Compare commits

...

121 Commits

Author SHA1 Message Date
bb2325cad2 2699: fixup 1333641 description
bug 1333641 does not disable the WebSpeech API
2017-09-11 17:03:52 +12:00
9a0edfe887 0330: another ping bites the dust 2017-09-10 01:43:02 +12:00
0277ba8102 2699: more UA spoofing stuff
move along people, nothing to see: added 1396468 which fixes a leak, it will probably be pushed to beta (FF56)
2017-09-09 16:49:26 +12:00
b907dd7e83 new terminology
https://wiki.mozilla.org/Add-ons/Terminology . The only "Web Extension" or "WebExtension" or "Add-on" references left are due to UI wording or links or pref names
2017-09-09 16:18:16 +12:00
83bb51b988 Update README.md 2017-09-09 15:35:14 +12:00
f3c87367fb 2699: spoof FF version changes 2017-09-07 14:46:31 +12:00
ffc8280c0c 9999: 2502 cleanup 2017-09-02 19:07:28 +02:00
346b945ee3 2699: limit MediaError.message 2017-09-03 00:44:23 +12:00
b86f625b02 URL changes #224 Part3
check: 49 items as per issue comment
2017-08-31 17:27:04 +12:00
431b55f47f 2404: indexedDB=>inactive, required for uBo 1.14.0+ #226
Not just uBo but many web exts are using indexedDB for storage. Users will have to deal with indexedDB persistent storage via other means.
2017-08-31 16:51:38 +12:00
4120419cd5 URL changes ##224 Part2
[Ch-ch-ch-ch-changes](https://en.wikipedia.org/wiki/Changes_(David_Bowie_song))
2017-08-30 18:17:06 +12:00
9f30adee64 URL changes #224
Thanks Theemim. Double check, so far: 27 changes, 27 items checked in Theemim's list
2017-08-30 17:07:43 +12:00
a19a3d2a35 worlds tiniest typo } -> ]
Sidenote: Not sure if this is true anymore. Since I ditched CTR and I have the hamburger menu back, it loves to annoy me with a doorhanger ALL THE F**kng TIME - certainly not 8 days grace. Seems more like 12 hours (but I swear it also comes up soon after a restart as well)
2017-08-29 17:27:18 +12:00
b6533689cf 2699: add Animation API, description fixups #222 2017-08-28 07:20:45 +12:00
ae83b83590 0517: formautofill.creditCards.enabled 2017-08-27 15:46:12 +12:00
4977d01fec 0517: add .creditCards.enabled;false (FF56+)
it's most likely covered by disabling extensions.formautofill but is nice to know for people who want to enable form-autofill but may want to disable creditCards autofill
2017-08-26 16:27:48 +02:00
eab3a0b714 2699: enable fingerprinting resistance for WebGL 2017-08-25 16:11:03 +12:00
dd25413c98 all-round -> all-around 2017-08-24 16:00:05 +02:00
3d109664bb couple of [SETTING] updates #212 2017-08-19 18:12:08 +12:00
595eaf540c 0425: passive TP 2017-08-19 13:35:27 +12:00
31b1f6624e subresource-img-cross-origin-http-auth-allow;false
https://github.com/ghacksuserjs/ghacks-user.js/issues/144#issuecomment-321980962
https://github.com/ghacksuserjs/ghacks-user.js/issues/144#issuecomment-322903835
2017-08-18 12:28:12 +02:00
e95d2afc95 1205: disable TLS1.3 0-RTT 2017-08-18 13:58:30 +12:00
996e760f8c 2699: spoof navigator platform as win64
While the change has just landed, it is being pushed with 56, same as the rest of the resistFP UA/Nav spoofing
2017-08-15 15:09:34 +12:00
6c2f3ad33a 2699: reduce screen co-ordinate FP in Touch API 2017-08-15 14:21:28 +12:00
f7dea0a1e9 2699: spoof media statistics to 0 2017-08-12 13:55:17 +12:00
911a98c675 1108: block web content in file processes 2017-08-11 08:30:52 +12:00
cda46d8342 1107: dom.ipc.processCount.file
FYI: https://bugzilla.mozilla.org/show_bug.cgi?id=1352359
2017-08-11 06:38:59 +12:00
2182bdfbe8 1840 - fixup 2017-08-10 14:24:13 +02:00
21b5c5dea7 9999: one-char-switch for ESR
thanks earthlng
2017-08-10 23:30:39 +12:00
b527e5c65e 9999 - tweak for JS-comment re-grouping for ESR 2017-08-10 23:28:03 +12:00
1755543594 1800s: move gmp update prefs to 1820 2017-08-10 22:52:59 +12:00
cf2a6fd554 fixup 2017-08-09 00:48:05 +12:00
bc58c10f34 3015: toolkit.cosmeticAnimations.enabled 2017-08-09 00:42:53 +12:00
3e3acd5897 9999 - JS-comment re-grouping for ESR users
makes it even easier for ESR users to re-enable the prefs they still need
2017-08-08 13:15:45 +02:00
6be84b8516 0500s" fix Mac directory info 2017-08-08 14:43:39 +12:00
7a05580c62 2507: remove dom.keyboardevent.dispatch_during_composition
