search

arkenfox / user.js

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
MIT License
10.14k stars 515 forks source link

ToDo: diffs FF85-FF86 #1117

Closed earthlng closed 3 years ago

earthlng commented 3 years ago

FF86 is scheduled for release February 23rd

FF86 release notes [when ready] FF86 for developers [FF86 security advisories]()

80 diffs ( 30 new, 32 gone, 18 different )

new in v86.0:

removed, renamed or hidden in v86.0:

changed in v86.0:

ignore

click me for details

==NEW ```js pref("browser.engagement.ctrlTab.has-used", false); pref("browser.engagement.library-button.has-used", false); pref("browser.newtabpage.activity-stream.discoverystream.spocs-endpoint-query", ""); pref("browser.newtabpage.activity-stream.newNewtabExperience.colors", "#0090ED,#FF4F5F,#2AC3A2,#FF7139,#A172FF,#FFA437,#FF2A8A"); pref("browser.partnerlink.campaign.topsites", "amzn_2020_a1"); pref("browser.tabs.remote.useOriginAttributesInRemoteType", false); pref("browser.tabs.tooltipsShowPidAndActiveness", false); pref("canvas.createConicGradient.enabled", false); pref("devtools.command-button-errorcount.enabled", true); pref("docshell.shistory.bfcache.allow_unload_listeners", false); pref("docshell.shistory.bfcache.require_no_opener", false); pref("dom.events.offset-in-svg-relative-to-svg-root", true); pref("dom.input_events.canSuspendInBCG.enabled", false); pref("extensions.webextensions.base-content-security-policy.v3", "script-src 'self' http://localhost:* http://127.0.0.1:*; object-src 'self';"); pref("gfx.bundled-fonts.activate", -1); pref("gfx.font_rendering.fallback.async", true); pref("gfx.webrender.debug.force-picture-invalidation", false); pref("gfx.webrender.software.d3d11.upload-mode", 2); pref("gfx.webrender.svg-images", false); pref("layout.css.autofill.enabled", true); pref("layout.css.image-set.enabled", false); pref("media.videocontrols.keyboard-tab-to-all-controls", false); pref("network.cache.frecency_array_check_enabled", false); pref("pdfjs.enableScripting", false); pref("pdfjs.viewerCssTheme", 0); pref("prompts.contentPromptSubDialog", false); pref("remote.enabled", true); pref("remote.force-local", true); pref("security.csp.truncate_blocked_uri_for_frame_navigations", true); pref("widget.remote-look-and-feel", false); ``` ==REMOVED or HIDDEN ```js pref("browser.download.show_plugins_in_list", true); pref("browser.ssb.enabled", false); pref("browser.tabs.tooltipsShowPid", false); pref("browser.urlbar.update2", true); pref("browser.urlbar.update2.disableOneOffsHorizontalKeyNavigation", true); pref("browser.urlbar.update2.oneOffsRefresh", true); pref("browser.urlbar.update2.restyleBrowsingHistoryAsSearch", true); pref("extensions.content_script_csp.enabled", false); pref("extensions.content_script_csp.report_only", true); pref("extensions.webextensions.tabhide.enabled", true); pref("javascript.options.ion.full.threshold", 100000); pref("layout.css.file-selector-button.enabled", true); pref("layout.css.moz-any-is-is.enabled", true); pref("layout.css.moz-focus-outer.enabled", false); pref("layout.css.text-decoration-skip-ink.enabled", true); pref("layout.css.text-decoration-thickness.enabled", true); pref("layout.css.text-justify.enabled", true); pref("layout.css.text-underline-offset.enabled", true); pref("layout.css.text-underline-position.enabled", true); pref("layout.css.unknown-webkit-pseudo-element", true); pref("layout.css.xul-tree-pseudos.content.enabled", false); pref("media.wmf.deblacklisting-for-telemetry-in-gpu-process", true); pref("media.wmf.disable-d3d11-for-dlls", "igd11dxva64.dll: 