mirror of
https://github.com/arkenfox/user.js.git
synced 2025-04-11 18:59:28 -04:00
sanitizing
This commit is contained in:
Thorin-Oakenpants
GitHub
parent
74406f573b
commit
228c169adf
107
user.js
107
user.js
@ -82,7 +82,7 @@ user_pref("browser.aboutConfig.showWarning", false);
|
||||
user_pref("_user.js.parrot", "0100 syntax error: the parrot's dead!");
|
||||
/* 0102: set startup page [SETUP-CHROME]
|
||||
* 0=blank, 1=home, 2=last visited page, 3=resume previous session
|
||||
* [NOTE] Session Restore is cleared with history (2811), and not used in Private Browsing mode
|
||||
* [NOTE] Session Restore is cleared with history (2811+), and not used in Private Browsing mode
|
||||
* [SETTING] General>Startup>Restore previous session ***/
|
||||
user_pref("browser.startup.page", 0);
|
||||
/* 0103: set HOME+NEWWINDOW page
|
||||
@ -292,11 +292,11 @@ user_pref("browser.urlbar.yelp.featureGate", false); // [FF124+]
|
||||
/* 0807: disable urlbar clipboard suggestions [FF118+] ***/
|
||||
// user_pref("browser.urlbar.clipboard.featureGate", false);
|
||||
/* 0808: disable recent searches [FF120+]
|
||||
* [NOTE] Recent searches are cleared with history (2811)
|
||||
* [NOTE] Recent searches are cleared with history (2811+)
|
||||
* [1] https://support.mozilla.org/kb/search-suggestions-firefox ***/
|
||||
// user_pref("browser.urlbar.recentsearches.featureGate", false);
|
||||
/* 0810: disable search and form history
|
||||
* [NOTE] We also clear formdata on exit (2811)
|
||||
* [NOTE] We also clear formdata on exit (2811+)
|
||||
* [SETUP-WEB] Be aware that autocomplete form data can be read by third parties [1][2]
|
||||
* [SETTING] Privacy & Security>History>Custom Settings>Remember search and form history
|
||||
* [1] https://blog.mindedsecurity.com/2011/10/autocompleteagain.html
|
||||
@ -309,7 +309,7 @@ user_pref("browser.formfill.enable", false);
|
||||
/* 0820: disable coloring of visited links
|
||||
* [SETUP-HARDEN] Bulk rapid history sniffing was mitigated in 2010 [1][2]. Slower and more expensive
|
||||
* redraw timing attacks were largely mitigated in FF77+ [3]. Using RFP (4501) further hampers timing
|
||||
* attacks. Don't forget clearing history on exit (2811). However, social engineering [2#limits][4][5]
|
||||
* attacks. Don't forget clearing history on exit (2811+). However, social engineering [2#limits][4][5]
|
||||
* and advanced targeted timing attacks could still produce usable results
|
||||
* [1] https://developer.mozilla.org/docs/Web/CSS/Privacy_and_the_:visited_selector
|
||||
* [2] https://dbaron.org/mozilla/visited-privacy
|
||||
@ -352,7 +352,7 @@ user_pref("network.auth.subresource-http-auth-allow", 1);
|
||||
/*** [SECTION 1000]: DISK AVOIDANCE ***/
|
||||
user_pref("_user.js.parrot", "1000 syntax error: the parrot's gone to meet 'is maker!");
|
||||
/* 1001: disable disk cache
|
||||
* [NOTE] We also clear cache on exit (2811)
|
||||
* [NOTE] We also clear cache on exit (2811+)
|
||||
* [SETUP-CHROME] If you think disk cache helps perf, then feel free to override this ***/
|
||||
user_pref("browser.cache.disk.enable", false);
|
||||
/* 1002: set media cache in Private Browsing to in-memory and increase its maximum size
|
||||
@ -414,13 +414,14 @@ user_pref("security.tls.enable_0rtt_data", false);
|
||||
* [1] https://en.wikipedia.org/wiki/Ocsp ***/
|
||||
user_pref("security.OCSP.enabled", 1); // [DEFAULT: 1]
|
||||
/* 1212: set OCSP fetch failures (non-stapled, see 1211) to hard-fail
|
||||
* [SETUP-WEB] SEC_ERROR_OCSP_SERVER_ERROR
|
||||
* [SETUP-WEB] SEC_ERROR_OCSP_SERVER_ERROR | SEC_ERROR_OCSP_UNAUTHORIZED_REQUEST
|
||||
* When a CA cannot be reached to validate a cert, Firefox just continues the connection (=soft-fail)
|
||||
* Setting this pref to true tells Firefox to instead terminate the connection (=hard-fail)
|
||||
