Compare commits

...

131 Commits

Author SHA1 Message Date
06018367a1 Merge pull request #146 from carmenbianca/line-endings
Convert line endings to LF
2017-06-19 09:11:20 +12:00
7b2d67976c Convert line endings to LF
Added .gitattributes file to prevent CRLF from being committed in the
future.

Fixes #145
2017-06-17 09:13:14 +02:00
7a0fbb6a31 end of 54 commits
ready for alpha release and changelog
2017-06-15 02:48:55 +12:00
1f18162d56 Merge pull request #141 from ghacksuserjs/138-patch
#138 add notes to some inactive prefs
2017-06-15 02:06:26 +12:00
eba592c7e5 minor edit 2017-06-14 06:08:25 +12:00
46bfeca8c2 #138
These all seem kinda lame TBH
2017-06-14 06:04:32 +12:00
eeedf0db72 1032: favicons in web notifications=>active
enforce default
2017-06-14 04:56:00 +12:00
1ad970741c 1606: default Referrer Policy=>active 2017-06-14 04:37:46 +12:00
f61c951ca0 3029: disable Firefox Screenshots 2017-06-14 04:13:53 +12:00
b9e321c45a 2805: privacy.*.openWindows 2017-06-14 04:09:31 +12:00
8a9a4fe427 2515: disable site specific zoom #135 2017-06-14 03:38:45 +12:00
44c4a62820 fix syntax from last commit 2017-06-13 19:24:23 +12:00
ab7dfb7f43 2001: disable WebRTC over TCP 2017-06-13 19:12:34 +12:00
3c7789defc 2300 revamp #71 2017-06-13 00:11:26 +12:00
82432a3d40 FF54 deprecated 2017-06-12 23:55:17 +12:00
75f6bc8b5d 2699g: reduce precision of time exposed by JS 2017-06-10 07:33:04 +12:00
b53b4832d4 1220: add reference 2017-06-09 01:11:55 +12:00
9719fc319d 0603b: add reference 2017-06-09 01:08:19 +12:00
9340f8ba04 1240: add reference 2017-06-09 01:05:56 +12:00
dd01dd54c6 1100s: add 2 process/sandbox prefs => inactive 2017-06-06 06:22:19 +12:00
1a04c1314e 0809: disable preloaded top website suggestions 2017-06-06 05:11:59 +12:00
ec03969d98 0863: disable Form Autofill 2017-06-06 05:07:48 +12:00
1621cd5e48 0361: disable Activity Stream 2017-06-06 04:38:38 +12:00
0006ee04b4 1202: TLS max+fallback=>active
regardless of default, time to turn it on in 54
2017-06-06 04:08:24 +12:00
08fbc37870 1266: add ref link 2017-06-05 16:12:55 +12:00
9859cc8889 9999 nits 2017-06-04 18:11:46 +02:00
a4be5471f1 0607 [WINDOWS] tag 2017-06-04 09:15:09 +12:00
d1e02e407b start 54 commits
10 days to go guys and gals
2017-06-04 08:08:26 +12:00
ed9bc336fa 9999 revamp fixups 2017-06-04 07:08:16 +12:00
f84f9b7c44 Merge pull request #137 from ghacksuserjs/9999-revamp
9999 revamp
2017-06-03 20:21:43 +12:00
f74b327403 9999 revamp
Nits, review syntax etc. Note: 2 items missing deprecation bugzilla tickets, we can get those in time. Note if each section number is made active, the prefs are also - except those which either match the current js (eg TP/SB not active but we do block reporting) or they make no sense or were inactive originally (eg personal 3000 settings etc) - might want to review those choices as well. Also, a few numbers etc changed to match current numbers (eg replaced by items etc, new sections)
2017-06-03 16:33:00 +12:00
e4a8dcf0dc 0333a: two health report prefs->deprecated 2017-06-02 01:21:01 +12:00
9eee26bc35 0330b: unifiedIsOptIn->deprecated 2017-06-02 00:57:36 +12:00
76293cab6a 3006: add-on signing url fix 2017-06-01 01:56:23 +12:00
4a0ff9ea33 3006: add-on signing move back from deprecated 2017-06-01 01:46:09 +12:00
8b2b0898c0 typo 2017-05-31 14:04:13 +12:00
956c94f812 2617 pdfjs.disabled better info #114 2017-05-30 04:05:10 +12:00
2336d0a20b 0910 add bugzilla tickets 2017-05-30 02:01:08 +12:00
a4a0ec5cee #129 black-on-black system colors 2017-05-29 13:11:34 +12:00
8abe26083c punycode test
and the PoC/article by Xudong Zheng that re-sparked the conversation early this year
2017-05-28 12:49:27 +12:00
c4bba2258e Merge pull request #131 from ghacksuserjs/earthlng-patch-1
