52 2017-03-08 06:57:27 +13:00
Roman-Nopantski
6a04e894e3 added font.system.whitelist 2017-03-08 06:41:57 +13:00
Roman-Nopantski
f7ecc665b0 minor edits 2017-03-08 06:28:11 +13:00
Roman-Nopantski
7be1dad1cd Merge pull request #39 from ghacksuserjs/earthlng-patch-2
network.cookie.leave-secure-alone
2017-03-08 05:38:50 +13:00
Roman-Nopantski
13133749a4 deprecated battery API 2017-03-08 05:33:56 +13:00
Roman-Nopantski
b64439a9b2 damnit part 2
what the hell is that setting again, the that screws up the wsyiwyg so that i lose all line breaks?
2017-03-08 04:39:44 +13:00
Roman-Nopantski
d6d62a0ea8 damnit 2017-03-08 04:32:34 +13:00
Roman-Nopantski
f87a860188 1600 revamp & 52+53 new prefs 2017-03-08 04:24:22 +13:00
Roman-Nopantski
530f7bc39d 0325 typo -> 3025 2017-03-08 03:37:15 +13:00
Roman-Nopantski
26d3718dc0 0820 search reset -> personal section as 0325
0800 is getting a major revamp (patch review to be posted for discussion soon). Search reset does not belong here, dumping in personal settiing
2017-03-08 03:34:12 +13:00
Roman-Nopantski
cb2386da6c FPI updates 2017-03-07 22:16:49 +13:00
Roman-Nopantski
cae26373c3 privacy.donottrackheader.value -> deprecated 2017-03-07 17:13:19 +13:00
Roman-Nopantski
9767982e8c tiny edit.. nothing to see.. move along
I know it was there before 52, but it was flipped to true in 52 - unless someone wants to find when it was actually introduced, this is sufficient for people to use to be effective for versioning
2017-03-06 16:03:46 +13:00
Roman-Nopantski
022610258d 52 deprecation EME & Telephony 2017-03-06 15:37:11 +13:00
Roman-Nopantski
38bfb4ca50 Merge pull request #40 from ghacksuserjs/earthlng-patch-3
52 deprecation network.http.sendSecureXSiteReferrer
2017-03-06 15:29:17 +13:00
earthlng
53d37bbafa adding (FF52+) indicator 2017-03-04 14:35:13 +01:00
earthlng
0aed6c57db added (FF52+) indicator 2017-03-04 14:33:42 +01:00
earthlng
b48b4935ec network.http.sendSecureXSiteReferrer
move network.http.sendSecureXSiteReferrer to 9997 and enable a safe alternative for now until we re-work the Referrer-Section
2017-03-03 12:59:25 +01:00
earthlng
85fbbde60d network.cookie.leave-secure-alone 2017-03-03 12:48:16 +01:00
earthlng
3ce8350fec signon.autofillForms.http + contextual warning 2017-03-03 12:43:41 +01:00
pyllyukko
f7c1c6791c Added Travis CI configuration 2017-03-01 00:11:05 +02:00
Roman-Nopantski
f10a6d89c9 Merge pull request #35 from ghacksuserjs/earthlng-patch-1
add static-rsa prefs
2017-03-01 02:07:42 +13:00
Roman-Nopantski
443a6cdf83 Merge pull request #36 from ghacksuserjs/earthlng-patch-2
add accessibility.typeaheadfind
2017-03-01 02:06:43 +13:00
earthlng
4248af6b78 accessibility.typeaheadfind
added inactive under 3000: PERSONAL SETTINGS
2017-02-28 12:58:49 +01:00
earthlng
2b2b9133a4 add static-rsa prefs
commented out as per proposal (C) @ https://github.com/ghacksuserjs/ghacks-user.js/issues/24#issue-209476365
2017-02-28 12:30:16 +01:00
earthlng
acf5a7a54d change 9997 title
it got lost
2017-02-28 12:21:14 +01:00
Roman-Nopantski
ebdd81c764 0906: description 2017-02-28 04:28:14 +13:00
Roman-Nopantski
e0e7fc4c32 +dom.mozTCPSocket.enabled -> deprecated 2017-02-28 02:46:51 +13:00
Roman-Nopantski
9d3fb13d76 #30
no preference value changes or active/inactive status, just descriptions and formatting
2017-02-28 00:04:23 +13:00
Roman-Nopantski
4a6fbddb01 1222->2672 and 2613->2512 2017-02-27 23:39:26 +13:00
Roman-Nopantski
d4d6440be9 browser.usedOnWindows10.introURL -> deprecated 2017-02-27 13:31:26 +13:00
Roman-Nopantski
46157a5659 browser.xul.error_pages.expert_bad_cert -> true
#26
2017-02-24 05:39:20 +13:00
Roman-Nopantski
32c4e5a1dc UA Spoofing own section, all inactive 2017-02-24 04:34:52 +13:00
Roman-Nopantski
ffbbb43110 add 1219 ref links 2017-02-24 01:34:25 +13:00
Roman-Nopantski
7b80d3c733 spacing silly wsywig editor hates pastes 2017-02-23 20:56:05 +13:00
Roman-Nopantski
df1e1e42e8 enforce CSP 2017-02-23 20:54:43 +13:00
Roman-Nopantski
2fcd21083e enforce HSTS preload list 2017-02-23 20:30:18 +13:00
Roman-Nopantski
d17fa573a9 minor edits 2017-02-23 05:53:57 +13:00
Roman-Nopantski
3af7679932 1220 security.nocertdb clarify & add warning 2017-02-23 03:32:09 +13:00
Roman-Nopantski
49d8b9f6d6 description ambiguity fix 2017-02-23 02:36:16 +13:00
Roman-Nopantski
1898460071 activate 1221 2017-02-23 02:31:10 +13:00
Roman-Nopantski
bb206ec8fb minor description edits 2017-02-22 13:08:00 +13:00
Roman-Nopantski
b73324e391 added browser.ssl_override_behavior
see https://github.com/pyllyukko/user.js/issues/210 - basically instead of a value 2, a value of 1 will save a cert pre-fetch
2017-02-22 11:40:38 +13:00
Roman-Nopantski
31c77a6225 update dom.disable_beforeunload
see discussion fca0827603 (commitcomment-20981489)
2017-02-22 09:49:44 +13:00
Roman-Nopantski
bb605524c0 remove spaces, even out lines 2017-02-22 08:40:27 +13:00
earthlng
1438b4ac4f Merge pull request #19 from ghacksuserjs/earthlng-patch-1
adding network.IDN_show_punycode;true
2017-02-21 20:06:58 +01:00
earthlng
fd3311297d Merge pull request #22 from ghacksuserjs/earthlng-patch-2
network.IDN_show_punycode draft modifications
2017-02-21 20:04:41 +01:00
earthlng
e00a80fd8b network.IDN_show_punycode
removed the 'period' at the end of the pref description (we usually don't have one there) and aligned the 2nd line of the downside a bit nicer.
2017-02-21 19:54:25 +01:00
Roman-Nopantski
00e99d2b65 removed to investigate section
#20
2017-02-22 07:42:08 +13:00
Roman-Nopantski
069d821413 mods to earthlng patch #19
shortened and evened out lines, added that extra link. I changed "Internationalized Domain Names" to IDNs to save space and then realized the kb and wiki articles don;t even say what IDN stands for, so I put it back.