20.19.15.4463, 20.19.15.4454, 20.19.15.4444, 20.19.15.4416, 20.19.15.4404, 20.19.15.4390, 20.19.15.4380, 20.19.15.4377, 20.19.15.4364, 20.19.15.4360, 20.19.15.4352, 20.19.15.4331, 20.19.15.4326, 20.19.15.4300; igd10iumd32.dll: 20.19.15.4444, 20.19.15.4424, 20.19.15.4409, 20.19.15.4390, 20.19.15.4380, 20.19.15.4360, 10.18.10.4358, 20.19.15.4331, 20.19.15.4312, 20.19.15.4300, 10.18.15.4281, 10.18.15.4279, 10.18.10.4276, 10.18.15.4268, 10.18.15.4256, 10.18.10.4252, 10.18.15.4248, 10.18.14.4112, 10.18.10.3958, 10.18.10.3496, 10.18.10.3431, 10.18.10.3412, 10.18.10.3355, 9.18.10.3234, 9.18.10.3071, 9.18.10.3055, 9.18.10.3006; igd10umd32.dll: 9.17.10.4229, 9.17.10.3040, 9.17.10.2884, 9.17.10.2857, 8.15.10.2274, 8.15.10.2272, 8.15.10.2246, 8.15.10.1840, 8.15.10.1808; igd10umd64.dll: 9.17.10.4229, 9.17.10.2884, 9.17.10.2857, 10.18.10.3496; isonyvideoprocessor.dll: 4.1.2247.8090, 4.1.2153.6200; tosqep.dll: 1.2.15.526, 1.1.12.201, 1.0.11.318, 1.0.11.215, 1.0.10.1224; tosqep64.dll: 1.1.12.201, 1.0.11.215; nvwgf2um.dll: 22.21.13.8253, 22.21.13.8233, 22.21.13.8205, 22.21.13.8189, 22.21.13.8178, 22.21.13.8165, 21.21.13.7892, 21.21.13.7878, 21.21.13.7866, 21.21.13.7849, 21.21.13.7654, 21.21.13.7653, 21.21.13.7633, 21.21.13.7619, 21.21.13.7563, 21.21.13.7306, 21.21.13.7290, 21.21.13.7270, 21.21.13.7254, 21.21.13.6939, 21.21.13.6926, 21.21.13.6909, 21.21.13.4201, 21.21.13.4200, 10.18.13.6881, 10.18.13.6839, 10.18.13.6510, 10.18.13.6472, 10.18.13.6143, 10.18.13.5946, 10.18.13.5923, 10.18.13.5921, 10.18.13.5891, 10.18.13.5887, 10.18.13.5582, 10.18.13.5445, 10.18.13.5382, 10.18.13.5362, 9.18.13.4788, 9.18.13.4752, 9.18.13.4725, 9.18.13.4709, 9.18.13.4195, 9.18.13.4192, 9.18.13.4144, 9.18.13.4052, 9.18.13.3788, 9.18.13.3523, 9.18.13.3235, 9.18.13.3165, 9.18.13.2723, 9.18.13.2702, 9.18.13.1422, 9.18.13.1407, 9.18.13.1106, 9.18.13.546; atidxx32.dll: 21.19.151.3, 21.19.142.257, 21.19.137.514, 21.19.137.1, 21.19.134.1, 21.19.128.7, 21.19.128.4, 20.19.0.32837, 20.19.0.32832, 8.17.10.682, 8.17.10.671, 8.17.10.661, 8.17.10.648, 8.17.10.644, 8.17.10.625, 8.17.10.605, 8.17.10.581, 8.17.10.569, 8.17.10.560, 8.17.10.545, 8.17.10.539, 8.17.10.531, 8.17.10.525, 8.17.10.520, 8.17.10.519, 8.17.10.514, 8.17.10.511, 8.17.10.494, 8.17.10.489, 8.17.10.483, 8.17.10.453, 8.17.10.451, 8.17.10.441, 8.17.10.436, 8.17.10.432, 8.17.10.425, 8.17.10.418, 8.17.10.414, 8.17.10.401, 8.17.10.395, 8.17.10.385, 8.17.10.378, 8.17.10.362, 8.17.10.355, 8.17.10.342, 8.17.10.331, 8.17.10.318, 8.17.10.310, 8.17.10.286, 8.17.10.269, 8.17.10.261, 8.17.10.247, 8.17.10.240, 8.15.10.212; atidxx64.dll: 21.19.151.3, 21.19.142.257, 21.19.137.514, 21.19.137.1, 21.19.134.1, 21.19.128.7, 21.19.128.4, 20.19.0.32832, 8.17.10.682, 8.17.10.661, 8.17.10.644, 8.17.10.625; nvumdshim.dll: 10.18.13.6822"); pref("media.wmf.disable-d3d9-for-dlls", "igdumd64.dll: 8.15.10.2189, 8.15.10.2119, 8.15.10.2104, 8.15.10.2102, 