Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

v115.1 #1703

Merged
merged 10 commits into from Aug 27, 2023
Merged

v115.1 #1703

Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
a0b75e4
v116
Thorin-Oakenpants Aug 14, 2023
d85bf06
undo inadvertent 2623 change
Thorin-Oakenpants Aug 16, 2023
b3b2b1c
tweak 5013 behavior
Thorin-Oakenpants Aug 16, 2023
64c65ea
tweak 5016
Thorin-Oakenpants Aug 19, 2023
486a146
remove widevine pref #1707
Thorin-Oakenpants Aug 26, 2023
97b3f4e
move DRM to optional hardening #1707
Thorin-Oakenpants Aug 26, 2023
36e0e9b
move IPv6 to optional hardening #1707
Thorin-Oakenpants Aug 26, 2023
ddb5acf
move referer.XOriginPolicy to optional hardening #1707
Thorin-Oakenpants Aug 26, 2023
5c2912f
move keyword to optional opsec #1707
Thorin-Oakenpants Aug 27, 2023
3ca80d5
point release
Thorin-Oakenpants Aug 27, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
Prev Previous commit
Next Next commit
move referer.XOriginPolicy to optional hardening #1707
  • Loading branch information
@Thorin-Oakenpants
Thorin-Oakenpants committed Aug 26, 2023
commit ddb5acf3ec9245075930d821dce0d726d161680f
16 changes: 7 additions & 9 deletions user.js
View file
Open in desktop
Thorin-Oakenpants marked this conversation as resolved.
Show resolved Hide resolved
Expand Up @@ -18,7 +18,6 @@
* Some site breakage and unintended consequences will happen. Everyone's experience will differ
e.g. some user data is erased on exit (section 2800), change this to suit your needs
* While not 100% definitive, search for "[SETUP" tags
e.g. third party images/videos not loading on some sites? check 1601
5. Some tag info
[SETUP-SECURITY] it's one item, read it
[SETUP-WEB] can cause some websites to break
Expand Down Expand Up @@ -48,7 +47,7 @@
1000: DISK AVOIDANCE
1200: HTTPS (SSL/TLS / OCSP / CERTS / HPKP)
1400: FONTS
1600: HEADERS / REFERERS
1600: REFERERS
1700: CONTAINERS
2000: PLUGINS / MEDIA / WEBRTC
2400: DOM (DOCUMENT OBJECT MODEL)
Expand Down Expand Up @@ -515,18 +514,13 @@ user_pref("_user.js.parrot", "1400 syntax error: the parrot's bereft of life!");
// user_pref("layout.css.font-visibility.standard", 1);
// user_pref("layout.css.font-visibility.trackingprotection", 1);

/*** [SECTION 1600]: HEADERS / REFERERS
/*** [SECTION 1600]: REFERERS
full URI: https://example.com:8888/foo/bar.html?id=1234
scheme+host+port+path: https://example.com:8888/foo/bar.html
scheme+host+port: https://example.com:8888
[1] https://feeding.cloud.geek.nz/posts/tweaking-referrer-for-privacy-in-firefox/
***/
user_pref("_user.js.parrot", "1600 syntax error: the parrot rests in peace!");
/* 1601: control when to send a cross-origin referer
* 0=always (default), 1=only if base domains match, 2=only if hosts match
* [SETUP-WEB] Breakage: older modems/routers and some sites e.g banks, vimeo, icloud, instagram
* If "2" is too strict, then override to "0" and use Smart Referer extension (Strict mode + add exceptions) ***/
user_pref("network.http.referer.XOriginPolicy", 2);
/* 1602: control the amount of cross-origin information to send [FF52+]
* 0=send full URI (default), 1=scheme+host+port+path, 2=scheme+host+port ***/
user_pref("network.http.referer.XOriginTrimmingPolicy", 2);
Expand Down Expand Up @@ -979,6 +973,10 @@ user_pref("_user.js.parrot", "5500 syntax error: this is an ex-parrot!");
* [TEST] https://ipleak.org/
* [1] https://www.internetsociety.org/tag/ipv6-security/ (Myths 2,4,5,6) ***/
// user_pref("network.dns.disableIPv6", true);
/* 5510: control when to send a cross-origin referer
* 0=always (default), 1=only if base domains match, 2=only if hosts match
* [NOTE] Will cause breakage: older modems/routers and some sites e.g banks, vimeo, icloud, instagram ***/
// user_pref("network.http.referer.XOriginPolicy", 2);

/*** [SECTION 6000]: DON'T TOUCH ***/
user_pref("_user.js.parrot", "6000 syntax error: the parrot's 'istory!");
Expand Down Expand Up @@ -1074,7 +1072,7 @@ user_pref("_user.js.parrot", "7000 syntax error: the parrot's pushing up daisies
// user_pref("dom.securecontext.allowlist_onions", true); // [FF97+] 1382359/1744006
// user_pref("network.http.referer.hideOnionSource", true); // 1305144
/* 7007: referers
* [WHY] Only cross-origin referers (1600s) need control ***/
* [WHY] Only cross-origin referers (1602, 5510) matter ***/
// user_pref("network.http.sendRefererHeader", 2);
// user_pref("network.http.referer.trimmingPolicy", 0);
/* 7008: set the default Referrer Policy [FF59+]
Expand Down