Enforces secure auto-configuration and fetching from Exchange (#50)

This patch enforces `mailnews.auto_config.fetchFromISP.sslOnly` and resets `mailnews.auto_config.fetchFromExchange.enabled` to allow fetching from Exchange servers when auto-configuration is enabled.

It also resets two auto-configuration URL preferences as doing so prevented users from re-enabling this feature.

Co-authored-by: Samuel FORESTIER <samuel+dev@forestier.app>

.eslint.config.mjs

@@ -0,0 +1,36 @@
+// Thunderbird User.JS ESLint configuration file
+
+import js from "@eslint/js";
+
+export default [
+    js.configs.recommended,
+    {
+        rules: {
+            // Expect only double-quoted strings.
+            quotes: ["error", "double"],
+
+            // Expect a semicolon after each statement.
+            semi: ["error", "always", {"omitLastInOneLineBlock": false}],
+
+            // As project code style, don't allow tabulation nor trailing whitespaces.
+            "no-tabs": "error",
+            "no-trailing-spaces": "error",
+
+            // Don't allow whitespace before semicolons.
+            "semi-spacing": ["error", {"before": false}],
+
+            // Don't allow irregular whitespace characters in our sheet.
+            "no-irregular-whitespace": ["error", {"skipStrings": false, "skipComments": false}],
+        },
+        languageOptions: {
+            // From <https://searchfox.org/mozilla-central/rev/c938c7416c633639a5c8ce4412be586eefb48005/modules/libpref/parser/src/lib.rs#296>
+            globals: {
+                pref: "readonly",
+                user_pref: "readonly",
+                sticky: "readonly",
+                locked: "readonly",
+                sticky_pref: "readonly",
+            },
+        },
+    },
+];

.github/FUNDING.yml

@@ -0,0 +1,4 @@
+# repo:     HorlogeSkynet/thunderbird-user.js
+# filename: FUNDING.YML
+
+liberapay: HorlogeSkynet

.github/ISSUE_TEMPLATE/bug.md

@@ -0,0 +1,38 @@
+---
+name: Bug report
+about: Create a report to help us improve Thunderbird User.JS
+title: "[BUG] "
+labels: 'bug'
+assignees: ''
+
+---
+
+**Describe the bug**
+<!-- A clear and concise description of what the bug is. -->
+
+
+**Expected behavior**
+<!-- A clear and concise description of what you expected to happen. -->
+
+
+**Screenshots**
+<!-- If applicable (i.e. graphical glitch), add screenshots to help explain your problem. -->
+
+
+**Environment**
+<!-- Please complete the following information: -->
+- Thunderbird version used (X.Y.Z) : 
+- `thunderbird user.js` template version used (X.Y or commit SHA) : 
+- Operating system and version : 
+- \[IF RELEVANT\] Graphical environment name and version : 
+
+
+**Additional context**
+<!-- If applicable, add any other context about the problem here. -->
+
+
+**Checklist**
+<!--- Put an `X` in all the boxes that apply : -->
+- [ ] I can confirm the bug is due to `thunderbird user.js` **template** and not an overridden preference nor an add-on ;
+- [ ] I have searched for `[SETUP-*]` tags and read them up ;
+- [ ] I have searched the GitHub project (issues and Wiki) for my issue.

.github/ISSUE_TEMPLATE/change_request.md

@@ -0,0 +1,30 @@
+---
+name: Change request
+about: Suggest a change for Thunderbird User.JS
+title: "[RFC] "
+labels: 'enhancement'
+assignees: ''
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+<!-- A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] -->
+
+
+**List the concerned preferences**
+<!-- A clear and concise list of the preferences you want to add/remove/change. -->
+
+
+**Describe alternatives you've considered**
+<!-- A clear and concise description of any alternative solutions or features you've considered. -->
+
+
+**Additional context**
+<!-- Add any other context (Thunderbird version, OS, etc.) or screenshots about the feature request here. -->
+
+
+**Checklist**
+<!--- Put an `X` in all the boxes that apply : -->
+- [ ] I know `thunderbird user.js` is a **template** and personal preferences should be stored elsewhere ;
+- [ ] The change I want to propose should globally improve the `usability / ( privacy + security + anti-fingerprinting )` ratio ;
+- [ ] I agree that subsequent modifications to my change scope may occur in the future.

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,28 @@
+<!--- Provide a general summary of your changes in the title above -->
+
+
+## Description
+<!--- Describe your changes in detail -->
+
+
+## Reason and / or context
+<!--- Why is this change required ? What problem does it solve ? -->
+<!--- If it fixes an open issue, please link to the issue here -->
+
+
+## How has this been tested ?
+<!--- Include details of your testing environment here -->
+
+
+## Types of changes :
+<!--- What types of changes does your code introduce ? Put an `X` in all the boxes that apply : -->
+- [ ] Bug fix (non-breaking change which fixes an issue)
+- [ ] Typo / style fix (non-breaking change which improves readability)
+- [ ] New feature (non-breaking change which adds functionality)
+- [ ] Breaking change (fix or feature that would cause existing functionality to change)
+
+## Checklist :
+<!--- Put an `X` in all the boxes that apply : -->
+- [ ] My changes looks good ;
+- [ ] I agree that my code may be modified in the future ;
+- [ ] My code follows the code style of this project (see `.eslintrc.yml`).

