Browse code

Add defaults from ffprofile.com

Robert Cranston authored on 31/03/2022 11:45:34
Showing 2 changed files

... ...
@@ -133,3 +133,390 @@ user_pref("dom.event.clipboardevents.enabled", false);
133 133
 user_pref("dom.events.asyncClipboard.dataTransfer", false);
134 134
 user_pref("dom.events.asyncClipboard.clipboardItem", false);
135 135
 user_pref("dom.events.asyncClipboard.readText", false);
136
+
137
+/// firefox-profilemaker
138
+
139
+//// Annoyances
140
+
141
+///// Disable firefox intro tabs on the first start
142
+// Disable the first run tabs with advertisements for the latest firefox
143
+// features.
144
+user_pref("browser.startup.homepage_override.mstone", "ignore");
145
+
146
+///// Disable new tab page intro
147
+// Disable the intro to the newtab page on the first run
148
+user_pref("browser.newtabpage.introShown", true);
149
+
150
+///// Pocket Reading List
151
+// Disable Pocket
152
+user_pref("extensions.pocket.enabled", false);
153
+user_pref("browser.newtabpage.activity-stream.section.highlights.includePocket", false);
154
+
155
+///// Disable Sponsored Top Sites
156
+// Firefox 83 introduced sponsored top sites, which are sponsored ads displayed
157
+// as suggestions in the URL bar.
158
+user_pref("services.sync.prefs.sync.browser.newtabpage.activity-stream.showSponsoredTopSite", false);
159
+
160
+///// Disable about:config warning.
161
+user_pref("browser.aboutConfig.showWarning", false);
162
+
163
+///// Do not trim URLs in navigation bar
164
+// By default Firefox trims many URLs (hiding the http:// prefix and trailing
165
+// slash /).
166
+user_pref("browser.urlbar.trimURLs", false);
167
+
168
+///// Disable checking if Firefox is the default browser
169
+user_pref("browser.shell.checkDefaultBrowser", false);
170
+
171
+///// Disable reset prompt.
172
+// When Firefox is not used for a while, it displays a prompt asking if the
173
+// user wants to reset the profile. (see Bug #955950).
174
+user_pref("browser.disableResetPrompt", true);
175
+
176
+///// Disable Heartbeat Userrating
177
+// With Firefox 37, Mozilla integrated the Heartbeat system to ask users from
178
+// time to time about their experience with Firefox.
179
+user_pref("browser.selfsupport.url", "");
180
+
181
+///// Content of the new tab page
182
+// Thumbnails of the most visited pages
183
+user_pref("browser.newtabpage.enhanced", false);
184
+
185
+///// Disable autoplay of <video> tags.
186
+// Per default, <video> tags are allowed to start automatically. Note: When
187
+// disabling autoplay, you will have to click pause and play again on some
188
+// video sites.
189
+// Allow autoplay
190
+user_pref("media.autoplay.enabled", true);
191
+user_pref("media.autoplay.default", 0);
192
+
193
+//// Browser Features
194
+
195
+///// Disable Telemetry
196
+// The telemetry feature sends data about the performance and responsiveness of
197
+// Firefox to Mozilla.
198
+user_pref("toolkit.telemetry.enabled", false);
199
+user_pref("toolkit.telemetry.archive.enabled", false);
200
+user_pref("toolkit.telemetry.rejected", true);
201
+user_pref("toolkit.telemetry.unified", false);
202
+user_pref("toolkit.telemetry.unifiedIsOptIn", false);
203
+user_pref("toolkit.telemetry.prompted", 2);
204
+user_pref("toolkit.telemetry.server", "");
205
+user_pref("toolkit.telemetry.cachedClientID", "");
206
+user_pref("toolkit.telemetry.newProfilePing.enabled", false);
207
+user_pref("toolkit.telemetry.shutdownPingSender.enabled", false);
208
+user_pref("toolkit.telemetry.updatePing.enabled", false);
209
+user_pref("toolkit.telemetry.bhrPing.enabled", false);
210
+user_pref("toolkit.telemetry.firstShutdownPing.enabled", false);
211
+user_pref("toolkit.telemetry.hybridContent.enabled", false);
212
+user_pref("toolkit.telemetry.reportingpolicy.firstRun", false);
213
+
214
+///// Disable health report
215
+// Disable sending Firefox health reports to Mozilla
216
+user_pref("datareporting.healthreport.uploadEnabled", false);
217
+user_pref("datareporting.policy.dataSubmissionEnabled", false);
218
+user_pref("datareporting.healthreport.service.enabled", false);
219
+
220
+///// Disable shield studies
221
+// Mozilla shield studies is a feature which allows mozilla to remotely install
222
+// experimental addons.