Also swapped the order and wording of the pref to make it consistent with the action. Instead of
- "2672: eliminate possible .. show_punycode", true)"
- "2672: force Punycode .. show_punycode", true)"
2017-02-22 07:32:52 +13:00
earthlng
4d0e5825a2 network.IDN_show_punycode
my draft for network.IDN_show_punycode
added under 2600 but it would maybe also fit under 0800 (?)
the title and that one line are quite long, feel free to improve the wording etc.
2017-02-21 18:29:05 +01:00
Roman-Nopantski
a00316d1c9 dyslexic moment fixup 2017-02-21 20:53:07 +13:00
Roman-Nopantski
3bf64d5714 moved appendix of add-ons to wiki 2017-02-21 07:38:19 +13:00
Roman-Nopantski
eba5ae463a 0808 info fixup 2017-02-20 19:00:19 +13:00
Roman-Nopantski
1eccc39ca5 0808 update 2017-02-20 18:50:14 +13:00
Roman-Nopantski
b5a1e3ff5d added suggested info to 0001: pb mode 2017-02-20 15:58:12 +13:00
Roman-Nopantski
894dda6d60 still drafting... 2017-02-20 15:45:58 +13:00
Roman-Nopantski
6435c2795a Update user.js
replace all bugzil.la links
2017-02-20 13:43:26 +13:00
earthlng
01263ad61f typo 2017-02-19 17:24:25 +01:00
earthlng
9ab13cec87 more typos
beware of the big bad grammar nazi 😱
2017-02-19 17:20:20 +01:00
Roman-Nopantski
4ca669951d draft readme outline 2017-02-20 03:39:05 +13:00
Roman-Nopantski
fe50cf94b5 added inactive pref 0001: start in PB mode 2017-02-20 01:29:56 +13:00
Roman-Nopantski
bd226c716e removed tor uplift investigation section
I have created three issues for tracking items of interest from the tor uplift: #7 `resistFingerprinting`, #8 `FPI` and #15 `the rest`
2017-02-19 23:53:45 +13:00
Roman-Nopantski
5e94428cb3 removed unsupported palemoon section 2017-02-19 19:45:57 +13:00
Roman-Nopantski
f507603cec moved appendix of test sites to wiki 2017-02-19 19:18:45 +13:00
Roman-Nopantski
27ac8f97f8 tidied spacings 2017-02-19 05:17:00 +13:00
4 changed files with 1122 additions and 1207 deletions

