Browse code

Tweak defaults from ffprofile.com

Robert Cranston authored on 28/03/2022 10:25:30
Showing 1 changed files

... ...
@@ -179,16 +179,16 @@ user_pref("browser.disableResetPrompt", true);
179 179
 user_pref("browser.selfsupport.url", "");
180 180
 
181 181
 ///// Content of the new tab page
182
-// Thumbnails of the most visited pages
182
+// Empty
183 183
 user_pref("browser.newtabpage.enhanced", false);
184
+user_pref("browser.newtabpage.enabled", false);
184 185
 
185 186
 ///// Disable autoplay of <video> tags.
186 187
 // Per default, <video> tags are allowed to start automatically. Note: When
187 188
 // disabling autoplay, you will have to click pause and play again on some
188 189
 // video sites.
189
-// Allow autoplay
190
-user_pref("media.autoplay.enabled", true);
191
-user_pref("media.autoplay.default", 0);
190
+// Prompt me
191
+user_pref("media.autoplay.default", 2);
192 192
 
193 193
 //// Browser Features
194 194
 
... ...
@@ -273,7 +273,7 @@ user_pref("browser.safebrowsing.malware.enabled", false);
273 273
 // run by Cloudflare to resolve hostnames, even when the system uses another
274 274
 // (normal) DNS server. This setting disables it and sets the mode to
275 275
 // explicit opt-out (5).
276
-user_pref("network.trr.mode", 5);
276
+// user_pref("network.trr.mode", 5);
277 277
 
278 278
 ///// Disable preloading of the new tab page.
279 279
 // By default Firefox preloads the new tab page (with website thumbnails) in
... ...
@@ -293,11 +293,11 @@ user_pref("network.captive-portal-service.enabled", false);
293 293
 ///// Disables playback of DRM-controlled HTML5 content
294 294
 // if enabled, automatically downloads the Widevine Content Decryption Module
295 295
 // provided by Google Inc. Details
296
-user_pref("media.eme.enabled", false);
296
+user_pref("media.eme.enabled", true);
297 297
 
298 298
 ///// Disables the Widevine Content Decryption Module provided by Google Inc.
299 299
 // Used for the playback of DRM-controlled HTML5 content Details
300
-user_pref("media.gmp-widevinecdm.enabled", false);
300
+// user_pref("media.gmp-widevinecdm.enabled", false);
301 301
 
302 302
 ///// Disable access to device sensor data
303 303
 // Disallow websites to access sensor data (ambient light, motion, device
... ...
@@ -337,8 +337,8 @@ user_pref("network.cookie.cookieBehavior", 1);
337 337
 // Firefox tells a website, from which site you're coming (the so called
338 338
 // referer). You can find more detailed settings in this ghacks article or
339 339
 // install the RefControl extension for per domain settings.
340
-// Spoof referer (send the same url)
341
-user_pref("network.http.referer.spoofSource", true);
340
+// Send referer only on the same domain
341
+user_pref("network.http.referer.XOriginPolicy", 2);
342 342
 
343 343
 ///// Disable DOM storage
344 344
 // Disables DOM storage, which enables so called "supercookies". Some modern
... ...
@@ -363,7 +363,7 @@ user_pref("browser.cache.offline.enable", false);
363 363
 // This preference controls when to store extra information about a session:
364 364
 // contents of forms, scrollbar positions, cookies, and POST data.
365 365
 // Never store extra session data
366
-user_pref("browser.sessionstore.privacy_level", 2);
366
+user_pref("browser.sessionstore.privacy_level", 0);
367 367
 
368 368
 ///// Disable Link Prefetching
369 369
 // Firefox prefetches the next site on some links, so the site is loaded even
... ...
@@ -391,7 +391,7 @@ user_pref("privacy.usercontext.about_newtab_segregation.enabled", true);
391 391
 // issue is, that websites can (ab)use the full power of the graphics card.
392 392
 // WebGL is part of some fingerprinting scripts used in the wild. Some
393 393
 // interactive websites will not work, which are mostly games.
394
-user_pref("webgl.disabled", true);
394
+// user_pref("webgl.disabled", true);
395 395
 
