Disables javascript.options.native_regexp

> see Kicksecure/security-misc#301 and #67
Prevents calendar.timezone.local from being remapped to Etc/UTC
2025-11-04 15:25:25 +01:00 · 2025-10-29 20:09:05 +01:00 · 2025-09-28 18:07:13 +02:00 · 2025-09-28 18:06:04 +02:00 · 2025-09-28 14:40:44 +02:00 · 2025-09-28 14:38:04 +02:00
1 changed files with 10 additions and 7 deletions
--- a/user.js
+++ b/user.js
@@ -1,7 +1,7 @@
 /******
 * name: thunderbird user.js
 * date: 28 September 2025
-* version: v140.0
+* version: v140.1
 * url: https://github.com/HorlogeSkynet/thunderbird-user.js
 * license: MIT (https://github.com/HorlogeSkynet/thunderbird-user.js/blob/master/LICENSE)

@@ -967,6 +967,7 @@ user_pref("javascript.options.asmjs", false);
 * [2] https://microsoftedge.github.io/edgevr/posts/Super-Duper-Secure-Mode/ ***/
 user_pref("javascript.options.ion", false);
 user_pref("javascript.options.baselinejit", false);
+user_pref("javascript.options.native_regexp", false);
 user_pref("javascript.options.jit_trustedprincipals", true); // [FF75+] [HIDDEN PREF]
 /* 5506: disable WebAssembly [FF52+]
 * Vulnerabilities [1] have increasingly been found, including those known and fixed
@@ -1321,8 +1322,8 @@ user_pref("mail.smtpserver.default.hello_argument", "[127.0.0.1]");
 * [2] http://wiki.cacert.org/ThunderBirdAdvancedConfig
 * ***/
 user_pref("mailnews.display.original_date", false);
-/* 9124: Display the sender's Timezone when set to true ***/
-user_pref("mailnews.display.date_senders_timezone", false);
+/* 9124: Hide the sender's timezone from e-mail date and time ***/
+   // user_pref("mailnews.display.date_senders_timezone", false);
 /* 9125: Display Time Date based on Received Header
 * Thunderbird shows the time when the message was sent, according to the sender. It is possible
 * to make Thunderbird show the time when the message arrived on your mail server, based on the
@@ -1501,11 +1502,13 @@ user_pref("mail.chat.notification_info", 2);

 /** CALENDAR ***/
 /* 9312: Set calendar timezone to avoid system detection [SETUP-INSTALL]
- * By default, extensive system detection would be performed to find user's current timezone.
- * Setting this preference to "UTC" should disable it.
+ * By default, extensive system detection is performed to find current timezone (if OS supports it).
+ * Disable system detection and set timezone to UTC.
 * You may also directly set it to your timezone, i.e. "Pacific/Fakaofo"
- * [SETTING] Calendar > Calendar > Timezone ***/
-user_pref("calendar.timezone.local", "UTC");  // [DEFAULT: ""]
+ * [SETTING] Calendar > Calendar > Set timezone manually / Timezone
+ * [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1606357 ***/
+user_pref("calendar.timezone.useSystemTimezone", false);
+user_pref("calendar.timezone.local", "Etc/UTC");  // [DEFAULT: ""]
 /* 9313: Disable calendar service performing event "extraction" from email content ***/
   // user_pref("calendar.extract.service.enabled", false);  // [DEFAULT: false]
 /* 9314: Show missed reminders (disabled by default since ESR140.0)
Author	SHA1	Message	Date
Samuel FORESTIER	ea99b5060f	Disables `javascript.options.native_regexp` > see Kicksecure/security-misc#301 and #67	2025-10-29 20:09:05 +01:00
Samuel FORESTIER	5bc3964b62	Prevents `calendar.timezone.local` from being remapped to `Etc/UTC` > see #69	2025-09-28 18:07:13 +02:00
Samuel FORESTIER	d7983009a8	Resets `mailnews.display.date_senders_timezone` (9124) to show sender TZ > see #69	2025-09-28 18:06:04 +02:00
Samuel FORESTIER	4527111213	Bumps to 140.1	2025-09-28 14:40:44 +02:00
Samuel FORESTIER	b73e315c59	Explicitly disables system timezone detection (9312) Starting with Thunderbird 115ESR, system timezone detection no longer relies solely on the `calendar.timezone.local` preference. > closes #69	2025-09-28 14:38:04 +02:00