7
.travis.yml Normal file
View File

@@ -0,0 +1,7 @@
language: node_js
node_js:
- "node"
before_script:
- npm install -g acorn
script:
- acorn user.js

48
README.md Normal file
View File

@@ -0,0 +1,48 @@
## ghacks-user.js
- This is a rough draft, please read the old intro currently at the start of the user.js in the meantime.
- Paragraph here about not jumping in without reading first, and backing up, and understanding the changes
### Origins
- yada yada
### Purpose
- discuss why use a js (enforcement on startup, migration)
- outline trade-offs between security vs privacy etc
- explain expectations and site breakage
- explain this version is a "compromise" or balance that aims (with addons eg you WILL need uBlock Origin or turn safe browsing and tracking protection back on) to provide as much privacy and enhanced security as possible, and to reduce the fingerpritning attack surface as much as possible - while putting up with some incoveniences and as little site breakage as possible (but it will happen). It's only a starting point.
- provide troubleshooting: site breakage will happen. 90=% of the preferences cause no issues. It is only a small core of settings that people may or may not need to look at, depending on their objective.
- no one size fits all, this is a template, fork it! Customize it! (see goals, we won't set you wrong)
### Goals & Standards
To be **THE** template and resource all other user.js' come to for news, links, information and more, which means it needs to be:
- comprehensive (eg some prefs are included at default for completeness/enforcement, a lot are included and changed for future-proofing, etc)
- current and available and change-trackable (hey, we're on github now)
- easy to understand (good, simple, less-technincal descriptions)
- accountable and a resource (lots of links to authorative authors and tech papers, also repo wiki)
- correct and to dispell myths and bad advise (see accountable)
- eassy to follow and report and discuss (logical and numbered structure)
- give good advise (see trade-offs)
- expanded on with more information, such as FF version numbering for introduction and deprecation of preferences, hidden pref tags etc
- archived for each stable release (starting with 51)
- to provide illustrated wiki topics to help (help wanted please!)
- to make it as easy as possible for anyone to use a user.js and get it right for them
- to provide two or three future forks with differnent settings from "painless no-breakage no-addons" thru to a "super-hardened" version: for use with multiple profiles
### Implementation
- expectations of the user
- link to wiki on testing and tweaking in a portable FF first
- backup first: link to wiki article on backup & restore methods
- changing, resetting preferences: user.js and about:config
### Troubleshooting
- wiki links
### Help & Resources
- wiki links, appendices etc
### Acknowledgements
- yada yada

1
_config.yml Normal file
View File

@@ -0,0 +1 @@
theme: jekyll-theme-midnight

2269
user.js

File diff suppressed because it is too large Load Diff