extensions.blocklist.url
2017-05-28 12:41:39 +12:00
f84e051b50 extensions.blocklist.url
https://blocklist.addons.mozilla.org/blocklist/3/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/53.0.3/
... already redirects to ...
https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%7Bec8030f7-c20a-464f-9b0e-13a3a9e97384%7D/53.0.3/
... in FF53.0.3 so we can already commit this FF54 change that uses the direct URL
2017-05-27 16:14:05 +02:00
caa1d2c22e don't disable update checks #112
i.e change the prefs to inactive - FF nerds can then easily flip the two prefs to achieve the section purpose = "quiet"
2017-05-27 15:18:20 +12:00
b72c6f57c0 Merge pull request #130 from ghacksuserjs/Standardize-Part3
Standardize Part3 #115
2017-05-26 02:11:24 +12:00
7c87abbe78 Standardize Part3 #115 2017-05-25 07:40:40 +12:00
e6628e56df ui.use_standins_for_native_colors #129 2017-05-25 06:35:50 +12:00
c7b34d3b26 0850a+b+c urlbar+maxRichResults #125
clarifies usage of maxRichResults and cases of aberrant number of items displayed
2017-05-24 05:44:49 +12:00
147e02379a dom.maxHardwareConcurrency #115 2017-05-24 04:50:44 +12:00
05bbd88f95 2605 windows->system since GTK could be anything 2017-05-24 02:41:06 +12:00
e080614c30 Merge pull request #122 from ghacksuserjs/Standardize-Part2
Standardize Part2 #115
2017-05-24 02:14:05 +12:00
a0aca310e9 2605 confirmed windows only (and gtk) 2017-05-24 02:02:51 +12:00
b5c072dc18 2604 remove [MAC] tag 2017-05-23 07:17:49 +12:00
31d3aec893 Update user.js 2017-05-22 08:33:25 +12:00
1c82abf074 Update user.js 2017-05-22 07:36:39 +12:00
1c5988c770 Standardize Part2 #115 2017-05-22 07:33:04 +12:00
b8a6f2a7ad Merge pull request #121 from ghacksuserjs/Standardize-Part1
Standardize Part1 #115
2017-05-21 03:19:50 +12:00
ec9f9fcea8 remove left over line 2017-05-18 06:31:04 +12:00
7fcb3ce836 Standardize Part1 #115 2017-05-18 06:15:40 +12:00
8f5305f383 0001: add PB mode info #80 2017-05-16 05:42:58 +12:00
9d6da7199d 0401 better wording for extension.blocklist 2017-05-14 23:17:16 +12:00
83cf157178 Update user.js 2017-05-13 14:33:46 +12:00
21f5333723 Update user.js 2017-05-13 14:13:42 +12:00
d5c92cd548 Update user.js 2017-05-13 14:11:45 +12:00
ce90d07e0e Update user.js 2017-05-13 14:07:42 +12:00
903ba2d2b4 0400s: tidy up sub-section SB 2017-05-13 14:04:14 +12:00
64351a0c19 minor edits 2017-05-13 13:53:24 +12:00
0d09e9c9b5 minor comment edits 2017-05-13 13:00:14 +12:00
ad51e00c8f 0400s: tidy up sub-section TP 2017-05-13 12:44:29 +12:00
195ec514c3 bye bye scary warnings
Now TP+SB is not disabled by the js, goodbye big scary warnings - we still have our advisory remarks in the section and wiki and readme.md
2017-05-13 12:32:58 +12:00
436db6c02d splinter part of 0402 kinto into 0403 #113 2017-05-13 12:04:45 +12:00
cd13d479ee whoops 2017-05-13 11:52:37 +12:00
6516eadc60 0400s: tidy up sub-section Blocklists 2017-05-13 11:50:50 +12:00
dce198c405 move 0440->1204 SSL Error Reporting #113 2017-05-13 11:25:54 +12:00
2a240b4a10 0401 extension.blocklist #113
No effective changes made, i.e extensions.blocklist.enabled is not disabled, just not enforced.
2017-05-13 10:01:27 +12:00
9249fc6ed0 0402 kinto #113 + 0400 title 2017-05-13 09:38:17 +12:00
9a42dfe73d whoops .. put back 0430
inadvertently removed 0430 when doing some rearranging
2017-05-12 17:38:17 +12:00
84ea69411b remove redundant line 2017-05-12 09:18:52 +12:00
dc15fe7db8 fixup TP/Flash blocklist URL prefs
See comment https://github.com/ghacksuserjs/ghacks-user.js/issues/103#issuecomment-300911966 - `*safebrowsing.provider.mozilla.*` is for Flash & TP ONLY (original article by francois had a *slight!!* error since fixed)

