Compare commits

..

217 Commits

Author SHA1 Message Date
595eaf540c 0425: passive TP 2017-08-19 13:35:27 +12:00
31b1f6624e subresource-img-cross-origin-http-auth-allow;false
https://github.com/ghacksuserjs/ghacks-user.js/issues/144#issuecomment-321980962
https://github.com/ghacksuserjs/ghacks-user.js/issues/144#issuecomment-322903835
2017-08-18 12:28:12 +02:00
e95d2afc95 1205: disable TLS1.3 0-RTT 2017-08-18 13:58:30 +12:00
996e760f8c 2699: spoof navigator platform as win64
While the change has just landed, it is being pushed with 56, same as the rest of the resistFP UA/Nav spoofing
2017-08-15 15:09:34 +12:00
6c2f3ad33a 2699: reduce screen co-ordinate FP in Touch API 2017-08-15 14:21:28 +12:00
f7dea0a1e9 2699: spoof media statistics to 0 2017-08-12 13:55:17 +12:00
911a98c675 1108: block web content in file processes 2017-08-11 08:30:52 +12:00
cda46d8342 1107: dom.ipc.processCount.file
FYI: https://bugzilla.mozilla.org/show_bug.cgi?id=1352359
2017-08-11 06:38:59 +12:00
2182bdfbe8 1840 - fixup 2017-08-10 14:24:13 +02:00
21b5c5dea7 9999: one-char-switch for ESR
thanks earthlng
2017-08-10 23:30:39 +12:00
b527e5c65e 9999 - tweak for JS-comment re-grouping for ESR 2017-08-10 23:28:03 +12:00
1755543594 1800s: move gmp update prefs to 1820 2017-08-10 22:52:59 +12:00
cf2a6fd554 fixup 2017-08-09 00:48:05 +12:00
bc58c10f34 3015: toolkit.cosmeticAnimations.enabled 2017-08-09 00:42:53 +12:00
3e3acd5897 9999 - JS-comment re-grouping for ESR users
makes it even easier for ESR users to re-enable the prefs they still need
2017-08-08 13:15:45 +02:00
6be84b8516 0500s" fix Mac directory info 2017-08-08 14:43:39 +12:00
7a05580c62 2507: remove dom.keyboardevent.dispatch_during_composition
The bulk of 2507 with `dom.keyboardevent.code.enabled` (links, description etc) is now deprecated in section 9999 under FF55+. This leaves `dom.keyboardevent.dispatch_during_composition` as a valid pref. It's default is false, so rather than leave it hanging out on it's own with no info, lets remove it. [If it ever becomes true we will pick up in diffs]
2017-08-08 06:28:36 +12:00
48511d1f9b FF55+ deprecation 2017-08-08 06:10:31 +12:00
69449f8593 Update user.js
- should check if 0360 `user_pref("browser.newtabpage.directory.source", "data:text/plain,");` is still around since the ping pref is gone.
- A bit iffy about 2507 - this spilts two prefs and there's a lot of text. Not sure if FF38+ refers to the second one. We should investigate the still active 2507 and fix that up with some info and version
2017-08-07 18:43:47 +12:00
09ccb74d69 0209: fix bugzilla ref
https://bugzilla.mozilla.org/show_bug.cgi?id=1072859 is the one for removing it in 55+
2017-08-07 10:44:20 +12:00
ebcf5bec9e 1830: add media.eme.chromium-api.enabled 2017-08-07 10:33:16 +12:00
3970c1db9e 2699: Navigator API spoof correction
See: https://bugzilla.mozilla.org/show_bug.cgi?id=1383495#c8 - the comment in code is incorrect and hopefully will be fixed. Version is always rounded DOWN
2017-08-07 10:03:32 +12:00
0861490d39 2699b: privacy.window.maxInner* fix descriptions 2017-08-07 07:33:07 +12:00
80c95cbac4 0500s: system add-ons: add Mac info 2017-08-07 05:33:26 +12:00
f18197c22e 0860+0861: disable form history => Active #186 2017-08-06 04:40:49 +12:00
98698c8e68 0201: geo.wifi.uri fixup
This description should cover everyone. No longer care if and when Mozilla push the change
2017-08-06 04:25:46 +12:00
ea713abfc6 0325: add media.wmf.vp9.enabled 2017-08-05 09:13:11 +12:00
eb532d61be 1104: now active at default 55+ 2017-08-05 09:09:44 +12:00
29ce831774 0201: remove mozilla API as it is now default 55+ 2017-08-05 09:07:09 +12:00
c7cd524f21 2504: simplify VR to master switch 2017-08-05 08:30:21 +12:00
8538685685 Merge pull request #184 from ghacksuserjs/earthlng-patch-1
3009 - remove it
2017-07-30 07:46:01 +12:00
9e573ea97f 3009 - remove it
the default value in 54 is true. It's not in my OS diff for 54 either so it's true on Linux and Mac as well. I don't think anyone would want to disable this anyway, and we have it as "enable APZ". It's only wasting space, let's remove it. class discuss xD
2017-07-29 21:24:58 +02:00
f8cdfbcd93 3029: removed - now 0515 system add-ons 2017-07-29 08:17:42 +12:00
0e2e54238c nits 2017-07-28 21:15:25 +02:00
ed2f829af9 2699: disable WebSpeech API 2017-07-29 06:18:02 +12:00
7e92f86244 fixup extensions.screenshots.system-disabled 2017-07-29 05:55:11 +12:00
66cf6b7641 2699: streamline resistFP meta references 2017-07-29 05:37:59 +12:00
dcf4ebfbad 2698: streamline FPI meta references 2017-07-29 05:28:59 +12:00
b24539cc25 Merge pull request #182 from ghacksuserjs/earthlng-patch-2
0515+0516 - screenshots already bundled with FF54
2017-07-29 05:13:24 +12:00
f52cb0e334 0515+0516: screenshots already bundled with FF54
swap 515+516 to keep FF version order, screenshot is 54 (tag 55 pref as 55, but add deprecated 54 pref to section 9999)
2017-07-29 05:10:40 +12:00
4d0c29672b Merge pull request #181 from ghacksuserjs/earthlng-patch-1
1840 - add override url + disable local fallback
2017-07-29 04:54:33 +12:00
a6fe71d24a 1840: add override url + disable local fallback
fixup: consistent data:*
2017-07-29 04:47:43 +12:00
fa778f2a87 0515+0516 - screenshots already bundled with FF54
moved screenshots up to 0515 and added the FF54 pref. I know I said we can remove that pref but the item needs to be for FF54+ regardless. To make it less confusing I added the pref back in.
2017-07-28 18:31:46 +02:00
12e25652e6 1840 PR - add hidden pref tags 2017-07-28 18:20:57 +02:00
cb5593f09e 1840 - add override url + disable local fallback
they are both in Tor 7.0.2.
With .url.override set, media.gmp-manager.url is never used (but let's keep it anyway)
source: https://dxr.mozilla.org/mozilla-central/source/toolkit/modules/GMPInstallManager.jsm#66