* It is pointless to soft-fail when an OCSP fetch fails: you cannot confirm a cert is still valid (it
|
||||
* could have been revoked) and/or you could be under attack (e.g. malicious blocking of OCSP servers)
|
||||
* [1] https://blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-firefox/
|
||||
* [2] https://www.imperialviolet.org/2014/04/19/revchecking.html ***/
|
||||
* [2] https://www.imperialviolet.org/2014/04/19/revchecking.html
|
||||
* [3] https://letsencrypt.org/2024/12/05/ending-ocsp/ ***/
|
||||
user_pref("security.OCSP.require", true);
|
||||
|
||||
/** CERTS / HPKP (HTTP Public Key Pinning) ***/
|
||||
@ -435,7 +436,7 @@ user_pref("security.cert_pinning.enforcement_level", 2);
|
||||
* 3 = consult CRLite and enforce "Not Revoked" results, but defer to OCSP for "Revoked" (default)
|
||||
* [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=1429800,1670985,1753071
|
||||
* [2] https://blog.mozilla.org/security/tag/crlite/ ***/
|
||||
user_pref("security.remote_settings.crlite_filters.enabled", true);
|
||||
user_pref("security.remote_settings.crlite_filters.enabled", true); // [DEFAULT: true FF137+]
|
||||
user_pref("security.pki.crlite_mode", 2);
|
||||
|
||||
/** MIXED CONTENT ***/
|
||||
@ -619,41 +620,33 @@ user_pref("browser.contentblocking.category", "strict"); // [HIDDEN PREF]
|
||||
/*** [SECTION 2800]: SHUTDOWN & SANITIZING ***/
|
||||
user_pref("_user.js.parrot", "2800 syntax error: the parrot's bleedin' demised!");
|
||||
/* 2810: enable Firefox to clear items on shutdown
|
||||
* [NOTE] In FF129+ clearing "siteSettings" on shutdown (2811), or manually via site data (2820) and
|
||||
* [NOTE] In FF129+ clearing "siteSettings" on shutdown (2811+), or manually via site data (2820+) and
|
||||
* via history (2830), will no longer remove sanitize on shutdown "cookie and site data" site exceptions (2815)
|
||||
* [SETTING] Privacy & Security>History>Custom Settings>Clear history when Firefox closes | Settings ***/
|
||||
user_pref("privacy.sanitize.sanitizeOnShutdown", true);
|
||||
|
||||
/** SANITIZE ON SHUTDOWN: IGNORES "ALLOW" SITE EXCEPTIONS | v2 migration is FF128+ ***/
|
||||
/* 2811: set/enforce what items to clear on shutdown (if 2810 is true) [SETUP-CHROME]
|
||||
* [NOTE] If "history" is true, downloads will also be cleared ***/
|
||||
user_pref("privacy.clearOnShutdown.cache", true); // [DEFAULT: true]
|
||||
user_pref("privacy.clearOnShutdown_v2.cache", true); // [FF128+] [DEFAULT: true]
|
||||
user_pref("privacy.clearOnShutdown.downloads", true); // [DEFAULT: true]
|
||||
user_pref("privacy.clearOnShutdown.formdata", true); // [DEFAULT: true]
|
||||
user_pref("privacy.clearOnShutdown.history", true); // [DEFAULT: true]
|
||||
user_pref("privacy.clearOnShutdown_v2.historyFormDataAndDownloads", true); // [FF128+] [DEFAULT: true]
|
||||
// user_pref("privacy.clearOnShutdown.siteSettings", false); // [DEFAULT: false]
|
||||
// user_pref("privacy.clearOnShutdown_v2.siteSettings", false); // [FF128+] [DEFAULT: false]
|
||||
/* 2812: set Session Restore to clear on shutdown (if 2810 is true) [FF34+]
|
||||
* [NOTE] Not needed if Session Restore is not used (0102) or it is already cleared with history (2811)
|
||||
/** SANITIZE ON SHUTDOWN: IGNORES "ALLOW" SITE EXCEPTIONS ***/
|
||||
/* 2811: set/enforce clearOnShutdown items (if 2810 is true) [SETUP-CHROME] [FF128+] ***/
|
||||
user_pref("privacy.clearOnShutdown_v2.cache", true); // [DEFAULT: true]
|
||||
user_pref("privacy.clearOnShutdown_v2.historyFormDataAndDownloads", true); // [DEFAULT: true]
|
||||
// user_pref("privacy.clearOnShutdown_v2.siteSettings", false); // [DEFAULT: false]
|
||||
/* 2812: set/enforce clearOnShutdown items [FF136+] ***/
|
||||
user_pref("privacy.clearOnShutdown_v2.browsingHistoryAndDownloads", true); // [DEFAULT: true]
|
||||
user_pref("privacy.clearOnShutdown_v2.downloads", true);
