[SEC] Disables "Saved Passwords..." button to prevent passwords reveal

[META] Updates copyrights for 2026
Proposes "mail.useLocalizedFolderNames" as "non-project related"
2026-09-14 13:48:13 +02:00 · 2026-09-12 21:27:10 +02:00 · 2026-09-12 21:27:10 +02:00 · 2026-09-12 21:27:10 +02:00 · 2026-09-12 21:27:10 +02:00 · 2026-09-12 21:27:10 +02:00
6 changed files with 328 additions and 322 deletions
@@ -9,9 +9,9 @@ jobs:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
      - run: npm install eslint @eslint/js
      - run: npx eslint -c .eslint.config.mjs user.js
@@ -1,6 +1,6 @@
 MIT License
-Copyright (c) 2019-2025 HorlogeSkynet
+Copyright (c) 2019-2026 HorlogeSkynet
 Copyright (c) 2019      dngray
 Copyright (c) 2019      arkenfox [prev. ghacksuserjs]
@@ -37,6 +37,7 @@ Also be aware that this `user.js` is made specifically for Thunderbird and is on
 ### 🟦 Related Projects
 * [Dove](https://codeberg.org/celenity/Dove)
 * [Privacy Handbuch](https://www.privacy-handbuch.de/handbuch_31p.htm)
 * [Privacy Haters](http://r-36.net/scm/privacy-haters/file/README.md.html)
 * [12bytes's user-overrides.js](https://codeberg.org/12bytes/thunderbird-user.js-supplement)
@@ -4,7 +4,7 @@ TITLE prefs.js cleaner
 REM ## prefs.js cleaner for Windows
 REM ## /!\ This script is a vendored/adapted version of Arkenfox own prefsCleaner.bat /!\
 REM ## author: @claustromaniac
-REM ## version: 2.7
+REM ## version: 2.8
 CD /D "%~dp0"
@@ -16,7 +16,7 @@ ECHO:
 ECHO                 ########################################
 ECHO                 ####  prefs.js cleaner for Windows  ####
 ECHO                 ####        by claustromaniac       ####
-ECHO                 ####              v2.7              ####
+ECHO                 ####              v2.8              ####
 ECHO                 ########################################
 ECHO:
 CALL :message "This script should be run from your Thunderbird profile directory."
@@ -38,7 +38,7 @@ CALL :strlenCheck
 CALL :FFcheck
 CALL :message "Backing up prefs.js..."
-FOR /F "delims=" %%# IN ('powershell get-date -format "{yyyyMMdd_HHmmss}"') DO @SET ldt=%%#
+FOR /F "delims=" %%# IN ('powershell -command get-date -format "{yyyyMMdd_HHmmss}"') DO @SET ldt=%%#
 COPY /B /V /Y prefs.js "prefs-backup-%ldt%.js"
 CALL :message "Cleaning prefs.js..."
@@ -4,10 +4,10 @@ TITLE thunderbird user.js updater
 REM ## thunderbird user.js updater for Windows
 REM ## /!\ This script is a vendored/adapted version of Arkenfox own updater.bat /!\
 REM ## author: @claustromaniac
-REM ## version: 4.19
+REM ## version: 4.20
 REM ## instructions: https://github.com/arkenfox/user.js/wiki/5.1-Updater-[Options]#-windows
-SET v=4.19
+SET v=4.20
 VERIFY ON
 CD /D "%~dp0"
@@ -177,7 +177,7 @@ IF EXIST user.js.new (
 		IF DEFINED _singlebackup (
 			MOVE /Y user.js user.js.bak >nul
 		) ELSE (
-			FOR /F "delims=" %%# IN ('powershell get-date -format "{yyyyMMdd_HHmmss}"') DO @SET ldt=%%#
+			FOR /F "delims=" %%# IN ('powershell -command get-date -format "{yyyyMMdd_HHmmss}"') DO @SET ldt=%%#
 			MOVE /Y user.js "user-backup-!ldt!.js" >nul
 		)
 		REN user.js.new user.js