8.771.1.0; atiumd64.dll: 7.14.10.833, 7.14.10.867, 7.14.10.885, 7.14.10.903, 7.14.10.911, 8.14.10.768, 9.14.10.1001, 9.14.10.1017, 9.14.10.1080, 9.14.10.1128, 9.14.10.1162, 9.14.10.1171, 9.14.10.1183, 9.14.10.1197, 9.14.10.945, 9.14.10.972, 9.14.10.984, 9.14.10.996"); pref("network.http.spdy.bug1556491", true); pref("network.http.spdy.bug1563695", true); pref("prompts.tab_modal.enabled", true); pref("svg.transform-box.enabled", true); ``` ==CHANGED ```js pref("apz.popups.enabled", true); // prev: false pref("browser.contentblocking.cfr-milestone.milestones", "[1000, 5000, 10000, 25000, 50000, 100000, 250000, 314159, 500000, 750000, 1000000, 1250000, 1500000, 1750000, 2000000, 2250000, 2500000, 8675309]"); // prev: "[1000, 5000, 10000, 25000, 50000, 100000, 500000]" pref("browser.contentblocking.features.strict", "tp,tpPrivate,cookieBehavior5,cm,fp,stp,lvl2"); // prev: "tp,tpPrivate,cookieBehavior4,cm,fp,stp,lvl2" pref("browser.contentblocking.state-partitioning.mvp.ui.enabled", true); // prev: false pref("browser.newtabpage.activity-stream.asrouter.providers.messaging-experiments", "{\"id\":\"messaging-experiments\",\"enabled\":true,\"type\":\"remote-experiments\",\"messageGroups\":[\"cfr\",\"whats-new-panel\",\"moments-page\",\"snippets\",\"cfr-fxa\",\"aboutwelcome\",\"infobar\"],\"updateCycleInMs\":3600000}"); // prev: "{\"id\":\"messaging-experiments\",\"enabled\":true,\"type\":\"remote-experiments\",\"messageGroups\":[\"cfr\",\"whats-new-panel\",\"moments-page\",\"snippets\",\"cfr-fxa\",\"aboutwelcome\"],\"updateCycleInMs\":3600000}" pref("browser.partnerlink.attributionURL", "https://topsites.services.mozilla.com/cid/"); // prev: "https://topsites.services.mozilla.com/cid/amzn_2020_a1" pref("dom.popup_allowed_events", "change click dblclick auxclick mousedown mouseup pointerdown pointerup notificationclick reset submit touchend contextmenu"); // prev: "change click dblclick auxclick mouseup pointerup notificationclick reset submit touchend contextmenu" pref("extensions.formautofill.supportedCountries", "US,CA"); // prev: "US" pref("extensions.getAddons.get.url", "https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%"); // prev: "https://services.addons.mozilla.org/api/v3/addons/search/?guid=%IDS%&lang=%LOCALE%" pref("extensions.getAddons.langpacks.url", "https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversion=%VERSION%"); // prev: "https://services.addons.mozilla.org/api/v3/addons/language-tools/?app=firefox&type=language&appversion=%VERSION%" pref("extensions.webextensions.base-content-security-policy", "script-src 'self' https://* http://localhost:* http://127.0.0.1:* moz-extension: blob: filesystem: 'unsafe-eval' 'unsafe-inline'; object-src 'self' moz-extension: blob: filesystem:;"); // prev: "script-src 'self' https://* moz-extension: blob: filesystem: 'unsafe-eval' 'unsafe-inline'; object-src 'self' https://* moz-extension: blob: filesystem:;" pref("gfx.canvas.remote", true); // prev: false pref("javascript.options.off_thread_parse_global", false); // prev: true pref("media.peerconnection.dtls.version.min", 771); // prev: 770 pref("media.videocontrols.picture-in-picture.allow-multiple", true); // prev: false pref("webgl.out-of-process", true); // prev: false ```

