librewolf-bot/settings
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

remove media.peerconnection.ice.no_host, improve descriptions

Browse source
This commit is contained in:
fxbrit 2023-01-02 18:18:45 +01:00
parent 240e184b78
commit b0d277a77b
1 changed files with 3 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
librewolf.cfg
View file

@ -102,11 +102,9 @@ defaultPref("network.auth.subresource-http-auth-allow", 1); // block HTTP authen
defaultPref("network.http.referer.XOriginTrimmingPolicy", 2); defaultPref("network.http.referer.XOriginTrimmingPolicy", 2);
/** [SECTION] WEBRTC /** [SECTION] WEBRTC
* there's no point in disabling webrtc as mDNS protects the private IP on linux, osx and win10+. * there is no point in disabling webrtc as mDNS protects the private IP on linux, osx and win10+.
* with the below preference we protect the value even in trusted environments and for win7/8 users, * the private IP address is only used in trusted environments, eg. allowed camera and mic access.
* although this will likely cause breakage.
*/ */
defaultPref("media.peerconnection.ice.no_host", true); // don't use any private IPs for ICE candidate
defaultPref("media.peerconnection.ice.default_address_only", true); // use a single interface for ICE candidates, the vpn one when a vpn is used defaultPref("media.peerconnection.ice.default_address_only", true); // use a single interface for ICE candidates, the vpn one when a vpn is used
/** [SECTION] PROXY */ /** [SECTION] PROXY */
@ -191,7 +189,7 @@ defaultPref("security.OCSP.require", true); // set to hard-fail, might cause SEC
/** [SECTION] TLS/SSL */ /** [SECTION] TLS/SSL */
pref("security.tls.enable_0rtt_data", false); // disable 0 RTT to improve tls 1.3 security pref("security.tls.enable_0rtt_data", false); // disable 0 RTT to improve tls 1.3 security
pref("security.tls.version.enable-deprecated", false); // make TLS downgrades session only by enforcing it with pref() pref("security.tls.version.enable-deprecated", false); // make TLS downgrades session only by enforcing it with pref(), default
defaultPref("browser.xul.error_pages.expert_bad_cert", true); // show relevant and advanced issues on warnings and error screens defaultPref("browser.xul.error_pages.expert_bad_cert", true); // show relevant and advanced issues on warnings and error screens
/** [SECTION] PERMISSIONS */ /** [SECTION] PERMISSIONS */