223
+user_pref("app.normandy.enabled", false);
224
+user_pref("app.normandy.api_url", "");
225
+user_pref("app.shield.optoutstudies.enabled", false);
226
+user_pref("extensions.shield-recipe-client.enabled", false);
227
+user_pref("extensions.shield-recipe-client.api_url", "");
228
+
229
+///// Disable experiments
230
+// Telemetry Experiments is a feature that allows Firefox to automatically
231
+// download and run specially-designed restartless addons based on certain
232
+// conditions.
233
+user_pref("experiments.enabled", false);
234
+user_pref("experiments.manifest.uri", "");
235
+user_pref("experiments.supported", false);
236
+user_pref("experiments.activeExperiment", false);
237
+user_pref("network.allow-experiments", false);
238
+
239
+///// Disable Crash Reports
240
+// The crash report may contain data that identifies you or is otherwise
241
+// sensitive to you.
242
+user_pref("breakpad.reportURL", "");
243
+user_pref("browser.tabs.crashReporting.sendReport", false);
244
+user_pref("browser.crashReports.unsubmittedCheck.enabled", false);
245
+user_pref("browser.crashReports.unsubmittedCheck.autoSubmit", false);
246
+user_pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false);
247
+
248
+///// Opt out metadata updates
249
+// Firefox sends data about installed addons as metadata updates, so Mozilla is
250
+// able to recommend you other addons.
251
+user_pref("extensions.getAddons.cache.enabled", false);
252
+
253
+///// Disable google safebrowsing
254
+// Google safebrowsing can detect phishing and malware but it also sends
255
+// informations to google together with an unique id called wrkey.
256
+user_pref("browser.safebrowsing.enabled", false);
257
+user_pref("browser.safebrowsing.downloads.remote.url", "");
258
+user_pref("browser.safebrowsing.phishing.enabled", false);
259
+user_pref("browser.safebrowsing.blockedURIs.enabled", false);
260
+user_pref("browser.safebrowsing.downloads.enabled", false);
261
+user_pref("browser.safebrowsing.downloads.remote.enabled", false);
262
+user_pref("browser.safebrowsing.appRepURL", "");
263
+user_pref("browser.safebrowsing.malware.enabled", false);
264
+
265
+///// Disable malware scan
266
+// The malware scan sends an unique identifier for each downloaded file to
267
+// Google.
268
+user_pref("browser.safebrowsing.appRepURL", "");
269
+user_pref("browser.safebrowsing.malware.enabled", false);
270
+
271
+///// Disable DNS over HTTPS
272
+// DNS over HTTP (DoH), aka. Trusted Recursive Resolver (TRR), uses a server
273
+// run by Cloudflare to resolve hostnames, even when the system uses another
274
+// (normal) DNS server. This setting disables it and sets the mode to
275
+// explicit opt-out (5).
276
+user_pref("network.trr.mode", 5);
277
+
278
+///// Disable preloading of the new tab page.
279
+// By default Firefox preloads the new tab page (with website thumbnails) in
280
+// the background before it is even opened.
281
+user_pref("browser.newtab.preload", false);
282
+
283
+///// Disable about:addons' Get Add-ons panel
284
+// The start page with recommended addons uses google analytics.