Since ESR52 it is not enough anymore to block pinging the GMP update/download server.
There is a local fallback that must be blocked now as well. See: https://bugzilla.mozilla.org/show_bug.cgi?id=1267495.
2017-07-28 18:15:10 +02:00
63ed779776 0513: disable Follow On Search 2017-07-28 21:06:38 +12:00
998069f440 remove 0864
default is false has been since FF32, if it ever changes (eg maybe for auto formfill?) then we will pick up on it from diffs
2017-07-28 21:02:10 +12:00
63ba049ccb 0864: syntax missing trailing ; - oophs 2017-07-27 00:03:30 +12:00
8081967187 0517: disable Form Autofill #171 2017-07-26 23:37:45 +12:00
f00cc290b4 0864: disable form @autocomplete
The default is false in FF54 (and also in FF55 beta), so there should be no downsides. Not sure how this will affect AutoFormFill system addon, and don't care since we'll disable that as well
2017-07-26 23:24:18 +12:00
8c3cb3a834 2506: add bugzilla ref + 2203: grammar for nerds 2017-07-26 20:46:52 +12:00
4397bc9137 0330: amalgamate telemetry prefs, add two new ones 2017-07-25 06:43:12 +12:00
71fd837308 0515: correct reference notation 2017-07-25 06:29:20 +12:00
bb07b0e78c remove references to specific extensions
Non e10s and non WebExtension = out the door. NoRedirect & Disable IndexedDB were not e10s, and Cookie Controller is not WE (and besides, there are lots of cookie alternatives). I think that's all of them. In fact I think the only extensions left mentioned are uBlock Origin and NoScript