396 396
 ///// Override graphics card vendor and model strings in the WebGL API
397 397
 // Websites can read the graphics card vendor and model using a WebGL API. This
... ...
@@ -403,7 +403,7 @@ user_pref("webgl.vendor-string-override", " ");
403 403
 // Disables the WebRTC function, which gives away your local ips. Some addons
404 404
 // like uBlock origin provide settings to prevent WebRTC from exposing local
405 405
 // ips without disabling WebRTC.
406
-user_pref("media.peerconnection.enabled", false);
406
+// user_pref("media.peerconnection.enabled", false);
407 407
 
408 408
 ///// Disable the clipboardevents.
409 409
 // Disable that websites can get notifications if you copy, paste, or cut
... ...
@@ -426,7 +426,7 @@ user_pref("dom.event.clipboardevents.enabled", false);
426 426
 ///// Disable Fixup URLs
427 427
 // When you type "something" in the urlbar and press enter, Firefox tries
428 428
 // "something.com", if Fixup URLs is enabled.
429
-// user_pref("browser.fixup.alternate.enabled", false);
429
+user_pref("browser.fixup.alternate.enabled", false);
430 430
 
431 431
 //// Website Tracking
432 432
 
... ...
@@ -456,7 +456,7 @@ user_pref("privacy.trackingprotection.cryptomining.enabled", true);
456 456
 // FPI works by separating cookies on a per-domain basis. In this way tracking
457 457
 // networks won't be able to locate the same cookie on different sites. Note
458 458
 // that this might break third-party logins.
459
-// user_pref("privacy.firstparty.isolate", true);
459
+user_pref("privacy.firstparty.isolate", true);
460 460
 
461 461
 ///// Disable Browser Pings
462 462
 // Firefox sends "ping" requests, when a website requests to be informed when a
... ...
@@ -481,7 +481,7 @@ user_pref("dom.battery.enabled", false);
481 481
 ///// Disable media device queries
482 482
 // Prevent websites from accessing information about webcam and microphone
483 483
 // (possible fingerprinting).
484
-user_pref("media.navigator.enabled", false);
484
+// user_pref("media.navigator.enabled", false);
485 485
 
486 486
 ///// Disable form autofill
487 487
 // Automatically filled form fields are used for fingerprinting. This setting
... ...
@@ -491,7 +491,7 @@ user_pref("signon.autofillForms", false);
491 491
 ///// Disable webaudio API
492 492
 // Disable webaudio API to prevent browser fingerprinting. See Mozilla Bug
493 493
 // #1288359. This can break web apps, like Discord, which rely on the API.
494
-user_pref("dom.webaudio.enabled", false);
494
+// user_pref("dom.webaudio.enabled", false);
495 495
 
496 496
 ///// Disable video statistics
497 497
 // Prevent websites from measuring video performance (possible fingerprinting).
... ...
@@ -504,7 +504,7 @@ user_pref("media.video_stats.enabled", false);
504 504
 // Updates are no longer installed automatically. You will still be notified
505 505
 // when an update is available and can install it. Avoids getting a new
506 506
 // (maybe addon incompatible) version.
507
-user_pref("app.update.auto", false);
507
+// user_pref("app.update.auto", false);
508 508
 
509 509
 ///// Disable searching for updates.
510 510
 // Disable searching for updates. This only works with the enterprise policy
... ...
@@ -519,4 +519,4 @@ user_pref("app.update.auto", false);
519 519
 
520 520
 ///// Show Punycode.
521 521
 // This helps to protect against possible character spoofing.
522
-// user_pref("network.IDN_show_punycode", true);
522
+user_pref("network.IDN_show_punycode", true);