.github/workflows/linting.yml

@@ -0,0 +1,17 @@
+---
+name: Linting
+
+on: [push, pull_request]
+
+jobs:
+  build:
+    name: Run ESLint on user.js
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+
+      - run: npm install eslint @eslint/js
+      - run: npx eslint -c .eslint.config.mjs user.js

.travis.yml

@@ -1,8 +0,0 @@
-language: node_js
-node_js:
-  - 'node'
-
-before_script:
-  - npm install -g acorn
-script:
-  - acorn --silent user.js

LICENSE

@@ -1,8 +1,8 @@
 MIT License
 
-Copyright (c) 2019-2020 HorlogeSkynet
+Copyright (c) 2019-2024 HorlogeSkynet
 Copyright (c) 2019      dngray
-Copyright (c) 2019      ghacksuserjs
+Copyright (c) 2019      arkenfox [prev. ghacksuserjs]
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -1,32 +1,42 @@
 # Thunderbird User.JS
 
-> An ongoing comprehensive user.js template for configuring and hardening Thunderbird privacy, security and anti-fingerprinting
+> Thunderbird privacy, security and anti-fingerprinting: a comprehensive user.js template for configuration and hardening
 
-### :large_blue_diamond: user.js
+### 🟪 user.js
 
-An `user.js` is a configuration file that can control hundreds of Thunderbird settings.  
-For a more technical breakdown and explanation, you can read more on the [overview](https://github.com/HorlogeSkynet/thunderbird-user.js/wiki/1.1-Overview) Wiki page.
+An `user.js` is a configuration file that can control Thunderbird settings - for a more technical breakdown and explanation, you can read more in the [wiki](https://github.com/HorlogeSkynet/thunderbird-user.js/wiki/1.1-Overview).
 
-### :large_blue_diamond: thunderbird user.js
+### 🟩 Thunderbird user.js
 
-The Thunderbird `user.js` is a **template** which aims to provide as much privacy and enhanced security as possible.  
-It differs from the `arkenfox user.js` in that the focus is to keep Thunderbird as an **email client** and disable as many web browsing features as possible. We believe web browsing should be done in a web browser, and not an email client.
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
-- If you're using Thunderbird with Tor we suggest that you install the [TorBirdy](https://addons.thunderbird.net/addon/torbirdy) add-on. If you are using Tor, you should also consider using [Tails](https://tails.boum.org/) or [Whonix](https://www.whonix.org/).
-- If you're a **Gmail** user see [this article about OAuth2](https://github.com/HorlogeSkynet/thunderbird-user.js/wiki/3.1-OAuth2-Users).
-- For information about [extensions](https://github.com/HorlogeSkynet/thunderbird-user.js/wiki/4.1-Extensions), see the Wiki. **Calendar** users should [see this page](https://github.com/HorlogeSkynet/thunderbird-user.js/wiki/4.1.1-Calendar).
+The `thunderbird user.js` is a **template** which aims to provide as much privacy and enhanced security as possible, and to reduce tracking and fingerprinting as much as possible - while minimizing any loss of functionality and breakage (but it will happen).
 
-Also be aware that this `user.js` is made specifically for Thunderbird and has only been tested in the latest stable release.
+Everyone, experts included, should at least read the [wiki](https://github.com/HorlogeSkynet/thunderbird-user.js/wiki), as it contains important information regarding a few `user.js` settings.
 
-### :large_blue_diamond: Acknowledgments
+It differs from the `arkenfox user.js` in that the focus is to keep Thunderbird as an **e-mail client** and disable as many web browsing features as possible. We believe web browsing should be done in a web browser, and not an email client.
 
-* [tya99](https://github.com/tya99) most of the ground work and initial port from the Firefox version of [arkenfox user.js](https://github.com/arkenfox/user.js)
-* [dngray](https://github.com/dngray) continual maintenance and Wiki
-* [HorlogeSkynet](https://github.com/HorlogeSkynet) continual maintenance
+- If you're using Thunderbird (< 68) with Tor we suggest that you install the [TorBirdy](https://addons.thunderbird.net/addon/torbirdy) add-on. If you are using Tor, you should also consider using [Tails](https://tails.boum.org/) or [Whonix](https://www.whonix.org/).
+- If you're using **Gmail**, please check [this article about OAuth2](https://github.com/HorlogeSkynet/thunderbird-user.js/wiki/3.1-OAuth2-Users).
+- For information about [extensions](https://github.com/HorlogeSkynet/thunderbird-user.js/wiki/4.1-Extensions), see the Wiki.
+- **Calendar** users should [see this page](https://github.com/HorlogeSkynet/thunderbird-user.js/wiki/4.1.1-Calendar).
 
-### :large_blue_diamond: Related Projects
+Also be aware that this `user.js` is made specifically for Thunderbird and is only being tested against releases with extended support (ESR).
 
-* [CHEF-KOCH/TBCK](https://github.com/CHEF-KOCH/TBCK)
-* [Privacy Handbuch](https://www.privacy-handbuch.de/handbuch_31d.htm)
+### 🟧 Sitemap
 
-### :large_blue_diamond: [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+- [Releases](https://github.com/HorlogeSkynet/thunderbird-user.js/releases)
+- [Issues](https://github.com/HorlogeSkynet/thunderbird-user.js/issues)
+- [Wiki](https://github.com/HorlogeSkynet/thunderbird-user.js/wiki)
+
+### 🟥 Acknowledgments
+
+* @tya99 most of the ground work and initial port from the Firefox version of [arkenfox user.js](https://github.com/arkenfox/user.js)
+* [@dngray](https://github.com/dngray) continual maintenance and Wiki
+* [@HorlogeSkynet](https://github.com/HorlogeSkynet) continual maintenance
+
+### 🟦 Related Projects
+
+* [Privacy Handbuch](https://www.privacy-handbuch.de/handbuch_31p.htm)
+* [Privacy Haters](http://r-36.net/scm/privacy-haters/file/README.md.html)
+* [12bytes's user-overrides.js](https://codeberg.org/12bytes/thunderbird-user.js-supplement)