Better Fox Versions Save

Firefox user.js for speed, privacy, and security. Your favorite browser, but better.

122.1

2 months ago

:mega: Release Notes

120.0

2 months ago

:mega: Release Notes

Firefox Nightly users: Smoothfox settings do not account for general.smoothScroll.msdPhysics.enabled being enabled by default in Nightly v.122+. You will need to disable that pref. If it gets push to the stable build, I'll have to adjust the first three configurations in Smoothfox.

:fox_face: Firefox Releases

Nothing too crazy for the past few releases.

120.0 +120.0.1 121.0 +121.0.1 122.0 +122.0.1

But we did get:

Let's see what happens!

:heartpulse: Community Updates

Special thanks to our new sponsors! 🎊

If you benefit from the guides I've curated, please consider becoming a sponsor. I want to be able to focus on projects like this full-time.

In other news: I have a project to release soon :eyes:. I was hoping to have it out sooner, but there were delays. I hope to release it in a month or two. :sparkles:

As always, thank you for supporting Betterfox! :heart:

119.0

6 months ago

:mega: Release Notes

As Betterfox evolves, we are becoming more modular to respond to different needs. What is “best” depends on the use case.

Therefore, all users should, at minimum:

  1. Review Common Overrides.
  2. If you care a bit more about privacy, review Optional Hardening as well.

Add any prefs that are needed to your overrides at the bottom of the user.js file.

We invested effort into eliminating subjective prefs and responding to community feedback.

For new profiles applying Betterfox, we will:

  • :new: No longer disable Firefox Sync.
    • On everything from YouTube videos to Reddit to forums, this was the most common complaint among users.
    • If you want to continue to force this behavior, see here in Optional Hardening.
  • :new: No longer force disable the disk cache.
    • A sizeable amount of users still run a machine with 8GB or less RAM, or have bad internet speeds.
    • If you want to continue to force this behavior, see here in Optional Hardening.
    • We continue to enforce memory-only media cache in Private Browsing windows.
    • We also added bytecode compression. https://github.com/yokoffing/Betterfox/issues/247
  • No longer disable displaying your top sites when clicking on the URL bar, which is unique to Firefox.

We will continue to:

  • Disable the built-in password, credit card, and address manager.
    • However, we added a few prefs to enhance security in the user.js for users who do use the built-in credential manager.
    • If you want to use the built-in manager, see here in Common Overrides.

In addition, we:

  • Adjusted cookie banner handling to reject "optional" cookies.
  • Disabled new "trending" searches in the URL bar.
  • Reorder some prefs and added more subcategories for easier searching.
  • Modified SameSite rules so they’re strict on non-http websites.
Click me for details on SameSite rules

The SameSite cookie attribute is a way to control when and how cookies are sent to a website.

The SameSite attribute lets websites specify whether they want to receive cookies only from requests that originate from the same website (SameSite=Strict), or also from requests that originate from other websites but are top-level navigations, such as clicking a link or typing a URL in the address bar (SameSite=Lax). Alternatively, websites can explicitly allow cookies to be sent with any request, regardless of where it comes from (SameSite=None).

However, allowing cookies to be sent with any request can be risky, especially if the website uses an insecure connection (HTTP instead of HTTPS).

If a cookie does not have a SameSite attribute specified, it behaves as if SameSite=None is set. This means the cookie will be sent in both cross-site and same-site requests.

The network.cookie.sameSite.noneRequiresSecure pref changes this behavior. When enabled, it requires cookies with SameSite=None to also be marked Secure, meaning they require HTTPS.

This prevents CSRF (cross-site request forgery) attacks on plain HTTP sites. By requiring SameSite=None cookies to be Secure, it prevents malicious sites from abusing these cookies that get sent cross-site.

:fox_face: Firefox Release

119.0 +119.0.1

The latest Firefox brings:

:heartpulse: Community Updates

  • The Optional Hardening doc is now shown more prominently under Getting Started to accommodate more privacy-minded users.

:bulb: If you think an override is common enough to belong to Common Overrides or Optional Hardening, then please make a suggestion. We obviously don't want to re-create the docs, so prefs here should be reasonable.