earthlng commented 3 years ago
some bugzilla tickets

* apz.popups.enabled Bug [1493208](https://bugzilla.mozilla.org/show_bug.cgi?id=1493208) - Enable apz.popups.enabled. * browser.contentblocking.cfr-milestone.milestones Bug [1683950](https://bugzilla.mozilla.org/show_bug.cgi?id=1683950) - Add more milestones to the tracker-blocked celebration toast for heavy users. * browser.contentblocking.features.strict Bug [1686296](https://bugzilla.mozilla.org/show_bug.cgi?id=1686296) - Enable dFPI in strict mode for all channels. Bug [1680459](https://bugzilla.mozilla.org/show_bug.cgi?id=1680459) - Part1: Enable Level 2 list for ETP Strict mode. * browser.contentblocking.state-partitioning.mvp.ui.enabled Bug [1685306](https://bugzilla.mozilla.org/show_bug.cgi?id=1685306) - Enable dFPI MVP UI pref by default. Bug [1645924](https://bugzilla.mozilla.org/show_bug.cgi?id=1645924) - Update "Cookies" and "Heads up" strings for cookieBehavior=5 in content blocking prefs. * browser.download.hide_plugins_without_extensions Bug [1581678](https://bugzilla.mozilla.org/show_bug.cgi?id=1581678) - remove dead plugin code from about:preferences * browser.download.show_plugins_in_list Bug [1581678](https://bugzilla.mozilla.org/show_bug.cgi?id=1581678) - remove dead plugin code from about:preferences * browser.engagement.ctrlTab.has-used Bug [1687703](https://bugzilla.mozilla.org/show_bug.cgi?id=1687703), add a preference to see if ctrl-tab is used * browser.engagement.library-button.has-used Bug [1686766](https://bugzilla.mozilla.org/show_bug.cgi?id=1686766), add preference to track if user interacts with library button * browser.newtabpage.activity-stream.asrouter.providers.messaging-experiments Bug [1685525](https://bugzilla.mozilla.org/show_bug.cgi?id=1685525) - Update or add a trigger capable of targeting newtab/homepage for messages * browser.newtabpage.activity-stream.discoverystream.spocs-endpoint-query Bug [1685130](https://bugzilla.mozilla.org/show_bug.cgi?id=1685130) - Provide a pref for newtab spoc endpoint query string. * browser.newtabpage.activity-stream.newNewtabExperience.colors Bug [1688699](https://bugzilla.mozilla.org/show_bug.cgi?id=1688699) - Remove yellow from topsites background options. Bug [1680531](https://bugzilla.mozilla.org/show_bug.cgi?id=1680531) - top sites icons. * browser.partnerlink.attributionURL Bug [1680019](https://bugzilla.mozilla.org/show_bug.cgi?id=1680019) - Split campaign IDs from the partnerlink.attributionURL pref. Bug [1664490](https://bugzilla.mozilla.org/show_bug.cgi?id=1664490) - Update partner attribution URL. Bug [1656220](https://bugzilla.mozilla.org/show_bug.cgi?id=1656220) - Implement recording attributions for search engines. * browser.partnerlink.campaign.topsites Bug [1680019](https://bugzilla.mozilla.org/show_bug.cgi?id=1680019) - Split campaign IDs from the partnerlink.attributionURL pref. * browser.ssb.enabled Bug [1682593](https://bugzilla.mozilla.org/show_bug.cgi?id=1682593): Remove the site specific browser feature. * browser.tabs.remote.useOriginAttributesInRemoteType Bug [1630908](https://bugzilla.mozilla.org/show_bug.cgi?id=1630908) - Part 1: Pass OriginAttributes to be included with remote type, * browser.tabs.tooltipsShowPid Bug [1687717](https://bugzilla.mozilla.org/show_bug.cgi?id=1687717) - Show activeness in tab tooltip on nightly. Bug [1680685](https://bugzilla.mozilla.org/show_bug.cgi?id=1680685) - Allow to turn on pid in tabs via a pref. * browser.tabs.tooltipsShowPidAndActiveness Bug [1687717](https://bugzilla.mozilla.org/show_bug.cgi?id=1687717) - Show activeness in tab tooltip on nightly. * browser.urlbar.update2 Bug [1665049](https://bugzilla.mozilla.org/show_bug.cgi?id=1665049) - Remove browser.urlbar.update2. Bug [1665049](https://bugzilla.mozilla.org/show_bug.cgi?id=1665049) - Remove browser.urlbar.update2.oneOffsRefresh. Bug [1665049](https://bugzilla.mozilla.org/show_bug.cgi?id=1665049) - Remove browser.urlbar.update2.restyleBrowsingHistoryAsSearch. Bug [1665049](https://bugzilla.mozilla.org/show_bug.cgi?id=1665049) - Remove browser.urlbar.update2.disableOneOffsHorizontalKeyNavigation. Bug [1678138](https://bugzilla.mozilla.org/show_bug.cgi?id=1678138) - Add a Preferences toggle for tab-to-search results. Bug [1657790](https://bugzilla.mozilla.org/show_bug.cgi?id=1657790) - Allow local search mode buttons to be toggled