From a6fd4d1db1fe9b6105a8d236a2e7e5dc450135a0 Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Tue, 13 Feb 2018 07:13:59 +0000 Subject: [PATCH] 2421: baseline JIT update info --- user.js | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/user.js b/user.js index 80ddf33..46b1216 100644 --- a/user.js +++ b/user.js @@ -1133,9 +1133,11 @@ user_pref("full-screen-api.enabled", false); * [3] https://www.mozilla.org/security/advisories/mfsa2017-01/#CVE-2017-5375 * [4] https://www.mozilla.org/security/advisories/mfsa2017-05/#CVE-2017-5400 ***/ user_pref("javascript.options.asmjs", false); -/* 2421: disable Ion and baseline JIT to help harden JS against exploits such as CVE-2015-0817 +/* 2421: disable Ion and baseline JIT to help harden JS against exploits + * see: CVE-2015-0817 (FF36 1145255), CVE-2017-5375 (FF51 1325200), CVE-2017-5400 (FF52 1334933) * [WARNING] Causes the odd site issue and there is also a performance loss - * [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0817 ***/ + * [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0817 + * [2] https://rh0dev.github.io/blog/2017/the-return-of-the-jit/ ***/ // user_pref("javascript.options.ion", false); // user_pref("javascript.options.baselinejit", false); /* 2422: disable WebAssembly for now (FF52+)