allow offscreencanvas whitelist as JS cannot read it + fix

docs/Changelog.md

@@ -1,12 +1,32 @@
 This changelog will be used from now on to document changes in a precise manner, with a list of changes for each setting version.
 Setting versions are documented using the pref `librewolf.cfg.version`, available in about:config.
 
-# 6.1
+# 6.2
 
 **target commit**:
 
 **base librewolf version**: 99.x
 
+**References**:
+- vpn pref was set to the wrong value by mistake.
+- offscreancanvas cannot be read back using JS, plus it is being tracked upstreadm. see [this comment](https://github.com/arkenfox/user.js/issues/1418#issuecomment-1093390017), which solves doubts from 6.1 changelog.
+
+#### Removed preferences
+```
+defaultPref("gfx.offscreencanvas.domain-enabled", false);
+```
+
+#### Changed preferences
+```
+lockPref("browser.vpn_promo.enabled", false);
+```
+
+# 6.1
+
+**target commit**: 465257e5993893cd7896ef1533d37e245f206fb9
+
+**base librewolf version**: 99.x
+
 **References**:
 - csp pref has been deprecated.
 - quicksuggest prefs are redundant as it has a master switch. the master switch is now force applied on each restart of the browser.

librewolf.cfg

@@ -14,7 +14,7 @@ defaultPref("librewolf.cfg.version", "6.1");
  * 
  * PRIVACY [ISOLATION, SANITIZING, CACHE AND STORAGE, HISTORY AND SESSION RESTORE, QUERY STRIPPING]
  * NETWORKING [HTTPS, IPv6, REFERERS, WEBRTC, PROXY, DNS, PREFETCHING AND SPECULATIVE CONNECTIONS, OFFLINE]
- * FINGERPRINTING [RFP, WEBGL, OFFSCREENCANVAS]
+ * FINGERPRINTING [RFP, WEBGL]
  * SECURITY [SITE ISOLATION, CERTIFICATES, TLS/SSL, PERMISSIONS, FONTS, SAFE BROWSING, OTHERS]
  * REGION [LOCATION, LANGUAGE]
  * BEHAVIOR [DRM, SEARCH AND URLBAR, DOWNLOADS, AUTOPLAY, POP-UPS AND WINDOWS, MOUSE]
@@ -184,14 +184,7 @@ defaultPref("privacy.window.maxInnerHeight", 900);
 defaultPref("privacy.resistFingerprinting.letterboxing", false);
 
 /** [SECTION] WEBGL */
-defaultPref("webgl.disabled", true);
+defaultPref("webgl.disabled", true);ß
-
-/** [SECTION] OFFSCREENCANVAS
- * it will need a revisit in the near future, in case it causes breakage or
- * if it has been tied to canvas api permission or if it is not allowed to
- * exchange values through it. for now leave disabled just because.
- */
-defaultPref("gfx.offscreencanvas.domain-enabled", false);
 
 
 
@@ -478,7 +471,7 @@ defaultPref("browser.contentblocking.report.monitor.enabled", false);
 lockPref("browser.contentblocking.report.hide_vpn_banner", true);
 lockPref("browser.contentblocking.report.vpn.enabled", false);
 lockPref("browser.contentblocking.report.show_mobile_app", false);
-lockPref("browser.vpn_promo.enabled", true);
+lockPref("browser.vpn_promo.enabled", false);
 // ...about:addons recommendations sections and more
 defaultPref("extensions.htmlaboutaddons.recommendations.enabled", false);
 defaultPref("extensions.getAddons.showPane", false);