|
||||
user_pref("privacy.clearOnShutdown_v2.formdata", true);
|
||||
/* 2813: set Session Restore to clear on shutdown (if 2810 is true) [FF34+]
|
||||
* [NOTE] Not needed if Session Restore is not used (0102) or it is already cleared with history (2811+)
|
||||
* [NOTE] If true, this prevents resuming from crashes (also see 5008) ***/
|
||||
// user_pref("privacy.clearOnShutdown.openWindows", true);
|
||||
|
||||
/** SANITIZE ON SHUTDOWN: RESPECTS "ALLOW" SITE EXCEPTIONS | v2 migration is FF128+ ***/
|
||||
/* 2815: set "Cookies" and "Site Data" to clear on shutdown (if 2810 is true) [SETUP-CHROME]
|
||||
* [NOTE] Exceptions: A "cookie" permission also controls "offlineApps" (see note below). For cross-domain logins,
|
||||
* add exceptions for both sites e.g. https://www.youtube.com (site) + https://accounts.google.com (single sign on)
|
||||
* [NOTE] "offlineApps": Offline Website Data: localStorage, service worker cache, QuotaManager (IndexedDB, asm-cache)
|
||||
* [NOTE] "sessions": Active Logins (has no site exceptions): refers to HTTP Basic Authentication [1], not logins via cookies
|
||||
/** SANITIZE ON SHUTDOWN: RESPECTS "ALLOW" SITE EXCEPTIONS ***/
|
||||
/* 2815: set "Cookies" and "Site Data" to clear on shutdown (if 2810 is true) [SETUP-CHROME] [FF128+]
|
||||
* [NOTE] Exceptions: For cross-domain logins, add exceptions for both sites
|
||||
* e.g. https://www.youtube.com (site) + https://accounts.google.com (single sign on)
|
||||
* [WARNING] Be selective with what sites you "Allow", as they also disable partitioning (1767271)
|
||||
* [SETTING] to add site exceptions: Ctrl+I>Permissions>Cookies>Allow (when on the website in question)
|
||||
* [SETTING] to manage site exceptions: Options>Privacy & Security>Permissions>Settings
|
||||
* [1] https://en.wikipedia.org/wiki/Basic_access_authentication ***/
|
||||
user_pref("privacy.clearOnShutdown.cookies", true); // Cookies
|
||||
user_pref("privacy.clearOnShutdown.offlineApps", true); // Site Data
|
||||
user_pref("privacy.clearOnShutdown.sessions", true); // Active Logins [DEFAULT: true]
|
||||
user_pref("privacy.clearOnShutdown_v2.cookiesAndStorage", true); // Cookies, Site Data, Active Logins [FF128+]
|
||||
* [SETTING] to manage site exceptions: Options>Privacy & Security>Permissions>Settings ***/
|
||||
user_pref("privacy.clearOnShutdown_v2.cookiesAndStorage", true);
|
||||
|
||||
/** SANITIZE SITE DATA: IGNORES "ALLOW" SITE EXCEPTIONS ***/
|
||||
/* 2820: set manual "Clear Data" items [SETUP-CHROME] [FF128+]
|
||||
@ -663,30 +656,24 @@ user_pref("privacy.clearSiteData.cache", true);
|
||||
user_pref("privacy.clearSiteData.cookiesAndStorage", false); // keep false until it respects "allow" site exceptions
|
||||
user_pref("privacy.clearSiteData.historyFormDataAndDownloads", true);
|
||||
// user_pref("privacy.clearSiteData.siteSettings", false);
|
||||
/* 2821: set manual "Clear Data" items [FF136+] ***/
|
||||
user_pref("privacy.clearSiteData.browsingHistoryAndDownloads", true);
|
||||
user_pref("privacy.clearSiteData.formdata", true);
|
||||
|
||||
/** SANITIZE HISTORY: IGNORES "ALLOW" SITE EXCEPTIONS | clearHistory migration is FF128+ ***/
|
||||
/* 2830: set manual "Clear History" items, also via Ctrl-Shift-Del [SETUP-CHROME]
|
||||
/** SANITIZE HISTORY: IGNORES "ALLOW" SITE EXCEPTIONS ***/
|
||||
/* 2830: set manual "Clear History" items, also via Ctrl-Shift-Del [SETUP-CHROME] [FF128+]
|
||||
* Firefox remembers your last choices. This will reset them when you start Firefox
|
||||
* [NOTE] Regardless of what you set "downloads" to, as soon as the dialog
|
||||
* for "Clear Recent History" is opened, it is synced to the same as "history"
|
||||
* [SETTING] Privacy & Security>History>Custom Settings>Clear History ***/
|
||||
user_pref("privacy.cpd.cache", true); // [DEFAULT: true]
