From 4b75f957f9c40a564c270614add472db3d3df9fa Mon Sep 17 00:00:00 2001 From: yokoffing <11689349+yokoffing@users.noreply.github.com> Date: Fri, 10 Nov 2023 11:44:04 -0500 Subject: [PATCH] v119 (#237) --- Fastfox.js | 613 ++++++++++++++++++++----------------- Peskyfox.js | 189 +++++++----- README.md | 53 ++-- Securefox.js | 368 +++++++++++----------- Smoothfox.js | 31 +- personal/user-overrides.js | 56 ++-- user.js | 106 ++++--- 7 files changed, 775 insertions(+), 641 deletions(-) diff --git a/Fastfox.js b/Fastfox.js index 2ffcd4470..a6294355d 100644 --- a/Fastfox.js +++ b/Fastfox.js @@ -3,62 +3,24 @@ * Fastfox * * "Non ducor duco" * * priority: speedy browsing * - * version: 118 * + * version: 119 * * url: https://github.com/yokoffing/Betterfox * ***************************************************************************************/ - -// PREF: process count -// [ABOUT] View in about:processes. -// With Firefox Quantum (2017), CPU cores = processCount. However, since the -// introduction of Fission [2], the number of website processes is controlled -// by processCount.webIsolated. Disabling fission.autostart or changing -// fission.webContentIsolationStrategy reverts control back to processCount. -// [1] https://www.reddit.com/r/firefox/comments/r69j52/firefox_content_process_limit_is_gone/ -// [2] https://firefox-source-docs.mozilla.org/dom/ipc/process_model.html#web-content-processes -//user_pref("dom.ipc.processCount", 8); // DEFAULT; Shared Web Content -//user_pref("dom.ipc.processCount.webIsolated", 1); // default=4; Isolated Web Content - -// PREF: use one process for process preallocation cache -//user_pref("dom.ipc.processPrelaunch.fission.number", 1); // default=3; Process Preallocation Cache - -// PREF: configure process isolation -// [1] https://hg.mozilla.org/mozilla-central/file/tip/dom/ipc/ProcessIsolation.cpp#l53 -// [2] https://www.reddit.com/r/firefox/comments/r69j52/firefox_content_process_limit_is_gone/ - -// OPTION 1: isolate all websites -// Web content is always isolated into its own `webIsolated` content process -// based on site-origin, and will only load in a shared `web` content process -// if site-origin could not be determined. -//user_pref("fission.webContentIsolationStrategy", 1); // DEFAULT -//user_pref("browser.preferences.defaultPerformanceSettings.enabled", true); // DEFAULT - //user_pref("dom.ipc.processCount.webIsolated", 1); // one process per site origin - -// OPTION 2: isolate only "high value" websites -// Only isolates web content loaded by sites which are considered "high -// value". A site is considered high value if it has been granted a -// `highValue*` permission by the permission manager, which is done in -// response to certain actions. -//user_pref("fission.webContentIsolationStrategy", 2); -//user_pref("browser.preferences.defaultPerformanceSettings.enabled", false); - //user_pref("dom.ipc.processCount.webIsolated", 1); // one process per site origin (high value) - //user_pref("dom.ipc.processCount", 8); // determine by number of CPU cores/processors -// OPTION 3: do not isolate websites -// All web content is loaded into a shared `web` content process. This is -// similar to the non-Fission behavior; however, remote subframes may still -// be used for sites with special isolation behavior, such as extension or -// mozillaweb content processes. -//user_pref("fission.webContentIsolationStrategy", 0); -//user_pref("browser.preferences.defaultPerformanceSettings.enabled", false); - //user_pref("dom.ipc.processCount", 8); // determine by number of CPU cores/processors +/**************************************************************************** + * SECTION: GENERAL * +****************************************************************************/ // PREF: initial paint delay -// How long FF will wait before rendering the page, in milliseconds -// Reduce the 5ms Firefox waits to render the page +// How long FF will wait before rendering the page (in ms) +// [NOTE] Older PCs may want to use 250-750. +// [NOTE] Dark Reader users may want to use 1000-2000 [3]. // [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1283302 // [2] https://docs.google.com/document/d/1BvCoZzk2_rNZx3u9ESPoFjSADRI0zIPeJRXFLwWXx_4/edit#heading=h.28ki6m8dg30z -user_pref("nglayout.initialpaint.delay", 0); // default=5; used to be 250 -user_pref("nglayout.initialpaint.delay_in_oopif", 0); // default=5 +// [3] https://old.reddit.com/r/firefox/comments/o0xl1q/reducing_cpu_usage_of_dark_reader_extension/ +// [4] https://reddit.com/r/browsers/s/wvNB7UVCpx +//user_pref("nglayout.initialpaint.delay", 5); // DEFAULT; formerly 250 + //user_pref("nglayout.initialpaint.delay_in_oopif", 5); // DEFAULT // PREF: page reflow timer // Rather than wait until a page has completely downloaded to display it to the user, @@ -111,108 +73,7 @@ user_pref("content.notify.interval", 100000); // (.10s); default=120000 (.12s) //user_pref("browser.sessionstore.restore_tabs_lazily", true); // DEFAULT // PREF: disable preSkeletonUI on startup [WINDOWS] -//user_pref("browser.startup.preXulSkeletonUI", false); // WINDOWS - -/**************************************************************************** - * SECTION: TAB UNLOAD * -****************************************************************************/ - -// PREF: unload tabs on low memory -// [ABOUT] about:unloads -// Firefox will detect if your computer’s memory is running low (less than 200MB) -// and suspend tabs that you have not used in awhile. -// [1] https://support.mozilla.org/en-US/kb/unload-inactive-tabs-save-system-memory-firefox -// [2] https://hacks.mozilla.org/2021/10/tab-unloading-in-firefox-93/ -//user_pref("browser.tabs.unloadOnLowMemory", true); // DEFAULT - -// PREF: determine when tabs unload [WINDOWS] [LINUX] -// Notify TabUnloader or send the memory pressure if the memory resource -// notification is signaled AND the available commit space is lower than -// this value. -// Set this to some high value, e.g. 2/3 of total memory available in your system: -// 4GB=2640, 8GB=5280, 16GB=10560, 32GB=21120, 64GB=42240 -// [1] https://dev.to/msugakov/taking-firefox-memory-usage-under-control-on-linux-4b02 -//user_pref("browser.low_commit_space_threshold_mb", 2640); // default=200; WINDOWS LINUX - -// PREF: determine when tabs unload [LINUX] -// On Linux, Firefox checks available memory in comparison to total memory, -// and use this percent value (out of 100) to determine if Firefox is in a -// low memory scenario. -// [1] https://dev.to/msugakov/taking-firefox-memory-usage-under-control-on-linux-4b02 -//user_pref("browser.low_commit_space_threshold_percent", 33); // default=5; LINUX - -// PREF: determine how long (in ms) tabs are inactive before they unload -// 60000=1min; 300000=5min; 600000=10min (default) -//user_pref("browser.tabs.min_inactive_duration_before_unload", 300000); // 5min; default=600000 - -/**************************************************************************** - * SECTION: EXPERIMENTAL * -****************************************************************************/ - -// PREF: CSS Masonry Layout [NIGHTLY] -// [1] https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_Grid_Layout/Masonry_Layout -user_pref("layout.css.grid-template-masonry-value.enabled", true); - -// PREF: Prioritized Task Scheduling API [NIGHTLY] -// [1] https://blog.mozilla.org/performance/2022/06/02/prioritized-task-scheduling-api-is-prototyped-in-nightly/ -// [2] https://medium.com/airbnb-engineering/building-a-faster-web-experience-with-the-posttask-scheduler-276b83454e91 -user_pref("dom.enable_web_task_scheduling", true); - -// PREF: CSS :has() selector [NIGHTLY] -// Needed for some extensions, filters, and customizations. -// [1] https://developer.mozilla.org/en-US/docs/Web/CSS/:has -// [2] https://caniuse.com/css-has -user_pref("layout.css.has-selector.enabled", true); - -// PREF: HTML Sanitizer API [NIGHTLY] -// [1] https://developer.mozilla.org/en-US/docs/Web/API/Sanitizer -// [2] https://caniuse.com/mdn-api_sanitizer -user_pref("dom.security.sanitizer.enabled", true); - -// PREF: Shadowrealms [NIGHTLY] -// [1] https://github.com/tc39/proposal-shadowrealm/blob/main/explainer.md#introduction -//user_pref("javascript.options.experimental.shadow_realms", true); - -// PREF: Wasm GC [NIGHTLY] -// WASM GC refers to garbage collection for WebAssembly. Garbage collection is a mechanism -// to automatically free up memory that is no longer being used by a program. This helps -// manage memory and prevent memory leaks. -// [1] https://github.com/WebAssembly/gc/blob/main/proposals/gc/Overview.md -//user_pref("javascript.options.wasm_gc", true); - -// PREF: WASM Function References [NIGHTLY] -// [1] https://github.com/WebAssembly/function-references/blob/master/proposals/function-references/Overview.md -//user_pref("javascript.options.wasm_function_references", true); - -// PREF: import assertions [NIGHTLY] -//user_pref("javascript.options.experimental.import_assertions", true); - -// PREF: Array.fromAsync [NIGHTLY] -// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1795452 -//user_pref("javascript.options.experimental.array_grouping", true); - -// PREF: scroll-driven animations [NIGHTLY] -// [1] https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Experimental_features#scroll-driven_animations -// [2] https://developer.chrome.com/articles/scroll-driven-animations/ -// [3] https://developer.chrome.com/en/blog/scroll-animation-performance-case-study/ -//user_pref("layout.css.scroll-driven-animations.enabled", true); - -// PREF: WebGPU [HIGHLY EXPERIMENTAL!] -// [WARNING] Do not enable unless you are a web developer! -// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1746245 -// [2] https://developer.chrome.com/docs/web-platform/webgpu/ -// [3] https://github.com/gpuweb/gpuweb/wiki/Implementation-Status -// [4] https://hacks.mozilla.org/2020/04/experimental-webgpu-in-firefox/ -//user_pref("dom.webgpu.enabled", true); - //user_pref("gfx.webgpu.force-enabled", true); // enforce -// enable WebGPU indirect draws/dispatches: -//user_pref("dom.webgpu.indirect-dispatch.enabled", true); - -// PREF: WebCodecs API [NIGHTLY] -// [1] https://developer.mozilla.org/en-US/docs/Web/API/WebCodecs_API -// [2] https://groups.google.com/a/mozilla.org/g/dev-platform/c/3g0fnn6682A?pli=1 -// [3] https://w3c.github.io/webcodecs/samples/ -//user_pref("dom.media.webcodecs.enabled", true); +//user_pref("browser.startup.preXulSkeletonUI", false); /**************************************************************************** * SECTION: GFX RENDERING TWEAKS * @@ -235,9 +96,11 @@ user_pref("dom.security.sanitizer.enabled", true); //user_pref("gfx.webrender.software.opengl", true); // LINUX // PREF: NVIDIA RTX Video Super Resolution for video overlay [WINDOWS] +// [NOTE] May not work on Stable release [2]. // This is also a setting in NVIDIA's driver settings, so once this is // stable, it should default to true. // [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1823135 +// [2] https://www.reddit.com/r/firefox/comments/17a0noa/nvidia_video_super_resolution_not_working_on/ //user_pref("gfx.webrender.super-resolution.nvidia", true); // PREF: GPU-accelerated Canvas2D @@ -280,44 +143,109 @@ user_pref("dom.security.sanitizer.enabled", true); //user_pref("gfx.webrender.dcomp-video-sw-overlay-win-force-enabled", true); // enforce /**************************************************************************** - * SECTION: BROWSER CACHE * + * SECTION: DISK CACHE * ****************************************************************************/ // PREF: disk cache -// [NOTE] If you think disk cache helps performance, then feel free to override this. +// [NOTE] If you think it helps performance, then feel free to override this. // [SETTINGS] See about:cache -// [EXTENSION] https://addons.mozilla.org/en-US/firefox/addon/cache-longer/ // More efficient to keep the browser cache instead of having to // re-download objects for the websites you visit frequently. // [1] https://www.janbambas.cz/new-firefox-http-cache-enabled/ -user_pref("browser.cache.disk.enable", false); +//user_pref("browser.cache.disk.enable", true); // DEFAULT + +// PREF: disk cache size +// [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=913808,968106,968101 +// [2] https://rockridge.hatenablog.com/entry/2014/09/15/165501 +// [3] https://www.reddit.com/r/firefox/comments/17oqhw3/firefox_and_ssd_disk_consumption/ //user_pref("browser.cache.disk.smart_size.enabled", false); // force a fixed max cache size on disk - //user_pref("browser.cache.disk.capacity", 5120000); // size of disk cache; default=256000; 1024000 = 1 GB, 2048000=2GB, 5120000=5GB, 8192000=8GB -//user_pref("browser.cache.disk.max_entry_size", 51200); // 51.2 MB; DEFAULT; maximum size of an object in disk cache -//user_pref("browser.cache.disk.metadata_memory_limit", 750); // default=250; increase size (in KB) of intermediate memory caching of frequently used metadata (disk cache memory pool) -//user_pref("browser.cache.max_shutdown_io_lag", 4); // default=2; number of seconds the cache spends writing pending data and closing files after shutdown has been signalled - -// PREF: specify how long pages are kept before being removed from cache (in hours) -// Controls the time period used to re-compute the frecency value of cache entries. -// The frecency value determines how recently and frequently a page has been accessed -// and is used by Firefox's cache algorithm. -// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=913808 -// [2] https://bugzilla.mozilla.org/show_bug.cgi?id=968101 -// [3] https://rockridge.hatenablog.com/entry/2014/09/15/165501 -//user_pref("browser.cache.frecency_half_life_hours", 18); // default=6 +//user_pref("browser.cache.disk.capacity", 512000); // default=256000; size of disk cache; 1024000=1GB, 2048000=2GB +//user_pref("browser.cache.disk.max_entry_size", 51200); // DEFAULT (50 MB); maximum size of an object in disk cache + +// PREF: cache memory pool +// Cache v2 provides a memory pool that stores metadata (such as response headers) +// for recently read cache entries [1]. It is managed by a cache thread, and caches with +// metadata in the pool appear to be reused immediately. +// [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=986179 +//user_pref("browser.cache.disk.metadata_memory_limit", 500); // default=250 (0.25 MB); limit of recent metadata we keep in memory for faster access + +// PREF: number of chunks we preload ahead of read +// Large content such as images will load faster. +// [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=913819,988318 +// [2] http://www.janbambas.cz/new-firefox-http-cache-enabled/ +//user_pref("browser.cache.disk.preload_chunk_count", 4); // DEFAULT + +// PREF: the time period used to re-compute the frecency value of cache entries +// The frequency algorithm is used to select entries, and entries that are recently +// saved or frequently reused are retained. The frecency value determines how +// frequently a page has been accessed and is used by Firefox's cache algorithm. +// The frequency algorithm is used to select entries, and entries that are recently +// saved or frequently reused are retained. The frecency value determines how +// often a page has been accessed and is used by Firefox's cache algorithm. +// When the memory pool becomes full, the oldest data is purged. By default, +// data older than 6 hours is treated as old. +// [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=942835,1012327 +// [2] https://bugzilla.mozilla.org/buglist.cgi?bug_id=913808,968101 +//user_pref("browser.cache.frecency_half_life_hours", 6); // DEFAULT + +// PREF: memory limit (in kB) for new cache data not yet written to disk +// Writes to the cache are buffered and written to disk on background with low priority. +// With a slow persistent storage, these buffers may grow when data is coming +// fast from the network. When the amount of unwritten data is exceeded, new +// writes will simply fail. We have two buckets, one for important data +// (priority) like html, css, fonts and js, and one for other data like images, video, etc. +//user_pref("browser.cache.disk.max_chunks_memory_usage", 40960); // DEFAULT (40 MB) +//user_pref("browser.cache.disk.max_priority_chunks_memory_usage", 40960); // DEFAULT (40 MB) + +// PREF: how often to validate document in cache +// [1] https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#1092-1096 +// 0 = once-per-session +// 3 = when-appropriate/automatically (default) +//user_pref("browser.cache.check_doc_frequency, 3); // DEFAULT + +// PREF: enforce free space checks +// When