This means that 0410d was not shared by TP and SB and to clear it all up .. 0410d is moved to 0420's. 0420's also gets the flash pref 0440 moved into the 0420's.

Now it's all tidy: 0410's = google and SB, 0420's = mozilla & TP+Flash
2017-05-12 09:11:45 +12:00
6cda4ebc14 2699f: spoof navigator.hardwareConcurrency 2017-05-12 01:44:04 +12:00
d3e1fe3a1c 0410f: FF54 report mistake urls 2017-05-12 01:18:51 +12:00
9a76ccbfda weird spacing 2017-05-11 19:22:32 +12:00
b6c17138bf HTTP2 cleanup #107 2017-05-11 19:11:55 +12:00
382adf1042 Update README.md 2017-05-11 19:06:08 +12:00
870f9503c2 Add files via upload 2017-05-11 18:58:05 +12:00
b67f98141b tidy up
single warning line, not taking responsibility for people who don't read now that the js by default no longer disables these
2017-05-11 18:54:49 +12:00
2a609fc85d TP prefs=>inactive i.e js will NOT disable TP #103
Exception: I am enforcing TP in ALL windows (default is PB Mode only). I have also added the info for which block list to use in TP. Also clarified that 0440 (flash blocklist) uses prefs in 0410d. Also made flash tracking blocklist pref (0440) inactive. Now all TP and SB is allowed, only real time google binary checks and reporting is disabled.
2017-05-11 18:34:10 +12:00
2b52bf895c tidy up 2017-05-11 17:20:28 +12:00
eaaecd128c SB prefs=>inactive i.e js will NOT disable SB #103
Exceptions: real time binary checks not in local lists are still blocked. Reporting URLs still blocked.
2017-05-11 17:13:23 +12:00
78bf49adb4 1222: typo 2017-05-09 17:31:27 +02:00
f024e9bd43 0805: fix link reference
it was "see latest comments in the bug link" before the change - [2] is the bug link, [1] + [3] don't have comments
2017-05-09 16:56:03 +02:00
1b73cb828e 0201: geo.wifi.uri 2017-05-10 01:39:02 +12:00
7600d06651 0908: reinforcing that 0802=required
making it crystal clear that "When attempting to fix an entered URL" means pref 0802
2017-05-10 01:26:22 +12:00
b365a88a52 #94 emphasis on TBB for dark web 2017-05-10 01:04:46 +12:00
fa74bcaa4a add FF55 resistFingerprinting new items 2017-05-10 00:54:36 +12:00
ad56e58330 undo last change 2017-05-06 01:36:53 +12:00
66e807623b add 2698k isolate blob: URI
FF55 looks like it might be almost ready for FPI
2017-05-06 00:30:22 +12:00
553d1aedde geo.wifi.uri - use mozilla_api_key not google's
Instead of `geo.wifi.uri` using 127.0.0.1, for those who do use geo (`geo.enabled` is the master switch), enforce Mozilla's service over Google's.

- Default in stable, beta: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_API_KEY%
- Nightly defaults to mozilla (not usre of the exact string)
- I do not know if this is a telemetry thing for mozilla for non-stable or if this will roll down from nightly
2017-05-05 19:11:44 +12:00
9ffc3b0d9a add 3028 general.autoScroll=>inactive #108 2017-05-04 14:50:37 +12:00
02283833a1 remove 2032 browser.migrate.automigrate.enabled
This is a pref to hide a UI doorhanger which allows an end user to KEEP or UNDO auto-migrated "stuff" from another browser (eg from IE etc). This is part of funnelweb, which is an upcoming makeover of the "onboarding experience" (to retain users in a new FF) - this includes auto-importing their bookmarks etc from another browser in the background and THEN asking if they want to keep them or undo. We cannot block the UI to this for obvious reasons. Funnelweb also includes this like a new Tour UI, activity streams etc

https://bugzilla.mozilla.org/show_bug.cgi?id=1297479
https://bugzilla.mozilla.org/show_bug.cgi?id=1322718#c1

