Git-Mirrors/firefox-user.js
1
0
Fork 0
mirror of https://github.com/arkenfox/user.js.git synced 2024-10-01 01:35:52 -04:00
Code Issues Packages Projects Releases Wiki Activity

HTTP2 cleanup #107

Browse Source
This commit is contained in:
Thorin-Oakenpants 2017-05-11 19:11:55 +12:00 committed by GitHub
parent 382adf1042
commit b6c17138bf
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
user.js
View File

@ -1175,11 +1175,15 @@ user_pref("devtools.webide.enabled", false);
* [1] https://trac.torproject.org/projects/tor/ticket/16222 ***/ * [1] https://trac.torproject.org/projects/tor/ticket/16222 ***/
user_pref("browser.casting.enabled", false); user_pref("browser.casting.enabled", false);
user_pref("gfx.layerscope.enabled", false); user_pref("gfx.layerscope.enabled", false);
/* 2614: disable SPDY as it can contain identifiers /* 2614: disable HTTP2 (which was based on SPDY which is now deprecated)
* [1] https://www.torproject.org/projects/torbrowser/design/#identifier-linkability (no. 10) ***/ * HTTP2 raises concerns with "multiplexing" and "server push", does nothing to enhance
* privacy, and in fact opens up a number of server-side fingerprinting opportunities
* [1] https://http2.github.io/faq/
* [2] http://blog.scottlogic.com/2014/11/07/http-2-a-quick-look.html
* [3] https://queue.acm.org/detail.cfm?id=2716278
* [4] https://github.com/ghacksuserjs/ghacks-user.js/issues/107 ***/
user_pref("network.http.spdy.enabled", false); user_pref("network.http.spdy.enabled", false);
user_pref("network.http.spdy.enabled.deps", false); user_pref("network.http.spdy.enabled.deps", false);
/* 2615: disable http2 for now as well ***/
user_pref("network.http.spdy.enabled.http2", false); user_pref("network.http.spdy.enabled.http2", false);
/* 2617: enable pdf.js as an option to preview PDFs within Firefox - EXPLOIT risk /* 2617: enable pdf.js as an option to preview PDFs within Firefox - EXPLOIT risk
* Enabling this (set to true) will change your option most likely to "Ask" or "Open with * Enabling this (set to true) will change your option most likely to "Ask" or "Open with