Also `addon-ons` typo not picked up by Just-me-ghacks - I am bitterly disappointed.
2017-07-25 05:36:32 +12:00
8d7fceb6da misc grammar for nerds #178
Thanks Just-me-ghacks
2017-07-25 05:15:37 +12:00
aeb7846200 typo: missed one
#178
2017-07-24 06:57:33 +12:00
4fac8f71c4 misc typos #178
Thanks Just-me-ghacks
2017-07-24 06:50:55 +12:00
e4002913d9 0515: some onboarding truths 2017-07-24 03:32:57 +12:00
9499122d96 0505: system add-on update tweak 2017-07-24 03:15:58 +12:00
656b755a34 0505: system add-on URL 2017-07-23 09:01:36 +12:00
0bf6323e6f typo + fix comment
thanks @Forsaked
2017-07-22 22:25:07 +02:00
dc955fb846 renumber 0513 to 0514
in order to keep system add-ons in order of first appearance
2017-07-23 04:02:33 +12:00
0eb7a927e6 0810: disable speculative connects #175 2017-07-23 03:11:56 +12:00
989a5816b1 indexedDB #173 2017-07-22 04:14:51 +12:00
049841acb1 0518: disable Web Compatibility Reporter #171 2017-07-21 18:23:14 +12:00
16499e9611 0516: Screenshots #171 2017-07-21 18:18:47 +12:00
4e36051192 0515: disable Onboarding 2017-07-21 18:14:05 +12:00
bcf38ca80b 0512: disable Shield system add-on #171 2017-07-19 06:00:34 +12:00
71c81992f5 add 0500s system add-ons / experiments #172
new items will have their own commits
2017-07-19 05:55:03 +12:00
b6567f3de9 miscellaneous
Add missing parrot for 1100s, replace parrot for 1700 with a unique euphemism, a readme tweak (so it's technically correct), and deprecated pocket  number change in prep for new system add-on section
2017-07-19 05:35:00 +12:00
3cdc4a93d7 2699: disable geolocation API 2017-07-15 19:37:27 +12:00
34d0054d95 tweak readme section 2017-07-15 02:20:40 +12:00
7d89436f27 1003: add browser.cache.memory.capacity #169 2017-07-14 04:39:31 +12:00
54cf998f78 2300: add notifications ref 2017-07-13 20:34:34 +12:00
35fd208af9 Update README.md 2017-07-10 11:39:30 +12:00
40a62aa38d 2415b: FF55+ pointerup added to default 2017-07-10 07:33:56 +12:00
1ed4c45051 55-beta date 2017-07-10 06:47:57 +12:00
4a0074d1ab start 55 commits 2017-07-10 06:47:23 +12:00
132e0fa503 1202: aaaaaaand actually change the pref this time 2017-07-10 06:26:55 +12:00
c864c8ebb0 1202: TLS min raised to 1.2 #167 2017-07-10 06:22:52 +12:00
063b731054 nits 2017-07-10 05:52:44 +12:00
d7c282c0fa Merge pull request #168 from ghacksuserjs/earthlng-patch-1
update ghacks.net links to use https
2017-07-09 18:51:32 +02:00
b24dd123d0 update ghacks.net links to use https 2017-07-09 18:49:39 +02:00
8b0bc463c5 2001: link update
www.privacytools.io redirects to https://privacytoolsio.github.io/privacytools.io/ and in the process drops the anchor info (#webrtc)
2017-07-09 17:58:05 +02:00
4d31983e06 0420: TP fixup default values 2017-07-09 22:58:57 +12:00
e018583082 2701: cookies & 3rd party info #159 2017-07-08 05:24:33 +12:00
6348826519 1212: turn on OCSP 2017-07-08 05:12:52 +12:00
b55a986d52 1210's: OCSP add reference 2017-07-07 00:09:54 +12:00
ba78702686 1610 DNT & 0420 TP clarify conflicts #163 2017-07-06 19:03:36 +12:00
32327e15c1 2699: spoof network info API 2017-07-01 03:05:45 +12:00
d1306aee26 2699: gamepad API 2017-06-30 03:10:39 +12:00
ac77e65d82 2699: site specific zoom 2017-06-30 03:09:19 +12:00
6b7032ccaf 2699: device sensor API 2017-06-29 04:48:56 +12:00
6ef86fbde6 0209 FF version fix, 2699a hidden pref info
I removed the "(hidden pref)" info when we revamped 2699, as it will no longer be hidden. In hindsight, that info needs to stay (we haven't archived off end-of-life 54, and it's good information for backwards compatibility).
2017-06-22 05:37:47 +12:00
0176d8676c 2698: isolate data://, about: 2017-06-21 18:37:27 +12:00
da1b9054ad 2629: fix ref source 2017-06-21 18:31:00 +12:00
fba479944d spacing nit 2017-06-21 17:17:15 +12:00
791b4114c6 2699: spoof Navigator API
https://reviewboard.mozilla.org/r/147474/diff/4#index_header