Tour thingy: https://www.ghacks.net/2017/03/31/firefox-photon-new-design-mockups-show-interface-and-more/
Activity Streams: https://www.ghacks.net/2017/04/09/firefox-57-photon-mockups-activity-stream-library-compact-mode-more/
2017-05-03 00:54:22 +12:00
acb22ac368 uBo is now REQUIRED
Have also modified the readme.md and will do so to the wiki implementation page
2017-05-02 15:20:46 +12:00
e1a3d681c8 Update README.md 2017-05-02 15:14:50 +12:00
fc0a045069 tiniest typo ever - != = 2017-05-02 13:52:50 +12:00
8f0569f3fd 2403 add FF versioning 2017-05-02 05:06:44 +12:00
3a39425ab2 kinto: do not block any of it in the template
there are no privacy/security issues here - by default we should not block any of these, but if end-users wish to, then it's up to them
2017-05-02 03:14:06 +12:00
49d229b90f remove sync #98 2017-05-02 01:26:59 +12:00
f5670636f6 add 2513 dom.presentation.* #92 2017-05-02 01:16:22 +12:00
9d3c7949fd add 1700s containers #91 2017-04-30 16:09:14 +12:00
4852318ece Merge pull request #95 from ghacksuserjs/earthlng-patch-1
fix syntax errors in 1110
2017-04-30 14:42:04 +12:00
6fdbcd7fae fix syntax errors in 1110 2017-04-29 14:30:45 +02:00
0bdca802eb typo 2017-04-29 11:22:17 +12:00
9b65d9788d typos 2017-04-29 11:20:38 +12:00
b3af6c1f5f syntax/typo 2017-04-28 10:17:29 +12:00
f3a0e8d88c add 0209: geo.security.allowinsecure
mozilla intend to flip the switch in 55, but the pref is available in FF54 (but no idea if its fully working) - see https://webcache.googleusercontent.com/search?q=cache:yfO0BMezyGcJ:https://groups.google.com/d/msg/mozilla.dev.platform/8BsF76gNhDE/XhsZXcueBAAJ+&cd=2&hl=en&ct=clnk&gl=nz
2017-04-28 05:43:45 +12:00
ffd89807bf 1607: network.http.referer.hideOnionSource 2017-04-28 04:44:23 +12:00
da73ca1759 privacy.firstparty.isolate.restrict_opener_access
FF54 - inactive as is FPI
2017-04-28 04:33:51 +12:00
30bb523b11 upgrade 53-beta to 53
ready for alpha release and changelog
2017-04-28 04:18:55 +12:00
b26175494b typo
earthlng!!!!  we use urlbar not URL bar .. bad earthlng :)
2017-04-26 18:18:52 +12:00
7496b873b7 3027 browser.urlbar.decodeURLsOnCopy added 2017-04-26 18:17:22 +12:00
8ca3176ab1 2426 dom.IntersectionObserver.enabled added
default is false anyway. We can readdress this if it ever gets turned on, or used for purposes other than ad networks - I suspect there's nothing really out there using it right now, and the fact 53 is false, I bet there's no big hurry to turn it on due to stability and real world usage.
2017-04-26 18:02:33 +12:00
5cf2de570a 2706 browser.storageManager.enabled added
its added as default false, but looks like we'll need to check out what options the two prefs (dom from 51 and browser from 53) when true show in the options UI
2017-04-26 17:37:48 +12:00
37b8ad66b8 2512 device.sensors.enabled references
The blog entry [2] and subsequent ticket [3] are new.
Francois mentioned the older ticket [4].
FYI: `device.sensors.enabled` was introduced in FF15 (don't think I need to add that in)
2017-04-26 12:48:57 +12:00
4d1689b7a5 forgot a closing ***/ in deprecated section
no syntax issues, calm down
2017-04-21 01:04:28 +12:00
d87bcfde58 FF53 deprecated 2017-04-20 12:47:28 +12:00
c194e21d5c Update user.js 2017-04-19 14:22:31 +02:00
49e2025bc5 add e10s section 1100 #82
noted added roadmap link to section header, reworded FF53+ multiprocessCompatibility flag as `might disable` (from `will disable`)
2017-04-18 11:12:55 +12:00
2d0e27cb43 "reader view" -> personal section -> inactive #84 2017-04-18 10:56:29 +12:00
9bbe074960 minor readme section edits 2017-04-17 23:34:44 +12:00
ec5fdfcdaa 0381: disable WebExtension sync 2017-04-16 11:50:08 +12:00
e1a5f80063 start v53 commits 2017-04-16 11:45:28 +12:00
bc70023b54 0351: crashReports enforce extra pref at default
enforces default false (future proofing, because sh*t happens), plus added the FF version numbers.
2017-04-15 18:41:14 +12:00
551427fccc 2671 svg.disabled-> inactive for FF53+ 2017-04-15 12:27:41 +12:00
4 changed files with 1900 additions and 1651 deletions

