search

pyllyukko / user.js

user.js -- Firefox configuration hardening
MIT License
2.76k stars 232 forks source link

Disable JavaScript JIT #373

Open ghost opened 6 years ago

ghost commented 6 years ago

Has that been considered for inclusion?

https://trac.torproject.org/projects/tor/ticket/21011

Atavic commented 6 years ago 
javascript.options.baselinejit.content
javascript.options.ion.content

Set to false harden the browser and may cause problems with heavy JS Scripts.

ghost commented 6 years ago

Define "problems" please.

Generally I have JS disabled completely and enable it on specific sites only (and temporarily, in a dedicated window, without running any other apps while doing that, hopefully to avoid potential Spectre attacks).

So in such a scenario - is there any benefit in hardening those prefs?

Atavic commented 6 years ago

Benefits are that some potential exploits are blocked:

https://packetstormsecurity.com/files/cve/CVE-2016-9079 https://packetstormsecurity.com/files/cve/CVE-2017-5375

pyllyukko commented 6 years ago

Has that been considered for inclusion?

It is now. Thanks.

Atavic commented 6 years ago

Wait! @pyllyukko these entries are not present in latest firefox. My Fault, @earthlng