I would have thought rounding DOWN to the nearest multiple of 10 would be better. Imagine being on FF61 and claiming to be 70 = might cause site issues
2017-06-21 17:15:56 +12:00
8cdc6e766c 2699 revamp #143 2017-06-20 10:47:11 +12:00
319db71e82 nits 2017-06-20 03:56:15 +12:00
907e0aaa24 1408: graphite: update & add ref 2017-06-20 03:25:31 +12:00
5e0f37c925 2698 revamp #143 & FPI=>active 2017-06-20 03:05:51 +12:00
06018367a1 Merge pull request #146 from carmenbianca/line-endings
Convert line endings to LF
2017-06-19 09:11:20 +12:00
7b2d67976c Convert line endings to LF
Added .gitattributes file to prevent CRLF from being committed in the
future.

Fixes #145
2017-06-17 09:13:14 +02:00
7a0fbb6a31 end of 54 commits
ready for alpha release and changelog
2017-06-15 02:48:55 +12:00
1f18162d56 Merge pull request #141 from ghacksuserjs/138-patch
#138 add notes to some inactive prefs
2017-06-15 02:06:26 +12:00
eba592c7e5 minor edit 2017-06-14 06:08:25 +12:00
46bfeca8c2 #138
These all seem kinda lame TBH
2017-06-14 06:04:32 +12:00
eeedf0db72 1032: favicons in web notifications=>active
enforce default
2017-06-14 04:56:00 +12:00
1ad970741c 1606: default Referrer Policy=>active 2017-06-14 04:37:46 +12:00
f61c951ca0 3029: disable Firefox Screenshots 2017-06-14 04:13:53 +12:00
b9e321c45a 2805: privacy.*.openWindows 2017-06-14 04:09:31 +12:00
8a9a4fe427 2515: disable site specific zoom #135 2017-06-14 03:38:45 +12:00
44c4a62820 fix syntax from last commit 2017-06-13 19:24:23 +12:00
ab7dfb7f43 2001: disable WebRTC over TCP 2017-06-13 19:12:34 +12:00
3c7789defc 2300 revamp #71 2017-06-13 00:11:26 +12:00
82432a3d40 FF54 deprecated 2017-06-12 23:55:17 +12:00
75f6bc8b5d 2699g: reduce precision of time exposed by JS 2017-06-10 07:33:04 +12:00
b53b4832d4 1220: add reference 2017-06-09 01:11:55 +12:00
9719fc319d 0603b: add reference 2017-06-09 01:08:19 +12:00
9340f8ba04 1240: add reference 2017-06-09 01:05:56 +12:00
dd01dd54c6 1100s: add 2 process/sandbox prefs => inactive 2017-06-06 06:22:19 +12:00
1a04c1314e 0809: disable preloaded top website suggestions 2017-06-06 05:11:59 +12:00
ec03969d98 0863: disable Form Autofill 2017-06-06 05:07:48 +12:00
1621cd5e48 0361: disable Activity Stream 2017-06-06 04:38:38 +12:00
0006ee04b4 1202: TLS max+fallback=>active
regardless of default, time to turn it on in 54
2017-06-06 04:08:24 +12:00
08fbc37870 1266: add ref link 2017-06-05 16:12:55 +12:00
9859cc8889 9999 nits 2017-06-04 18:11:46 +02:00
a4be5471f1 0607 [WINDOWS] tag 2017-06-04 09:15:09 +12:00
d1e02e407b start 54 commits
10 days to go guys and gals
2017-06-04 08:08:26 +12:00
ed9bc336fa 9999 revamp fixups 2017-06-04 07:08:16 +12:00
f84f9b7c44 Merge pull request #137 from ghacksuserjs/9999-revamp
9999 revamp
2017-06-03 20:21:43 +12:00
f74b327403 9999 revamp
Nits, review syntax etc. Note: 2 items missing deprecation bugzilla tickets, we can get those in time. Note if each section number is made active, the prefs are also - except those which either match the current js (eg TP/SB not active but we do block reporting) or they make no sense or were inactive originally (eg personal 3000 settings etc) - might want to review those choices as well. Also, a few numbers etc changed to match current numbers (eg replaced by items etc, new sections)
2017-06-03 16:33:00 +12:00
e4a8dcf0dc 0333a: two health report prefs->deprecated 2017-06-02 01:21:01 +12:00
9eee26bc35 0330b: unifiedIsOptIn->deprecated 2017-06-02 00:57:36 +12:00
76293cab6a 3006: add-on signing url fix 2017-06-01 01:56:23 +12:00
4a0ff9ea33 3006: add-on signing move back from deprecated 2017-06-01 01:46:09 +12:00
8b2b0898c0 typo 2017-05-31 14:04:13 +12:00
956c94f812 2617 pdfjs.disabled better info #114 2017-05-30 04:05:10 +12:00
2336d0a20b 0910 add bugzilla tickets 2017-05-30 02:01:08 +12:00
a4a0ec5cee #129 black-on-black system colors 2017-05-29 13:11:34 +12:00