Thank you for supporting Betterfox! ❤️

118.0

7 months ago

:fox_face: Firefox Release

:white_check_mark: Community Updates

  • Betterfox has reached over 2000 :star: since the last release. Thank you for the support!
  • :exclamation: Please vote and comment on whether we should continue to disable Firefox Sync by default.

:memo: Release Notes

v.118 changes

  • Recent updates have removed the need for accessibility.force_disabled. People who use assistive technology no longer need to override this pref to use Betterfox.
    • See https://github.com/arkenfox/user.js/issues/1728 for more info.
  • Removed browser.tabs.loadBookmarksInTabs — a common complaint by users — which forced bookmarks to open in a new tab and not the current tab.
    • Just like links, you can Ctrl/Cmd + Right click to open bookmarks in new tabs, or add this pref as an override.
  • Removed permissions.delegation.enabled as it's depreciated in FF118+.
  • Thanks @alana-glitch for updating the pref for the UI setting: "Ctrl+Tab cycles through tabs in recently used order". #230
  • Thanks again to @alana-glitch for pointing out that the modes for DNS-over-HTTPS needed updating. #229

117.0

7 months ago

:fox_face: Firefox Release Notes

:spiral_notepad: Changelog

https://github.com/yokoffing/Betterfox/commit/0334bea9721fa734506160f0770515817c094972

:memo: Betterfox Release Notes

  • enabled HTML Sanitizer API
  • removed depreciated pref browser.privatebrowsing.enable-new-indicator
  • minor adjustments to documentation

116.1

8 months ago

:memo: Release Notes

user.js Version: 116.1 / esr115.1

Fixes

116.0

8 months ago

:fox_face: Firefox Release

:white_check_mark: Community Updates

  • Betterfox has blasted off from 800 to 1800 :star: in the last two months :fire: :rocket: :moon: Thank you for the support!
  • :new: We now have an ESR branch :tada:
  • Betterfox is an optional install in the Floorp browser :confetti_ball:
  • :new: Betterfox is now used in Waterfox, starting in G6 Beta 3 :sweat_drops:
    • Special thanks to Alex Kronos for helping us optimize prefs for performance and privacy :pray:

:memo: Release Notes

General

  • Fast, Secure, and Pesky all received a facelift to their documentation, esp. the former two
  • The README is now more streamlined, with easy download instructions for new users
  • While still WiP, we are making more use of the wiki

Fixes

  • Added note in the user.js for Windows users to manually enable gfx.canvas.accelerated
    • Caused issues for Windows users with integrated GPUs.
  • removed default-browser-agent.enabled as it breaks the Make Default... button in the Firefox UI
  • improved network.dnsCacheExpiration for longer browsing sessions: set to 86400 (1 day)

Fastfox

  • removed ineffective or unnecessary tweaks for performance
    • If your machine has > 8GB, then you're welcome to go through the Fastfox and increase values.
  • added new network enhancements
  • :new: disabled HTTP request pacing
  • Speculative Connections category was moved from Securefox to Fastfox

Securefox

  • strengthened secure connections:
    • enabled security.mixed_content.block_display_content
    • enabled security.ssl.require_safe_negotiation
    • see possible error codes
  • removed out-of-scope categories and prefs:
    • PROXY / SOCKS / IPv6 category
    • geolocation category
    • browser.sessionstore.privacy_level pref
  • removed privacy.query_stripping.strip_list as the params are default in Firefox

Peskyfox

  • :new: Firefox will now ask to translate pages in certain foreign languages :speech_balloon:
    • Set Firefox to auto-translate pages by adding user_pref("browser.translations.autoTranslate", true); to your overrides.
      • You can disable translations for specific languages or pages in URL bar.
  • :new: disabled focus indicator for links
  • disabled browser.aboutConfig.showWarning
  • disabled browser.privateWindowSeparation.enabled (affects Windows only AFAIK)

116.0beta

8 months ago

:fox_face: Firefox Release Notes

:white_check_mark: Community Updates

  • We have blasted off from 800 to 1700 :star: in a little over a month :fire: :rocket: :moon:
    • Thank you for the support!
  • Discussions tab is now open so that Issues will be used for... issues. :upside_down_face:
  • As of April 2023, Betterfox is an optional install in the Floorp browser. :confetti_ball:

:memo: Release Notes

General

  • Fast, Secure, and Pesky all received a facelift to their documentation, esp. the former two.
  • The README is now more streamlined, with a few more tweaks to come.
    • I created an easy 4-step guide to install the user.js file (after watching others suggest a lot of convoluted ways for mainstream users to do this).
  • While still WiP, we are making more use of the wiki.