separately from engines. Bug [1675537](https://bugzilla.mozilla.org/show_bug.cgi?id=1675537) - Switch browser.urlbar.update2.emptySearchBehavior to 0. Bug [1671218](https://bugzilla.mozilla.org/show_bug.cgi?id=1671218) - Enable update2 prefs on Release. Bug [1667470](https://bugzilla.mozilla.org/show_bug.cgi?id=1667470) - Enable tab-to-search on Nightly. Bug [1664760](https://bugzilla.mozilla.org/show_bug.cgi?id=1664760) - Improve the set of results when in search mode for a non-general search engine. Bug [1662509](https://bugzilla.mozilla.org/show_bug.cgi?id=1662509) - Add a pref to experiment with zero-prefix search in search mode. Bug [1632318](https://bugzilla.mozilla.org/show_bug.cgi?id=1632318) - Left / Right Arrow key navigation in the one-off search buttons breaks convention (should move caret, not select one-off). * browser.urlbar.update2.disableOneOffsHorizontalKeyNavigation Bug [1665049](https://bugzilla.mozilla.org/show_bug.cgi?id=1665049) - Remove browser.urlbar.update2.disableOneOffsHorizontalKeyNavigation. Bug [1671218](https://bugzilla.mozilla.org/show_bug.cgi?id=1671218) - Enable update2 prefs on Release. Bug [1632318](https://bugzilla.mozilla.org/show_bug.cgi?id=1632318) - Left / Right Arrow key navigation in the one-off search buttons breaks convention (should move caret, not select one-off). * browser.urlbar.update2.oneOffsRefresh Bug [1665049](https://bugzilla.mozilla.org/show_bug.cgi?id=1665049) - Remove browser.urlbar.update2.oneOffsRefresh. Bug [1671218](https://bugzilla.mozilla.org/show_bug.cgi?id=1671218) - Enable update2 prefs on Release. * browser.urlbar.update2.restyleBrowsingHistoryAsSearch Bug [1665049](https://bugzilla.mozilla.org/show_bug.cgi?id=1665049) - Remove browser.urlbar.update2.restyleBrowsingHistoryAsSearch. Bug [1671218](https://bugzilla.mozilla.org/show_bug.cgi?id=1671218) - Enable update2 prefs on Release. Bug [1664760](https://bugzilla.mozilla.org/show_bug.cgi?id=1664760) - Improve the set of results when in search mode for a non-general search engine. * canvas.createConicGradient.enabled Bug [1627014](https://bugzilla.mozilla.org/show_bug.cgi?id=1627014) - Implement CanvasRenderingContext2D.createConicGradient * devtools.command-button-errorcount.enabled Bug [1685985](https://bugzilla.mozilla.org/show_bug.cgi?id=1685985) - [devtools] Handle error count button like other toolbox buttons. * docshell.shistory.bfcache.allow_unload_listeners Bug [1682394](https://bugzilla.mozilla.org/show_bug.cgi?id=1682394) - Consider to not check *unload event listeners for bfcache, * docshell.shistory.bfcache.require_no_opener Bug [1682394](https://bugzilla.mozilla.org/show_bug.cgi?id=1682394) - Consider to not check *unload event listeners for bfcache, * dom.events.offset-in-svg-relative-to-svg-root Bug [1684973](https://bugzilla.mozilla.org/show_bug.cgi?id=1684973) - Return mouse offset coordinates in SVG relative to the SVG root. * dom.input_events.canSuspendInBCG.enabled Bug [1685577](https://bugzilla.mozilla.org/show_bug.cgi?id=1685577) - Disable dom.input_events.canSuspendInBCG.enabled for now, Bug [1662265](https://bugzilla.mozilla.org/show_bug.cgi?id=1662265) - Fix input events handling for sync XHR when both TaskController and e10s are enabled * dom.popup_allowed_events Bug [1686045](https://bugzilla.mozilla.org/show_bug.cgi?id=1686045) - Part 2: Allow popups from mousedown and pointerdown events; * extensions.content_script_csp.enabled Bug [1594234](https://bugzilla.mozilla.org/show_bug.cgi?id=1594234) remove extensions.content_script_csp preferences in favor of extensions.manifestV3.enabled * extensions.content_script_csp.report_only Bug [1594234](https://bugzilla.mozilla.org/show_bug.cgi?id=1594234) remove extensions.content_script_csp preferences in favor of extensions.manifestV3.enabled * extensions.formautofill.supportedCountries Bug [1676875](https://bugzilla.mozilla.org/show_bug.cgi?id=1676875) - Ship cc autofill to the CA market. * extensions.getAddons.get.url Bug [1686187](https://bugzilla.mozilla.org/show_bug.cgi?id=1686187) - Use AMO API v4. * extensions.getAddons.langpacks.url Bug [1686187](https://bugzilla.mozilla.org/show_bug.cgi?id=1686187) - Use AMO API v4. * extensions.webextensions.base-content-security-policy Bug [1594234](https://bugzilla.mozilla.org/show_bug.cgi?id=1594234) manifest v3 content security validation improvements