8abe26083c punycode test
and the PoC/article by Xudong Zheng that re-sparked the conversation early this year
2017-05-28 12:49:27 +12:00
c4bba2258e Merge pull request #131 from ghacksuserjs/earthlng-patch-1
extensions.blocklist.url
2017-05-28 12:41:39 +12:00
f84e051b50 extensions.blocklist.url
https://blocklist.addons.mozilla.org/blocklist/3/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/53.0.3/
... already redirects to ...
https://blocklists.settings.services.mozilla.com/v1/blocklist/3/%7Bec8030f7-c20a-464f-9b0e-13a3a9e97384%7D/53.0.3/
... in FF53.0.3 so we can already commit this FF54 change that uses the direct URL
2017-05-27 16:14:05 +02:00
caa1d2c22e don't disable update checks #112
i.e change the prefs to inactive - FF nerds can then easily flip the two prefs to achieve the section purpose = "quiet"
2017-05-27 15:18:20 +12:00
b72c6f57c0 Merge pull request #130 from ghacksuserjs/Standardize-Part3
Standardize Part3 #115
2017-05-26 02:11:24 +12:00
7c87abbe78 Standardize Part3 #115 2017-05-25 07:40:40 +12:00
e6628e56df ui.use_standins_for_native_colors #129 2017-05-25 06:35:50 +12:00
c7b34d3b26 0850a+b+c urlbar+maxRichResults #125
clarifies usage of maxRichResults and cases of aberrant number of items displayed
2017-05-24 05:44:49 +12:00
147e02379a dom.maxHardwareConcurrency #115 2017-05-24 04:50:44 +12:00
05bbd88f95 2605 windows->system since GTK could be anything 2017-05-24 02:41:06 +12:00
e080614c30 Merge pull request #122 from ghacksuserjs/Standardize-Part2
Standardize Part2 #115
2017-05-24 02:14:05 +12:00
a0aca310e9 2605 confirmed windows only (and gtk) 2017-05-24 02:02:51 +12:00
b5c072dc18 2604 remove [MAC] tag 2017-05-23 07:17:49 +12:00
31d3aec893 Update user.js 2017-05-22 08:33:25 +12:00
1c82abf074 Update user.js 2017-05-22 07:36:39 +12:00
1c5988c770 Standardize Part2 #115 2017-05-22 07:33:04 +12:00
b8a6f2a7ad Merge pull request #121 from ghacksuserjs/Standardize-Part1
Standardize Part1 #115
2017-05-21 03:19:50 +12:00
ec9f9fcea8 remove left over line 2017-05-18 06:31:04 +12:00
7fcb3ce836 Standardize Part1 #115 2017-05-18 06:15:40 +12:00
8f5305f383 0001: add PB mode info #80 2017-05-16 05:42:58 +12:00
9d6da7199d 0401 better wording for extension.blocklist 2017-05-14 23:17:16 +12:00
83cf157178 Update user.js 2017-05-13 14:33:46 +12:00
21f5333723 Update user.js 2017-05-13 14:13:42 +12:00
d5c92cd548 Update user.js 2017-05-13 14:11:45 +12:00
ce90d07e0e Update user.js 2017-05-13 14:07:42 +12:00
903ba2d2b4 0400s: tidy up sub-section SB 2017-05-13 14:04:14 +12:00
64351a0c19 minor edits 2017-05-13 13:53:24 +12:00
0d09e9c9b5 minor comment edits 2017-05-13 13:00:14 +12:00
ad51e00c8f 0400s: tidy up sub-section TP 2017-05-13 12:44:29 +12:00
195ec514c3 bye bye scary warnings
Now TP+SB is not disabled by the js, goodbye big scary warnings - we still have our advisory remarks in the section and wiki and readme.md
2017-05-13 12:32:58 +12:00
436db6c02d splinter part of 0402 kinto into 0403 #113 2017-05-13 12:04:45 +12:00
cd13d479ee whoops 2017-05-13 11:52:37 +12:00
6516eadc60 0400s: tidy up sub-section Blocklists 2017-05-13 11:50:50 +12:00
dce198c405 move 0440->1204 SSL Error Reporting #113 2017-05-13 11:25:54 +12:00
2a240b4a10 0401 extension.blocklist #113
No effective changes made, i.e extensions.blocklist.enabled is not disabled, just not enforced.
2017-05-13 10:01:27 +12:00
9249fc6ed0 0402 kinto #113 + 0400 title 2017-05-13 09:38:17 +12:00
9a42dfe73d whoops .. put back 0430
inadvertently removed 0430 when doing some rearranging
2017-05-12 17:38:17 +12:00
84ea69411b remove redundant line 2017-05-12 09:18:52 +12:00
dc15fe7db8 fixup TP/Flash blocklist URL prefs
See comment https://github.com/ghacksuserjs/ghacks-user.js/issues/103#issuecomment-300911966 - `*safebrowsing.provider.mozilla.*` is for Flash & TP ONLY (original article by francois had a *slight!!* error since fixed)