The bulk of 2507 with `dom.keyboardevent.code.enabled` (links, description etc) is now deprecated in section 9999 under FF55+. This leaves `dom.keyboardevent.dispatch_during_composition` as a valid pref. It's default is false, so rather than leave it hanging out on it's own with no info, lets remove it. [If it ever becomes true we will pick up in diffs]
2017-08-08 06:28:36 +12:00
48511d1f9b FF55+ deprecation 2017-08-08 06:10:31 +12:00
69449f8593 Update user.js
- should check if 0360 `user_pref("browser.newtabpage.directory.source", "data:text/plain,");` is still around since the ping pref is gone.
- A bit iffy about 2507 - this spilts two prefs and there's a lot of text. Not sure if FF38+ refers to the second one. We should investigate the still active 2507 and fix that up with some info and version
2017-08-07 18:43:47 +12:00
09ccb74d69 0209: fix bugzilla ref
https://bugzilla.mozilla.org/show_bug.cgi?id=1072859 is the one for removing it in 55+
2017-08-07 10:44:20 +12:00
ebcf5bec9e 1830: add media.eme.chromium-api.enabled 2017-08-07 10:33:16 +12:00
3970c1db9e 2699: Navigator API spoof correction
See: https://bugzilla.mozilla.org/show_bug.cgi?id=1383495#c8 - the comment in code is incorrect and hopefully will be fixed. Version is always rounded DOWN
2017-08-07 10:03:32 +12:00
0861490d39 2699b: privacy.window.maxInner* fix descriptions 2017-08-07 07:33:07 +12:00
80c95cbac4 0500s: system add-ons: add Mac info 2017-08-07 05:33:26 +12:00
f18197c22e 0860+0861: disable form history => Active #186 2017-08-06 04:40:49 +12:00
98698c8e68 0201: geo.wifi.uri fixup
This description should cover everyone. No longer care if and when Mozilla push the change
2017-08-06 04:25:46 +12:00
ea713abfc6 0325: add media.wmf.vp9.enabled 2017-08-05 09:13:11 +12:00
eb532d61be 1104: now active at default 55+ 2017-08-05 09:09:44 +12:00
29ce831774 0201: remove mozilla API as it is now default 55+ 2017-08-05 09:07:09 +12:00
c7cd524f21 2504: simplify VR to master switch 2017-08-05 08:30:21 +12:00
8538685685 Merge pull request #184 from ghacksuserjs/earthlng-patch-1
3009 - remove it
2017-07-30 07:46:01 +12:00
9e573ea97f 3009 - remove it
the default value in 54 is true. It's not in my OS diff for 54 either so it's true on Linux and Mac as well. I don't think anyone would want to disable this anyway, and we have it as "enable APZ". It's only wasting space, let's remove it. class discuss xD
2017-07-29 21:24:58 +02:00
f8cdfbcd93 3029: removed - now 0515 system add-ons 2017-07-29 08:17:42 +12:00
0e2e54238c nits 2017-07-28 21:15:25 +02:00
ed2f829af9 2699: disable WebSpeech API 2017-07-29 06:18:02 +12:00
7e92f86244 fixup extensions.screenshots.system-disabled 2017-07-29 05:55:11 +12:00
66cf6b7641 2699: streamline resistFP meta references 2017-07-29 05:37:59 +12:00
dcf4ebfbad 2698: streamline FPI meta references 2017-07-29 05:28:59 +12:00
b24539cc25 Merge pull request #182 from ghacksuserjs/earthlng-patch-2
0515+0516 - screenshots already bundled with FF54
2017-07-29 05:13:24 +12:00
f52cb0e334 0515+0516: screenshots already bundled with FF54
swap 515+516 to keep FF version order, screenshot is 54 (tag 55 pref as 55, but add deprecated 54 pref to section 9999)
2017-07-29 05:10:40 +12:00
4d0c29672b Merge pull request #181 from ghacksuserjs/earthlng-patch-1
1840 - add override url + disable local fallback
2017-07-29 04:54:33 +12:00
a6fe71d24a 1840: add override url + disable local fallback
fixup: consistent data:*
2017-07-29 04:47:43 +12:00
fa778f2a87 0515+0516 - screenshots already bundled with FF54
moved screenshots up to 0515 and added the FF54 pref. I know I said we can remove that pref but the item needs to be for FF54+ regardless. To make it less confusing I added the pref back in.
2017-07-28 18:31:46 +02:00
12e25652e6 1840 PR - add hidden pref tags 2017-07-28 18:20:57 +02:00
cb5593f09e 1840 - add override url + disable local fallback
they are both in Tor 7.0.2.
With .url.override set, media.gmp-manager.url is never used (but let's keep it anyway)
source: https://dxr.mozilla.org/mozilla-central/source/toolkit/modules/GMPInstallManager.jsm#66

