...
|
...
|
@@ -133,3 +133,390 @@ user_pref("dom.event.clipboardevents.enabled", false);
|
133
|
133
|
user_pref("dom.events.asyncClipboard.dataTransfer", false);
|
134
|
134
|
user_pref("dom.events.asyncClipboard.clipboardItem", false);
|
135
|
135
|
user_pref("dom.events.asyncClipboard.readText", false);
|
|
136
|
+
|
|
137
|
+/// firefox-profilemaker
|
|
138
|
+
|
|
139
|
+//// Annoyances
|
|
140
|
+
|
|
141
|
+///// Disable firefox intro tabs on the first start
|
|
142
|
+// Disable the first run tabs with advertisements for the latest firefox
|
|
143
|
+// features.
|
|
144
|
+user_pref("browser.startup.homepage_override.mstone", "ignore");
|
|
145
|
+
|
|
146
|
+///// Disable new tab page intro
|
|
147
|
+// Disable the intro to the newtab page on the first run
|
|
148
|
+user_pref("browser.newtabpage.introShown", true);
|
|
149
|
+
|
|
150
|
+///// Pocket Reading List
|
|
151
|
+// Disable Pocket
|
|
152
|
+user_pref("extensions.pocket.enabled", false);
|
|
153
|
+user_pref("browser.newtabpage.activity-stream.section.highlights.includePocket", false);
|
|
154
|
+
|
|
155
|
+///// Disable Sponsored Top Sites
|
|
156
|
+// Firefox 83 introduced sponsored top sites, which are sponsored ads displayed
|
|
157
|
+// as suggestions in the URL bar.
|
|
158
|
+user_pref("services.sync.prefs.sync.browser.newtabpage.activity-stream.showSponsoredTopSite", false);
|
|
159
|
+
|
|
160
|
+///// Disable about:config warning.
|
|
161
|
+user_pref("browser.aboutConfig.showWarning", false);
|
|
162
|
+
|
|
163
|
+///// Do not trim URLs in navigation bar
|
|
164
|
+// By default Firefox trims many URLs (hiding the http:// prefix and trailing
|
|
165
|
+// slash /).
|
|
166
|
+user_pref("browser.urlbar.trimURLs", false);
|
|
167
|
+
|
|
168
|
+///// Disable checking if Firefox is the default browser
|
|
169
|
+user_pref("browser.shell.checkDefaultBrowser", false);
|
|
170
|
+
|
|
171
|
+///// Disable reset prompt.
|
|
172
|
+// When Firefox is not used for a while, it displays a prompt asking if the
|
|
173
|
+// user wants to reset the profile. (see Bug #955950).
|
|
174
|
+user_pref("browser.disableResetPrompt", true);
|
|
175
|
+
|
|
176
|
+///// Disable Heartbeat Userrating
|
|
177
|
+// With Firefox 37, Mozilla integrated the Heartbeat system to ask users from
|
|
178
|
+// time to time about their experience with Firefox.
|
|
179
|
+user_pref("browser.selfsupport.url", "");
|
|
180
|
+
|
|
181
|
+///// Content of the new tab page
|
|
182
|
+// Thumbnails of the most visited pages
|
|
183
|
+user_pref("browser.newtabpage.enhanced", false);
|
|
184
|
+
|
|
185
|
+///// Disable autoplay of <video> tags.
|
|
186
|
+// Per default, <video> tags are allowed to start automatically. Note: When
|
|
187
|
+// disabling autoplay, you will have to click pause and play again on some
|
|
188
|
+// video sites.
|
|
189
|
+// Allow autoplay
|
|
190
|
+user_pref("media.autoplay.enabled", true);
|
|
191
|
+user_pref("media.autoplay.default", 0);
|
|
192
|
+
|
|
193
|
+//// Browser Features
|
|
194
|
+
|
|
195
|
+///// Disable Telemetry
|
|
196
|
+// The telemetry feature sends data about the performance and responsiveness of
|
|
197
|
+// Firefox to Mozilla.