This means that 0410d was not shared by TP and SB and to clear it all up .. 0410d is moved to 0420's. 0420's also gets the flash pref 0440 moved into the 0420's.

Now it's all tidy: 0410's = google and SB, 0420's = mozilla & TP+Flash
2017-05-12 09:11:45 +12:00
6cda4ebc14 2699f: spoof navigator.hardwareConcurrency 2017-05-12 01:44:04 +12:00
d3e1fe3a1c 0410f: FF54 report mistake urls 2017-05-12 01:18:51 +12:00
9a76ccbfda weird spacing 2017-05-11 19:22:32 +12:00
b6c17138bf HTTP2 cleanup #107 2017-05-11 19:11:55 +12:00
382adf1042 Update README.md 2017-05-11 19:06:08 +12:00
870f9503c2 Add files via upload 2017-05-11 18:58:05 +12:00
b67f98141b tidy up
single warning line, not taking responsibility for people who don't read now that the js by default no longer disables these
2017-05-11 18:54:49 +12:00
2a609fc85d TP prefs=>inactive i.e js will NOT disable TP #103
Exception: I am enforcing TP in ALL windows (default is PB Mode only). I have also added the info for which block list to use in TP. Also clarified that 0440 (flash blocklist) uses prefs in 0410d. Also made flash tracking blocklist pref (0440) inactive. Now all TP and SB is allowed, only real time google binary checks and reporting is disabled.
2017-05-11 18:34:10 +12:00
2b52bf895c tidy up 2017-05-11 17:20:28 +12:00
eaaecd128c SB prefs=>inactive i.e js will NOT disable SB #103
Exceptions: real time binary checks not in local lists are still blocked. Reporting URLs still blocked.
2017-05-11 17:13:23 +12:00
78bf49adb4 1222: typo 2017-05-09 17:31:27 +02:00
f024e9bd43 0805: fix link reference
it was "see latest comments in the bug link" before the change - [2] is the bug link, [1] + [3] don't have comments
2017-05-09 16:56:03 +02:00
1b73cb828e 0201: geo.wifi.uri 2017-05-10 01:39:02 +12:00
7600d06651 0908: reinforcing that 0802=required
making it crystal clear that "When attempting to fix an entered URL" means pref 0802
2017-05-10 01:26:22 +12:00
b365a88a52 #94 emphasis on TBB for dark web 2017-05-10 01:04:46 +12:00
fa74bcaa4a add FF55 resistFingerprinting new items 2017-05-10 00:54:36 +12:00
ad56e58330 undo last change 2017-05-06 01:36:53 +12:00
66e807623b add 2698k isolate blob: URI
FF55 looks like it might be almost ready for FPI
2017-05-06 00:30:22 +12:00
553d1aedde geo.wifi.uri - use mozilla_api_key not google's
Instead of `geo.wifi.uri` using 127.0.0.1, for those who do use geo (`geo.enabled` is the master switch), enforce Mozilla's service over Google's.