|
||||
user_pref("privacy.clearHistory.cache", true);
|
||||
user_pref("privacy.cpd.formdata", true); // [DEFAULT: true]
|
||||
user_pref("privacy.cpd.history", true); // [DEFAULT: true]
|
||||
// user_pref("privacy.cpd.downloads", true); // not used, see note above
|
||||
user_pref("privacy.clearHistory.historyFormDataAndDownloads", true);
|
||||
user_pref("privacy.cpd.cookies", false);
|
||||
user_pref("privacy.cpd.sessions", true); // [DEFAULT: true]
|
||||
user_pref("privacy.cpd.offlineApps", false); // [DEFAULT: false]
|
||||
user_pref("privacy.clearHistory.cache", true); // [DEFAULT: true]
|
||||
user_pref("privacy.clearHistory.cookiesAndStorage", false);
|
||||
// user_pref("privacy.cpd.openWindows", false); // Session Restore
|
||||
// user_pref("privacy.cpd.passwords", false);
|
||||
// user_pref("privacy.cpd.siteSettings", false);
|
||||
// user_pref("privacy.clearHistory.siteSettings", false);
|
||||
user_pref("privacy.clearHistory.historyFormDataAndDownloads", true); // [DEFAULT: true]
|
||||
// user_pref("privacy.clearHistory.siteSettings", false); // [DEFAULT: false]
|
||||
/* 2831: set manual "Clear History" items [FF136+] ***/
|
||||
user_pref("privacy.clearHistory.browsingHistoryAndDownloads", true); // [DEFAULT: true]
|
||||
user_pref("privacy.clearHistory.formdata", true);
|
||||
|
||||
/** SANITIZE MANUAL: TIMERANGE ***/
|
||||
/* 2840: set "Time range to clear" for "Clear Data" (2820) and "Clear History" (2830)
|
||||
/* 2840: set "Time range to clear" for "Clear Data" (2820+) and "Clear History" (2830+)
|
||||
* Firefox remembers your last choice. This will reset the value when you start Firefox
|
||||
* 0=everything, 1=last hour, 2=last two hours, 3=last four hours, 4=today
|
||||
* [NOTE] Values 5 (last 5 minutes) and 6 (last 24 hours) are not listed in the dropdown,
|
||||
@ -905,7 +892,7 @@ user_pref("_user.js.parrot", "5000 syntax error: the parrot's taken 'is last bow
|
||||
* [1] https://support.mozilla.org/kb/address-bar-autocomplete-firefox#w_url-autocomplete ***/
|
||||
// user_pref("browser.urlbar.autoFill", false);
|
||||
/* 5013: disable browsing and download history
|
||||
* [NOTE] We also clear history and downloads on exit (2811)
|
||||
* [NOTE] We also clear history and downloads on exit (2811+)
|
||||
* [SETTING] Privacy & Security>History>Custom Settings>Remember browsing and download history ***/
|
||||
// user_pref("places.history.enabled", false);
|
||||
/* 5014: disable Windows jumplist [WINDOWS] ***/
|
||||
@ -1030,6 +1017,20 @@ user_pref("extensions.webcompat-reporter.enabled", false); // [DEFAULT: false]
|
||||
/* 6012: enforce Quarantined Domains [FF115+]
|
||||
* [WHY] https://support.mozilla.org/kb/quarantined-domains */
|
||||
user_pref("extensions.quarantinedDomains.enabled", true); // [DEFAULT: true]
|
||||
/* 6050: prefsCleaner: reset previously active items removed from arkenfox FF128+ ***/
|
||||
// user_pref("privacy.clearOnShutdown.cache", "");
|
||||
// user_pref("privacy.clearOnShutdown.cookies", "");
|
||||
// user_pref("privacy.clearOnShutdown.downloads", "");
|
||||
// user_pref("privacy.clearOnShutdown.formdata", "");
|
||||
// user_pref("privacy.clearOnShutdown.history", "");
|
||||
// user_pref("privacy.clearOnShutdown.offlineApps", "");
|
||||
// user_pref("privacy.clearOnShutdown.sessions", "");
|
||||
// user_pref("privacy.cpd.cache", "");
|
||||
// user_pref("privacy.cpd.cookies", "");
|
||||
// user_pref("privacy.cpd.formdata", "");
|
||||
// user_pref("privacy.cpd.history", "");
|
||||
// user_pref("privacy.cpd.offlineApps", "");
|
||||
// user_pref("privacy.cpd.sessions", "");
|
||||
|
||||
/*** [SECTION 7000]: DON'T BOTHER ***/
|
||||
user_pref("_user.js.parrot", "7000 syntax error: the parrot's pushing up daisies!");
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user