|
|
198
|
+user_pref("toolkit.telemetry.enabled", false);
|
|
199
|
+user_pref("toolkit.telemetry.archive.enabled", false);
|
|
200
|
+user_pref("toolkit.telemetry.rejected", true);
|
|
201
|
+user_pref("toolkit.telemetry.unified", false);
|
|
202
|
+user_pref("toolkit.telemetry.unifiedIsOptIn", false);
|
|
203
|
+user_pref("toolkit.telemetry.prompted", 2);
|
|
204
|
+user_pref("toolkit.telemetry.server", "");
|
|
205
|
+user_pref("toolkit.telemetry.cachedClientID", "");
|
|
206
|
+user_pref("toolkit.telemetry.newProfilePing.enabled", false);
|
|
207
|
+user_pref("toolkit.telemetry.shutdownPingSender.enabled", false);
|
|
208
|
+user_pref("toolkit.telemetry.updatePing.enabled", false);
|
|
209
|
+user_pref("toolkit.telemetry.bhrPing.enabled", false);
|
|
210
|
+user_pref("toolkit.telemetry.firstShutdownPing.enabled", false);
|
|
211
|
+user_pref("toolkit.telemetry.hybridContent.enabled", false);
|
|
212
|
+user_pref("toolkit.telemetry.reportingpolicy.firstRun", false);
|
|
213
|
+
|
|
214
|
+///// Disable health report
|
|
215
|
+// Disable sending Firefox health reports to Mozilla
|
|
216
|
+user_pref("datareporting.healthreport.uploadEnabled", false);
|
|
217
|
+user_pref("datareporting.policy.dataSubmissionEnabled", false);
|
|
218
|
+user_pref("datareporting.healthreport.service.enabled", false);
|
|
219
|
+
|
|
220
|
+///// Disable shield studies
|
|
221
|
+// Mozilla shield studies is a feature which allows mozilla to remotely install
|
|
222
|
+// experimental addons.
|
|
223
|
+user_pref("app.normandy.enabled", false);
|
|
224
|
+user_pref("app.normandy.api_url", "");
|
|
225
|
+user_pref("app.shield.optoutstudies.enabled", false);
|
|
226
|
+user_pref("extensions.shield-recipe-client.enabled", false);
|
|
227
|
+user_pref("extensions.shield-recipe-client.api_url", "");
|
|
228
|
+
|
|
229
|
+///// Disable experiments
|
|
230
|
+// Telemetry Experiments is a feature that allows Firefox to automatically
|
|
231
|
+// download and run specially-designed restartless addons based on certain
|
|
232
|
+// conditions.
|
|
233
|
+user_pref("experiments.enabled", false);
|
|
234
|
+user_pref("experiments.manifest.uri", "");
|
|
235
|
+user_pref("experiments.supported", false);
|
|
236
|
+user_pref("experiments.activeExperiment", false);
|
|
237
|
+user_pref("network.allow-experiments", false);
|
|
238
|
+
|
|
239
|
+///// Disable Crash Reports
|
|
240
|
+// The crash report may contain data that identifies you or is otherwise
|
|
241
|
+// sensitive to you.
|
|
242
|
+user_pref("breakpad.reportURL", "");
|
|
243
|
+user_pref("browser.tabs.crashReporting.sendReport", false);
|
|
244
|
+user_pref("browser.crashReports.unsubmittedCheck.enabled", false);
|
|
245
|
+user_pref("browser.crashReports.unsubmittedCheck.autoSubmit", false);
|
|
246
|
+user_pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false);
|
|
247
|
+
|
|
248
|
+///// Opt out metadata updates
|
|
249
|
+// Firefox sends data about installed addons as metadata updates, so Mozilla is
|
|
250
|
+// able to recommend you other addons.
|
|
251
|
+user_pref("extensions.getAddons.cache.enabled", false);
|
|
252
|
+
|
|
253
|
+///// Disable google safebrowsing
|
|
254
|
+// Google safebrowsing can detect phishing and malware but it also sends
|
|
255
|
+// informations to google together with an unique id called wrkey.