Fastfox

  • commented out gfx.canvas.accelerated (default on macOS Linux but not Windows)
    • Added note in the user.js for Windows users to manually enable.
    • Caused issues for Windows users with integrated GPUs.
  • improved network.dnsCacheExpiration for longer browsing sessions: set to 86400 (1 day).
  • removed layout.css.animation-composition.enabled (default FF115+).
  • removed ineffective or unnecessary tweaks for performance.
  • added new network enhancements.
  • Speculative Connections category was moved from Securefox to Fastfox.
  • Prefs surrounding Firefox caches will likely change.
    • Currently investigating what is optimal for the average PC.

Securefox

  • enabled security.mixed_content.block_display_content
  • enabled security.ssl.require_safe_negotiation
  • removed PROXY / SOCKS / IPv6 category from the user.js (out of scope).
  • removed prefs that disabled geolocation from the user.js (out of scope).
  • removed default-browser-agent.enabled as it breaks the Make Default... button in the Firefox UI.
  • removing browser.sessionstore.privacy_level from the user.js in the next release (out of scope).

Peskyfox

  • added browser.translations.enable
    • Firefox will now ask to translate pages in certain foreign languages :speech_balloon:
    • Set Firefox to auto-translate pages by adding user_pref("browser.translations.autoTranslate", true); to your overrides.
      • You can disable translations for specific languages or pages in URL bar.
  • disabled browser.aboutConfig.showWarning
  • disabled browser.privateWindowSeparation.enabled (Windows only pref)

115.0

10 months ago

:fox_face: Firefox Release

:white_check_mark: Betterfox Updates

  • Thanks for helping Betterfox reach over 800 :star:!
  • Betterfox received enough word-of-mouth on r/Firefox that we have our own AutoModerator message :laughing: :fire: :fire:
    • This was before r/Firefox mods started throwing a fit about the API changes. (RIP Apollo and my mobile Reddit usage.)
    • Check out m/firefox (Fedia) if you'd like a return to sanity.
  • There's hardly anything to tweak in the recent releases, which is why you haven't seen any user.js updates in a few months. But that's not a bad thing!
    • There are some interesting features coming down the pipeline.
    • And Firefox 115 ushered in a new ESR base.
      • FF115 migrates users of Windows 7/8 and macOS 10.12/13/14 to Firefox ESR.
  • I've reported ETP Strict breaking more sites (bugs 1804486 1836071 1817656).
    • In the future, I may change Betterfox over to ETP Custom to use the more relaxed internal Disconnect blocklist.
    • You can easily modify which internal blocklist is used and change it to lvl1.
      • Unfortunately, Nightly forces the lvl2 list when using ETP Strict, even if you change the pref. No luck there.

:memo: Release Notes

  • enabled Cookie Banner Handling to dismiss annoying cookie pop-ups where Mozilla has created rules for them.
    • This feature still enforces Total Cookie Protection to limit cross-site cookie tracking, even if you Accept all cookies on a page.
    • Betterfox prioritizes hiding the banners since Firefox already blocks extraneous cookies unless needed.

112.0

1 year ago

Betterfox 112

:fox_face: Firefox Release

:white_check_mark: Betterfox Updates

:memo: Release Notes

  • Removed user_pref("layout.forms.reveal-password-context-menu", true); since it's now default in v.112.
  • Completely disable "website is now full screen" message, instead of only hiding it.
    • Restore previous behavior by using user_pref("full-screen-api.warning.delay", -1); in your overrides.
  • Preventing window changes sometimes breaks enterprise applications, so we've removed these prefs:
    • user_pref("browser.link.open_newwindow.restriction", 0);
    • user_pref("dom.disable_window_move_resize", true);
      • We’ll evaluate the latter pref again and possibly restore it in the future.

:desktop_computer: Keyword Summary

  • removed = change applies only to new profiles; you must manually reset the pref in your current Firefox profile
  • reset = change applies to current and new profiles