Bug [1594234](https://bugzilla.mozilla.org/show_bug.cgi?id=1594234) manifest v3 content security policy support * extensions.webextensions.base-content-security-policy.v3 Bug [1594234](https://bugzilla.mozilla.org/show_bug.cgi?id=1594234) manifest v3 content security validation improvements Bug [1594234](https://bugzilla.mozilla.org/show_bug.cgi?id=1594234) manifest v3 content security policy support * extensions.webextensions.tabhide.enabled Bug [1458764](https://bugzilla.mozilla.org/show_bug.cgi?id=1458764) - Removed the references with extensions.webextensions.tabhide.enabled pref. * gfx.canvas.remote Bug [1687276](https://bugzilla.mozilla.org/show_bug.cgi?id=1687276): Re-enable remote 2D canvas for late Beta and Release. Bug [1683116](https://bugzilla.mozilla.org/show_bug.cgi?id=1683116): Disable remote canvas 2D for Release and late Beta. Bug [1548487](https://bugzilla.mozilla.org/show_bug.cgi?id=1548487): Let remote 2D canvas ride the trains on Windows. * gfx.font_rendering.fallback.async Bug [1676966](https://bugzilla.mozilla.org/show_bug.cgi?id=1676966) - Don't block layout on global font fallback; load character maps asynchronously, and then reflow when available. * gfx.webrender.debug.force-picture-invalidation Bug [1678326](https://bugzilla.mozilla.org/show_bug.cgi?id=1678326) - Add a debug command for forcing picture tile invalidation. * gfx.webrender.software.d3d11.upload-mode Bug [1642621](https://bugzilla.mozilla.org/show_bug.cgi?id=1642621) - Rollout webgl.out-of-process:true with 86 (mac+win). Bug [1685437](https://bugzilla.mozilla.org/show_bug.cgi?id=1685437) - Add multiple texture methods to RenderCompositorD3D11SWGL. * gfx.webrender.svg-images Bug [1684625](https://bugzilla.mozilla.org/show_bug.cgi?id=1684625) - Disable active images in SVGs * image.avif.enabled Bug [1682995](https://bugzilla.mozilla.org/show_bug.cgi?id=1682995) - Enable AVIF support by default. * javascript.options.ion.full.threshold Bug [1682767](https://bugzilla.mozilla.org/show_bug.cgi?id=1682767) part 48 - Remove Ion optimization levels. * javascript.options.off_thread_parse_global Bug [1667804](https://bugzilla.mozilla.org/show_bug.cgi?id=1667804) - Enable stencil-mvp pref. * layout.css.autofill.enabled Bug [1685675](https://bugzilla.mozilla.org/show_bug.cgi?id=1685675) - Ship :autofill / :-webkit-autofill. Bug [1475316](https://bugzilla.mozilla.org/show_bug.cgi?id=1475316) - Expose :autofill behind a pref to content, and add :-webkit-autofill as a compat alias. * layout.css.file-selector-button.enabled Bug [1685917](https://bugzilla.mozilla.org/show_bug.cgi?id=1685917) - Remove layout.css.file-selector-button.enabled pref. * layout.css.image-set.enabled Bug [1684909](https://bugzilla.mozilla.org/show_bug.cgi?id=1684909) - Enable image-set by default on Nightly builds. Bug [1684770](https://bugzilla.mozilla.org/show_bug.cgi?id=1684770) - Implement parsing and serialization for most of image-set(). * layout.css.moz-any-is-is.enabled Bug [1682174](https://bugzilla.mozilla.org/show_bug.cgi?id=1682174) - Remove layout.css.moz-any-is-is.enabled. * layout.css.moz-focus-outer.enabled Bug [1685917](https://bugzilla.mozilla.org/show_bug.cgi?id=1685917) - Remove the moz-focus-outer code. * layout.css.text-decoration-skip-ink.enabled Bug [1682295](https://bugzilla.mozilla.org/show_bug.cgi?id=1682295) - Remove some text-decoration prefs that are always on. * layout.css.text-decoration-thickness.enabled Bug [1682295](https://bugzilla.mozilla.org/show_bug.cgi?id=1682295) - Remove some text-decoration prefs that are always on. * layout.css.text-justify.enabled Bug [1682295](https://bugzilla.mozilla.org/show_bug.cgi?id=1682295) - Remove some text-decoration prefs that are always on. * layout.css.text-underline-offset.enabled Bug [1682295](https://bugzilla.mozilla.org/show_bug.cgi?id=1682295) - Remove some text-decoration prefs that are always on. * layout.css.text-underline-position.enabled Bug [1682295](https://bugzilla.mozilla.org/show_bug.cgi?id=1682295) - Remove some text-decoration prefs that are always on. * layout.css.unknown-webkit-pseudo-element Bug [1685917](https://bugzilla.mozilla.org/show_bug.cgi?id=1685917) - Remove layout.css.unknown-webkit-pseudo-element. * layout.css.xul-tree-pseudos.content.enabled Bug [1603455](https://bugzilla.mozilla.org/show_bug.cgi?id=1603455) - Remove