|
|
256
|
+user_pref("browser.safebrowsing.enabled", false);
|
|
257
|
+user_pref("browser.safebrowsing.downloads.remote.url", "");
|
|
258
|
+user_pref("browser.safebrowsing.phishing.enabled", false);
|
|
259
|
+user_pref("browser.safebrowsing.blockedURIs.enabled", false);
|
|
260
|
+user_pref("browser.safebrowsing.downloads.enabled", false);
|
|
261
|
+user_pref("browser.safebrowsing.downloads.remote.enabled", false);
|
|
262
|
+user_pref("browser.safebrowsing.appRepURL", "");
|
|
263
|
+user_pref("browser.safebrowsing.malware.enabled", false);
|
|
264
|
+
|
|
265
|
+///// Disable malware scan
|
|
266
|
+// The malware scan sends an unique identifier for each downloaded file to
|
|
267
|
+// Google.
|
|
268
|
+user_pref("browser.safebrowsing.appRepURL", "");
|
|
269
|
+user_pref("browser.safebrowsing.malware.enabled", false);
|
|
270
|
+
|
|
271
|
+///// Disable DNS over HTTPS
|
|
272
|
+// DNS over HTTP (DoH), aka. Trusted Recursive Resolver (TRR), uses a server
|
|
273
|
+// run by Cloudflare to resolve hostnames, even when the system uses another
|
|
274
|
+// (normal) DNS server. This setting disables it and sets the mode to
|
|
275
|
+// explicit opt-out (5).
|
|
276
|
+user_pref("network.trr.mode", 5);
|
|
277
|
+
|
|
278
|
+///// Disable preloading of the new tab page.
|
|
279
|
+// By default Firefox preloads the new tab page (with website thumbnails) in
|
|
280
|
+// the background before it is even opened.
|
|
281
|
+user_pref("browser.newtab.preload", false);
|
|
282
|
+
|
|
283
|
+///// Disable about:addons' Get Add-ons panel
|
|
284
|
+// The start page with recommended addons uses google analytics.
|
|
285
|
+user_pref("extensions.getAddons.showPane", false);
|
|
286
|
+user_pref("extensions.webservice.discoverURL", "");
|
|
287
|
+
|
|
288
|
+///// Disable check for captive portal.
|
|
289
|
+// By default, Firefox checks for the presence of a captive portal on every
|
|
290
|
+// startup. This involves traffic to Akamai.
|
|
291
|
+user_pref("network.captive-portal-service.enabled", false);
|
|
292
|
+
|
|
293
|
+///// Disables playback of DRM-controlled HTML5 content
|
|
294
|
+// if enabled, automatically downloads the Widevine Content Decryption Module
|
|
295
|
+// provided by Google Inc. Details
|
|
296
|
+user_pref("media.eme.enabled", false);
|
|
297
|
+
|
|
298
|
+///// Disables the Widevine Content Decryption Module provided by Google Inc.
|
|
299
|
+// Used for the playback of DRM-controlled HTML5 content Details
|
|
300
|
+user_pref("media.gmp-widevinecdm.enabled", false);
|
|
301
|
+
|
|
302
|
+///// Disable access to device sensor data
|
|
303
|
+// Disallow websites to access sensor data (ambient light, motion, device
|
|
304
|
+// orientation and proximity data).
|
|
305
|
+user_pref("device.sensors.ambientLight.enabled", false);
|
|
306
|
+user_pref("device.sensors.enabled", false);
|
|
307
|
+user_pref("device.sensors.motion.enabled", false);
|
|
308
|
+user_pref("device.sensors.orientation.enabled", false);
|
|
309
|
+user_pref("device.sensors.proximity.enabled", false);
|
|
310
|
+
|
|
311
|
+///// Disable Firefox Suggest
|
|
312
|
+// The Firefox Suggest feature allows Mozilla to provide search suggestions in
|
|
313
|
+// the US, which uses your city location and search keywords to send
|
|
314
|
+// suggestions. This is also used to serve advertisements.
|
|
315
|
+user_pref("browser.urlbar.groupLabels.enabled", false);
|
|
316
|
+user_pref("browser.urlbar.quicksuggest.enabled", false);
|
|
317
|
+
|
|
318
|
+///// Disable Javascript in PDF viewer
|
|
319
|
+// Disables executing of JavaScript in the PDF form viewer. It is possible that
|
|
320
|
+// some PDFs are not rendered correctly due to missing functions.