Since ESR52 it is not enough anymore to block pinging the GMP update/download server.
There is a local fallback that must be blocked now as well. See: https://bugzilla.mozilla.org/show_bug.cgi?id=1267495.
2017-07-28 18:15:10 +02:00
63ed779776 0513: disable Follow On Search 2017-07-28 21:06:38 +12:00
998069f440 remove 0864
default is false has been since FF32, if it ever changes (eg maybe for auto formfill?) then we will pick up on it from diffs
2017-07-28 21:02:10 +12:00
63ba049ccb 0864: syntax missing trailing ; - oophs 2017-07-27 00:03:30 +12:00
8081967187 0517: disable Form Autofill #171 2017-07-26 23:37:45 +12:00
f00cc290b4 0864: disable form @autocomplete
The default is false in FF54 (and also in FF55 beta), so there should be no downsides. Not sure how this will affect AutoFormFill system addon, and don't care since we'll disable that as well
2017-07-26 23:24:18 +12:00
8c3cb3a834 2506: add bugzilla ref + 2203: grammar for nerds 2017-07-26 20:46:52 +12:00
4397bc9137 0330: amalgamate telemetry prefs, add two new ones 2017-07-25 06:43:12 +12:00
71fd837308 0515: correct reference notation 2017-07-25 06:29:20 +12:00
bb07b0e78c remove references to specific extensions
Non e10s and non WebExtension = out the door. NoRedirect & Disable IndexedDB were not e10s, and Cookie Controller is not WE (and besides, there are lots of cookie alternatives). I think that's all of them. In fact I think the only extensions left mentioned are uBlock Origin and NoScript