Author	SHA1	Message	Date
Samuel FORESTIER	6ead2c540e	[SEC] Disables "Saved Passwords..." button to prevent passwords reveal	2026-09-12 21:27:10 +02:00
Samuel FORESTIER	f2ecabf52d	[META] Updates copyrights for 2026	2026-09-12 21:27:10 +02:00
Samuel FORESTIER	5a6144cebd	Proposes "mail.useLocalizedFolderNames" as "non-project related"	2026-09-12 21:27:10 +02:00
Samuel FORESTIER	245d87d3b2	Adds "mailnews.display.html_sanitizer.drop_media" and "mailnews.display.html_sanitizer.drop_non_css_presentation"	2026-09-12 21:27:10 +02:00
Samuel FORESTIER	da933f9120	Enforces "mailnews.oauth.useExternalBrowser" and "mailnews.oauth.useSchemeRedirect"	2026-09-12 21:27:10 +02:00
Samuel FORESTIER	73bb8f0cea	[WIP] Applies Arkenfox v140.1..v153 migration	2026-09-12 21:27:08 +02:00
Samuel FORESTIER	78aaf2644d	chore: bumps to v140.3	2026-09-12 21:20:15 +02:00
Samuel FORESTIER	632eef3e30	sec: restores `security.mixed_content.block_active_content` (1240) This preference has been dropped in `5342ec1619` (see #15) but actually seems to still be disabled by default in Thunderbird. Let's enforce it for the time being. Closes: #72	2026-09-12 21:19:36 +02:00
Samuel FORESTIER	434cc5bc46	Allows GPGME v2 loading with `mail.openpgp.load_untested_gpgme_version` As GPGME v2 breaks ABI (11 -> 45), Thunderbird doesn't try to load libgpgme on (recent) Linux distributions, or any system where GnuPG has been updated.	2026-03-07 23:43:51 +01:00
Samuel FORESTIER	556709d1a4	Bumps to 140.2	2025-11-08 13:25:23 +01:00
Samuel FORESTIER	2d95f4e72d	Applies Arkenfox v140.0..v140.1 migration	2025-11-08 13:25:13 +01:00
Samuel FORESTIERandSamuel FORESTIER	ea99b5060f	Disables `javascript.options.native_regexp` > see Kicksecure/security-misc#301 and #67	2025-10-29 20:09:05 +01:00
Samuel FORESTIER	5bc3964b62	Prevents `calendar.timezone.local` from being remapped to `Etc/UTC` > see #69	2025-09-28 18:07:13 +02:00
Samuel FORESTIER	d7983009a8	Resets `mailnews.display.date_senders_timezone` (9124) to show sender TZ > see #69	2025-09-28 18:06:04 +02:00
Samuel FORESTIER	4527111213	Bumps to 140.1	2025-09-28 14:40:44 +02:00
Samuel FORESTIER	b73e315c59	Explicitly disables system timezone detection (9312) Starting with Thunderbird 115ESR, system timezone detection no longer relies solely on the `calendar.timezone.local` preference. > closes #69	2025-09-28 14:38:04 +02:00
Samuel FORESTIER	4bc81a5a24	Bumps to 140.0	2025-09-28 09:56:36 +02:00
Samuel FORESTIERandSamuel FORESTIER	118d98aae6	Adds Dove to "Related Projects" README section	2025-09-28 09:55:25 +02:00
Samuel FORESTIERandSamuel FORESTIER	b05eecbe43	Enables User-Agent header display in message pane (9121)	2025-09-28 09:55:25 +02:00
Samuel FORESTIERandSamuel FORESTIER	7390c00bb0	Adds `calendar.alarms.showmissed` which default value changed in ESR 140	2025-09-28 09:55:25 +02:00
Samuel FORESTIERandSamuel FORESTIER	b6d3bd1db2	Applies Arkenfox v128.0..v140.0 migration	2025-09-28 09:55:25 +02:00
Samuel FORESTIERandSamuel FORESTIER	25b909e72c	Updates preferences from TB 140 ESR mailnews.js	2025-09-28 09:55:25 +02:00
Samuel FORESTIER	3baaada14a	Bumps GitHub Actions	2025-09-05 20:09:44 +02:00