Ghacks User.js Versions Save

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening

108.0

1 year ago

🟦 links: FF108 release notes | FF108 for developers | FF108 security advisories

🟪 issues: diffs FF107-FF108 | changelog v108

🟩 changelog summary

  • new
    • user_pref("browser.urlbar.showSearchTerms.enabled", false);
  • removed (now inactive in section 6050 for prefsCleaner)
    • // user_pref("beacon.enabled", "");
    • // user_pref("browser.region.update.enabled", "");
  • removed
    • // user_pref("browser.search.region", "US");

107.0

1 year ago

🟦 links: FF107 release notes | FF107 for developers | FF107 security advisories

🟪 issues: diffs FF106-FF107 | changelog v107

🟩 changelog summary

  • made inactive
    • // user_pref("browser.region.network.url", "");
    • // user_pref("browser.uitour.url", "");
    • // user_pref("security.mixed_content.block_display_content", true);
  • removed (now inactive in section 6050 for prefsCleaner)
    • // user_pref("dom.disable_open_during_load", "");

106.0

1 year ago

🟦 links: FF106 release notes | FF106 for developers | FF106 security advisories

🟪 issues: diffs FF105-FF106 | changelog v106

🟩 changelog summary

  • removed (now inactive in section 6051 for prefsCleaner)
    • // user_pref("browser.ssl_override_behavior", 1);
    • // user_pref("devtools.chrome.enabled", false);
    • // user_pref("dom.disable_beforeunload", true);
  • removed: was active, moved to personal, removed with personal
    • user_pref("browser.shell.checkDefaultBrowser", false);
  • removed: 69 inactive prefs
    • 12 prefs [were in 6050] // previously active during ESR91 cycle
    • 3 prefs [were in 8000] // at default false since at least FF102
    • 41 prefs [were in 9000] // non-project related prefs
    • 13 prefs [were in 9999] // deprecated during ESR91 life-cycle

105.0

1 year ago

🟦 links: FF105 release notes | FF105 for developers | FF105 security advisories

🟪 issues: diffs FF104-FF105 | changelog v105

🟩 changelog summary

  • new
    • user_pref("privacy.partition.always_partition_third_party_non_cookie_storage.exempt_sessionstorage", false);
  • made inactive
    • // user_pref("browser.newtabpage.activity-stream.feeds.section.topstories", false);
    • // user_pref("browser.newtabpage.activity-stream.section.highlights.includePocket", false);
    • // user_pref("browser.sessionstore.interval", 30000);
    • // user_pref("network.http.windows-sso.enabled", false);
  • removed (now inactive in section 6051 for prefsCleaner)
    • user_pref("browser.newtab.preload", false);
    • user_pref("browser.newtabpage.activity-stream.feeds.discoverystreamfeed", false);
    • user_pref("browser.newtabpage.activity-stream.feeds.snippets", false);

104.0

1 year ago

🟦 links: FF104 release notes | FF104 for developers | FF104 security advisories

🟪 issues: diffs FF103-FF104 | changelog v104

🟩 changelog summary

  • new
    • user_pref("privacy.partition.always_partition_third_party_non_cookie_storage", true);
  • made inactive
    • user_pref("extensions.formautofill.addresses.enabled", false);
    • user_pref("extensions.formautofill.creditCards.enabled", false);
    • user_pref("extensions.formautofill.heuristics.enabled", false);
    • user_pref("extensions.formautofill.available", "");
    • user_pref("extensions.formautofill.addresses.supported", "");
    • user_pref("extensions.formautofill.creditCards.available", "");
    • user_pref("extensions.formautofill.creditCards.supported", "");
    • user_pref("gfx.font_rendering.opentype_svg.enabled", false);

103.0

1 year ago

🟦 links: FF103 release notes | FF103 for developers | FF103 security advisories

🟪 issues: diffs FF102-FF103 | changelog v103

🟩 changelog summary

  • new
    • user_pref("geo.provider.use_geoclue", false);
  • changed
    • user_pref("privacy.clearOnShutdown.cookies", true);
    • user_pref("privacy.clearOnShutdown.offlineApps", true);
  • made inactve
    • user_pref("media.autoplay.blocking_policy", 2);
  • deprecated
    • user_pref("network.cookie.lifetimePolicy", 2);
    • user_pref("security.pki.sha1_enforcement_level", 1);

102.1

1 year ago

🟦 links: FF102 release notes | FF102 for developers | FF102 security advisories

🟪 issues: diffs FF101-FF102 | changelog v102

  • see #1495
  • FF102 mistakenly left in the migration code for network.cookie.lifetimePolicy (effectively making it deprecated), but backed that out in FF102.0.1. But there are still issues, and we want this, the ESR102 user.js version, to be stable for ESR users (and current FF102 users) - namely, when sanitizing onShutdown fails (crash, ungraceful app exit, closing the app with the OS, whatever) it triggers a sanitize onStartup fail-safe, which does not respect exceptions. This is fixed in FF103.

🟩 changelog from 102

  • changed
    • user_pref("privacy.clearOnShutdown.cookies", false);
    • user_pref("privacy.clearOnShutdown.offlineApps", false);
  • not deprecated
    • user_pref("network.cookie.lifetimePolicy", 2);

102.0

1 year ago

OBSOLETE: use v102-1

🟦 links: FF102 release notes | FF102 for developers | FF102 security advisories

🟪 issues: diffs FF101-FF102 | changelog v102

🟩 changelog summary

  • changed
    • user_pref("privacy.clearOnShutdown.cookies", true); reverted in v102-1
    • user_pref("privacy.clearOnShutdown.offlineApps", true); reverted in v102-1
  • deprecated
    • user_pref("dom.storage.next_gen", true);
    • user_pref("network.cookie.lifetimePolicy", 2); reverted in v102-1
    • user_pref("security.ask_for_password", 2);
    • user_pref("security.password_lifetime", 5);

101.0

1 year ago

🟦 links: FF101 release notes | FF101 for developers | FF101 security advisories

🟪 issues: diffs FF100-FF101 | changelog v101

🟩 changelog summary

  • new
    • // user_pref("privacy.query_stripping.enabled", true);
  • removed
    • user_pref("browser.urlbar.trimURLs", false);
    • user_pref("dom.targetBlankNoOpener.enabled", true);
    • user_pref("network.cookie.thirdparty.sessionOnly", true);
    • user_pref("network.cookie.thirdparty.nonsecureSessionOnly", true);
    • user_pref("privacy.window.name.update.enabled", true);

100.0

2 years ago

🟦 links: FF100 release notes | FF100 for developers | FF100 security advisories

🟪 issues: diffs FF99-FF100 | changelog v100

🟩 changelog summary

  • new
    • user_pref("browser.download.always_ask_before_handling_new_types", true); // FF101+
    • // user_pref("network.http.referer.disallowCrossSiteRelaxingDefault.top_navigation", true);
  • deprecated
    • 4 x network.http.spdy* prefs - replaced by network.http.http2* prefs (not added to arkenfox)