285
+user_pref("extensions.getAddons.showPane", false);
286
+user_pref("extensions.webservice.discoverURL", "");
287
+
288
+///// Disable check for captive portal.
289
+// By default, Firefox checks for the presence of a captive portal on every
290
+// startup.  This involves traffic to Akamai.
291
+user_pref("network.captive-portal-service.enabled", false);
292
+
293
+///// Disables playback of DRM-controlled HTML5 content
294
+// if enabled, automatically downloads the Widevine Content Decryption Module
295
+// provided by Google Inc. Details
296
+user_pref("media.eme.enabled", false);
297
+
298
+///// Disables the Widevine Content Decryption Module provided by Google Inc.
299
+// Used for the playback of DRM-controlled HTML5 content Details
300
+user_pref("media.gmp-widevinecdm.enabled", false);
301
+
302
+///// Disable access to device sensor data
303
+// Disallow websites to access sensor data (ambient light, motion, device
304
+// orientation and proximity data).
305
+user_pref("device.sensors.ambientLight.enabled", false);
306
+user_pref("device.sensors.enabled", false);
307
+user_pref("device.sensors.motion.enabled", false);
308
+user_pref("device.sensors.orientation.enabled", false);
309
+user_pref("device.sensors.proximity.enabled", false);
310
+
311
+///// Disable Firefox Suggest
312
+// The Firefox Suggest feature allows Mozilla to provide search suggestions in
313
+// the US, which uses your city location and search keywords to send
314
+// suggestions. This is also used to serve advertisements.
315
+user_pref("browser.urlbar.groupLabels.enabled", false);
316
+user_pref("browser.urlbar.quicksuggest.enabled", false);
317
+
318
+///// Disable Javascript in PDF viewer
319
+// Disables executing of JavaScript in the PDF form viewer. It is possible that
320
+// some PDFs are not rendered correctly due to missing functions.
321
+// user_pref("pdfjs.enableScripting", false);
322
+
323
+//// Privacy
324
+
325
+///// Fake another Useragent
326
+// Using a popular useragent string avoids attracting attention i.e. with an
327
+// Iceweasel UA. (keep blank to use the default)
328
+// user_pref("general.useragent.override", "");
329
+
330
+///// Block Cookies
331
+// Block 3rd-Party cookies or even all cookies.
332
+// Block Cookies, which are not from the site you're visiting. You will rarely
333
+// notice that something is missing, but it hugely improves your privacy.
334
+user_pref("network.cookie.cookieBehavior", 1);
335
+
336
+///// Block Referer
337
+// Firefox tells a website, from which site you're coming (the so called
338
+// referer). You can find more detailed settings in this ghacks article or
339
+// install the RefControl extension for per domain settings.
340
+// Spoof referer (send the same url)
341
+user_pref("network.http.referer.spoofSource", true);
342
+
343
+///// Disable DOM storage
344
+// Disables DOM storage, which enables so called "supercookies". Some modern
345
+// sites will not work (i.e. missing "save" functions).
346
+// user_pref("dom.storage.enabled", false);
347
+
348
+///// Disable IndexedDB (breaks things)
349
+// IndexedDB is a way, websites can store structured data. This can be abused
350
+// for tracking, too. Disabling causes problems when sites depend on it like
351
+// Tweetdeck or Reddit and extensions that use it to store their data. Some
352
+// users reported crashing tabs when IndexedDB is disabled. Only disable it,
353
+// when you know what you're doing.
354
+// user_pref("dom.indexedDB.enabled", false);
355
+
356
+///// Disable the Offline Cache.
357
+// Websites can store up to 500 MB of data in an offline cache, to be able to
358
+// run even when there is no working internet connection. This could
359
+// possibly be used to store an user id.
360
+user_pref("browser.cache.offline.enable", false);
361
+
362
+///// Sessionstore Privacy
363
+// This preference controls when to store extra information about a session:
364
+// contents of forms, scrollbar positions, cookies, and POST data.