smartsizing is disabled, we could potentially fill all disk space by +// cache data when the disk capacity is not set correctly. To avoid that, we +// check the free space every time we write some data to the cache. The free +// space is checked against two limits. Once the soft limit is reached we start +// evicting the least useful entries, when we reach the hard limit writing to +// the entry fails. +//user_pref("browser.cache.disk.free_space_soft_limit", 10240); // default=5120 (5 MB) +//user_pref("browser.cache.disk.free_space_hard_limit", 2048); // default=1024 (1 MB) + +// PREF: compression level for cached JavaScript bytecode [FF102+] +// [1] https://github.com/yokoffing/Betterfox/issues/247 +// 0 = do not compress (default) +// 1 = minimal compression +// 9 = maximal compression +user_pref("browser.cache.jsbc_compression_level", 3); + +// PREF: strategy to use for when the bytecode should be encoded and saved [TESTING ONLY] +// -1 makes page load times marginally longer when a page is being loaded for the first time. +// Subsequent reload of websites will be much much faster. +// [1] https://searchfox.org/mozilla-release/source/modules/libpref/init/StaticPrefList.yaml#3461-3488 +// [2] https://www.reddit.com/r/firefox/comments/12786yv/improving_performance_in_firefox_android_part_ii/ +// -1 = saved as soon as the script is seen for the first time, independently of the size or last access time +// 0 = saved in order to minimize the page-load time (default) +//user_pref("dom.script_loader.bytecode_cache.enabled", true); // DEFAULT +//user_pref("dom.script_loader.bytecode_cache.strategy", 0); // DEFAULT + +/**************************************************************************** + * SECTION: MEMORY CACHE * +****************************************************************************/ // PREF: memory cache // The "automatic" size selection (default) is based on a decade-old table // that only contains settings for systems at or below 8GB of system memory [1]. -// Waterfox G6 Beta 3 allows it to go above 8GB machines [3]. +// Waterfox G6 allows it to go above 8GB machines [3]. // Value can be up to the max size of an unsigned 64-bit integer. // -1=Automatically decide the maximum memory to use to cache decoded images, // messages, and chrome based on the total amount of RAM // [1] https://kb.mozillazine.org/Browser.cache.memory.capacity#-1 // [2] https://searchfox.org/mozilla-central/source/netwerk/cache2/CacheObserver.cpp#94-125 // [3] https://github.com/WaterfoxCo/Waterfox/commit/3fed16932c80a2f6b37d126fe10aed66c7f1c214 -//user_pref("browser.cache.memory.capacity", -1); // DEFAULT; 1048576=1GB, 2097152=2GB -//user_pref("browser.cache.memory.max_entry_size", 5120); // 5 MB DEFAULT; alt=25600; -1=entries bigger than than 90% of the mem-cache are never cached +//user_pref("browser.cache.memory.capacity", -1); // DEFAULT; 256000=256 MB; 512000=500 MB; 1048576=1GB, 2097152=2GB +//user_pref("browser.cache.memory.max_entry_size", 10240); // (10 MB); default=5120 (5 MB) // PREF: amount of Back/Forward cached pages stored in memory for each tab // Pages that were recently visited are stored in memory in such a way @@ -328,7 +256,7 @@ user_pref("browser.cache.disk.enable", false); // is no reason for Firefox to keep memory for this. // -1=determine automatically (8 pages) // [1] https://kb.mozillazine.org/Browser.sessionhistory.max_total_viewers#Possible_values_and_their_effects -//user_pref("browser.sessionhistory.max_total_viewers", 3); +//user_pref("browser.sessionhistory.max_total_viewers", 4); /**************************************************************************** * SECTION: MEDIA CACHE * @@ -407,76 +335,70 @@ user_pref("network.http.pacing.requests.enabled", false); //user_pref("network.http.pacing.requests.min-parallelism", 10); // default=6 //user_pref("network.http.pacing.requests.burst", 14); // default=10 -// PREF: how long to wait before trying a different connection when the initial one fails -// The number (in ms) after sending a SYN for an HTTP connection, -// to wait before trying again with a different connection. -// 0=disable the second connection -// [1] https://searchfox.org/mozilla-esr115/source/modules/libpref/init/all.js#1178 -// [2] https://www.catchpoint.com/blog/http-transaction-steps -//user_pref("network.http.connection-retry-timeout", 0); // default=250 - // PREF: increase DNS cache // [1] https://developer.mozilla.org/en-US/docs/Web/Performance/Understanding_latency -user_pref("network.dnsCacheEntries", 1000); // default=400 +//user_pref("network.dnsCacheEntries", 1000); // default=400 // PREF: adjust DNS expiration time // [ABOUT] about:networking#dns // [NOTE] These prefs will be ignored by DNS resolver if using DoH/TRR. -user_pref("network.dnsCacheExpiration", 86400); // keep entries for 1 day; alt=3600 (1 hour) +user_pref("network.dnsCacheExpiration", 3600); // keep entries for 1 hour //user_pref("network.dnsCacheExpirationGracePeriod", 240); // default=60; cache DNS entries for 4 minutes after they expire // PREF: the number of threads for DNS user_pref("network.dns.max_high_priority_threads", 8); // default=5 -//user_pref("network.dns.max_any_priority_threads", 5); // default=3 +//user_pref("network.dns.max_any_priority_threads", 3); // DEFAULT // PREF: increase TLS token caching user_pref("network.ssl_tokens_cache_capacity", 10240); // default=2048; more TLS token caching (fast reconnects) /**************************************************************************** - * SECTION: SPECULATIVE CONNECTIONS * + * SECTION: SPECULATIVE LOADING * ****************************************************************************/ +// These are connections that are not explicitly asked for (e.g., clicked on). +// [1] https://developer.mozilla.org/en-US/docs/Web/Performance/Speculative_loading + // [NOTE] FF85+ partitions (isolates) pooled connections, prefetch connections, // pre-connect connections, speculative connections, TLS session identifiers, // and other connections. We can take advantage of the speed of pre-connections // while preserving privacy. Users may relax hardening to maximize their preference. -// For more information, see SecureFox: "PREF: State Paritioning" and "PREF: Network Partitioning" [1] -// [1] https://github.com/yokoffing/Betterfox/blob/e9621b0062914da5fdb5f83b8da64041965b7a50/Securefox.js#L74-L108 +// For more information, see SecureFox: "PREF: State Paritioning" and "PREF: Network Partitioning". // [NOTE] To activate and increase network predictions, go to settings in uBlock Origin and uncheck: // - "Disable pre-fetching (to prevent any connection for blocked network requests)" // [NOTE] Add prefs to "MY OVERRIDES" section and uncomment to enable them in your user.js. -// PREF: speculative pre-connections -// Firefox will open predictive connections to sites when the user hovers their mouse over thumbnails -// on the New Tab Page or the user starts to search in the Search Bar, or in the search field on the -// New Tab Page [1]. This pref may control speculative connects for normal links, too [2]. -// The maximum number of current global half open sockets allowable when starting a new speculative connection [3]. -// In case the user follows through with the action, the page can begin loading faster -// since some of the work was already started in advance. -// [NOTE] TCP and SSL handshakes are set up in advance but page contents are not downloaded until a click on the link is registered. +// PREF: link-mouseover opening connection to linked server +// When accessing content online, devices use sockets as endpoints. +// The global limit on half-open sockets controls how many speculative +// connection attempts can occur at once when starting new connections [3]. +// If the user follows through, pages can load faster since some +// work was done in advance. Firefox opens predictive connections +// to sites when hovering over New Tab thumbnails or starting a +// URL Bar search [1] and hyperlinks within a page [2]. +// [NOTE] DNS (if enabled), TCP, and SSL handshakes are set up in advance, +// but page contents are not downloaded until a click on the link is registered. // [1] https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections?redirectslug=how-stop-firefox-automatically-making-connections&redirectlocale=en-US#:~:text=Speculative%20pre%2Dconnections // [2] https://news.slashdot.org/story/15/08/14/2321202/how-to-quash-firefoxs-silent-requests // [3] https://searchfox.org/mozilla-central/rev/028c68d5f32df54bca4cf96376f79e48dfafdf08/modules/libpref/init/all.js#1280-1282 // [4] https://www.keycdn.com/blog/resource-hints#prefetch // [5] https://3perf.com/blog/link-rels/#prefetch -user_pref("network.http.speculative-parallel-limit", 0); -// or //user_pref("network.http.speculative-parallel-limit", 6); // DEFAULT -// PREF: DNS pre-resolve -// Resolve hostnames ahead of time. In order to reduce latency, -// Firefox will proactively perform domain name resolution on links that -// the user may choose to follow, as well as URLs for items -// referenced by elements in a web page. +// PREF: DNS prefetching +// Used for cross-origin connections to provide small performance improvements. +// Disable DNS prefetching to prevent Firefox from proactively resolving +// hostnames for other domains linked on a page. This may eliminate +// unnecessary DNS lookups, but can increase latency when following external links. // [1] https://bitsup.blogspot.com/2008/11/dns-prefetching-for-firefox.html // [2] https://css-tricks.com/prefetching-preloading-prebrowsing/#dns-prefetching // [3] https://www.keycdn.com/blog/resource-hints#2-dns-prefetching // [4] http://www.mecs-press.org/ijieeb/ijieeb-v7-n5/IJIEEB-V7-N5-2.pdf user_pref("network.dns.disablePrefetch", true); //user_pref("network.dns.disablePrefetchFromHTTPS", true); // DEFAULT -// or -//user_pref("network.dns.disablePrefetch", false); // DEFAULT -//user_pref("network.dns.disablePrefetchFromHTTPS", false); + +// PREF: enable tag and Link: rel=preconnect response header handling +//user_pref("network.preconnect", true); // DEFAULT // PREF: preconnect to the autocomplete URL in the address bar // Firefox preloads URLs that autocomplete when a user types into the address bar. @@ -484,23 +406,20 @@ user_pref("network.dns.disablePrefetch", true); // [NOTE] Firefox will perform DNS lookup (if enabled) and TCP and TLS handshake, // but will not start sending or receiving HTTP data. // [1] https://www.ghacks.net/2017/07/24/disable-preloading-firefox-autocomplete-urls/ -user_pref("browser.urlbar.speculativeConnect.enabled", false); -// or -//user_pref("browser.urlbar.speculativeConnect.enabled", true); // DEFAULT - -// PREF: mousedown speculative connections on bookmarks and history -user_pref("browser.places.speculativeConnect.enabled", false); -// or -//user_pref("browser.places.speculativeConnect.enabled", true); // DEFAULT - -// PREF: Preload -// This tells the browser that the resource should be loaded as part of the current navigation -// and it should start fetching it ASAP. This attribute can be applied to CSS, fonts, images, JavaScript files and more. -// This tells the browser to download and cache a resource (like a script or a stylesheet) as soon as possible. -// The browser doesn’t do anything with the resource after downloading it. Scripts aren’t executed, stylesheets -// aren’t applied. It’s just cached – so that when something else needs it, it’s available immediately. -// Focuses on fetching a resource for the CURRENT navigation. -// [NOTE] Unlike other pre-connection tags (except modulepreload), this tag is mandatory for the browser. +//user_pref("browser.urlbar.speculativeConnect.enabled", false); + +// PREF: mousedown speculative connections on bookmarks and history [FF98+] +//user_pref("browser.places.speculativeConnect.enabled", false); + +// PREF: network preload [REMOVED] +// Used to load high-priority resources faster on the current page, for strategic +// performance improvements. +// Instructs the browser to immediately fetch and cache high-priority resources +// for the current page to improve performance. The browser downloads resources +// but does not execute scripts or apply stylesheets - it just caches them for +// instant availability later. +// Unlike other pre-connection tags (except modulepreload), this tag is +// mandatory for the browser. // [1] https://developer.mozilla.org/en-US/docs/Web/HTML/Link_types/preload // [2] https://w3c.github.io/preload/ // [3] https://3perf.com/blog/link-rels/#preload @@ -510,87 +429,211 @@ user_pref("browser.places.speculativeConnect.enabled", false); // [7] https://github.com/arkenfox/user.js/issues/1098#issue-791949341 // [8] https://yashints.dev/blog/2018/10/06/web-perf-2#preload // [9] https://web.dev/preload-critical-assets/ -//user_pref("network.preload", true); // DEFAULT - -// PREF: Link prefetching -// Firefox will prefetch certain links if any of the websites you are viewing uses the special prefetch-link tag. -// A directive that tells a browser to fetch a resource that will likely be needed for the next navigation. -// The resource will be fetched with extremely low priority (since everything the browser knows -// is needed in the current page is more important than a resource that we guess might be needed in the next one). -// Speeds up the NEXT navigation rather than the current one. -// When the user clicks on a link, or initiates any kind of page load, link prefetching will stop and any -// prefetch hints will be discarded. -// Prefetch just downloads the resources; it doesn't execute anything (such as start to parse the web page), -// and it may never make any calls to scripts, etc. +//user_pref("network.preload", true); // [REMOVED] + +// PREF: network module preload [FF115+] +// High-priority loading of current page JavaScript modules. +// Used to preload high-priority JavaScript modules for strategic performance improvements. +// Module preloading allows developers to fetch JavaScript modules and dependencies +// earlier to accelerate page loads. The browser downloads, parses, and compiles modules +// referenced by links with this attribute in parallel with other resources, rather +// than sequentially waiting to process each. Preloading reduces overall download times. +// Browsers may also automatically preload dependencies without firing extra events. +// Unlike other pre-connection tags (except rel=preload), this tag is mandatory for the browser. +// [1] https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/rel/modulepreload +//user_pref("network.modulepreload", true); // DEFAULT + +// PREF: link prefetching +// Pre-populates the HTTP cache by prefetching same-site future navigation +// resources or subresources used on those pages. +// Enabling link prefetching allows Firefox to preload pages tagged as important. +// The browser prefetches links with the prefetch-link tag, fetching resources +// likely needed for the next navigation at low priority. When clicking a link +// or loading a new page, prefetching stops and discards hints. Prefetching +// downloads resources without executing them. +// [NOTE] Since link prefetch uses the HTTP cache, it has a number of issues +// with document prefetches, such as being potentially blocked by Cache-Control headers +// (e.g. cache partitioning). // [1] https://developer.mozilla.org/en-US/docs/Glossary/Prefetch // [2] http://www.mecs-press.org/ijieeb/ijieeb-v7-n5/IJIEEB-V7-N5-2.pdf // [3] https://timkadlec.com/remembers/2020-06-17-prefetching-at-this-age/ // [4] https://3perf.com/blog/link-rels/#prefetch +// [5] https://developer.mozilla.org/docs/Web/HTTP/Link_prefetching_FAQ user_pref("network.prefetch-next", false); -// or -//user_pref("network.prefetch-next", true); // DEFAULT -// PREF: enable early hints [NIGHTLY] +// PREF: Fetch Priority API [FF119+] +// Indicates whether the `fetchpriority` attribute for elements which support it. +// [1] https://web.dev/articles/fetch-priority +// [2] https://nitropack.io/blog/post/priority-hints +// [2] https://developer.mozilla.org/en-US/docs/Web/API/HTMLImageElement/fetchPriority +// [3] https://developer.mozilla.org/en-US/docs/Web/API/HTMLLinkElement/fetchPriority +//user_pref("network.fetchpriority.enabled", true); + +// PREF: early hints [FF120+] // [1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/103 // [2] https://developer.chrome.com/blog/early-hints/ -//user_pref("network.early-hints.enabled", false); // DEFAULT -// or +// [3] https://blog.cloudflare.com/early-hints/ +// [4] https://blog.cloudflare.com/early-hints-performance/ //user_pref("network.early-hints.enabled", true); -// PREF: `Link: rel=preconnect` in 103 Early Hint response -//user_pref("network.early-hints.preconnect.enabled", false); // DEFAULT -// or +// PREF: `Link: rel=preconnect` in 103 Early Hint response [FF120+] +// Used to warm most critical cross-origin connections to provide +// performance improvements when connecting to them. +// [NOTE] When 0, this is limited by "network.http.speculative-parallel-limit". //user_pref("network.early-hints.preconnect.enabled", true); - -// PREF: the number of speculative connections allowed for early hints `Link: rel=preconnect` -// When 0, this is limited by "network.http.speculative-parallel-limit". -//user_pref("network.early-hints.preconnect.max_connections", 0); -// or //user_pref("network.early-hints.preconnect.max_connections", 10); // DEFAULT // PREF: Network Predictor (NP) -// Keeps track of components that were loaded during page visits so that the browser knows next time -// which resources to request from the server: It uses a local file to remember which resources were -// needed when the user visits a webpage (such as image.jpg and script.js), so that the next time the -// user prepares to go to that webpage (upon navigation? URL bar? mouseover?), this history can be used -// to predict what resources will be needed rather than wait for the document to link those resources. -// NP only performs pre-connect, not prefetch, by default, including DNS pre-resolve and TCP preconnect -// (which includes SSL handshake). No data is actually sent to the site until a user actively clicks -// a link. However, NP is still opening TCP connections and doing SSL handshakes, so there is still -// information leakage about your browsing patterns. -// [NOTE] Disabling DNS prefetching disables the DNS prefetching behavior of NP. +// When enabled, it trains and uses Firefox's algorithm to preload page resource +// by tracking past page resources. It uses a local file (history) of needed images, +// scripts, etc. to request them preemptively when navigating. +// [NOTE] By default, it only preconnects, doing DNS, TCP, and SSL handshakes. +// No data sends until clicking. With "network.predictor.enable-prefetch" enabled, +// it also performs prefetches. // [1] https://wiki.mozilla.org/Privacy/Reviews/Necko // [2] https://www.ghacks.net/2014/05/11/seer-disable-firefox/ // [3] https://github.com/dillbyrne/random-agent-spoofer/issues/238#issuecomment-110214518 // [4] https://www.igvita.com/posa/high-performance-networking-in-google-chrome/#predictor user_pref("network.predictor.enabled", false); -// or -//user_pref("network.predictor.enabled", true); // DEFAULT - -// PREF: NP fetches resources on the page ahead of time, to accelerate rendering of the page. -// Performs both pre-connect and prefetch. -user_pref("network.predictor.enable-prefetch", false); -// or -//user_pref("network.predictor.enable-prefetch", true); // DEFAULT - -// PREF: NP active when hovering over links -// The next time the user mouseovers a link to that webpage, history is used to predict what -// resources will be needed rather than wait for the document to link those resources. -// When you hover over links, connections are established to linked domains and servers -// automatically to speed up the loading process should you click on the link. To improve the -// loading speed, Firefox will open predictive connections to sites when the user hovers their -// mouse over. In case the user follows through with the action, the page can begin loading -// faster since some of the work was already started in advance. Focuses on fetching a resource -// for the NEXT navigation. + +// PREF: Network Predictor fetch for resources ahead of time +// Prefetch page resources based on past user behavior. +//user_pref("network.predictor.enable-prefetch", false); // DEFAULT + +// PREF: make Network Predictor active when hovering over links +// When hovering over links, Network Predictor uses past resource history to +// preemptively request what will likely be needed instead of waiting for the document. +// Predictive connections automatically open when hovering over links to speed up +// loading, starting some work in advance. //user_pref("network.predictor.enable-hover-on-ssl", false); // DEFAULT -// or -//user_pref("network.predictor.enable-hover-on-ssl", true); - -// PREF: assign NP values - //user_pref("network.predictor.preresolve-min-confidence", 40); // default=60 - //user_pref("network.predictor.preconnect-min-confidence", 60); // default=90 - //user_pref("network.predictor.prefetch-min-confidence", 80); // default=100 - //user_pref("network.predictor.prefetch-force-valid-for", 3600); // default=10 - //user_pref("network.predictor.prefetch-rolling-load-count", 120); // default=10 - //user_pref("network.predictor.max-resources-per-entry", 250); // default=100 - //user_pref("network.predictor.max-uri-length", 1000); // default=500 + +// PREF: assign Network Predictor confidence levels +// [NOTE] Keep in mind that Network Predictor must LEARN your browsing habits. +// Editing these lower will cause more speculative connections to occur, +// which reduces accuracy over time and has privacy implications. +//user_pref("network.predictor.preresolve-min-confidence", 60); // DEFAULT +//user_pref("network.predictor.preconnect-min-confidence", 90); // DEFAULT +//user_pref("network.predictor.prefetch-min-confidence", 100); // DEFAULT + +// PREF: other Network Predictor values +// [NOTE] Keep in mmind that Network Predictor must LEARN your browsing habits. +//user_pref("network.predictor.prefetch-force-valid-for", 10); // DEFAULT; how long prefetched resources are considered valid and usable (in seconds) for the prediction modeling +//user_pref("network.predictor.prefetch-rolling-load-count", 10); // DEFAULT; the maximum number of resources that Firefox will prefetch in memory at one time based on prediction modeling +//user_pref("network.predictor.max-resources-per-entry", 250); // default=100 +//user_pref("network.predictor.max-uri-length", 1000); // default=500 + +/**************************************************************************** + * SECTION: EXPERIMENTAL * +****************************************************************************/ + +// PREF: CSS Masonry Layout [NIGHTLY] +// [1] https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_Grid_Layout/Masonry_Layout +user_pref("layout.css.grid-template-masonry-value.enabled", true); + +// PREF: Prioritized Task Scheduling API [NIGHTLY] +// [1] https://blog.mozilla.org/performance/2022/06/02/prioritized-task-scheduling-api-is-prototyped-in-nightly/ +// [2] https://medium.com/airbnb-engineering/building-a-faster-web-experience-with-the-posttask-scheduler-276b83454e91 +user_pref("dom.enable_web_task_scheduling", true); + +// PREF: CSS :has() selector [NIGHTLY] +// Needed for some extensions, filters, and customizations. +// [1] https://developer.mozilla.org/en-US/docs/Web/CSS/:has +// [2] https://caniuse.com/css-has +user_pref("layout.css.has-selector.enabled", true); + +// PREF: HTML Sanitizer API [NIGHTLY] +// [1] https://developer.mozilla.org/en-US/docs/Web/API/Sanitizer +// [2] https://caniuse.com/mdn-api_sanitizer +user_pref("dom.security.sanitizer.enabled", true); + +// PREF: WebGPU [HIGHLY EXPERIMENTAL!] +// [WARNING] Do not enable unless you are a web developer! +// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1746245 +// [2] https://developer.chrome.com/docs/web-platform/webgpu/ +// [3] https://github.com/gpuweb/gpuweb/wiki/Implementation-Status +// [4] https://hacks.mozilla.org/2020/04/experimental-webgpu-in-firefox/ +//user_pref("dom.webgpu.enabled", true); + //user_pref("gfx.webgpu.force-enabled", true); // enforce +// enable WebGPU indirect draws/dispatches: +//user_pref("dom.webgpu.indirect-dispatch.enabled", true); + +/**************************************************************************** + * SECTION: TAB UNLOAD * +****************************************************************************/ + +// PREF: unload tabs on low memory +// [ABOUT] about:unloads +// Firefox will detect if your computer’s memory is running low (less than 200MB) +// and suspend tabs that you have not used in awhile. +// [1] https://support.mozilla.org/en-US/kb/unload-inactive-tabs-save-system-memory-firefox +// [2] https://hacks.mozilla.org/2021/10/tab-unloading-in-firefox-93/ +//user_pref("browser.tabs.unloadOnLowMemory", true); // DEFAULT + +// PREF: determine when tabs unload [WINDOWS] [LINUX] +// Notify TabUnloader or send the memory pressure if the memory resource +// notification is signaled AND the available commit space is lower than +// this value. +// Set this to some high value, e.g. 2/3 of total memory available in your system: +// 4GB=2640, 8GB=5280, 16GB=10560, 32GB=21120, 64GB=42240 +// [1] https://dev.to/msugakov/taking-firefox-memory-usage-under-control-on-linux-4b02 +//user_pref("browser.low_commit_space_threshold_mb", 2640); // default=200; WINDOWS LINUX + +// PREF: determine when tabs unload [LINUX] +// On Linux, Firefox checks available memory in comparison to total memory, +// and use this percent value (out of 100) to determine if Firefox is in a +// low memory scenario. +// [1] https://dev.to/msugakov/taking-firefox-memory-usage-under-control-on-linux-4b02 +//user_pref("browser.low_commit_space_threshold_percent", 33); // default=5; LINUX + +// PREF: determine how long (in ms) tabs are inactive before they unload +// 60000=1min; 300000=5min; 600000=10min (default) +//user_pref("browser.tabs.min_inactive_duration_before_unload", 300000); // 5min; default=600000 + +/**************************************************************************** + * SECTION: PROCESS COUNT * +****************************************************************************/ + +// PREF: process count +// [ABOUT] View in about:processes. +// With Firefox Quantum (2017), CPU cores = processCount. However, since the +// introduction of Fission [2], the number of website processes is controlled +// by processCount.webIsolated. Disabling fission.autostart or changing +// fission.webContentIsolationStrategy reverts control back to processCount. +// [1] https://www.reddit.com/r/firefox/comments/r69j52/firefox_content_process_limit_is_gone/ +// [2] https://firefox-source-docs.mozilla.org/dom/ipc/process_model.html#web-content-processes +//user_pref("dom.ipc.processCount", 8); // DEFAULT; Shared Web Content +//user_pref("dom.ipc.processCount.webIsolated", 1); // default=4; Isolated Web Content + +// PREF: use one process for process preallocation cache +//user_pref("dom.ipc.processPrelaunch.fission.number", 1); // default=3; Process Preallocation Cache + +// PREF: configure process isolation +// [1] https://hg.mozilla.org/mozilla-central/file/tip/dom/ipc/ProcessIsolation.cpp#l53 +// [2] https://www.reddit.com/r/firefox/comments/r69j52/firefox_content_process_limit_is_gone/ + +// OPTION 1: isolate all websites +// Web content is always isolated into its own `webIsolated` content process +// based on site-origin, and will only load in a shared `web` content process +// if site-origin could not be determined. +//user_pref("fission.webContentIsolationStrategy", 1); // DEFAULT +//user_pref("browser.preferences.defaultPerformanceSettings.enabled", true); // DEFAULT + //user_pref("dom.ipc.processCount.webIsolated", 1); // one process per site origin + +// OPTION 2: isolate only "high value" websites +// Only isolates web content loaded by sites which are considered "high +// value". A site is considered high value if it has been granted a +// `highValue*` permission by the permission manager, which is done in +// response to certain actions. +//user_pref("fission.webContentIsolationStrategy", 2); +//user_pref("browser.preferences.defaultPerformanceSettings.enabled", false); + //user_pref("dom.ipc.processCount.webIsolated", 1); // one process per site origin (high value) + //user_pref("dom.ipc.processCount", 8); // determine by number of CPU cores/processors + +// OPTION 3: do not isolate websites +// All web content is loaded into a shared `web` content process. This is +// similar to the non-Fission behavior; however, remote subframes may still +// be used for sites with special isolation behavior, such as extension or +// mozillaweb content processes. +//user_pref("fission.webContentIsolationStrategy", 0); +//user_pref("browser.preferences.defaultPerformanceSettings.enabled", false); + //user_pref("dom.ipc.processCount", 8); // determine by number of CPU cores/processors diff --git a/Peskyfox.js b/Peskyfox.js index 625d28532..95d0ff810 100644 --- a/Peskyfox.js +++ b/Peskyfox.js @@ -3,7 +3,7 @@ * Peskyfox * * "Aquila non capit muscas" * * priority: remove annoyances * - * version: 118 * + * version: 119 * * url: https://github.com/yokoffing/Betterfox * ***************************************************************************/ @@ -11,29 +11,6 @@ * SECTION: MOZILLA UI * ****************************************************************************/ -// PREF: preferred color scheme for websites -// [SETTING] General>Language and Appearance>Website appearance -// By default, color scheme matches the theme of your browser toolbar (3). -// Set this pref to choose Dark on sites that support it (0) or Light (1). -// Before FF95, the pref was 2, which determined site color based on OS theme. -// Dark (0), Light (1), System (2), Browser (3) (default [FF95+]) -// [1] https://www.reddit.com/r/firefox/comments/rfj6yc/how_to_stop_firefoxs_dark_theme_from_overriding/hoe82i5/?context=3 -user_pref("layout.css.prefers-color-scheme.content-override", 2); - -// PREF: disable always using dark theme for private browsing windows [FF106+] -//user_pref("browser.theme.dark-private-windows", false); - -// PREF: enable Firefox to use userChome, userContent, etc. -user_pref("toolkit.legacyUserProfileCustomizations.stylesheets", true); - -// PREF: disable annoying update restart prompts -// Delay update available prompts for ~1 week. -// Will still show green arrow in menu bar. -user_pref("app.update.suppressPrompts", true); - -// PREF: add compact mode back to options -user_pref("browser.compactmode.show", true); - // PREF: Mozilla VPN // [1] https://github.com/yokoffing/Betterfox/issues/169 user_pref("browser.privatebrowsing.vpnpromourl", ""); @@ -41,8 +18,22 @@ user_pref("browser.privatebrowsing.vpnpromourl", ""); // PREF: disable about:addons' Recommendations pane (uses Google Analytics) user_pref("extensions.getAddons.showPane", false); // HIDDEN + +// PREF: disable recommendations in about:addons' Extensions and Themes panes user_pref("extensions.htmlaboutaddons.recommendations.enabled", false); +// PREF: Personalized Extension Recommendations in about:addons and AMO +// [NOTE] This pref has no effect when Health Reports are disabled. +// [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to make personalized extension recommendations +user_pref("browser.discovery.enabled", false); + +// PREF: disable Fakespot integration [FF116+] +// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1840156#c0 +// [2] https://github.com/arkenfox/user.js/issues/1730 +// [3] https://www.fakespot.com/ +// [4] https://www.ghacks.net/2023/10/12/firefox-will-soon-tell-you-if-product-reviews-are-reliable/ +//user_pref("browser.shopping.experience2023.enabled", false); // [DEFAULT: false] + // PREF: disable Firefox from asking to set as the default browser // [1] https://github.com/yokoffing/Betterfox/issues/166 user_pref("browser.shell.checkDefaultBrowser", false); @@ -61,7 +52,7 @@ user_pref("browser.preferences.moreFromMozilla", false); // [1] https://www.ghacks.net/2022/10/19/how-to-hide-firefoxs-list-all-tabs-icon/ user_pref("browser.tabs.tabmanager.enabled", false); -// PREF: Warnings +// PREF: tab and about:config warnings //user_pref("browser.tabs.warnOnClose", false); // DEFAULT [FF94+] //user_pref("browser.tabs.warnOnCloseOtherTabs", true); // DEFAULT //user_pref("browser.tabs.warnOnOpen", true); // DEFAULT @@ -77,19 +68,45 @@ user_pref("browser.aboutwelcome.enabled", false); // disable Intro screens // PREF: disable "What's New" toolbar icon [FF69+] //user_pref("browser.messaging-system.whatsNewPanel.enabled", false); +/**************************************************************************** + * SECTION: THEME ADJUSTMENTS * +****************************************************************************/ + +// PREF: enable Firefox to use userChome, userContent, etc. +user_pref("toolkit.legacyUserProfileCustomizations.stylesheets", true); + +// PREF: add compact mode back to options +user_pref("browser.compactmode.show", true); + // PREF: remove focus indicator for links // [1] https://www.askvg.com/firefox-tip-restore-classic-dotted-outline-focus-indicator-for-links/ user_pref("browser.display.focus_ring_on_anything", true); user_pref("browser.display.focus_ring_style", 0); user_pref("browser.display.focus_ring_width", 0); +// PREF: preferred color scheme for websites +// [SETTING] General>Language and Appearance>Website appearance +// By default, color scheme matches the theme of your browser toolbar (3). +// Set this pref to choose Dark on sites that support it (0) or Light (1). +// Before FF95, the pref was 2, which determined site color based on OS theme. +// Dark (0), Light (1), System (2), Browser (3) [DEFAULT FF95+] +// [1] https://www.reddit.com/r/firefox/comments/rfj6yc/how_to_stop_firefoxs_dark_theme_from_overriding/hoe82i5/?context=3 +user_pref("layout.css.prefers-color-scheme.content-override", 2); + +// PREF: disable always using dark theme for private browsing windows [FF106+] +//user_pref("browser.theme.dark-private-windows", false); + // PREF: prevent private windows being separate from normal windows in taskbar [WINDOWS] [FF106+] -user_pref("browser.privateWindowSeparation.enabled", false); // WINDOWS +user_pref("browser.privateWindowSeparation.enabled", false); // PREF: reduce the size of the "private window" indicator in tab bar [FF106+] //user_pref("browser.privatebrowsing.enable-new-indicator", false); // REMOVED [FF119+] -// PREF: Cookie Banner handling [NIGHTLY] +/**************************************************************************** + * SECTION: COOKIE BANNER HANDLING * +****************************************************************************/ + +// PREF: Cookie Banner handling // [NOTE] Feature still enforces Total Cookie Protection to limit 3rd-party cookie tracking [1] // [1] https://github.com/mozilla/cookie-banner-rules-list/issues/33#issuecomment-1318460084 // [2] https://phabricator.services.mozilla.com/D153642 @@ -98,42 +115,39 @@ user_pref("browser.privateWindowSeparation.enabled", false); // WINDOWS // 2: reject banners if it is a one-click option; otherwise, fall back to the accept button to remove banner // 1: reject banners if it is a one-click option; otherwise, keep banners on screen // 0: disable all cookie banner handling -user_pref("cookiebanners.service.mode", 2); -user_pref("cookiebanners.service.mode.privateBrowsing", 2); - //user_pref("cookiebanners.bannerClicking.enabled", true); // DEFAULT [FF108] - //user_pref("cookiebanners.cookieInjector.enabled", true); // DEFAULT - -// PREF: global CookieBannerRules [WiP] -// Global rules that can handle a list of cookie banner libraries / providers on any site. -// This is used for click rules that can handle common Consent Management Providers (CMP) -// [WARNING] Beware of potential bugs and performance issues. Enabling this may negatively -// impact site performance. It requires Firefox to run rule-defined query selectors for -// every page. -//user_pref("cookiebanners.service.enableGlobalRules", false); // DEFAULT - -// PREF: Firefox Translations [NIGHTLY] +user_pref("cookiebanners.service.mode", 1); +user_pref("cookiebanners.service.mode.privateBrowsing", 1); + +// PREF: Cookie Banner global rules +// Global rules that can handle a list of cookie banner libraries and providers on any site. +// This is used for click rules that can handle common Consent Management Providers (CMP). +user_pref("cookiebanners.service.enableGlobalRules", true); + +/**************************************************************************** + * SECTION: TRANSLATIONS * +****************************************************************************/ + +// PREF: Firefox Translations [FF118+] // Automated translation of web content is done locally in Firefox, so that // the text being translated does not leave your machine. // [ABOUT] Visit about:translations to translate your own text as well. // [1] https://blog.mozilla.org/en/mozilla/local-translation-add-on-project-bergamot/ // [2] https://blog.nightly.mozilla.org/2023/06/01/firefox-translations-and-other-innovations-these-weeks-in-firefox-issue-139/ // [3] https://www.ghacks.net/2023/08/02/mozilla-firefox-117-beta-brings-an-automatic-language-translator-for-websites-and-it-works-offline/ -user_pref("browser.translations.enable", true); +//user_pref("browser.translations.enable", true); // DEFAULT //user_pref("browser.translations.autoTranslate", true); -// PREF: Mozilla Shopping [FF116+] -// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1836265 -//user_pref("browser.shopping.experience2023.enabled", false); // DEFAULT - /**************************************************************************** * SECTION: FULLSCREEN NOTICE * ****************************************************************************/ -// PREF: disable fullscreen delay and notice -user_pref("full-screen-api.transition-duration.enter", "0 0"); -user_pref("full-screen-api.transition-duration.leave", "0 0"); -user_pref("full-screen-api.warning.delay", -1); -user_pref("full-screen-api.warning.timeout", 0); +// PREF: remove fullscreen delay +user_pref("full-screen-api.transition-duration.enter", "0 0"); // default=200 200 +user_pref("full-screen-api.transition-duration.leave", "0 0"); // default=200 200 + +// PREF: disable fullscreen notice +user_pref("full-screen-api.warning.delay", -1); // default=500 +user_pref("full-screen-api.warning.timeout", 0); // default=3000 /**************************************************************************** * SECTION: FONT APPEARANCE * @@ -165,32 +179,45 @@ user_pref("full-screen-api.warning.timeout", 0); // PREF: minimize URL bar suggestions (bookmarks, history, open tabs) // Dropdown options in the URL bar: -//user_pref("browser.urlbar.suggest.bookmark", true); +//user_pref("browser.urlbar.suggest.bookmark", true); // DEFAULT user_pref("browser.urlbar.suggest.engines", false); //user_pref("browser.urlbar.suggest.history", false); //user_pref("browser.urlbar.suggest.openpage", false); -//user_pref("browser.urlbar.suggest.quickactions", false); // [NIGHTLY-only] //user_pref("browser.urlbar.suggest.searches", false); //user_pref("browser.urlbar.suggest.weather", true); // DEFAULT [FF108] //user_pref("browser.urlbar.weather.ignoreVPN", false); // DEFAULT - -// PREF: disable dropdown suggestions with empty query: -user_pref("browser.urlbar.suggest.topsites", false); - -// PREF: enable helpful features: +//user_pref("browser.urlbar.quickactions.enabled", false); // NIGHTLY +//user_pref("browser.urlbar.shortcuts.quickactions", false); // NIGHTLY user_pref("browser.urlbar.suggest.calculator", true); user_pref("browser.urlbar.unitConversion.enabled", true); +// PREF: disable dropdown suggestions with empty query +//user_pref("browser.urlbar.suggest.topsites", false); + +// PREF: disable urlbar trending search suggestions [FF118+] +// [SETTING] Search>Search Suggestions>Show trending search suggestions (FF119) +user_pref("browser.urlbar.trending.featureGate", false); +//user_pref("browser.urlbar.suggest.trending", false); + +// PREF: disable urlbar suggestions +//user_pref("browser.urlbar.addons.featureGate", false); // [FF115+] +//user_pref("browser.urlbar.mdn.featureGate", false); // [FF117+] [HIDDEN PREF] +//user_pref("browser.urlbar.pocket.featureGate", false); // [FF116+] [DEFAULT: false] +//user_pref("browser.urlbar.weather.featureGate", false); // [FF108+] [DEFAULT: false] + +// PREF: disable urlbar clipboard suggestions [FF118+] +//user_pref("browser.urlbar.clipboard.featureGate", false); // [DEFAULT: false] + +// PREF: disable tab-to-search [FF85+] +// Alternatively, you can exclude on a per-engine basis by unchecking them in Options>Search +// [SETTING] Privacy & Security>Address Bar>When using the address bar, suggest>Search engines +//user_pref("browser.urlbar.suggest.engines", false); + // PREF: Adaptive History Autofill // [1] https://docs.google.com/document/u/1/d/e/2PACX-1vRBLr_2dxus-aYhZRUkW9Q3B1K0uC-a0qQyE3kQDTU3pcNpDHb36-Pfo9fbETk89e7Jz4nkrqwRhi4j/pub //user_pref("browser.urlbar.autoFill", true); // [DEFAULT] //user_pref("browser.urlbar.autoFill.adaptiveHistory.enabled", false); -// PREF: Quick Actions in the URL Bar [NIGHTLY-only] -// [1] https://www.ghacks.net/2022/07/19/mozilla-is-testing-quick-actions-in-firefoxs-address-bar/ -//user_pref("browser.urlbar.quickactions.enabled", false); -//user_pref("browser.urlbar.shortcuts.quickactions", false); - // PREF: adjust the amount of Address bar / URL bar dropdown results // This value controls the total number of entries to appear in the location bar dropdown. // [NOTE] Items (bookmarks/history/openpages) with a high "frequency"/"bonus" will always @@ -255,6 +282,10 @@ user_pref("browser.newtabpage.activity-stream.feeds.section.topstories", false); //user_pref("browser.newtabpage.activity-stream.section.highlights.includeVisited", false); //user_pref("browser.newtabpage.activity-stream.feeds.snippets", false); // [DEFAULT] +// PREF: clear default topsites +// [NOTE] This does not block you from adding your own. +//user_pref("browser.newtabpage.activity-stream.default.sites", ""); + // PREF: keep search in the search box; prevent from jumping to address bar // [1] https://www.reddit.com/r/firefox/comments/oxwvbo/firefox_start_page_search_options/ //user_pref("browser.newtabpage.activity-stream.improvesearch.handoffToAwesomebar", false); @@ -291,7 +322,7 @@ user_pref("extensions.pocket.enabled", false); // PREF: always ask where to download // Enforce user interaction for greater security. -// [SETTING] General>Downloads>Always ask you where to save files +// [SETTING] General>Files and Applications>Downloads>Always ask you where to save files // [DIALOGUE] "Ask whether to open or save files" // true=direct download (default) // false=the user is asked what to do @@ -301,11 +332,13 @@ user_pref("browser.download.useDownloadDir", false); // PREF: always ask how to handle new mimetypes // Enforce user interaction for greater security. -// [SETTING] General>Files and Applications>What should Firefox do with other files +// [SETTING] General>Files and Applications>Applications>What should Firefox do with other files?>Ask whether to open or save files user_pref("browser.download.always_ask_before_handling_new_types", true); // PREF: disable downloads panel opening on every download -user_pref("browser.download.alwaysOpenPanel", false); +// Controls whether to open the downloads panel every time a download begins. +// [NOTE] The first download ever ran in a new profile will still open the panel. +//user_pref("browser.download.alwaysOpenPanel", false); // PREF: disable adding downloads to the system's "recent documents" list user_pref("browser.download.manager.addToRecentDocs", false); @@ -317,6 +350,7 @@ user_pref("browser.download.manager.addToRecentDocs", false); // PREF: enforce Firefox's built-in PDF reader // This setting controls if the option "Display in Firefox" is available in the setting below // and by effect controls whether PDFs are handled in-browser or externally ("Ask" or "Open With"). +// [1] https://mozilla.github.io/pdf.js/ //user_pref("pdfjs.disabled", false); // DEFAULT // PREF: allow viewing of PDFs even if the response HTTP headers @@ -326,11 +360,12 @@ user_pref("browser.download.manager.addToRecentDocs", false); // PREF: open PDFs inline (FF103+) user_pref("browser.download.open_pdf_attachments_inline", true); -// PREF: PDF sidebar on load [HIDDEN] +// PREF: PDF sidebar on load // 2=table of contents (if not available, will default to 1) // 1=view pages -// -1=disabled (default) -user_pref("pdfjs.sidebarViewOnLoad", 2); +// 0=disabled +// -1=remember previous state (default) +//user_pref("pdfjs.sidebarViewOnLoad", 2); // PREF: default zoom for PDFs [HIDDEN] // [NOTE] "page-width" not needed if using sidebar on load @@ -426,15 +461,21 @@ user_pref("findbar.highlightAll", true); //user_pref("browser.tabs.closeWindowWithLastTab", false); // PREF: stop websites from reloading pages automatically -// [WARNING] Breakage with some sites. +// [WARNING] Breaks some sites. // [1] https://www.ghacks.net/2018/08/19/stop-websites-from-reloading-pages-automatically/ //user_pref("accessibility.blockautorefresh", true); //user_pref("browser.meta_refresh_when_inactive.disabled", true); -// PREF: Controls if a double click word selection also deletes one adjacent whitespace -// (if feasible). This mimics native behavior on macOS. +// PREF: do not select the space next to a word when selecting a word +user_pref("layout.word_select.eat_space_to_next_word", false); + +// PREF: controls if a double-click word selection also deletes one adjacent whitespace +// This mimics native behavior on macOS. //user_pref("editor.word_select.delete_space_after_doubleclick_selection", true); +// PREF: do not hide the pointer while typing [LINUX] +//user_pref("widget.gtk.hide-pointer-while-typing.enabled", false); + // PREF: limit events that can cause a pop-up // Firefox provides an option to provide exceptions for sites, remembered in your Site Settings. // (default) "change click dblclick auxclick mouseup pointerup notificationclick reset submit touchend contextmenu" @@ -452,8 +493,10 @@ user_pref("findbar.highlightAll", true); //user_pref("browser.backspace_action", 2); // DEFAULT // PREF: disable Reader mode +// [TIP] Use about:reader?url=%s as a keyword to open links automatically in reader mode [1]. // Firefox will not have to parse webpage for Reader when navigating. -// Extremely minimal performance impact, if you enable. +// Extremely minimal performance impact, if you disable. +// [1] https://www.reddit.com/r/firefox/comments/621sr2/i_found_out_how_to_automatically_open_a_url_in/ //user_pref("reader.parse-on-load.enabled", false); // PREF: disable ALT key toggling the menu bar diff --git a/README.md b/README.md index e649a499f..57bbcc811 100644 --- a/README.md +++ b/README.md @@ -12,55 +12,50 @@ Betterfox is an opinionated preference list inspired by the [law of diminishing returns](https://pmctraining.com/site/wp-content/uploads/2018/04/Law-of-Diminishing-Returns-CHART.png) and the [minimum effective dose](https://medium.com/the-mission/less-is-more-the-minimum-effective-dose-e6d56625931e). -## Simple goals -1) **Minimalism:** get what isn't needed out of the way -2) **Efficiency:** unleash Firefox's ability to be fast and performant -3) **Privacy:** protect your data without causing site breakage - -## Simple configs - -| List | Description | -|:---------:|-------------| -| [Fastfox](https://github.com/yokoffing/Betterfox/blob/main/Fastfox.js) | Immensely increase Firefox's browsing speed. Give Chrome a run for its money!| -| [Securefox](https://github.com/yokoffing/Betterfox/blob/main/Securefox.js) | [Global Privacy Control](https://blog.mozilla.org/netpolicy/2021/10/28/implementing-global-privacy-control/). [HTTPS-by-Default](https://blog.mozilla.org/security/2021/08/10/firefox-91-introduces-https-by-default-in-private-browsing/). [Total Cookie Protection](https://blog.mozilla.org/security/2021/02/23/total-cookie-protection/) with [site isolation](https://blog.mozilla.org/security/2021/05/18/introducing-site-isolation-in-firefox/). Enhanced [state](https://developer.mozilla.org/en-US/docs/Web/Privacy/State_Partitioning) and [network](https://blog.mozilla.org/security/2021/01/26/supercookie-protections/) partitioning. [Telemetry](https://github.com/yokoffing/Betterfox/blob/e66a549985f6b0db4b14226904b8c09eaaea998f/Securefox.js#L1262-L1265) disabled. | -| [Peskyfox](https://github.com/yokoffing/Betterfox/blob/main/Peskyfox.js) | Unclutter the new tab page. Remove [Pocket](https://support.mozilla.org/en-US/kb/what-pocket). Restore [compact mode](https://support.mozilla.org/en-US/kb/compact-mode-workaround-firefox) as an option. Stop webpage notifications, pop-ups, and other annoyances. | -| [Smoothfox](https://github.com/yokoffing/Betterfox/blob/main/Smoothfox.js) | Get Edge-like smooth scrolling on your favorite browser — or choose something more your style. | -| [user.js](https://github.com/yokoffing/Betterfox/blob/main/user.js) | All the essentials. None of the breakage. This is your `user.js`. | - -`Fastfox`, `Securefox`, `Peskyfox`, and `Smoothfox` are guides to settings within Firefox. - -The `user.js` — a configuration file that controls Firefox settings — is curated from these guides. - ## Getting started *If you don't have it already: [Get Firefox](https://www.mozilla.org/en-US/firefox/all/#product-desktop-release)* 1) Create a [backup profile](https://github.com/yokoffing/Betterfox/wiki/Backup). 