From 5305cc48e6fbdc5791e13d84bd1ab87c6b7784bf Mon Sep 17 00:00:00 2001 From: fxbrit Date: Mon, 10 May 2021 12:49:14 +0200 Subject: [PATCH] WebGL disabled default, add notes on re-enable --- Changelog.md => docs/Changelog.md | 8 ++++++-- librewolf.cfg | 2 +- 2 files changed, 7 insertions(+), 3 deletions(-) rename Changelog.md => docs/Changelog.md (99%) diff --git a/Changelog.md b/docs/Changelog.md similarity index 99% rename from Changelog.md rename to docs/Changelog.md index 4febc8f..a291070 100755 --- a/Changelog.md +++ b/docs/Changelog.md @@ -395,6 +395,7 @@ lockPref("extensions.webapi.testing", false); // hidden but default false lockPref("canvas.capturestream.enabled", false); // any real benefit? lockPref("network.http.redirection-limit", 10); // small benefit from having it at default 20, and break some payments defaultPref("dom.event.clipboardevents.enabled", false); // causes breakage with small benefits, moved to hardened setup +lockPref("webgl.disable-fail-if-major-performance-caveat", true); // default // fxaccounts is disabled in policies lockPref("identity.fxaccounts.enabled", false); @@ -636,12 +637,15 @@ extensions.update.url = "https://versioncheck.addons.mozilla.org/update/VersionC security.OCSP.enabled = 1 ``` you probably also want `security.OCSP.require = true` - +#### Enable WebGL +``` +defaultPref("webgl.disabled", false); +lockPref("webgl.enable-webgl2", true); +``` #### Hardened setup ``` defaultPref("javascript.options.asmjs", false); // disable asm.js defaultPref("javascript.options.wasm", false); // disable web assembly -defaultPref("webgl.disabled", true); // disable webgl defaultPref("privacy.resistFingerprinting.letterboxing", true); // enable letterboxing defaultPref("dom.event.clipboardevents.enabled", false); // disable user triggered clipboard access ``` \ No newline at end of file diff --git a/librewolf.cfg b/librewolf.cfg index cd12b9c..c885719 100755 --- a/librewolf.cfg +++ b/librewolf.cfg @@ -585,8 +585,8 @@ defaultPref("media.memory_cache_max_size", 65536); // # WEBGL AND PERFORMANCE // -------------------------------- +defaultPref("webgl.disabled", true); lockPref("webgl.enable-webgl2", false); -lockPref("webgl.disable-fail-if-major-performance-caveat", true); // -------------------------------- // # JS