365
+// Never store extra session data
366
+user_pref("browser.sessionstore.privacy_level", 2);
367
+
368
+///// Disable Link Prefetching
369
+// Firefox prefetches the next site on some links, so the site is loaded even
370
+// when you never click.
371
+user_pref("network.prefetch-next", false);
372
+user_pref("network.dns.disablePrefetch", true);
373
+user_pref("network.dns.disablePrefetchFromHTTPS", true);
374
+user_pref("network.predictor.enabled", false);
375
+user_pref("network.predictor.enable-prefetch", false);
376
+
377
+///// Disable speculative website loading.
378
+// In some situations Firefox already starts loading web pages when the mouse
379
+// pointer is over a link, i. e. before you actually click. This is to speed
380
+// up the loading of web pages by a few milliseconds.
381
+user_pref("network.http.speculative-parallel-limit", 0);
382
+user_pref("browser.urlbar.speculativeConnect.enabled", false);
383
+
384
+///// Use a private container for new tab page thumbnails
385
+// Load the pages displayed on the new tab page in a private container when
386
+// creating thumbnails.
387
+user_pref("privacy.usercontext.about_newtab_segregation.enabled", true);
388
+
389
+///// Disable WebGL
390
+// Disables the WebGL function, to prevent fingerprinting with WebGL. Another
391
+// issue is, that websites can (ab)use the full power of the graphics card.
392
+// WebGL is part of some fingerprinting scripts used in the wild. Some
393
+// interactive websites will not work, which are mostly games.
394
+user_pref("webgl.disabled", true);
395
+
396
+///// Override graphics card vendor and model strings in the WebGL API
397
+// Websites can read the graphics card vendor and model using a WebGL API. This
398
+// setting overrides both with " " without disabling WebGL.
399
+user_pref("webgl.renderer-string-override", " ");
400
+user_pref("webgl.vendor-string-override", " ");
401
+
402
+///// Disable WebRTC
403
+// Disables the WebRTC function, which gives away your local ips. Some addons
404
+// like uBlock origin provide settings to prevent WebRTC from exposing local
405
+// ips without disabling WebRTC.
406
+user_pref("media.peerconnection.enabled", false);
407
+
408
+///// Disable the clipboardevents.
409
+// Disable that websites can get notifications if you copy, paste, or cut
410
+// something from a web page, and it lets them know which part of the page
411
+// had been selected.
412
+user_pref("dom.event.clipboardevents.enabled", false);
413
+
414
+///// Disable Search Suggestions
415
+// Firefox suggests search terms in the search field. This will send everything
416
+// typed or pasted in the search field to the chosen search engine, even
417
+// when you did not press enter.
418
+// user_pref("browser.search.suggest.enabled", false);
419
+
420
+///// Disable Search Keyword
421
+// When you mistype some url, Firefox starts a search even from urlbar. This
422
+// feature is useful for quick searching, but may harm your privacy, when
423
+// it's unintended.
424
+// user_pref("keyword.enabled", false);
425
+
426
+///// Disable Fixup URLs
427
+// When you type "something" in the urlbar and press enter, Firefox tries
428
+// "something.com", if Fixup URLs is enabled.
429
+// user_pref("browser.fixup.alternate.enabled", false);
430
+
431
+//// Website Tracking
432
+
433
+///// Enable Do-not-Track
434
+// With the do not track feature, you tell websites, that you do not want to be
435
+// tracked. Most websites ignore this, so you need other privacy options as
436
+// well.
437
+user_pref("privacy.donottrackheader.enabled", true);
438
+user_pref("privacy.donottrackheader.value", 1);
439
+
440
+///// Enable resistFingerprinting
441
+// The privacy.resistFingerprinting setting coming from the tor-browser hides
442
+// some system properties. See Bug #1308340 for more information. This
443
+// option may interfere with other privacy related settings, see the
444
+// discussion in our bug tracker.
445
+// user_pref("privacy.resistFingerprinting", true);
446
+
447
+///// Enable Mozilla Trackingprotection
448
+// Firefox has a builtin tracking protection, which blocks a list of known
449
+// tracking sites.