8
.gitattributes vendored Normal file
View File

@ -0,0 +1,8 @@
* text=auto
*.js text
*.md text
*.yml text
*.txt text
*.png binary

View File

@ -2,7 +2,7 @@
A `user.js` is a configuration file that can control hundreds of Firefox settings. For a more technical breakdown and explanation, you can read more on the [overview](https://github.com/ghacksuserjs/ghacks-user.js/wiki/1.1-Overview) wiki page.
### ![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/bullet01.png) ghacks user.js
The [ghacks user.js](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/user.js) is a template, which, as provided, aims (with [add-ons](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-B:-Firefox-Add-ons)) to provide as much privacy and enhanced security as possible, and to reduce tracking and fingerprinting as much as possible - while minimizing any loss of functionality and breakage (but it will happen).
The [ghacks user.js](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/user.js) is a template, which, as provided, aims (![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/exclamation.png) with [add-ons](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-B:-Firefox-Add-ons) <sup>1</sup> ) to provide as much privacy and enhanced security as possible, and to reduce tracking and fingerprinting as much as possible - while minimizing any loss of functionality and breakage (but it will happen).
We aim to INFORM and give you CHOICES. No one size fits all, so customize it! And not all sites have the same requirements, so use [profiles](https://github.com/ghacksuserjs/ghacks-user.js/wiki/2.3-Concurrent-Profiles) with custom versions. We won't set you wrong.
@ -25,11 +25,13 @@ Everyone, experts included, should at least read the [implementation](https://gi
### ![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/bullet01.png) acknowledgments
Literally thousands of sources, references and suggestions. That said...
* Martin Brinkmann at [ghacks](https://www.ghacks.net/) <sup>1</sup>
* Martin Brinkmann at [ghacks](https://www.ghacks.net/) <sup>2</sup>
* 100% genuine super-nice all-round good guy
* The ghacks community and commentators
* Special mentions to [earthlng](https://github.com/earthlng), Tom Hawack, Just me, Conker, Rockin Jerry, Ainatar, Parker Lewis
* [12bytes](http://12bytes.org/articles/tech/firefoxgecko-configuration-guide-for-privacy-and-performance-buffs)
* The 12bytes article now uses this user.js and supplements it with an additonal JS hosted right [here](https://github.com/atomGit/Firefox-user.js) at github
<sup>1</sup> The ghacks user.js was an independent project by [Thorin-Oakenpants](https://github.com/Thorin-Oakenpants) started in early 2015 and was [first published](https://www.ghacks.net/2015/08/18/a-comprehensive-list-of-firefox-privacy-and-security-settings/) at ghacks in August 2015. It was kept up-to-date and expanded by the original author with three major updates and articles. With Martin Brinkmann's blessing, it will keep the ghacks name.
<sup>1</sup> ![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/exclamation.png) Important: We HIGHLY recommend using uBlock Origin, uMatrix and a cookie extension. Section 0400, if modified, allows Tracking Protection and Safe Browsing to be disabled. Do this at your own risk. See the [implementation](https://github.com/ghacksuserjs/ghacks-user.js/wiki/1.3-Implementation) wiki page for more.
<sup>2</sup> The ghacks user.js was an independent project by [Thorin-Oakenpants](https://github.com/Thorin-Oakenpants) started in early 2015 and was [first published](https://www.ghacks.net/2015/08/18/a-comprehensive-list-of-firefox-privacy-and-security-settings/) at ghacks in August 2015. It was kept up-to-date and expanded by the original author with three major updates and articles. With Martin Brinkmann's blessing, it will keep the ghacks name.

3535
user.js

File diff suppressed because it is too large Load Diff

BIN
wikipiki/exclamation.png Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 3.1 KiB