2) Download the user.js file [here](https://raw.githubusercontent.com/yokoffing/Betterfox/main/user.js) (Right click > `Save Link As…`). 3) Review [Common Overrides](https://github.com/yokoffing/Betterfox/wiki/Common-Overrides) and make any necessary changes. + * See also [Optional Hardening](https://github.com/yokoffing/Betterfox/wiki/Optional-Hardening) for other recommendations. 4) Open Firefox. In the URL bar, type `about:profiles` and press **Enter**. 5) For the profile you want to use (or use default), click **Open Folder** in the **Root Directory** section. 6) Move the `user.js` file into the folder. *After restarting Firefox:* -1) Get an **ad blocker** like [uBlock Origin](https://addons.mozilla.org/blog/ublock-origin-everything-you-need-to-know-about-the-ad-blocker/) with our [recommended filters](https://github.com/yokoffing/filterlists#guidelines). For a simple solution, use [Ghostery](https://addons.mozilla.org/en-US/firefox/addon/ghostery/). +1) Get an **ad blocker** like [uBlock Origin](https://addons.mozilla.org/blog/ublock-origin-everything-you-need-to-know-about-the-ad-blocker/) with our [recommended filters](https://github.com/yokoffing/filterlists#guidelines). 2) Enable **DNS-level protection** with [NextDNS](https://nextdns.io/?from=xujj63g5), and check out our configuration [guide](https://github.com/yokoffing/NextDNS-Config). * See how to [quickly enable](https://support.mozilla.org/en-US/kb/dns-over-https) **secure DNS** in Firefox. -## about:Privacy -Betterfox is a great balance of privacy and convenience. +## Simple goals +1) **Minimalism:** get what isn't needed out of the way +2) **Efficiency:** unleash Firefox's ability to be fast and performant +3) **Privacy:** protect your data without causing site breakage + +## Simple configs + +`Fastfox`, `Securefox`, `Peskyfox`, and `Smoothfox` are guides to settings within Firefox. + +The `user.js` — a configuration file that controls Firefox settings — is curated from these guides. -See [Optional Hardening](https://github.com/yokoffing/Betterfox/wiki/Optional-Hardening) for other suggestions. +| List | Description | +|:---------:|-------------| +| [Fastfox](https://github.com/yokoffing/Betterfox/blob/main/Fastfox.js) | Immensely increase Firefox's browsing speed. Give Chrome a run for its money!| +| [Securefox](https://github.com/yokoffing/Betterfox/blob/main/Securefox.js) | [Global Privacy Control](https://blog.mozilla.org/netpolicy/2021/10/28/implementing-global-privacy-control/). [HTTPS-by-Default](https://blog.mozilla.org/security/2021/08/10/firefox-91-introduces-https-by-default-in-private-browsing/). [Total Cookie Protection](https://blog.mozilla.org/security/2021/02/23/total-cookie-protection/) with [site isolation](https://blog.mozilla.org/security/2021/05/18/introducing-site-isolation-in-firefox/). Enhanced [state](https://developer.mozilla.org/en-US/docs/Web/Privacy/State_Partitioning) and [network](https://blog.mozilla.org/security/2021/01/26/supercookie-protections/) partitioning. [Telemetry](https://github.com/yokoffing/Betterfox/blob/e66a549985f6b0db4b14226904b8c09eaaea998f/Securefox.js#L1262-L1265) disabled. | +| [Peskyfox](https://github.com/yokoffing/Betterfox/blob/main/Peskyfox.js) | Unclutter the new tab page. Remove [Pocket](https://support.mozilla.org/en-US/kb/what-pocket). Restore [compact mode](https://support.mozilla.org/en-US/kb/compact-mode-workaround-firefox) as an option. Stop webpage notifications, pop-ups, and other annoyances. | +| [Smoothfox](https://github.com/yokoffing/Betterfox/blob/main/Smoothfox.js) | Get Edge-like smooth scrolling on your favorite browser — or choose something more your style. | +| [user.js](https://github.com/yokoffing/Betterfox/blob/main/user.js) | All the essentials. None of the breakage. This is your `user.js`. | ## Recognition ### Browser Integration -* [Waterfox](https://www.waterfox.net/en-US/docs/releases/G6.0/) | [files](https://github.com/WaterfoxCo/Waterfox/tree/current/waterfox/browser/app/profile) (August 2023) -* [Floorp](https://github.com/Floorp-Projects/Floorp#-betterfox) [1](https://github.com/Floorp-Projects/Floorp/issues/233#issuecomment-1543557167) [2](https://blog.ablaze.one/3135/2023-04-01/) | [files](https://github.com/Floorp-Projects/Floorp/blob/ESR115/floorp/browser/components/preferences/userjs.inc.xhtml) (April 2023) +* [Waterfox](https://www.waterfox.net/en-US/docs/releases/G6.0/) | [files](https://github.com/WaterfoxCo/Waterfox/tree/current/waterfox/browser/app/profile) (Sep 2023) +* [Floorp](https://github.com/Floorp-Projects/Floorp#-betterfox) [1](https://github.com/Floorp-Projects/Floorp/issues/233#issuecomment-1543557167) [2](https://blog.ablaze.one/3135/2023-04-01/) | [files](https://github.com/Floorp-Projects/Floorp/blob/ESR115/floorp/browser/components/preferences/userjs.inc.xhtml) (Apr 2023) * [Pulse](https://github.com/pulse-browser/browser#%EF%B8%8F-credits) | [files](https://github.com/pulse-browser/browser/tree/alpha/src/browser/app/profile) (Dec 2021) * [Ghostery Private Browser](https://github.com/ghostery/user-agent-desktop#community) [1](https://web.archive.org/web/20210509171835/https://www.ghostery.com/ghostery-dawn-update-more/) [2](https://web.archive.org/web/20210921114333/https://www.ghostery.com/ghostery-dawn-product-update/) | [files](https://github.com/ghostery/user-agent-desktop/tree/main/brands/ghostery/branding/pref) (Feb 2021) ### YouTube -* [Ukrainian] [Firefox is NOT private. I show how to fix it.](https://youtu.be/mVBxBPwI_gE?si=CdPhYN8OezQbvazX&t=222) (Aug 2023) * [The ULTIMATE Browser Tier List](https://youtu.be/j5r6jFE8gic?t=560) (Mar 2023) * [I Hate Firefox. But I'm Still Switching Back to It.](https://youtu.be/w0SJFED5xK0?t=220) (Nov 2022) * [Español] [Optimize and Accelerate Firefox](https://www.youtube.com/watch?v=3XtoONmq5_Q) (Nov 2022) @@ -71,7 +66,7 @@ See [Optional Hardening](https://github.com/yokoffing/Betterfox/wiki/Optional-Ha * [GhoSTORIES with Franz & Pete](https://anchor.fm/ghostories/episodes/S2E6-We-Talking-Ghostery-Dawn----Again-er0q02/a-a4o5vmh) | 17:05–18:40 (Feb 2021) ### Articles -* [German] [Pulse Browser Review: Firefox fork with Turbo tweaks and Opera sidebar](https://www.computerbild.de/artikel/cb-Tipps-Software-Pulse-Browser-Review-ein-Firefox-Fork-mit-Seitenleiste-wie-bei-Opera-35644139.html#:~:text=Noch%20mehr%20Speed%2DFeatures) (April 2023) +* [German] [Pulse Browser Review: Firefox fork with Turbo tweaks and Opera sidebar](https://www.computerbild.de/artikel/cb-Tipps-Software-Pulse-Browser-Review-ein-Firefox-Fork-mit-Seitenleiste-wie-bei-Opera-35644139.html#:~:text=Noch%20mehr%20Speed%2DFeatures) (Apr 2023) * [2023 Browser Showdown: Comparing Chrome, Brave, Firefox, Vivaldi, and Opera](https://www.appdate.lk/technology/2023-browser-showdown/) (Jan 2023) ### Guides @@ -96,10 +91,6 @@ If you like the project, leave a :star: (top right) and become a [stargazer](htt [![Stargazers repo roster for @yokoffing/Betterfox](https://reporoster.com/stars/dark/yokoffing/Betterfox)](https://github.com/yokoffing/Betterfox/stargazers) ## Credit -
- -
- * This repository benefits from the ongoing research provided by [arkenfox](https://github.com/arkenfox/user.js). * Appreciation goes to the [Firefox](https://www.mozilla.org/en-US/firefox/new/) team and developers working on [Bugzilla](https://bugzilla.mozilla.org/home), fighting for the open web. * A special thanks to [Alex Kontos](https://github.com/MrAlex94) of [Waterfox](https://github.com/WaterfoxCo/Waterfox) for his collaboration in v.116. diff --git a/Securefox.js b/Securefox.js index 1c3319bf8..fef4ad7d9 100644 --- a/Securefox.js +++ b/Securefox.js @@ -3,7 +3,7 @@ * Securefox * * "Natura non contristatur" * * priority: provide sensible security and privacy * - * version: 118 * + * version: 119 * * url: https://github.com/yokoffing/Betterfox * ****************************************************************************/ @@ -34,6 +34,8 @@ user_pref("browser.contentblocking.category", "strict"); //user_pref("network.http.referer.disallowCrossSiteRelaxingDefault.top_navigation", true); // enabled with "Strict" //user_pref("privacy.annotate_channels.strict_list.enabled", true); // enabled with "Strict" //user_pref("privacy.annotate_channels.strict_list.pbmode.enabled", true); // DEFAULT +//user_pref("privacy.fingerprintingProtection", true); // [FF114+] [ETP FF119+] enabled with "Strict" + //user_pref("privacy.fingerprintingProtection.pbmode", true); // DEFAULT // PREF: query stripping // Currently uses a small list [1] @@ -85,7 +87,7 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", "*.instagram.com, *. // 0=disabled, 1=enabled (default) //user_pref("security.sandbox.gpu.level", 1); // DEFAULT WINDOWS -// PREF: State Paritioning [aka Dynamic First-Party Isolation (dFPI)] +// PREF: State Paritioning [Dynamic First-Party Isolation (dFPI), Total Cookie Protection (TCP)] // Firefox manages client-side state (i.e., data stored in the browser) to mitigate the ability of websites to abuse state // for cross-site tracking. This effort aims to achieve that by providing what is effectively a "different", isolated storage // location to every website a user visits. @@ -117,8 +119,7 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", "*.instagram.com, *. //user_pref("privacy.partition.network_state", true); // DEFAULT //user_pref("privacy.partition.serviceWorkers", true); // [DEFAULT: true FF105+] //user_pref("privacy.partition.network_state.ocsp_cache", true); // enabled with "Strict" - //user_pref("privacy.partition.bloburl_per_agent_cluster", false); // DEFAULT [REGRESSIONS - DO NOT TOUCH] - user_pref("privacy.partition.bloburl_per_partition_key", true); // [FF118+] + //user_pref("privacy.partition.bloburl_per_partition_key", true); // [FF118+] // enable APS (Always Partitioning Storage) [FF104+] //user_pref("privacy.partition.always_partition_third_party_non_cookie_storage", true); // [DEFAULT: true FF109+] //user_pref("privacy.partition.always_partition_third_party_non_cookie_storage.exempt_sessionstorage", false); // [DEFAULT: false FF109+] @@ -140,17 +141,22 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", "*.instagram.com, *. //user_pref("privacy.purge_trackers.enabled", true); // DEFAULT // PREF: SameSite Cookies -// [1] https://caniuse.com/?search=samesite -// [2] https://github.com/arkenfox/user.js/issues/1640#issuecomment-1464093950 -// [3] https://support.mozilla.org/en-US/questions/1364032 -// [4] https://blog.mozilla.org/security/2018/04/24/same-site-cookies-in-firefox-60/ -// [5] https://hacks.mozilla.org/2020/08/changes-to-samesite-cookie-behavior/ +// Currently, the absence of the SameSite attribute implies that cookies will be +// attached to any request for a given origin, no matter who initiated that request. +// This behavior is equivalent to setting SameSite=None. +// So the pref allows the lack of attribution, or SameSite=None, only on HTTPS sites +// to prevent CSFRs on plaintext sites. +// [1] https://hacks.mozilla.org/2020/08/changes-to-samesite-cookie-behavior/ +// [2] https://caniuse.com/?search=samesite +// [3] https://github.com/arkenfox/user.js/issues/1640#issuecomment-1464093950 +// [4] https://support.mozilla.org/en-US/questions/1364032 +// [5] https://blog.mozilla.org/security/2018/04/24/same-site-cookies-in-firefox-60/ // [6] https://web.dev/samesite-cookies-explained/ // [7] https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions // [8] https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies // [TEST] https://samesite-sandbox.glitch.me/ //user_pref("network.cookie.sameSite.laxByDefault", true); -//user_pref("network.cookie.sameSite.noneRequiresSecure", true); +user_pref("network.cookie.sameSite.noneRequiresSecure", true); //user_pref("network.cookie.sameSite.schemeful", true); // PREF: Hyperlink Auditing (click tracking) @@ -174,6 +180,12 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", "*.instagram.com, *. // [1] https://developer.mozilla.org/en-US/docs/Web/API/Battery_Status_API#browser_compatibility //user_pref("dom.battery.enabled", false); +// PREF: remove temp files opened from non-PB windows with an external application +// [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=302433,1738574 +// [2] https://github.com/arkenfox/user.js/issues/1732 +user_pref("browser.download.start_downloads_in_tmp_dir", true); // [FF102+] +user_pref("browser.helperApps.deleteTempFileOnExit", true); + // PREF: disable UITour backend // This way, there is no chance that a remote page can use it. user_pref("browser.uitour.enabled", false); @@ -183,16 +195,20 @@ user_pref("browser.uitour.enabled", false); // [1] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/16222 //user_pref("devtools.debugger.remote-enabled", false); // DEFAULT -// PREF: enable Global Privacy Control (GPC) [NIGHTLY] -// Honored by many highly ranked sites [2]. +// PREF: Global Privacy Control (GPC) [FF118+] +// A privacy signal that tells the websites that the user +// doesn’t want to be tracked and doesn’t want their data to be sold. +// Honored by many highly ranked sites [3]. +// [SETTING] Privacy & Security > Website Privacy Preferences > Tell websites not to sell or share my data // [TEST] https://global-privacy-control.glitch.me/ -// [1] https://globalprivacycontrol.org/press-release/20201007.html -// [2] https://github.com/arkenfox/user.js/issues/1542#issuecomment-1279823954 -// [3] https://blog.mozilla.org/netpolicy/2021/10/28/implementing-global-privacy-control/ -// [4] https://help.duckduckgo.com/duckduckgo-help-pages/privacy/gpc/ -// [5] https://brave.com/web-standards-at-brave/4-global-privacy-control/ -// [6] https://www.eff.org/gpc-privacy-badger -// [7] https://www.eff.org/issues/do-not-track +// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1830623 +// [2] https://globalprivacycontrol.org/press-release/20201007.html +// [3] https://github.com/arkenfox/user.js/issues/1542#issuecomment-1279823954 +// [4] https://blog.mozilla.org/netpolicy/2021/10/28/implementing-global-privacy-control/ +// [5] https://help.duckduckgo.com/duckduckgo-help-pages/privacy/gpc/ +// [6] https://brave.com/web-standards-at-brave/4-global-privacy-control/ +// [7] https://www.eff.org/gpc-privacy-badger +// [8] https://www.eff.org/issues/do-not-track user_pref("privacy.globalprivacycontrol.enabled", true); user_pref("privacy.globalprivacycontrol.functionality.enabled", true); @@ -235,8 +251,9 @@ user_pref("security.OCSP.enabled", 0); // [3] https://www.ssl.com/blogs/how-do-browsers-handle-revoked-ssl-tls-certificates/#ftoc-heading-3 //user_pref("security.OCSP.require", true); -// PREF: enable CRLite -// CRLite covers valid certs, and it doesn't fall back to OCSP in mode 2 [FF84+] +// PREF: CRLite +// CRLite covers valid certs, and it doesn't fall back to OCSP in mode 2 [FF84+]. +// CRLite is faster and more private than OCSP [2]. // 0 = disabled // 1 = consult CRLite but only collect telemetry // 2 = consult CRLite and enforce both "Revoked" and "Not Revoked" results @@ -263,10 +280,14 @@ user_pref("security.pki.crlite_mode", 2); // [1] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/16206 // [2] https://bugzilla.mozilla.org/show_bug.cgi?id=1168603 // [3] https://github.com/yokoffing/Betterfox/issues/53#issuecomment-1035554783 -user_pref("security.cert_pinning.enforcement_level", 2); - -// PREF: disable Enterprise Root Certificates of the operating system -//user_pref("security.enterprise_roots.enabled", false); // DEFAULT +//user_pref("security.cert_pinning.enforcement_level", 2); + +// PREF: do not trust installed third-party root certificates [FF120+] +// Disable Enterprise Root Certificates of the operating system. +// For users trying to get intranet sites on managed networks, +// or who have security software configured to analyze web traffic. +// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1848815 +//user_pref("security.enterprise_roots.enabled", false); //user_pref("security.certerrors.mitm.auto_enable_enterprise_roots", false); /**************************************************************************** @@ -308,25 +329,6 @@ user_pref("browser.xul.error_pages.expert_bad_cert", true); // [3] https://blog.cloudflare.com/tls-1-3-overview-and-q-and-a/ user_pref("security.tls.enable_0rtt_data", false); -/**************************************************************************** - * SECTION: FONTS * -****************************************************************************/ - -// PREF: disable rendering of SVG OpenType fonts -// [1] https://github.com/arkenfox/user.js/issues/1529 -//user_pref("gfx.font_rendering.opentype_svg.enabled", false); - -// PREF: limit font visibility (Windows, Mac, some Linux) [FF94+] -// Uses