arkenfox / user.js

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
MIT License
9.9k stars 510 forks source link

sticky: override recipes #1080

Open Thorin-Oakenpants opened 3 years ago

Thorin-Oakenpants commented 3 years ago

CURRENT


🔻 enable session restore

to keep cookies for selected sites, add site exceptions as Allow, see this wiki entry

/* override recipe: enable session restore ***/
user_pref("browser.startup.page", 3); // 0102
  // user_pref("browser.privatebrowsing.autostart", false); // 0110 required if you had it set as true
  // user_pref("browser.sessionstore.privacy_level", 0); // 1003 optional to restore cookies/formdata
user_pref("privacy.clearOnShutdown.history", false); // 2811 FF127 or lower
user_pref("privacy.clearOnShutdown_v2.historyFormDataAndDownloads", false); // 2811 FF128+

// 2820 optional to match when you use settings>Cookies and Site Data>Clear Data
  // user_pref("privacy.clearSiteData.historyFormDataAndDownloads", false); // FF128+

// 2830 optional to match when you use Ctrl-Shift-Del (settings>History>Custom Settings>Clear History)
  // user_pref("privacy.cpd.history", false); // FF127 or lower
  // user_pref("privacy.clearHistory.historyFormDataAndDownloads", false); // FF128+
Thorin-Oakenpants commented 2 years ago

OBSOLETE


⭐ This is now inactive in arkenfox v128 see #1804

🔻 I don't want RFP

are you sure?

RFP also includes timing mitigations

/* override recipe: RFP is not for me ***/
user_pref("privacy.resistFingerprinting", false); // 4501
user_pref("privacy.resistFingerprinting.letterboxing", false); // 4504 [pointless if not using RFP]
user_pref("webgl.disabled", false); // 4520 [mostly pointless if not using RFP]

⭐ This is now inactive in arkenfox v115.1+ see #1707

🔻 enable DRM: Netflix, HBO, Disney+, Amazon Prime, Showtime, Hulu, DirectTV, Starz, Sling ...

enabledrm

/* override recipe: enable DRM and let me watch videos ***/
   // user_pref("media.gmp-widevinecdm.enabled", true); // 2021 default-inactive in user.js and removed in user.js 115.1
user_pref("media.eme.enabled", true); // 2022

⭐ This is now the default in arkenfox v96, see #1281

Arkenfox will not support configurations in ETP custom mode moving forward

🔻 use ETP Strict mode

/* override recipe: FF87+ use ETP Strict mode ***/
user_pref("browser.contentblocking.category", "strict"); // 2701
user_pref("privacy.firstparty.isolate", false); // 6008: default false arkenfox v96
user_pref("network.cookie.cookieBehavior", 5); // 7016 inactive v96 [set at runtime by category=strict]

⭐ This is now the default in arkenfox v95, see #1286

🔻 RFP users: allow bigger default sizes for new windows (new win includes startup)

By all means, if you want bigger, go for it. This is not Tor Browser and the web needs to be usable for you

/* override-recipe: desktop: alter new window max sizes **/
   // user_pref("privacy.window.maxInnerWidth", 1600); // 4502 [default 1600 in user.js v95]
   // user_pref("privacy.window.maxInnerHeight", 900);  // 4502 [default 900 in user.js v95]

⭐ This is now the default in arkenfox v95, see #1282

🔻 enable web conferencing (thanks @rusty-snake, @mlario, @crssi )

/* override recipe: enable web conferencing: Google Meet | JitsiMeet | BigBlueButton | Zoom | Discord ***/

// OPTIONAL
   // some sites, e.g. Zoom, need a canvas site exception if using RFP [Right Click>View Page Info>Permissions]
   // user_pref("media.autoplay.blocking_policy", 0); // 2031 optional [otherwise add site exceptions]
   // user_pref("webgl.disabled", false); // 4520 optional [required for Zoom]

// RESET these - all now inactive or removed from user.js
   // ^ except media.peerconnection.ice.no_host can be used to harden if it works for you
   // user_pref("media.peerconnection.enabled", true); // 2001 default-inactive in user.js 95
   // user_pref("media.peerconnection.ice.no_host", false); // 2004 default-inactive in user.js 95
   // user_pref("javascript.options.wasm", true); // 5506 default-inactive in user.js v91
   // user_pref("dom.webaudio.enabled", true); // 8001 default-inactive in user.js v90
   // user_pref("media.getusermedia.screensharing.enabled", true); // removed from user.js v91

⭐ This is now the default in arkenfox v94 see #1256 and tweaked in v95 see #1291

🔻 keep cookie + site data exceptions on close

Add exceptions as Allow

/* override recipe: keep some cookies + site data on exit ***/
   // user_pref("network.cookie.lifetimePolicy", 2); // 2801 [default 2 in user.js 94+]
   // user_pref("privacy.clearOnShutdown.cookies", false); // 2811 [default false in user.js 94+]
   // user_pref("privacy.cpd.cookies", false); // 2812 Ctrl-Shift-Del [default false in user.js 94+]

   // user_pref("privacy.clearOnShutdown.offlineApps", false); // 2811 [default false in user.js 95+]
   // user_pref("privacy.cpd.offlineApps", false); // 2812 Ctrl-Shift-Del [default false in user.js 95+]