|
|
321
|
+// user_pref("pdfjs.enableScripting", false);
|
|
322
|
+
|
|
323
|
+//// Privacy
|
|
324
|
+
|
|
325
|
+///// Fake another Useragent
|
|
326
|
+// Using a popular useragent string avoids attracting attention i.e. with an
|
|
327
|
+// Iceweasel UA. (keep blank to use the default)
|
|
328
|
+// user_pref("general.useragent.override", "");
|
|
329
|
+
|
|
330
|
+///// Block Cookies
|
|
331
|
+// Block 3rd-Party cookies or even all cookies.
|
|
332
|
+// Block Cookies, which are not from the site you're visiting. You will rarely
|
|
333
|
+// notice that something is missing, but it hugely improves your privacy.
|
|
334
|
+user_pref("network.cookie.cookieBehavior", 1);
|
|
335
|
+
|
|
336
|
+///// Block Referer
|
|
337
|
+// Firefox tells a website, from which site you're coming (the so called
|
|
338
|
+// referer). You can find more detailed settings in this ghacks article or
|
|
339
|
+// install the RefControl extension for per domain settings.
|
|
340
|
+// Spoof referer (send the same url)
|
|
341
|
+user_pref("network.http.referer.spoofSource", true);
|
|
342
|
+
|
|
343
|
+///// Disable DOM storage
|
|
344
|
+// Disables DOM storage, which enables so called "supercookies". Some modern
|
|
345
|
+// sites will not work (i.e. missing "save" functions).
|
|
346
|
+// user_pref("dom.storage.enabled", false);
|
|
347
|
+
|
|
348
|
+///// Disable IndexedDB (breaks things)
|
|
349
|
+// IndexedDB is a way, websites can store structured data. This can be abused
|
|
350
|
+// for tracking, too. Disabling causes problems when sites depend on it like
|
|
351
|
+// Tweetdeck or Reddit and extensions that use it to store their data. Some
|
|
352
|
+// users reported crashing tabs when IndexedDB is disabled. Only disable it,
|
|
353
|
+// when you know what you're doing.
|
|
354
|
+// user_pref("dom.indexedDB.enabled", false);
|
|
355
|
+
|
|
356
|
+///// Disable the Offline Cache.
|
|
357
|
+// Websites can store up to 500 MB of data in an offline cache, to be able to
|
|
358
|
+// run even when there is no working internet connection. This could
|
|
359
|
+// possibly be used to store an user id.
|
|
360
|
+user_pref("browser.cache.offline.enable", false);
|
|
361
|
+
|
|
362
|
+///// Sessionstore Privacy
|
|
363
|
+// This preference controls when to store extra information about a session:
|
|
364
|
+// contents of forms, scrollbar positions, cookies, and POST data.
|
|
365
|
+// Never store extra session data
|
|
366
|
+user_pref("browser.sessionstore.privacy_level", 2);
|
|
367
|
+
|
|
368
|
+///// Disable Link Prefetching
|
|
369
|
+// Firefox prefetches the next site on some links, so the site is loaded even
|
|
370
|
+// when you never click.
|
|
371
|
+user_pref("network.prefetch-next", false);
|
|
372
|
+user_pref("network.dns.disablePrefetch", true);
|
|
373
|
+user_pref("network.dns.disablePrefetchFromHTTPS", true);
|
|
374
|
+user_pref("network.predictor.enabled", false);
|
|
375
|
+user_pref("network.predictor.enable-prefetch", false);
|
|
376
|
+
|
|
377
|
+///// Disable speculative website loading.
|
|
378
|
+// In some situations Firefox already starts loading web pages when the mouse
|
|
379
|
+// pointer is over a link, i. e. before you actually click. This is to speed
|
|
380
|
+// up the loading of web pages by a few milliseconds.
|
|
381
|
+user_pref("network.http.speculative-parallel-limit", 0);
|
|
382
|
+user_pref("browser.urlbar.speculativeConnect.enabled", false);
|
|
383
|
+
|
|
384
|
+///// Use a private container for new tab page thumbnails
|
|
385
|
+// Load the pages displayed on the new tab page in a private container when
|
|
386
|
+// creating thumbnails.