hardcoded lists with two parts: kBaseFonts + kLangPackFonts [1], bundled fonts are auto-allowed -// In Normal windows: uses the first applicable: RFP (4506) over TP over Standard -// In Private Browsing windows: uses the most restrictive between normal and private -// 1=only base system fonts, 2=also fonts from optional language packs, 3=also user-installed fonts -// [1] https://searchfox.org/mozilla-central/search?path=StandardFonts*.inc -//user_pref("layout.css.font-visibility.resistFingerprinting", 1); // DEFAULT - //user_pref("layout.css.font-visibility.trackingprotection", 1); // Normal Browsing windows with tracking protection enabled - //user_pref("layout.css.font-visibility.private", 1); // Private Browsing windows - //user_pref("layout.css.font-visibility.standard", 1); // Normal Browsing windows with tracking protection disabled(?) - /**************************************************************************** * SECTION: FINGERPRINT PROTECTION (RFP) * ****************************************************************************/ @@ -399,9 +401,10 @@ user_pref("browser.sessionstore.interval", 60000); // 1 minute; default=15000 (1 // [1] https://bugzilla.mozilla.org/603903 //user_pref("toolkit.winRegisterApplicationRestart", false); -// PREF: disable fetching and permanently storing favicons for Windows .URL shortcuts created by drag and drop +// PREF: disable favicons in shortcuts [WINDOWS] +// Fetches and stores favicons for Windows .URL shortcuts created by drag and drop // [NOTE] .URL shortcut files will be created with a generic icon. -// Favicons are stored as .ico files in $profile_dir\shortcutCache. +// Favicons are stored as .ico files in profile_dir\shortcutCache. //user_pref("browser.shell.shortcutFavicons", false); // PREF: remove temp files opened with an external application @@ -476,7 +479,7 @@ user_pref("privacy.history.custom", true); // [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1767271 /****************************************************************************** - * SECTION: SEARCH / URL BAR * + * SECTION: SEARCH / URL BAR * ******************************************************************************/ // PREF: trim certain parts of the URL @@ -485,8 +488,11 @@ user_pref("privacy.history.custom", true); // [2] https://winaero.com/firefox-75-strips-https-and-www-from-address-bar-results/ //user_pref("browser.urlbar.trimURLs", true); // DEFAULT -// PREF: trim https:// from the URL bar [FF119+] +// PREF: trim HTTPS from the URL bar [FF119+] // Firefox will hide https:// from the address bar, but not subdomains like www. +// It saves some space. Betterfox already uses HTTPS-by-Default and insecure sites +// get a padlock with a red stripe. Copying the URL still copies the scheme, +// so it's not like we need to see https. It's not a privacy issue, so you can add to your overrides. // [TEST] http://www.http2demo.io/ // [1] https://www.ghacks.net/2023/09/19/firefox-119-will-launch-with-an-important-address-bar-change/ //user_pref("browser.urlbar.trimHttps", true); @@ -517,19 +523,11 @@ user_pref("browser.search.separatePrivateDefault.ui.enabled", true); // [1] https://reddit.com/r/firefox/comments/xkzswb/adding_firefox_search_engine_manually/ user_pref("browser.urlbar.update2.engineAliasRefresh", true); // HIDDEN -// PREF: disable live search engine suggestions (Google, Bing, etc.) +// PREF: disable urlbar live search engine suggestions (Google, Bing, etc.) // [WARNING] Search engines keylog every character you type from the URL bar. user_pref("browser.search.suggest.enabled", false); //user_pref("browser.search.suggest.enabled.private", false); // DEFAULT -// disable showing trending searches -//user_pref("browser.urlbar.suggest.trending", false); // FF119+ - -// PREF: disable location bar leaking single words to a DNS provider after searching -// 0=never resolve single words, 1=heuristic (default), 2=always resolve -// [1] https://bugzilla.mozilla.org/1642623 -//user_pref("browser.urlbar.dnsResolveSingleWordsAfterSearch", 0); // DEFAULT FF104+ - // PREF: disable Firefox Suggest // [1] https://github.com/arkenfox/user.js/issues/1257 //user_pref("browser.urlbar.quicksuggest.enabled", false); // controls whether the UI is shown @@ -555,13 +553,14 @@ user_pref("browser.formfill.enable", false); // and is a security risk (e.g. common typos & malicious sites set up to exploit this). //user_pref("browser.fixup.alternate.enabled", false); // [DEFAULT FF104+] -// PREF: Disable location bar autofill +// PREF: disable location bar autofill // https://support.mozilla.org/en-US/kb/address-bar-autocomplete-firefox#w_url-autocomplete //user_pref("browser.urlbar.autoFill", false); -// PREF: Enforce Punycode for Internationalized Domain Names to eliminate possible spoofing +// PREF: enforce Punycode for Internationalized Domain Names to eliminate possible spoofing // Firefox has some protections, but it is better to be safe than sorry. // [!] Might be undesirable for non-latin alphabet users since legitimate IDN's are also punycoded. +// [EXAMPLE] https://www.techspot.com/news/100555-malvertising-attack-uses-punycode-character-spread-malware-through.html // [TEST] https://www.xn--80ak6aa92e.com/ (www.apple.com) // [1] https://wiki.mozilla.org/IDN_Display_Algorithm // [2] https://en.wikipedia.org/wiki/IDN_homograph_attack @@ -646,15 +645,19 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true); // PREF: DNS-over-HTTPS (DoH) implementation // [NOTE] Mode 3 has site exceptions with a nice UI on the error page. // [SETTINGS] Privacy & Security > DNS over HTTPS > Enable secure DNS using: -// [NOTE] Mode 3 has site-exceptions with a nice UI on the error page +// [NOTE] Mode 3 has site-exceptions with a nice UI on the error page. // [1] https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-over-https/ // [2] https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained -// 0= Default Protection: disable DoH (default) +// 0= Default Protection: Firefox decides when to use secure DNS (default) // 2= Increased Protection: use DoH and fall back to native DNS if necessary // 3= Max Protection: only use DoH; do not fall back to native DNS // 5= Off: disable DoH //user_pref("network.trr.mode", 0); // DEFAULT +// PREF: lower max attempts to use DoH +// If DNS requests take too long, FF will fallback to your default DNS much quicker. +//user_pref("network.trr.max-fails", 5); // default=15 + // PREF: display fallback warning page [FF115+] // Show a warning checkbox UI in modes 0 or 2 above. //user_pref("network.trr_ui.show_fallback_warning_option", false); // DEFAULT @@ -665,11 +668,14 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true); //user_pref("network.trr.uri", "https://xxxx/dns-query"); //user_pref("network.trr.custom_uri", "https://xxxx/dns-query"); -// PREF: adjust providers -//user_pref("network.trr.resolvers", '[{ "name": "Cloudflare", "url": "https://mozilla.cloudflare-dns.com/dns-query" },{ "name": "SecureDNS", "url": "https://doh.securedns.eu/dns-query" },{ "name": "AppliedPrivacy", "url": "https://doh.appliedprivacy.net/query" },{ "name": "Digitale Gesellschaft (CH)", "url": "https://dns.digitale-gesellschaft.ch/dns-query" }, { "name": "Quad9", "url": "https://dns.quad9.net/dns-query" }]'); +// PREF: set DoH bootstrap address [FF89+] +// Firefox uses the system DNS to initially resolve the IP address of your DoH server. +// When set to a valid, working value that matches your "network.trr.uri" Firefox +// won't use the system DNS. If the IP doesn't match then DoH won't work +//user_pref("network.trr.bootstrapAddr", "10.0.0.1"); // [HIDDEN PREF] -// PREF: fallback to native DNS upon network errors -//user_pref("network.trr.strict_native_fallback", false); // DEFAULT +// PREF: adjust providers +//user_pref("network.trr.resolvers", '[{ "name": "Cloudflare", "url": "https://mozilla.cloudflare-dns.com/dns-query" },{ "name": "SecureDNS", "url": "https://doh.securedns.eu/dns-query" },{ "name": "AppliedPrivacy", "url": "https://doh.appliedprivacy.net/query" },{ "name": "Digitale Gesellschaft (CH)", "url": "https://dns.digitale-gesellschaft.ch/dns-query" }, { "name": "Quad9", "url": "https://dns.quad9.net/dns-query" }]'); // PREF: EDNS Client Subnet (ECS) // [WARNING] In some circumstances, enabling ECS may result @@ -689,7 +695,6 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true); // PREF: assorted options //user_pref("network.trr.confirmationNS", "skip"); // skip undesired DOH test connection -//user_pref("network.dns.skipTRR-when-parental-control-enabled", false); // bypass parental controls when using DoH //user_pref("network.trr.skip-AAAA-when-not-supported", true); // DEFAULT; If Firefox detects that your system does not have IPv6 connectivity, it will not request IPv6 addresses from the DoH server //user_pref("network.trr.clear-cache-on-pref-change", true); // DEFAULT; DNS+TRR cache will be cleared when a relevant TRR pref changes //user_pref("network.trr.wait-for-portal", false); // DEFAULT; set this to true to tell Firefox to wait for the captive portal detection before TRR is used @@ -698,29 +703,28 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true); //user_pref("network.trr.excluded-domains", ""); // DEFAULT; comma-separated list of domain names to be resolved using the native resolver instead of TRR. This pref can be used to make /etc/hosts works with DNS over HTTPS in Firefox. //user_pref("network.trr.builtin-excluded-domains", "localhost,local"); // DEFAULT; comma-separated list of domain names to be resolved using the native resolver instead of TRR -// PREF: Oblivious HTTP (OHTTP) -// Enable DNS over Oblivious HTTP. +// PREF: Oblivious HTTP (OHTTP) (DoOH) +// [Oct 2023] Cloudflare are the only ones running an OHTTP server and resolver, +// but there needs to be a relay, and it's not the cheapest thing to run. // [1] https://blog.cloudflare.com/stronger-than-a-promise-proving-oblivious-http-privacy-properties/ // [2] https://www.ietf.org/archive/id/draft-thomson-http-oblivious-01.html // [3] https://old.reddit.com/r/dnscrypt/comments/11ukt43/what_is_dns_over_oblivious_http_targetrelay/ji1nl0m/?context=3 //user_pref("network.trr.mode", 2); //user_pref("network.trr.ohttp.config_uri", "https://dooh.cloudflare-dns.com/.well-known/doohconfig"); //user_pref("network.trr.ohttp.uri", "https://dooh.cloudflare-dns.com/dns-query"); -//user_pref("network.trr.ohttp.relay_uri", "https://dooh.waterfox.net/"); +//user_pref("network.trr.ohttp.relay_uri", ""); // custom //user_pref("network.trr.use_ohttp", true); -/****************************************************************************** - * SECTION: ESNI / ECH * -******************************************************************************/ - -// PREF: enable Encrypted Client Hello (ECH) +// PREF: Encrypted Client Hello (ECH) [FF118] // [NOTE] HTTP is already isolated with network partitioning. -// [1] https://blog.cloudflare.com/encrypted-client-hello/ -// [2] https://www.youtube.com/watch?v=tfyrVYqXQRE -// [3] https://groups.google.com/a/chromium.org/g/blink-dev/c/KrPqrd-pO2M/m/Yoe0AG7JAgAJ -//user_pref("network.dns.echconfig.enabled", true); -//user_pref("network.dns.http3_echconfig.enabled", true); - //user_pref("network.dns.use_https_rr_as_altsvc", true); // DEFAULT +// [TEST] https://www.cloudflare.com/ssl/encrypted-sni +// [1] https://support.mozilla.org/en-US/kb/understand-encrypted-client-hello +// [2] https://blog.mozilla.org/en/products/firefox/encrypted-hello/ +// [3] https://support.mozilla.org/en-US/kb/faq-encrypted-client-hello#w_can-i-use-ech-alongside-other-security-tools-like-vpnsre +// [4] https://wiki.mozilla.org/Security/Encrypted_Client_Hello#Preferences +//user_pref("network.dns.echconfig.enabled", true); // use ECH for TLS Connections +//user_pref("network.dns.http3_echconfig.enabled", true); // use ECH for QUIC connections +//user_pref("network.dns.echconfig.fallback_to_origin_when_all_failed", false); // fallback to non-ECH without an authenticated downgrade signal /****************************************************************************** * SECTION: PROXY / SOCKS / IPv6 * @@ -748,33 +752,50 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true); // PREF: disable GIO as a potential proxy bypass vector // Gvfs/GIO has a set of supported protocols like obex, network, // archive, computer, dav, cdda, gphoto2, trash, etc. -// By default, only sftp is accepted (FF87+). +// From FF87-117, by default only sftp was accepted. // [1] https://bugzilla.mozilla.org/1433507 // [2] https://en.wikipedia.org/wiki/GVfs // [3] https://en.wikipedia.org/wiki/GIO_(software) -//user_pref("network.gio.supported-protocols", ""); // [HIDDEN PREF] +//user_pref("network.gio.supported-protocols", ""); // [HIDDEN PREF] [DEFAULT FF118+] // PREF: disable check for proxies //user_pref("network.notify.checkForProxies", false); /****************************************************************************** - * SECTION: PASSWORDS * + * SECTION: PASSWORDS * ******************************************************************************/ // PREF: disable password manager // [NOTE] This does not clear any passwords already saved. -user_pref("signon.rememberSignons", false); // Privacy & Security>Logins and Passwords>Ask to save logins and passwords for websites -//user_pref("signon.rememberSignons.visibilityToggle", false); -//user_pref("signon.schemeUpgrades", false); -//user_pref("signon.showAutoCompleteFooter", false); -//user_pref("signon.autologin.proxy", false); - //user_pref("signon.debug", false); +// [SETTING] Privacy & Security>Logins and Passwords>Ask to save logins and passwords for websites +user_pref("signon.rememberSignons", false); + //user_pref("signon.rememberSignons.visibilityToggle", true); // DEFAULT + //user_pref("signon.schemeUpgrades", true); // DEFAULT + //user_pref("signon.showAutoCompleteFooter", true); // DEFAULT + //user_pref("signon.autologin.proxy", false); // DEFAULT + +// PREF: disable auto-filling username & password form fields +// Can leak in cross-site forms and be spoofed. +// [NOTE] Username and password is still available when you enter the field. +// [SETTING] Privacy & Security>Logins and Passwords>Autofill logins and passwords +//user_pref("signon.autofillForms", false); +//user_pref("signon.autofillForms.autocompleteOff", true); // DEFAULT + +// PREF: disable formless login capture for Password Manager [FF51+] +// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1166947 +user_pref("signon.formlessCapture.enabled", false); + +// PREF: disable capturing credentials in private browsing +user_pref("signon.privateBrowsingCapture.enabled", false); + +// PREF: disable autofilling saved passwords on HTTP pages +// [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=1217152,1319119 +//user_pref("signon.autofillForms.http", false); // DEFAULT // PREF: disable Firefox built-in password generator // Create passwords with random characters and numbers. // [NOTE] Doesn't work with Lockwise disabled! // [1] https://wiki.mozilla.org/Toolkit:Password_Manager/Password_Generation -//user_pref("signon.generation.available", false); //user_pref("signon.generation.enabled", false); // PREF: disable Firefox Lockwise (about:logins) @@ -786,41 +807,25 @@ user_pref("signon.rememberSignons", false); // Privacy & Security>Logins and Pas // user_pref("browser.contentblocking.report.lockwise.enabled", false); //user_pref("browser.contentblocking.report.lockwise.how_it_works.url", ""); -// PREF: disable formless login capture -// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1166947 -//user_pref("signon.formlessCapture.enabled", false); - -// PREF: disable capturing credentials in private browsing -//user_pref("signon.privateBrowsingCapture.enabled", false); - -// PREF: disable auto-filling username & password form fields -// Can leak in cross-site forms and be spoofed. -// [NOTE] Username and password is still available when you enter the field. -//user_pref("signon.autofillForms", false); -//user_pref("signon.autofillForms.autocompleteOff", true); -//user_pref("signon.showAutoCompleteOrigins", false); - -// PREF: disable autofilling saved passwords on HTTP pages -// [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=1217152,1319119 -//user_pref("signon.autofillForms.http", false); // DEFAULT - -// PREF: disable Firefox import password from signons.sqlite file -// [1] https://support.mozilla.org/en-US/questions/1020818 -//user_pref("signon.management.page.fileImport.enabled", false); -//user_pref("signon.importedFromSqlite", false); - //user_pref("signon.recipes.path", ""); - // PREF: disable websites