- Default in stable, beta: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_API_KEY%
- Nightly defaults to mozilla (not usre of the exact string)
- I do not know if this is a telemetry thing for mozilla for non-stable or if this will roll down from nightly
2017-05-05 19:11:44 +12:00
9ffc3b0d9a add 3028 general.autoScroll=>inactive #108 2017-05-04 14:50:37 +12:00
02283833a1 remove 2032 browser.migrate.automigrate.enabled
This is a pref to hide a UI doorhanger which allows an end user to KEEP or UNDO auto-migrated "stuff" from another browser (eg from IE etc). This is part of funnelweb, which is an upcoming makeover of the "onboarding experience" (to retain users in a new FF) - this includes auto-importing their bookmarks etc from another browser in the background and THEN asking if they want to keep them or undo. We cannot block the UI to this for obvious reasons. Funnelweb also includes this like a new Tour UI, activity streams etc

https://bugzilla.mozilla.org/show_bug.cgi?id=1297479
https://bugzilla.mozilla.org/show_bug.cgi?id=1322718#c1

Tour thingy: https://www.ghacks.net/2017/03/31/firefox-photon-new-design-mockups-show-interface-and-more/
Activity Streams: https://www.ghacks.net/2017/04/09/firefox-57-photon-mockups-activity-stream-library-compact-mode-more/
2017-05-03 00:54:22 +12:00
acb22ac368 uBo is now REQUIRED
Have also modified the readme.md and will do so to the wiki implementation page
2017-05-02 15:20:46 +12:00
e1a3d681c8 Update README.md 2017-05-02 15:14:50 +12:00
fc0a045069 tiniest typo ever - != = 2017-05-02 13:52:50 +12:00
8f0569f3fd 2403 add FF versioning 2017-05-02 05:06:44 +12:00
3a39425ab2 kinto: do not block any of it in the template
there are no privacy/security issues here - by default we should not block any of these, but if end-users wish to, then it's up to them
2017-05-02 03:14:06 +12:00
49d229b90f remove sync #98 2017-05-02 01:26:59 +12:00
f5670636f6 add 2513 dom.presentation.* #92 2017-05-02 01:16:22 +12:00
9d3c7949fd add 1700s containers #91 2017-04-30 16:09:14 +12:00
4852318ece Merge pull request #95 from ghacksuserjs/earthlng-patch-1
fix syntax errors in 1110
2017-04-30 14:42:04 +12:00
6fdbcd7fae fix syntax errors in 1110 2017-04-29 14:30:45 +02:00
0bdca802eb typo 2017-04-29 11:22:17 +12:00
9b65d9788d typos 2017-04-29 11:20:38 +12:00
b3af6c1f5f syntax/typo 2017-04-28 10:17:29 +12:00
f3a0e8d88c add 0209: geo.security.allowinsecure
mozilla intend to flip the switch in 55, but the pref is available in FF54 (but no idea if its fully working) - see https://webcache.googleusercontent.com/search?q=cache:yfO0BMezyGcJ:https://groups.google.com/d/msg/mozilla.dev.platform/8BsF76gNhDE/XhsZXcueBAAJ+&cd=2&hl=en&ct=clnk&gl=nz
2017-04-28 05:43:45 +12:00
ffd89807bf 1607: network.http.referer.hideOnionSource 2017-04-28 04:44:23 +12:00
da73ca1759 privacy.firstparty.isolate.restrict_opener_access
FF54 - inactive as is FPI
2017-04-28 04:33:51 +12:00
4 changed files with 2001 additions and 1692 deletions

8
.gitattributes vendored Normal file
View File

@ -0,0 +1,8 @@
* text=auto
*.js text
*.md text
*.yml text
*.txt text
*.png binary