450
+user_pref("privacy.trackingprotection.pbmode.enabled", true);
451
+user_pref("privacy.trackingprotection.enabled", true);
452
+user_pref("privacy.trackingprotection.fingerprinting.enabled", true);
453
+user_pref("privacy.trackingprotection.cryptomining.enabled", true);
454
+
455
+///// Enable firstparty isolation.
456
+// FPI works by separating cookies on a per-domain basis. In this way tracking
457
+// networks won't be able to locate the same cookie on different sites. Note
458
+// that this might break third-party logins.
459
+// user_pref("privacy.firstparty.isolate", true);
460
+
461
+///// Disable Browser Pings
462
+// Firefox sends "ping" requests, when a website requests to be informed when a
463
+// user clicks on a link.
464
+user_pref("browser.send_pings", false);
465
+
466
+///// Disable TLS session identifiers
467
+// TLS allows for session identifieres, which speed up the session resumption
468
+// when a connection was lost. These identifiers can be used for tracking.
469
+user_pref("security.ssl.disable_session_identifiers", true);
470
+
471
+///// Disable Beacons
472
+// The Beacon feature allows websites to send tracking data after you left the
473
+// website.
474
+user_pref("beacon.enabled", false);
475
+
476
+///// Disable the Battery API
477
+// Firefox allows websites to read the charge level of the battery. This may be
478
+// used for fingerprinting.
479
+user_pref("dom.battery.enabled", false);
480
+
481
+///// Disable media device queries
482
+// Prevent websites from accessing information about webcam and microphone
483
+// (possible fingerprinting).
484
+user_pref("media.navigator.enabled", false);
485
+
486
+///// Disable form autofill
487
+// Automatically filled form fields are used for fingerprinting. This setting
488
+// disables automatic form filling until you click on the field.
489
+user_pref("signon.autofillForms", false);
490
+
491
+///// Disable webaudio API
492
+// Disable webaudio API to prevent browser fingerprinting. See Mozilla Bug
493
+// #1288359. This can break web apps, like Discord, which rely on the API.
494
+user_pref("dom.webaudio.enabled", false);
495
+
496
+///// Disable video statistics
497
+// Prevent websites from measuring video performance (possible fingerprinting).
498
+// See Mozilla Bug 654550.
499
+user_pref("media.video_stats.enabled", false);
500
+
501
+//// Security
502
+
503
+///// Disable automatic updates.
504
+// Updates are no longer installed automatically. You will still be notified
505
+// when an update is available and can install it. Avoids getting a new
506
+// (maybe addon incompatible) version.
507
+user_pref("app.update.auto", false);
508
+
509
+///// Disable searching for updates.
510
+// Disable searching for updates. This only works with the enterprise policy
511
+// download..
512
+
513
+///// Disable extension blocklist from mozilla.
514
+// The extension blocklist is used by mozilla to deactivate individual addons
515
+// in the browser, but as a side effect it gives mozilla the ultimate
516
+// control to disable any extension. Caution: When you disable the
517
+// blocklist, you may keep using known malware addons.
518
+// user_pref("extensions.blocklist.enabled", false);
519
+
520
+///// Show Punycode.
521
+// This helps to protect against possible character spoofing.
522
+// user_pref("network.IDN_show_punycode", true);
... ...
@@ -2,9 +2,12 @@
2 2
 
3 3
 [Dotfile][]s for [Firefox][].
4 4
 
5
+Uses [`firefox-profilemaker-dump`].
6
+
5 7
 [`dotfiles-firefox`]: https://git.rcrnstn.net/rcrnstn/dotfiles-firefox
6 8
 [dotfile]: https://en.wikipedia.org/wiki/Hidden_file_and_hidden_directory#Unix_and_Unix-like_environments
7 9
 [Firefox]: https://en.wikipedia.org/wiki/Firefox
10
+[`firefox-profilemaker-dump`]: https://git.rcrnstn.net/rcrnstn/firefox-profilemaker-dump
8 11
 
9 12
 ## License
10 13