autocomplete // Don't let sites dictate use of saved logins and passwords. //user_pref("signon.storeWhenAutocompleteOff", false); +// PREF: limit (or disable) HTTP authentication credentials dialogs triggered by sub-resources [FF41+] +// Hardens against potential credentials phishing. +// 0=don't allow sub-resources to open HTTP authentication credentials dialogs +// 1=don't allow cross-origin sub-resources to open HTTP authentication credentials dialogs +// 2=allow sub-resources to open HTTP authentication credentials dialogs (default) +// [1] https://www.fxsitecompat.com/en-CA/docs/2015/http-auth-dialog-can-no-longer-be-triggered-by-cross-origin-resources/ +user_pref("network.auth.subresource-http-auth-allow", 1); + // PREF: prevent password truncation when submitting form data // [1] https://www.ghacks.net/2020/05/18/firefox-77-wont-truncate-text-exceeding-max-length-to-address-password-pasting-issues/ user_pref("editor.truncate_user_pastes", false); // PREF: reveal password icon //user_pref("layout.forms.reveal-password-context-menu.enabled", true); // right-click menu option; DEFAULT [FF112] -// [DO NOT TOUCH] Icons will double-up if the website implements it natively: +// [DO NOT TOUCH] Icons will double-up if the website implements it natively. //user_pref("layout.forms.reveal-password-button.enabled", true); // always show icon in password fields /**************************************************************************** @@ -835,19 +840,11 @@ user_pref("extensions.formautofill.addresses.enabled", false); user_pref("extensions.formautofill.creditCards.enabled", false); /****************************************************************************** - * SECTION: MIXED CONTENT + CROSS-SITE * + * SECTION: MIXED CONTENT + CROSS-SITE * ******************************************************************************/ // [TEST] https://mixed-script.badssl.com/ -// PREF: limit (or disable) HTTP authentication credentials dialogs triggered by sub-resources -// Hardens against potential credentials phishing. -// 0=don't allow sub-resources to open HTTP authentication credentials dialogs -// 1=don't allow cross-origin sub-resources to open HTTP authentication credentials dialogs -// 2=allow sub-resources to open HTTP authentication credentials dialogs (default) -// [1] https://www.fxsitecompat.com/en-CA/docs/2015/http-auth-dialog-can-no-longer-be-triggered-by-cross-origin-resources/ -user_pref("network.auth.subresource-http-auth-allow", 1); - // PREF: disable automatic authentication on Microsoft sites [WINDOWS] // [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=1695693,1719301 //user_pref("network.http.windows-sso.enabled", false); @@ -865,7 +862,12 @@ user_pref("network.auth.subresource-http-auth-allow", 1); user_pref("security.mixed_content.block_display_content", true); // PREF: upgrade passive content to use HTTPS on secure pages -//user_pref("security.mixed_content.upgrade_display_content", true); // DEFAULT [FF 110] +// [NOTE] You can remove if using HTTPS-Only Mode. +user_pref("security.mixed_content.upgrade_display_content", true); +// [FF119+]: +//user_pref("security.mixed_content.upgrade_display_content.audio", true); // DEFAULT +user_pref("security.mixed_content.upgrade_display_content.image", true); +//user_pref("security.mixed_content.upgrade_display_content.video", true); // DEFAULT // PREF: block insecure downloads from secure sites // [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1660952 @@ -875,6 +877,14 @@ user_pref("security.mixed_content.block_display_content", true); // https://www.reddit.com/r/uBlockOrigin/comments/mulc86/firefox_88_now_supports_javascript_in_pdf_files/ user_pref("pdfjs.enableScripting", false); +// PREF: limit allowed extension directories +// The pref value represents the sum: e.g. 5 would be profile and application directories. +// [WARNING] Breaks usage of files which are installed outside allowed directories. +// [1] https://archive.is/DYjAM +// 1=profile, 2=user, 4=application, 8=system, 16=temporary, 31=all +//user_pref("extensions.enabledScopes", 5); // [HIDDEN PREF] DEFAULT + // user_pref("extensions.autoDisableScopes", 15); // [DEFAULT: 15] + // PREF: disable bypassing 3rd party extension install prompts // [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=1659530,1681331 user_pref("extensions.postDownloadThirdPartyPrompt", false); @@ -897,7 +907,7 @@ user_pref("extensions.postDownloadThirdPartyPrompt", false); //user_pref("privacy.window.name.update.enabled", true); // DEFAULT /****************************************************************************** - * SECTION: HEADERS / REFERERS * + * SECTION: HEADERS / REFERERS * ******************************************************************************/ // PREF: default referrer policy (used unless overriden by the site) @@ -932,6 +942,8 @@ user_pref("extensions.postDownloadThirdPartyPrompt", false); // This includes images, links, and embedded social media on pages. // This may cause breakage where third party images and videos // may not load, and with authentication on sites such as banks. +// [NOTE] Most navigational "tracking" is harmless (i.e., the same for everyone) +// and effectively blocking cross-site referers just breaks a lot of sites. // 0=always send referrer (default) // 1=send across subdomains [from a.example.com to b.example.com] (breaks Instagram embeds, Bing login, MangaPill, and some streaming sites) // 2=full host name must match [from c.example.com to c.example.com] (breaks Vimeo, iCloud, Instagram, Amazon book previews, and more) @@ -949,7 +961,7 @@ user_pref("extensions.postDownloadThirdPartyPrompt", false); user_pref("network.http.referer.XOriginTrimmingPolicy", 2); /****************************************************************************** - * SECTION: CONTAINERS * + * SECTION: CONTAINERS * ******************************************************************************/ // PREF: enable Container Tabs and its UI setting [FF50+] @@ -968,7 +980,7 @@ user_pref("privacy.userContext.ui.enabled", true); //user_pref("privacy.userContext.newTabContainerOnLeftClick.enabled", true); /****************************************************************************** - * SECTION: WEBRTC * + * SECTION: WEBRTC * ******************************************************************************/ // PREF: disable WebRTC (Web Real-Time Communication) @@ -997,7 +1009,7 @@ user_pref("media.peerconnection.ice.default_address_only", true); //user_pref("media.peerconnection.ice.no_host", true); /****************************************************************************** - * SECTION: PLUGINS * + * SECTION: PLUGINS * ******************************************************************************/ // PREF: disable GMP (Gecko Media Plugins) @@ -1023,7 +1035,7 @@ user_pref("media.peerconnection.ice.default_address_only", true); //user_pref("browser.eme.ui.enabled", false); /****************************************************************************** - * SECTION: VARIOUS * + * SECTION: VARIOUS * ******************************************************************************/ // PREF: enable FTP protocol @@ -1042,7 +1054,7 @@ user_pref("media.peerconnection.ice.default_address_only", true); //user_pref("devtools.selfxss.count", 5); /****************************************************************************** - * SECTION: SAFE BROWSING (SB) * + * SECTION: SAFE BROWSING (SB) * ******************************************************************************/ // A full url is never sent to Google, only a part-hash of the prefix, @@ -1223,63 +1235,85 @@ user_pref("webchannel.allowObject.urlWhitelist", ""); /****************************************************************************** * SECTION: TELEMETRY * ******************************************************************************/ -// Disable all the various Mozilla telemetry, studies, reports, etc. -// PREF: Telemetry +// PREF: disable new data submission [FF41+] +// If disabled, no policy is shown or upload takes place, ever. +// [1] https://bugzilla.mozilla.org/1195552 +user_pref("datareporting.policy.dataSubmissionEnabled", false); + +// PREF: disable Health Reports +// [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to send technical data. +user_pref("datareporting.healthreport.uploadEnabled", false); + +// PREF: disable telemetry +// - If "unified" is false then "enabled" controls the telemetry module +// - If "unified" is true then "enabled" only controls whether to record extended data +// [NOTE] "toolkit.telemetry.enabled" is now LOCKED to reflect prerelease (true) or release builds (false) [2] +// [1] https://firefox-source-docs.mozilla.org/toolkit/components/telemetry/telemetry/internals/preferences.html +// [2] https://medium.com/georg-fritzsche/data-preference-changes-in-firefox-58-2d5df9c428b5 ***/ user_pref("toolkit.telemetry.unified", false); -user_pref("toolkit.telemetry.enabled", false); +user_pref("toolkit.telemetry.enabled", false); // see [NOTE] user_pref("toolkit.telemetry.server", "data:,"); user_pref("toolkit.telemetry.archive.enabled", false); user_pref("toolkit.telemetry.newProfilePing.enabled", false); user_pref("toolkit.telemetry.shutdownPingSender.enabled", false); user_pref("toolkit.telemetry.updatePing.enabled", false); -user_pref("toolkit.telemetry.bhrPing.enabled", false); +user_pref("toolkit.telemetry.bhrPing.enabled", false); // [FF57+] Background Hang Reporter user_pref("toolkit.telemetry.firstShutdownPing.enabled", false); -user_pref("toolkit.telemetry.dap_enabled", false); // DEFAULT [FF108] +//user_pref("toolkit.telemetry.dap_enabled", false); // DEFAULT [FF108] -// PREF: Check bundled omni JARs for corruption -// [1] https://github.com/ghostery/user-agent-desktop/issues/141 -// [2] https://github.com/arkenfox/user.js/issues/791 -//user_pref("corroborator.enabled", false); +// PREF: disable Telemetry Coverage +// [1] https://blog.mozilla.org/data/2018/08/20/effectively-measuring-search-in-firefox/ +user_pref("toolkit.telemetry.coverage.opt-out", true); // [HIDDEN PREF] +user_pref("toolkit.coverage.opt-out", true); // [FF64+] [HIDDEN PREF] +user_pref("toolkit.coverage.endpoint.base", ""); -// PREF: Telemetry Coverage -user_pref("toolkit.telemetry.coverage.opt-out", true); -user_pref("toolkit.coverage.opt-out", true); - //user_pref("toolkit.coverage.endpoint.base", ""); +// PREF: disable PingCentre telemetry (used in several System Add-ons) [FF57+] +// Currently blocked by 'datareporting.healthreport.uploadEnabled' +user_pref("browser.ping-centre.telemetry", false); -// PREF: Health Reports -// [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to send technical data. -user_pref("datareporting.healthreport.uploadEnabled", false); +// PREF: disable Firefox Home (Activity Stream) telemetry +user_pref("browser.newtabpage.activity-stream.feeds.telemetry", false); +user_pref("browser.newtabpage.activity-stream.telemetry", false); -// PREF: new data submission, master kill switch -// If disabled, no policy is shown or upload takes place, ever -// [1] https://bugzilla.mozilla.org/1195552 -user_pref("datareporting.policy.dataSubmissionEnabled", false); +/****************************************************************************** + * SECTION: EXPERIMENTS * +******************************************************************************/ -// PREF: Studies +// PREF: disable Studies // [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to install and run studies user_pref("app.shield.optoutstudies.enabled", false); -// PREF: Personalized Extension Recommendations in about:addons and AMO -// [NOTE] This pref has no effect when Health Reports are disabled. -// [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to make personalized extension recommendations -user_pref("browser.discovery.enabled", false); +// PREF: disable Normandy/Shield [FF60+] +// Shield is an telemetry system (including Heartbeat) that can also push and test "recipes". +// [1] https://mozilla.github.io/normandy/ +user_pref("app.normandy.enabled", false); +user_pref("app.normandy.api_url", ""); + +/****************************************************************************** + * SECTION: CRASH REPORTS * +******************************************************************************/ // PREF: disable crash reports user_pref("breakpad.reportURL", ""); user_pref("browser.tabs.crashReporting.sendReport", false); //user_pref("browser.crashReports.unsubmittedCheck.enabled", false); // DEFAULT + // PREF: enforce no submission of backlogged crash reports +// [SETTING] Privacy & Security>Firefox Data Collection & Use>Allow Firefox to send backlogged crash reports user_pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); -// PREF: Captive Portal detection -// [WARNING] Do NOT use for mobile devices. May NOT be able to use Firefox on public wifi (hotels, coffee shops, etc). +/****************************************************************************** + * SECTION: DETECTION * +******************************************************************************/ + +// PREF: disable Captive Portal detection // [1] https://www.eff.org/deeplinks/2017/08/how-captive-portals-interfere-wireless-security-and-privacy // [2] https://wiki.mozilla.org/Necko/CaptivePortal user_pref("captivedetect.canonicalURL", ""); user_pref("network.captive-portal-service.enabled", false); -// PREF: Network Connectivity checks +// PREF: disable Network Connectivity checks // [WARNING] Do NOT use for mobile devices. May NOT be able to use Firefox on public wifi (hotels, coffee shops, etc). // [1] https://bugzilla.mozilla.org/1460537 user_pref("network.connectivity-service.enabled", false); @@ -1293,18 +1327,10 @@ user_pref("network.connectivity-service.enabled", false); // PREF: "report extensions for abuse" //user_pref("extensions.abuseReport.enabled", false); -// PREF: Normandy/Shield [extensions tracking] -// Shield is an telemetry system (including Heartbeat) that can also push and test "recipes" -user_pref("app.normandy.enabled", false); -user_pref("app.normandy.api_url", ""); - -// PREF: PingCentre telemetry (used in several System Add-ons) -// Currently blocked by 'datareporting.healthreport.uploadEnabled' -user_pref("browser.ping-centre.telemetry", false); - -// PREF: disable Firefox Home (Activity Stream) telemetry -user_pref("browser.newtabpage.activity-stream.telemetry", false); -user_pref("browser.newtabpage.activity-stream.feeds.telemetry", false); +// PREF: check bundled omni JARs for corruption +// [1] https://github.com/ghostery/user-agent-desktop/issues/141 +// [2] https://github.com/arkenfox/user.js/issues/791 +//user_pref("corroborator.enabled", false); // PREF: assorted telemetry // [NOTE] Shouldn't be needed for user.js, but browser forks diff --git a/Smoothfox.js b/Smoothfox.js index 8702f7773..fe9f28487 100644 --- a/Smoothfox.js +++ b/Smoothfox.js @@ -1,35 +1,50 @@ + /**************************************************************************************** * Smoothfox * * "Faber est suae quisque fortunae" * * priority: better scrolling * - * version: July 2023 * + * version: 10 October 2023 * * url: https://github.com/yokoffing/Betterfox * ***************************************************************************************/ +// Use only one option at a time! +// Reset prefs if you decide to use different option. + +/**************************************************************************************** + * OPTION: SHARPEN SCROLLING * +****************************************************************************************/ +// credit: https://github.com/black7375/Firefox-UI-Fix +// only sharpen scrolling +user_pref("apz.overscroll.enabled", true); // DEFAULT NON-LINUX +user_pref("mousewheel.min_line_scroll_amount", 10); // 10-40; adjust this number to your liking; default=5 +user_pref("general.smoothScroll.mouseWheel.durationMinMS", 80); // default=50 +user_pref("general.smoothScroll.currentVelocityWeighting", "0.15"); // default=.25 +user_pref("general.smoothScroll.stopDecelerationWeighting", "0.6"); // default=.4 + /**************************************************************************************** - * OPTION 1: INSTANT SCROLLING (SIMPLE ADJUSTMENT) * + * OPTION: INSTANT SCROLLING (SIMPLE ADJUSTMENT) * ****************************************************************************************/ // recommended for 60hz+ displays -user_pref("apz.overscroll.enabled", true); // not DEFAULT on Linux +user_pref("apz.overscroll.enabled", true); // DEFAULT NON-LINUX user_pref("general.smoothScroll", true); // DEFAULT user_pref("mousewheel.default.delta_multiplier_y", 275); // 250-400; adjust