View File

@ -2,7 +2,7 @@
A `user.js` is a configuration file that can control hundreds of Firefox settings. For a more technical breakdown and explanation, you can read more on the [overview](https://github.com/ghacksuserjs/ghacks-user.js/wiki/1.1-Overview) wiki page.
### ![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/bullet01.png) ghacks user.js
The [ghacks user.js](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/user.js) is a template, which, as provided, aims (with [add-ons](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-B:-Firefox-Add-ons)) to provide as much privacy and enhanced security as possible, and to reduce tracking and fingerprinting as much as possible - while minimizing any loss of functionality and breakage (but it will happen).
The [ghacks user.js](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/user.js) is a template, which, as provided, aims (![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/exclamation.png) with [add-ons](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-B:-Firefox-Add-ons) <sup>1</sup> ) to provide as much privacy and enhanced security as possible, and to reduce tracking and fingerprinting as much as possible - while minimizing any loss of functionality and breakage (but it will happen).
We aim to INFORM and give you CHOICES. No one size fits all, so customize it! And not all sites have the same requirements, so use [profiles](https://github.com/ghacksuserjs/ghacks-user.js/wiki/2.3-Concurrent-Profiles) with custom versions. We won't set you wrong.
@ -11,7 +11,7 @@ INFORMATION IS POWER. So you can make informed decisions to better protect yours
* Accessible (provide information and simpler, less-technical descriptions if possible)
* Accountable (provide reputable references/sources, [test sites](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-C:-Test-Sites), dispel bad advice)
* Change trackable (yay! we're on github now, with commits)
* Compatible (including a deprecated section, [releases](https://github.com/ghacksuserjs/ghacks-user.js/releases))
* Compatible (including a [deprecated section](https://github.com/ghacksuserjs/ghacks-user.js/issues/123), [releases](https://github.com/ghacksuserjs/ghacks-user.js/releases))
* Comprehensive (including enforcing defaults and future-proofing)
* Current and up-to-date with stable (including [changelogs](https://github.com/ghacksuserjs/ghacks-user.js/search?q=label%3Achangelog&type=Issues&utf8=%E2%9C%93))
* Detailed (preference versioning, hidden preference information, explanations, and more)
@ -25,11 +25,13 @@ Everyone, experts included, should at least read the [implementation](https://gi
### ![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/bullet01.png) acknowledgments
Literally thousands of sources, references and suggestions. That said...
* Martin Brinkmann at [ghacks](https://www.ghacks.net/) <sup>1</sup>
* Martin Brinkmann at [ghacks](https://www.ghacks.net/) <sup>2</sup>
* 100% genuine super-nice all-round good guy
* The ghacks community and commentators
* Special mentions to [earthlng](https://github.com/earthlng), Tom Hawack, Just me, Conker, Rockin Jerry, Ainatar, Parker Lewis
* [12bytes](http://12bytes.org/articles/tech/firefoxgecko-configuration-guide-for-privacy-and-performance-buffs)
* The 12bytes article now uses this user.js and supplements it with an additonal JS hosted right [here](https://github.com/atomGit/Firefox-user.js) at github
<sup>1</sup> The ghacks user.js was an independent project by [Thorin-Oakenpants](https://github.com/Thorin-Oakenpants) started in early 2015 and was [first published](https://www.ghacks.net/2015/08/18/a-comprehensive-list-of-firefox-privacy-and-security-settings/) at ghacks in August 2015. It was kept up-to-date and expanded by the original author with three major updates and articles. With Martin Brinkmann's blessing, it will keep the ghacks name.
<sup>1</sup> ![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/exclamation.png) Important: We HIGHLY recommend using uBlock Origin, uMatrix and a cookie extension. Section 0400, if modified, allows Tracking Protection and Safe Browsing to be disabled. Do this at your own risk. See the [implementation](https://github.com/ghacksuserjs/ghacks-user.js/wiki/1.3-Implementation) wiki page for more.
<sup>2</sup> The ghacks user.js was an independent project by [Thorin-Oakenpants](https://github.com/Thorin-Oakenpants) started in early 2015 and was [first published](https://www.ghacks.net/2015/08/18/a-comprehensive-list-of-firefox-privacy-and-security-settings/) at ghacks in August 2015. It was kept up-to-date and expanded by the original author with three major updates and articles. With Martin Brinkmann's blessing, it will keep the ghacks name.

3675
user.js

File diff suppressed because it is too large Load Diff

BIN
wikipiki/exclamation.png Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 3.1 KiB