|
|
387
|
+user_pref("privacy.usercontext.about_newtab_segregation.enabled", true);
|
|
388
|
+
|
|
389
|
+///// Disable WebGL
|
|
390
|
+// Disables the WebGL function, to prevent fingerprinting with WebGL. Another
|
|
391
|
+// issue is, that websites can (ab)use the full power of the graphics card.
|
|
392
|
+// WebGL is part of some fingerprinting scripts used in the wild. Some
|
|
393
|
+// interactive websites will not work, which are mostly games.
|
|
394
|
+user_pref("webgl.disabled", true);
|
|
395
|
+
|
|
396
|
+///// Override graphics card vendor and model strings in the WebGL API
|
|
397
|
+// Websites can read the graphics card vendor and model using a WebGL API. This
|
|
398
|
+// setting overrides both with " " without disabling WebGL.
|
|
399
|
+user_pref("webgl.renderer-string-override", " ");
|
|
400
|
+user_pref("webgl.vendor-string-override", " ");
|
|
401
|
+
|
|
402
|
+///// Disable WebRTC
|
|
403
|
+// Disables the WebRTC function, which gives away your local ips. Some addons
|
|
404
|
+// like uBlock origin provide settings to prevent WebRTC from exposing local
|
|
405
|
+// ips without disabling WebRTC.
|
|
406
|
+user_pref("media.peerconnection.enabled", false);
|
|
407
|
+
|
|
408
|
+///// Disable the clipboardevents.
|
|
409
|
+// Disable that websites can get notifications if you copy, paste, or cut
|
|
410
|
+// something from a web page, and it lets them know which part of the page
|
|
411
|
+// had been selected.
|
|
412
|
+user_pref("dom.event.clipboardevents.enabled", false);
|
|
413
|
+
|
|
414
|
+///// Disable Search Suggestions
|
|
415
|
+// Firefox suggests search terms in the search field. This will send everything
|
|
416
|
+// typed or pasted in the search field to the chosen search engine, even
|
|
417
|
+// when you did not press enter.
|
|
418
|
+// user_pref("browser.search.suggest.enabled", false);
|
|
419
|
+
|
|
420
|
+///// Disable Search Keyword
|
|
421
|
+// When you mistype some url, Firefox starts a search even from urlbar. This
|
|
422
|
+// feature is useful for quick searching, but may harm your privacy, when
|
|
423
|
+// it's unintended.
|
|
424
|
+// user_pref("keyword.enabled", false);
|
|
425
|
+
|
|
426
|
+///// Disable Fixup URLs
|
|
427
|
+// When you type "something" in the urlbar and press enter, Firefox tries
|
|
428
|
+// "something.com", if Fixup URLs is enabled.
|
|
429
|
+// user_pref("browser.fixup.alternate.enabled", false);
|
|
430
|
+
|
|
431
|
+//// Website Tracking
|
|
432
|
+
|
|
433
|
+///// Enable Do-not-Track
|
|
434
|
+// With the do not track feature, you tell websites, that you do not want to be
|
|
435
|
+// tracked. Most websites ignore this, so you need other privacy options as
|
|
436
|
+// well.
|
|
437
|
+user_pref("privacy.donottrackheader.enabled", true);
|
|
438
|
+user_pref("privacy.donottrackheader.value", 1);
|
|
439
|
+
|
|
440
|
+///// Enable resistFingerprinting
|
|
441
|
+// The privacy.resistFingerprinting setting coming from the tor-browser hides
|
|
442
|
+// some system properties. See Bug #1308340 for more information. This
|
|
443
|
+// option may interfere with other privacy related settings, see the
|
|
444
|
+// discussion in our bug tracker.
|
|
445
|
+// user_pref("privacy.resistFingerprinting", true);
|
|
446
|
+
|
|
447
|
+///// Enable Mozilla Trackingprotection
|
|
448
|
+// Firefox has a builtin tracking protection, which blocks a list of known
|
|
449
|
+// tracking sites.
