enforce DOMHighResTimeStamp API #491

flipped true in FF54: https://bugzilla.mozilla.org/show_bug.cgi?id=1026804 but unsure when the pref itself was introduced. note: other timing prefs were always in 2400's see 4602: [2411] disable resource/navigation timing / 4603: [2412] disable timing attacks
This commit is contained in:
Thorin-Oakenpants 2018-12-04 10:34:02 +00:00 committed by GitHub
parent 571be93ae0
commit 74f029566e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1208,6 +1208,9 @@ user_pref("dom.IntersectionObserver.enabled", false);
* [1] https://github.com/tc39/ecmascript_sharedmem/blob/master/TUTORIAL.md
* [2] https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/ ***/
user_pref("javascript.options.shared_memory", false);
/* 2428: enforce DOMHighResTimeStamp API
* [WARNING] Required for normalization of timestamps and any timer resolution mitigations ***/
user_pref("dom.event.highrestimestamp.enabled", true); // default: true
/*** [SECTION 2500]: HARDWARE FINGERPRINTING ***/
user_pref("_user.js.parrot", "2500 syntax error: the parrot's shuffled off 'is mortal coil!");