From a2974e135f54eb6ca54158b6eec9c0ca74d45a75 Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Sun, 4 Oct 2020 08:10:43 +0000 Subject: [PATCH] fixup font prefs vs RFP, see #1025 - make 1401 inactive: it affects RFP's FPing - remove old warning/setup-web: we do not care about documenting breakage or FPing risks when we have a warning and they are inactive. If someone uses them, that's on them - new warnings --- user.js | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/user.js b/user.js index 7f02fdf..37c397b 100644 --- a/user.js +++ b/user.js @@ -794,9 +794,9 @@ user_pref("security.insecure_connection_text.enabled", true); // [FF60+] user_pref("_user.js.parrot", "1400 syntax error: the parrot's bereft of life!"); /* 1401: disable websites choosing fonts (0=block, 1=allow) * This can limit most (but not all) JS font enumeration which is a high entropy fingerprinting vector - * [SETUP-WEB] Can break some PDFs (missing text). Limiting to default fonts can "uglify" the web + * [WARNING] **DO NOT USE** in FF80+. RFP (4501) covers this. Non-RFP users should use RFP Alts (see 4618) * [SETTING] General>Language and Appearance>Fonts & Colors>Advanced>Allow pages to choose... ***/ -user_pref("browser.display.use_document_fonts", 0); + // user_pref("browser.display.use_document_fonts", 0); /* 1403: disable icon fonts (glyphs) and local fallback rendering * [1] https://bugzilla.mozilla.org/789788 * [2] https://gitlab.torproject.org/legacy/trac/-/issues/8455 ***/ @@ -812,9 +812,9 @@ user_pref("gfx.font_rendering.opentype_svg.enabled", false); user_pref("gfx.font_rendering.graphite.enabled", false); /* 1409: limit system font exposure to a whitelist [FF52+] [RESTART] * If the whitelist is empty, then whitelisting is considered disabled and all fonts are allowed + * [WARNING] **DO NOT USE** in FF80+. RFP (4501) covers this. Non-RFP users should use RFP Alts (see 4618) * [NOTE] in FF80 RFP restricts the whitelist to bundled and "Base Fonts" * ...and in FF81+ the whitelist **overrides** RFP's font visibility (see 4618) - * [WARNING] Creating your own probably highly-unique whitelist will raise your entropy. * [1] https://bugzilla.mozilla.org/1121643 ***/ // user_pref("font.system.whitelist", ""); // [HIDDEN PREF]