layout.css.xul-tree-pseudos.content.enabled. * media.peerconnection.dtls.version.min Bug [1686573](https://bugzilla.mozilla.org/show_bug.cgi?id=1686573): set minimum DTLS version to 1.2. Bug [1657808](https://bugzilla.mozilla.org/show_bug.cgi?id=1657808): Keep DTLS 1.0 in Release and restrict DTLS 1.3 to Nightly. Bug [1641308](https://bugzilla.mozilla.org/show_bug.cgi?id=1641308): increasing minimum DTLS version from 1.0 to 1.2. * media.videocontrols.keyboard-tab-to-all-controls Bug [494175](https://bugzilla.mozilla.org/show_bug.cgi?id=494175) part 1: Add a pref to control whether all of the video controls are included in the tab order (default false for now). * media.videocontrols.picture-in-picture.allow-multiple Bug [1687477](https://bugzilla.mozilla.org/show_bug.cgi?id=1687477): Enable multiple Picture-in-Picture support by default Bug [1589680](https://bugzilla.mozilla.org/show_bug.cgi?id=1589680): Added support for multiple, concurrent Picture-in-Picture windows * media.wmf.disable-d3d11-for-dlls Bug [1678684](https://bugzilla.mozilla.org/show_bug.cgi?id=1678684) - Initialize DXVA on the media thread, remove the mostly-unused dll blocklist, and the crashguard. * media.wmf.disable-d3d9-for-dlls Bug [1678684](https://bugzilla.mozilla.org/show_bug.cgi?id=1678684) - Initialize DXVA on the media thread, remove the mostly-unused dll blocklist, and the crashguard. * network.cache.frecency_array_check_enabled Bug [1662676](https://bugzilla.mozilla.org/show_bug.cgi?id=1662676) - Enable diagnostic assertion on early beta. * network.http.spdy.bug1556491 Bug [1579064](https://bugzilla.mozilla.org/show_bug.cgi?id=1579064) - Remove preferences for bug fixes 1563695 and 1556491. * network.http.spdy.bug1563695 Bug [1579064](https://bugzilla.mozilla.org/show_bug.cgi?id=1579064) - Remove preferences for bug fixes 1563695 and 1556491. * privacy.window.name.update.enabled Bug [1685089](https://bugzilla.mozilla.org/show_bug.cgi?id=1685089) - Enable window.name resetting. * prompts.contentPromptSubDialog Bug [1680637](https://bugzilla.mozilla.org/show_bug.cgi?id=1680637) - Add a dialog manager for content prompts in TabDialogBox * prompts.tab_modal.enabled Bug [1639218](https://bugzilla.mozilla.org/show_bug.cgi?id=1639218) - Remove prompts.tab_modal.enabled pref. * remote.enabled Bug [1606604](https://bugzilla.mozilla.org/show_bug.cgi?id=1606604) - [remote] Build the remote agent on all release channels. * security.csp.truncate_blocked_uri_for_frame_navigations Bug [1542194](https://bugzilla.mozilla.org/show_bug.cgi?id=1542194): Update blocked-uri in CSP reporting by treating frame naviations as redirects. * security.ssl.errorReporting.automatic Bug [1681839](https://bugzilla.mozilla.org/show_bug.cgi?id=1681839) - remove nsISecurityReporter and implementation * security.ssl.errorReporting.enabled Bug [1681839](https://bugzilla.mozilla.org/show_bug.cgi?id=1681839) - remove nsISecurityReporter and implementation * security.ssl.errorReporting.url Bug [1681839](https://bugzilla.mozilla.org/show_bug.cgi?id=1681839) - remove nsISecurityReporter and implementation * svg.transform-box.enabled Bug [1687136](https://bugzilla.mozilla.org/show_bug.cgi?id=1687136) - remove svg.transform-box.enabled pref * webgl.disable-fail-if-major-performance-caveat Bug [1678652](https://bugzilla.mozilla.org/show_bug.cgi?id=1678652) - Disable failIfMajorPerformanceCaveat by default. * webgl.out-of-process Bug [1642621](https://bugzilla.mozilla.org/show_bug.cgi?id=1642621) - Rollout webgl.out-of-process:true with 86 (mac+win). Bug [1669530](https://bugzilla.mozilla.org/show_bug.cgi?id=1669530) - Pref on webgl.out-of-process for Win nightly/dev. Bug [1669531](https://bugzilla.mozilla.org/show_bug.cgi?id=1669531) - Pref on webgl.out-of-process for Mac nightly/dev. Bug [1669532](https://bugzilla.mozilla.org/show_bug.cgi?id=1669532) - Pref on webgl.out-of-process for Lin nightly/dev. * widget.remote-look-and-feel Bug [1683204](https://bugzilla.mozilla.org/show_bug.cgi?id=1683204) - Include content theme configuration details in FullLookAndFeel. Bug [1683204](https://bugzilla.mozilla.org/show_bug.cgi?id=1683204) - Disable the RemoteLookAndFeel for regressing dark Gtk themes when the non-native theme is not enabled. Bug [1470983](https://bugzilla.mozilla.org/show_bug.cgi?id=1470983) - Remote all LookAndFeel values for the Gtk backend.