Also `addon-ons` typo not picked up by Just-me-ghacks - I am bitterly disappointed.
2017-07-25 05:36:32 +12:00
8d7fceb6da misc grammar for nerds #178
Thanks Just-me-ghacks
2017-07-25 05:15:37 +12:00
aeb7846200 typo: missed one
#178
2017-07-24 06:57:33 +12:00
4fac8f71c4 misc typos #178
Thanks Just-me-ghacks
2017-07-24 06:50:55 +12:00
e4002913d9 0515: some onboarding truths 2017-07-24 03:32:57 +12:00
9499122d96 0505: system add-on update tweak 2017-07-24 03:15:58 +12:00
656b755a34 0505: system add-on URL 2017-07-23 09:01:36 +12:00
0bf6323e6f typo + fix comment
thanks @Forsaked
2017-07-22 22:25:07 +02:00
dc955fb846 renumber 0513 to 0514
in order to keep system add-ons in order of first appearance
2017-07-23 04:02:33 +12:00
0eb7a927e6 0810: disable speculative connects #175 2017-07-23 03:11:56 +12:00
989a5816b1 indexedDB #173 2017-07-22 04:14:51 +12:00
049841acb1 0518: disable Web Compatibility Reporter #171 2017-07-21 18:23:14 +12:00
16499e9611 0516: Screenshots #171 2017-07-21 18:18:47 +12:00
4e36051192 0515: disable Onboarding 2017-07-21 18:14:05 +12:00
bcf38ca80b 0512: disable Shield system add-on #171 2017-07-19 06:00:34 +12:00
71c81992f5 add 0500s system add-ons / experiments #172
new items will have their own commits
2017-07-19 05:55:03 +12:00
b6567f3de9 miscellaneous
Add missing parrot for 1100s, replace parrot for 1700 with a unique euphemism, a readme tweak (so it's technically correct), and deprecated pocket  number change in prep for new system add-on section
2017-07-19 05:35:00 +12:00
3cdc4a93d7 2699: disable geolocation API 2017-07-15 19:37:27 +12:00
34d0054d95 tweak readme section 2017-07-15 02:20:40 +12:00
7d89436f27 1003: add browser.cache.memory.capacity #169 2017-07-14 04:39:31 +12:00
54cf998f78 2300: add notifications ref 2017-07-13 20:34:34 +12:00
35fd208af9 Update README.md 2017-07-10 11:39:30 +12:00
40a62aa38d 2415b: FF55+ pointerup added to default 2017-07-10 07:33:56 +12:00
1ed4c45051 55-beta date 2017-07-10 06:47:57 +12:00
4a0074d1ab start 55 commits 2017-07-10 06:47:23 +12:00
132e0fa503 1202: aaaaaaand actually change the pref this time 2017-07-10 06:26:55 +12:00
c864c8ebb0 1202: TLS min raised to 1.2 #167 2017-07-10 06:22:52 +12:00
063b731054 nits 2017-07-10 05:52:44 +12:00
d7c282c0fa Merge pull request #168 from ghacksuserjs/earthlng-patch-1
update ghacks.net links to use https
2017-07-09 18:51:32 +02:00
b24dd123d0 update ghacks.net links to use https 2017-07-09 18:49:39 +02:00
8b0bc463c5 2001: link update
www.privacytools.io redirects to https://privacytoolsio.github.io/privacytools.io/ and in the process drops the anchor info (#webrtc)
2017-07-09 17:58:05 +02:00
4d31983e06 0420: TP fixup default values 2017-07-09 22:58:57 +12:00
e018583082 2701: cookies & 3rd party info #159 2017-07-08 05:24:33 +12:00
6348826519 1212: turn on OCSP 2017-07-08 05:12:52 +12:00
b55a986d52 1210's: OCSP add reference 2017-07-07 00:09:54 +12:00
ba78702686 1610 DNT & 0420 TP clarify conflicts #163 2017-07-06 19:03:36 +12:00
32327e15c1 2699: spoof network info API 2017-07-01 03:05:45 +12:00
d1306aee26 2699: gamepad API 2017-06-30 03:10:39 +12:00
ac77e65d82 2699: site specific zoom 2017-06-30 03:09:19 +12:00
6b7032ccaf 2699: device sensor API 2017-06-29 04:48:56 +12:00
6ef86fbde6 0209 FF version fix, 2699a hidden pref info
I removed the "(hidden pref)" info when we revamped 2699, as it will no longer be hidden. In hindsight, that info needs to stay (we haven't archived off end-of-life 54, and it's good information for backwards compatibility).
2017-06-22 05:37:47 +12:00
0176d8676c 2698: isolate data://, about: 2017-06-21 18:37:27 +12:00
da1b9054ad 2629: fix ref source 2017-06-21 18:31:00 +12:00
fba479944d spacing nit 2017-06-21 17:17:15 +12:00
791b4114c6 2699: spoof Navigator API
https://reviewboard.mozilla.org/r/147474/diff/4#index_header

