librewolf-bot/settings
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

moved a pref to hardened setup

Browse source
This commit is contained in:
fxbrit 2021-05-06 12:45:38 +02:00
parent 3481c83721
commit 481275ecb1
2 changed files with 10 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
Changelog.md
View file

@ -666,6 +666,7 @@ lockPref("extensions.webapi.testing", false); // hidden but default false
lockPref("canvas.capturestream.enabled", false); // any real benefit?
<<<<<<< HEAD
<<<<<<< HEAD
<<<<<<< HEAD
lockPref("network.http.redirection-limit", 10); // small benefit from having it at default 20, and break some payments
defaultPref("dom.event.clipboardevents.enabled", false); // causes breakage with small benefits, moved to hardened setup
=======
@ -673,6 +674,10 @@ defaultPref("dom.event.clipboardevents.enabled", false); // causes breakage with
=======
lockPref("network.http.redirection-limit", 10); // small benefit from having it at default 20, and break some payments
>>>>>>> 3afb2b3 (removed redirect limt)
=======
lockPref("network.http.redirection-limit", 10); // small benefit from having it at default 20, and break some payments
defaultPref("dom.event.clipboardevents.enabled", false); // causes breakage with small benefits, moved to hardened setup
>>>>>>> 0f6e184 (moved a pref to hardened setup)
// fxaccounts is disabled in policies
lockPref("identity.fxaccounts.enabled", false);
@ -1628,7 +1633,6 @@ defaultPref("pdfjs.enabledCache.state", false);
defaultPref("alerts.showFavicons", false); // default: false
defaultPref("security.remote_settings.intermediates.enabled", true);
defaultPref("dom.battery.enabled", false); // Unlocked as some think it increases fingerprint, they can now disable it
defaultPref("dom.event.clipboardevents.enabled", false); // Unlocked as known to cause breakage
defaultPref("extensions.blocklist.enabled", false);
defaultPref("extensions.blocklist.detailsURL", "");
defaultPref("extensions.blocklist.itemURL", "");
@ -1692,9 +1696,11 @@ you probably also want `security.OCSP.require = true`
#### Hardened setup
```
defaultPref("javascript.options.asmjs", false); defaultPref("javascript.options.wasm", false);
defaultPref("webgl.disabled", true);
defaultPref("privacy.resistFingerprinting.letterboxing", true);
defaultPref("javascript.options.asmjs", false); // disable asm.js
defaultPref("javascript.options.wasm", false); // disable web assembly
defaultPref("webgl.disabled", true); // disable webgl
defaultPref("privacy.resistFingerprinting.letterboxing", true); // enable letterboxing
defaultPref("dom.event.clipboardevents.enabled", false); // disable user triggered clipboard access
```
<<<<<<< HEAD
>>>>>>> e7a5601 (more good stuff)

1
librewolf.cfg
View file

@ -677,7 +677,6 @@ defaultPref("dom.serviceWorkers.enabled", false);
defaultPref("dom.battery.enabled", false);
lockPref("dom.popup_maximum", 4);
defaultPref("dom.popup_allowed_events", "click dblclick mousedown pointerdown");
defaultPref("dom.event.clipboardevents.enabled", false);
defaultPref("dom.webaudio.enabled", false);
lockPref("dom.vr.enabled", false);
lockPref("dom.vibrator.enabled", false);