1600 header edits

This commit is contained in:
Roman-Nopantski 2017-03-09 04:43:13 +13:00 committed by GitHub
parent 1ca7ef1442
commit e18a85adb8

18
user.js
View File

@ -661,11 +661,19 @@ user_pref("gfx.font_rendering.graphite.enabled", false);
/*** 1600: HEADERS / REFERERS [SETUP] /*** 1600: HEADERS / REFERERS [SETUP]
Except for DNT (Do Not Track), referers are best controlled by an extension. Except for DNT (Do Not Track), referers are best controlled by an extension.
We highly recommend that you block all referers, and then whitelist sites on a It is important to realize that it is *cross domain* referers that need
granular, per domain level. That said, it is still important to set defaults. controlling, and this is best handled by EITHER 1603 or 1604, not both.
full URI: https://example.com:8888/foo/bar.html?id=1234
scheme+host+path+port: https://example.com:8888/foo/bar.html Option 1: Recommended: Use an extension to block all referers, and then whitelist
scheme+host+port: https://example.com:8888 sites on a granular, per domain level.
Option 2: As per the settings below: Set XOriginPolicy (1603) to 1 (less breakage)
or 2 (more breakage) and leave XOriginTrimmingPolicy (1604) at default 0
Option 3: Set XOriginPolicy (1603) to default 0 and set XOriginTrimmingPolicy (1604) to 2
full URI: https://example.com:8888/foo/bar.html?id=1234
scheme+host+path+port: https://example.com:8888/foo/bar.html
scheme+host+port: https://example.com:8888
#Required reading: https://feeding.cloud.geek.nz/posts/tweaking-referrer-for-privacy-in-firefox/ #Required reading: https://feeding.cloud.geek.nz/posts/tweaking-referrer-for-privacy-in-firefox/
***/ ***/
user_pref("ghacks_user.js.parrot", "1600 syntax error: the parrot rests in peace!"); user_pref("ghacks_user.js.parrot", "1600 syntax error: the parrot rests in peace!");