I would have thought rounding DOWN to the nearest multiple of 10 would be better. Imagine being on FF61 and claiming to be 70 = might cause site issues
2017-06-21 17:15:56 +12:00
8cdc6e766c 2699 revamp #143 2017-06-20 10:47:11 +12:00
319db71e82 nits 2017-06-20 03:56:15 +12:00
907e0aaa24 1408: graphite: update & add ref 2017-06-20 03:25:31 +12:00
5e0f37c925 2698 revamp #143 & FPI=>active 2017-06-20 03:05:51 +12:00
2 changed files with 429 additions and 319 deletions

View File

@ -2,7 +2,7 @@
A `user.js` is a configuration file that can control hundreds of Firefox settings. For a more technical breakdown and explanation, you can read more on the [overview](https://github.com/ghacksuserjs/ghacks-user.js/wiki/1.1-Overview) wiki page.
### ![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/bullet01.png) ghacks user.js
The [ghacks user.js](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/user.js) is a template, which, as provided, aims (![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/exclamation.png) with [add-ons](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-B:-Firefox-Add-ons) <sup>1</sup> ) to provide as much privacy and enhanced security as possible, and to reduce tracking and fingerprinting as much as possible - while minimizing any loss of functionality and breakage (but it will happen).
The [ghacks user.js](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/user.js) is a template, which, as provided, aims (![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/exclamation.png) with [extensions](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-B:-Extensions) <sup>1</sup> ) to provide as much privacy and enhanced security as possible, and to reduce tracking and fingerprinting as much as possible - while minimizing any loss of functionality and breakage (but it will happen).
We aim to INFORM and give you CHOICES. No one size fits all, so customize it! And not all sites have the same requirements, so use [profiles](https://github.com/ghacksuserjs/ghacks-user.js/wiki/2.3-Concurrent-Profiles) with custom versions. We won't set you wrong.
@ -11,12 +11,12 @@ INFORMATION IS POWER. So you can make informed decisions to better protect yours
* Accessible (provide information and simpler, less-technical descriptions if possible)
* Accountable (provide reputable references/sources, [test sites](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-C:-Test-Sites), dispel bad advice)
* Change trackable (yay! we're on github now, with commits)
* Compatible (including a deprecated section, [releases](https://github.com/ghacksuserjs/ghacks-user.js/releases))
* Compatible (including a [deprecated section](https://github.com/ghacksuserjs/ghacks-user.js/issues/123), [releases](https://github.com/ghacksuserjs/ghacks-user.js/releases))
* Comprehensive (including enforcing defaults and future-proofing)
* Current and up-to-date with stable (including [changelogs](https://github.com/ghacksuserjs/ghacks-user.js/search?q=label%3Achangelog&type=Issues&utf8=%E2%9C%93))
* Detailed (preference versioning, hidden preference information, explanations, and more)
* Easy to use and discuss (sections, sub-sections, numbering)
* Helpful (including a [wiki](https://github.com/ghacksuserjs/ghacks-user.js/wiki) with features such as [add-ons](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-B:-Firefox-Add-ons), [user scripts](https://github.com/ghacksuserjs/ghacks-user.js/wiki/3.1-User-Scripts), [references](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-D:-References) and more)
* Helpful (including a [wiki](https://github.com/ghacksuserjs/ghacks-user.js/wiki) with features such as [extensions](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-B:-Extensions), [user scripts](https://github.com/ghacksuserjs/ghacks-user.js/wiki/3.1-User-Scripts), [references](https://github.com/ghacksuserjs/ghacks-user.js/wiki/Appendix-D:-References) and more)
* Innovative (formatting, special tags, and future plans such as branches)
### ![](https://github.com/ghacksuserjs/ghacks-user.js/blob/master/wikipiki/bullet01.png) usage
@ -26,7 +26,7 @@ Everyone, experts included, should at least read the [implementation](https://gi
Literally thousands of sources, references and suggestions. That said...
* Martin Brinkmann at [ghacks](https://www.ghacks.net/) <sup>2</sup>
* 100% genuine super-nice all-round good guy
* 100% genuine super-nice all-around good guy
* The ghacks community and commentators
* Special mentions to [earthlng](https://github.com/earthlng), Tom Hawack, Just me, Conker, Rockin Jerry, Ainatar, Parker Lewis
* [12bytes](http://12bytes.org/articles/tech/firefoxgecko-configuration-guide-for-privacy-and-performance-buffs)

740
user.js

File diff suppressed because it is too large Load Diff