|
|
450
|
+user_pref("privacy.trackingprotection.pbmode.enabled", true);
|
|
451
|
+user_pref("privacy.trackingprotection.enabled", true);
|
|
452
|
+user_pref("privacy.trackingprotection.fingerprinting.enabled", true);
|
|
453
|
+user_pref("privacy.trackingprotection.cryptomining.enabled", true);
|
|
454
|
+
|
|
455
|
+///// Enable firstparty isolation.
|
|
456
|
+// FPI works by separating cookies on a per-domain basis. In this way tracking
|
|
457
|
+// networks won't be able to locate the same cookie on different sites. Note
|
|
458
|
+// that this might break third-party logins.
|
|
459
|
+// user_pref("privacy.firstparty.isolate", true);
|
|
460
|
+
|
|
461
|
+///// Disable Browser Pings
|
|
462
|
+// Firefox sends "ping" requests, when a website requests to be informed when a
|
|
463
|
+// user clicks on a link.
|
|
464
|
+user_pref("browser.send_pings", false);
|
|
465
|
+
|
|
466
|
+///// Disable TLS session identifiers
|
|
467
|
+// TLS allows for session identifieres, which speed up the session resumption
|
|
468
|
+// when a connection was lost. These identifiers can be used for tracking.
|
|
469
|
+user_pref("security.ssl.disable_session_identifiers", true);
|
|
470
|
+
|
|
471
|
+///// Disable Beacons
|
|
472
|
+// The Beacon feature allows websites to send tracking data after you left the
|
|
473
|
+// website.
|
|
474
|
+user_pref("beacon.enabled", false);
|
|
475
|
+
|
|
476
|
+///// Disable the Battery API
|
|
477
|
+// Firefox allows websites to read the charge level of the battery. This may be
|
|
478
|
+// used for fingerprinting.
|
|
479
|
+user_pref("dom.battery.enabled", false);
|
|
480
|
+
|
|
481
|
+///// Disable media device queries
|
|
482
|
+// Prevent websites from accessing information about webcam and microphone
|
|
483
|
+// (possible fingerprinting).
|
|
484
|
+user_pref("media.navigator.enabled", false);
|
|
485
|
+
|
|
486
|
+///// Disable form autofill
|
|
487
|
+// Automatically filled form fields are used for fingerprinting. This setting
|
|
488
|
+// disables automatic form filling until you click on the field.
|
|
489
|
+user_pref("signon.autofillForms", false);
|
|
490
|
+
|
|
491
|
+///// Disable webaudio API
|
|
492
|
+// Disable webaudio API to prevent browser fingerprinting. See Mozilla Bug
|
|
493
|
+// #1288359. This can break web apps, like Discord, which rely on the API.
|
|
494
|
+user_pref("dom.webaudio.enabled", false);
|
|
495
|
+
|
|
496
|
+///// Disable video statistics
|
|
497
|
+// Prevent websites from measuring video performance (possible fingerprinting).
|
|
498
|
+// See Mozilla Bug 654550.
|
|
499
|
+user_pref("media.video_stats.enabled", false);
|
|
500
|
+
|
|
501
|
+//// Security
|
|
502
|
+
|
|
503
|
+///// Disable automatic updates.
|
|
504
|
+// Updates are no longer installed automatically. You will still be notified
|
|
505
|
+// when an update is available and can install it. Avoids getting a new
|
|
506
|
+// (maybe addon incompatible) version.
|
|
507
|
+user_pref("app.update.auto", false);
|
|
508
|
+
|
|
509
|
+///// Disable searching for updates.
|
|
510
|
+// Disable searching for updates. This only works with the enterprise policy
|
|
511
|
+// download..
|
|
512
|
+
|
|
513
|
+///// Disable extension blocklist from mozilla.
|
|
514
|
+// The extension blocklist is used by mozilla to deactivate individual addons
|
|
515
|
+// in the browser, but as a side effect it gives mozilla the ultimate
|
|
516
|
+// control to disable any extension. Caution: When you disable the
|
|
517
|
+// blocklist, you may keep using known malware addons.
|
|
518
|
+// user_pref("extensions.blocklist.enabled", false);
|
|
519
|
+
|
|
520
|
+///// Show Punycode.
|
|
521
|
+// This helps to protect against possible character spoofing.
|
|
522
|
+// user_pref("network.IDN_show_punycode", true);
|