gitthehubs commented 3 years ago

A few days ago I came across the following article. Although it might not lead to some changes in the user.js I just thought you might be interested to read and know about it:

New browser-tracking hack works even when you flush caches or go incognito https://arstechnica.com/information-technology/2021/02/new-browser-tracking-hack-works-even-when-you-flush-caches-or-go-incognito/

Although Firefox isn't affected because of a bug in Firefox, it will depend on how Mozilla fix this and if Firefox is or is not affected by this after the fix. Because other browsers are fixing the issue, I assume Mozilla will fix it the right way in Firefox. Else the following would fix it:

/* 1031: disable favicons in history and bookmarks
 * Stored as data blobs in favicons.sqlite, these don't reveal anything that your
 * actual history (and bookmarks) already do. Your history is more detailed, so
 * control that instead; e.g. disable history, clear history on close, use PB mode
 * [NOTE] favicons.sqlite is sanitized on Firefox close, not in-session ***/
   // user_pref("browser.chrome.site_icons", false);
user_pref("browser.chrome.site_icons", false);

And to make a little correction to the preference description, this setting also disables the website icon in the page tab. :)

rusty-snake commented 3 years ago

1096

gitthehubs commented 3 years ago

1096

👍🏻 Didn't knew this. And because I didn't want to open an issue for it I ended up placing it here. 😄