this number to your liking /**************************************************************************************** - * OPTION 2: SMOOTH SCROLLING * + * OPTION: SMOOTH SCROLLING * ****************************************************************************************/ // recommended for 90hz+ displays -user_pref("apz.overscroll.enabled", true); // not DEFAULT on Linux +user_pref("apz.overscroll.enabled", true); // DEFAULT NON-LINUX user_pref("general.smoothScroll", true); // DEFAULT user_pref("general.smoothScroll.msdPhysics.enabled", true); user_pref("mousewheel.default.delta_multiplier_y", 300); // 250-400; adjust this number to your liking /**************************************************************************************** - * OPTION 3: NATURAL SMOOTH SCROLLING V3 [MODIFIED] * + * OPTION: NATURAL SMOOTH SCROLLING V3 [MODIFIED] * ****************************************************************************************/ +// credit: https://github.com/AveYo/fox/blob/cf56d1194f4e5958169f9cf335cd175daa48d349/Natural%20Smooth%20Scrolling%20for%20user.js // recommended for 120hz+ displays // largely matches Chrome flags: Windows Scrolling Personality and Smooth Scrolling -// from https://github.com/AveYo/fox/blob/cf56d1194f4e5958169f9cf335cd175daa48d349/Natural%20Smooth%20Scrolling%20for%20user.js -user_pref("apz.overscroll.enabled", true); // not DEFAULT on Linux +user_pref("apz.overscroll.enabled", true); // DEFAULT NON-LINUX user_pref("general.smoothScroll", true); // DEFAULT user_pref("general.smoothScroll.msdPhysics.continuousMotionMaxDeltaMS", 12); user_pref("general.smoothScroll.msdPhysics.enabled", true); diff --git a/personal/user-overrides.js b/personal/user-overrides.js index d861c5d84..1f3ff4579 100644 --- a/personal/user-overrides.js +++ b/personal/user-overrides.js @@ -18,21 +18,15 @@ //user_pref("network.trr.uri", "https://dns.nextdns.io/******/Firefox"); // TRR/DoH /** FASTFOX ***/ -//user_pref("dom.ipc.processCount.webIsolated", 2); // process per site -//user_pref("dom.ipc.processPrelaunch.fission.number", 1); // number of Preallocated processes user_pref("browser.sessionstore.restore_pinned_tabs_on_demand", true); -user_pref("browser.sessionhistory.max_total_viewers", 2); // only remember two pages in Back-Forward cache -user_pref("network.http.speculative-parallel-limit", 6); // DEFAULT -user_pref("network.dns.disablePrefetch", false); // DEFAULT +user_pref("browser.sessionhistory.max_total_viewers", 4); // only remember # of pages in Back-Forward cache + +/** speculative load test ***/ user_pref("network.dns.disablePrefetchFromHTTPS", false); -user_pref("browser.urlbar.speculativeConnect.enabled", true); // DEFAULT -user_pref("browser.places.speculativeConnect.enabled", true); // DEFAULT -user_pref("network.early-hints.enabled", true); // DEFAULT NIGHTLY -user_pref("network.early-hints.preconnect.enabled", true); -//user_pref("network.early-hints.preconnect.max_connections", 10); // DEFAULT; when 0, this is limited by "network.http.speculative-parallel-limit" -user_pref("network.prefetch-next", true); // DEFAULT if using DOH/ODNS -user_pref("network.predictor.enabled", false); -user_pref("network.predictor.enable-prefetch", false); +//user_pref("network.prefetch-next", true); +user_pref("network.predictor.enabled", true); +user_pref("network.predictor.enable-prefetch", true); +user_pref("network.predictor.enable-hover-on-ssl", true); /** SECUREFOX ***/ //user_pref("urlclassifier.features.socialtracking.skipURLs", "*.twitter.com, *.twimg.com"); // removed *.instagram.com @@ -52,11 +46,15 @@ user_pref("browser.safebrowsing.downloads.remote.block_uncommon", false); // cle user_pref("browser.safebrowsing.allowOverride", false); // do not allow user to override SB user_pref("dom.push.enabled", false); // disable Push API; breaks FF Sync and Site Notifications user_pref("browser.search.update", false); // do not update opensearch engines -user_pref("network.dns.skipTRR-when-parental-control-enabled", false); // bypass parental controls when using DoH user_pref("network.trr.confirmationNS", "skip"); // skip TRR confirmation request user_pref("extensions.webextensions.restrictedDomains", ""); // remove Mozilla domains so adblocker works on pages +user_pref("identity.fxaccounts.enabled", false); // disable Firefox Sync +user_pref("browser.tabs.firefox-view", false); // disable Firefox View +user_pref("browser.tabs.firefox-view-next", false); // disable Firefox View [FF119+] user_pref("browser.firefox-view.feature-tour", "{\"screen\":\"\",\"complete\":true}"); // disable the Firefox View tour from popping up for new profiles user_pref("accessibility.force_disabled", 1); // disable Accessibility features +//user_pref("security.ssl.require_safe_negotiation", true); // safe negotiation +user_pref("security.cert_pinning.enforcement_level", 2); // strict public key pinning user_pref("browser.download.useDownloadDir", true); // one-click downloads /** PESKYFOX ***/ @@ -67,41 +65,45 @@ user_pref("browser.newtabpage.activity-stream.section.highlights.includeBookmark user_pref("browser.newtabpage.activity-stream.section.highlights.includeDownloads", false); // Settings>Home>Firefox Home Content>Recent Activity>Most Recent Download user_pref("browser.newtabpage.activity-stream.section.highlights.includeVisited", false); // Settings>Home>Firefox Home Content>Recent Activity>Visited Pages user_pref("browser.newtabpage.activity-stream.section.highlights.includePocket", false); // Settings>Home>Firefox Home Content>Recent Activity>Pages Saved to Pocket +user_pref("browser.download.useDownloadDir", true); // use direct downloads user_pref("browser.download.folderList", 0); // 0=desktop, 1=downloads, 2=last used user_pref("browser.toolbars.bookmarks.visibility", "never"); // always hide bookmark bar user_pref("browser.startup.homepage_override.mstone", "ignore"); // What's New page after updates; master switch user_pref("browser.translations.autoTranslate", true); // make Firefox auto-translate non-English pages -user_pref("browser.urlbar.suggest.bookmark", false); // hide URL bar dropdown suggestions -user_pref("browser.urlbar.suggest.history", false); // hide URL bar dropdown suggestions -user_pref("browser.urlbar.suggest.openpage", false); // hide URL bar dropdown suggestions -//user_pref("browser.urlbar.suggest.searches", false); // hide URL bar dropdown suggestions (needed?) +user_pref("browser.urlbar.suggest.history", false); // Browsing history; hide URL bar dropdown suggestions +user_pref("browser.urlbar.suggest.bookmark", false); // Bookmarks; hide URL bar dropdown suggestions +user_pref("browser.urlbar.suggest.openpage", false); // Open tabs; hide URL bar dropdown suggestions +user_pref("browser.urlbar.suggest.topsites", false); // Shortcuts; disable dropdown suggestions with empty query +user_pref("browser.urlbar.suggest.engines", false); // Search engines; tab-to-search +//user_pref("browser.urlbar.suggest.quickactions", false); // Quick actions; hide URL bar dropdown suggestions +//user_pref("browser.urlbar.suggest.searches", false); // (needed?); hide URL bar dropdown suggestions //user_pref("browser.urlbar.maxRichResults", 1); // minimum suggestion needed for URL bar autofill user_pref("browser.bookmarks.max_backups", 0); // minimize disk use; manually back-up user_pref("view_source.wrap_long_lines", true); // wrap source lines user_pref("devtools.debugger.ui.editor-wrapping", true); // wrap lines in devtools user_pref("browser.zoom.full", false); // text-only zoom, not all elements on page -//user_pref("pdfjs.sidebarViewOnLoad", 2); // [HIDDEN] force showing of Table of Contents in sidebar for PDFs (if available) +user_pref("pdfjs.sidebarViewOnLoad", 2); // force showing of Table of Contents in sidebar for PDFs (if available) +//user_pref("layout.word_select.eat_space_to_next_word", false); // do not select the space next to a word when selecting a word +//user_pref("browser.tabs.loadInBackground", false); // CTRL+SHIFT+CLICK for background tabs; Settings>General>Tabs>When you open a link, image or media in a new tab, switch to it immediately user_pref("browser.tabs.loadBookmarksInTabs", true); // force bookmarks to open in a new tab, not the current tab user_pref("ui.key.menuAccessKey", 0); // remove underlined characters from various settings user_pref("general.autoScroll", false); // disable unintentional behavior for middle click user_pref("ui.SpellCheckerUnderlineStyle", 1); // dots for spell check errors -//user_pref("browser.tabs.loadInBackground", false); // CTRL+SHIFT+CLICK for background tabs; Settings>General>Tabs>"When you open a link, image or media in a new tab, switch to it immediately" user_pref("media.videocontrols.picture-in-picture.display-text-tracks.size", "small"); // PiP user_pref("media.videocontrols.picture-in-picture.urlbar-button.enabled", false); // PiP in address bar user_pref("reader.parse-on-load.enabled", false); // disable reader mode //user_pref("reader.color_scheme", "auto"); // match system theme for when reader is enabled //user_pref("browser.urlbar.openintab", true); // stay on current site and open new tab when typing in URL bar +user_pref("browser.urlbar.trimHttps", true); // hide https in URL bar [FF119] /** DELETE IF NOT NIGHTLY ***/ user_pref("privacy.userContext.enabled", false); // disable Containers functionality user_pref("browser.crashReports.unsubmittedCheck.enabled", false); // true by default on NIGHTLY -//user_pref("browser.urlbar.suggest.quickactions", false); // Quick Actions in URL bar //user_pref("xpinstall.signatures.required", false); // [ESR/DEV/NIGHTLY] -user_pref("browser.urlbar.trimHttps", true); // hide https in URL bar [FF119] /** DELETE IF NOT WINDOWS DESKTOP ***/ user_pref("network.trr.mode", 3); // enable TRR (without System fallback) -user_pref("gfx.canvas.accelerated", true); // DEFAULT except on WINDOWS; enable if not using an integrated GPU +user_pref("gfx.canvas.accelerated", true); // DEFAULT NON-WINDOWS; enable if not using an integrated GPU user_pref("browser.startup.preXulSkeletonUI", false); // WINDOWS user_pref("default-browser-agent.enabled", false); // deny Mozilla monitoring default browser (breaks "Make Default" button) user_pref("geo.provider.ms-windows-location", false); // [WINDOWS] @@ -115,9 +117,17 @@ user_pref("gfx.font_rendering.directwrite.use_gdi_table_loading", false); //user_pref("font.name.serif.x-western", "Roboto Slab"); // serif font //user_pref("font.name.sans-serif.x-western", "Roboto"); // sans-serif font //user_pref("font.name.monospace.x-western", "Fira Code"); // monospace font +/** for 12 GB+ RAM ***/ +user_pref("browser.cache.disk.enable", false); +user_pref("browser.cache.memory.capacity", 256000); // default= -1 (32768) +user_pref("browser.cache.memory.max_entry_size", 10240); // default=5120 (5 MB) +user_pref("media.memory_cache_max_size", 131072); // default=8192; AF=65536 +user_pref("media.memory_caches_combined_limit_kb", 1048576); // default=524288 +user_pref("media.memory_caches_combined_limit_pc_sysmem", 10); // default=5 /** DELETE IF NOT macOS LAPTOP ***/ user_pref("network.trr.mode", 2); // enable TRR (with System fallback) +user_pref("network.trr.max-fails", 5); // lower max attempts to use DoH user_pref("geo.provider.use_corelocation", false); // geolocation [MAC] user_pref("pdfjs.defaultZoomValue", "page-width"); // PDF zoom level user_pref("app.update.auto", false); // disable auto-installing Firefox updates [NON-WINDOWS] diff --git a/user.js b/user.js index 750919b1b..da5cb6ee6 100644 --- a/user.js +++ b/user.js @@ -10,31 +10,23 @@ /**************************************************************************** * Betterfox * * "Ad meliora" * - * version: 118 * + * version: 119 * * url: https://github.com/yokoffing/Betterfox * ****************************************************************************/ /**************************************************************************** * SECTION: FASTFOX * ****************************************************************************/ -user_pref("nglayout.initialpaint.delay", 0); -user_pref("nglayout.initialpaint.delay_in_oopif", 0); +/** GENERAL ***/ user_pref("content.notify.interval", 100000); -/** EXPERIMENTAL ***/ -user_pref("layout.css.grid-template-masonry-value.enabled", true); -user_pref("dom.enable_web_task_scheduling", true); -user_pref("layout.css.has-selector.enabled", true); -user_pref("dom.security.sanitizer.enabled", true); - /** GFX ***/ -//user_pref("gfx.canvas.accelerated", true); // enable if using a dedicated GPU on WINDOWS user_pref("gfx.canvas.accelerated.cache-items", 4096); user_pref("gfx.canvas.accelerated.cache-size", 512); user_pref("gfx.content.skia-font-cache-size", 20); -/** BROWSER CACHE ***/ -user_pref("browser.cache.disk.enable", false); +/** DISK CACHE ***/ +user_pref("browser.cache.jsbc_compression_level", 3); /** MEDIA CACHE ***/ user_pref("media.memory_cache_max_size", 65536); @@ -51,19 +43,20 @@ user_pref("network.http.max-connections", 1800); user_pref("network.http.max-persistent-connections-per-server", 10); user_pref("network.http.max-urgent-start-excessive-connections-per-host", 5); user_pref("network.http.pacing.requests.enabled", false); -user_pref("network.dnsCacheEntries", 1000); -user_pref("network.dnsCacheExpiration", 86400); +user_pref("network.dnsCacheExpiration", 3600); user_pref("network.dns.max_high_priority_threads", 8); user_pref("network.ssl_tokens_cache_capacity", 10240); -/** SPECULATIVE CONNECTIONS ***/ -user_pref("network.http.speculative-parallel-limit", 0); +/** SPECULATIVE LOADING ***/ user_pref("network.dns.disablePrefetch", true); -user_pref("browser.urlbar.speculativeConnect.enabled", false); -user_pref("browser.places.speculativeConnect.enabled", false); user_pref("network.prefetch-next", false); user_pref("network.predictor.enabled", false); -user_pref("network.predictor.enable-prefetch", false); + +/** EXPERIMENTAL ***/ +user_pref("layout.css.grid-template-masonry-value.enabled", true); +user_pref("dom.enable_web_task_scheduling", true); +user_pref("layout.css.has-selector.enabled", true); +user_pref("dom.security.sanitizer.enabled", true); /**************************************************************************** * SECTION: SECUREFOX * @@ -72,7 +65,9 @@ user_pref("network.predictor.enable-prefetch", false); user_pref("browser.contentblocking.category", "strict"); user_pref("urlclassifier.trackingSkipURLs", "*.reddit.com, *.twitter.com, *.twimg.com, *.tiktok.com"); user_pref("urlclassifier.features.socialtracking.skipURLs", "*.instagram.com, *.twitter.com, *.twimg.com"); -user_pref("privacy.partition.bloburl_per_partition_key", true); +user_pref("network.cookie.sameSite.noneRequiresSecure", true); +user_pref("browser.download.start_downloads_in_tmp_dir", true); +user_pref("browser.helperApps.deleteTempFileOnExit", true); user_pref("browser.uitour.enabled", false); user_pref("privacy.globalprivacycontrol.enabled", true); user_pref("privacy.globalprivacycontrol.functionality.enabled", true); @@ -81,7 +76,6 @@ user_pref("privacy.globalprivacycontrol.functionality.enabled", true); user_pref("security.OCSP.enabled", 0); user_pref("security.remote_settings.crlite_filters.enabled", true); user_pref("security.pki.crlite_mode", 2); -user_pref("security.cert_pinning.enforcement_level", 2); /** SSL / TLS ***/ user_pref("security.ssl.treat_unsafe_negotiation_as_broken", true); @@ -109,8 +103,11 @@ user_pref("network.IDN_show_punycode", true); /** HTTPS-FIRST POLICY ***/ user_pref("dom.security.https_first", true); -/** PASSWORDS AND AUTOFILL ***/ +/** PASSWORDS ***/ user_pref("signon.rememberSignons", false); +user_pref("signon.formlessCapture.enabled", false); +user_pref("signon.privateBrowsingCapture.enabled", false); +user_pref("network.auth.subresource-http-auth-allow", 1); user_pref("editor.truncate_user_pastes", false); /** ADDRESS + CREDIT CARD MANAGER ***/ @@ -118,8 +115,9 @@ user_pref("extensions.formautofill.addresses.enabled", false); user_pref("extensions.formautofill.creditCards.enabled", false); /** MIXED CONTENT + CROSS-SITE ***/ -user_pref("network.auth.subresource-http-auth-allow", 1); user_pref("security.mixed_content.block_display_content", true); +user_pref("security.mixed_content.upgrade_display_content", true); +user_pref("security.mixed_content.upgrade_display_content.image", true); user_pref("pdfjs.enableScripting", false); user_pref("extensions.postDownloadThirdPartyPrompt", false); @@ -137,8 +135,6 @@ user_pref("media.peerconnection.ice.default_address_only", true); user_pref("browser.safebrowsing.downloads.remote.enabled", false); /** MOZILLA ***/ -user_pref("identity.fxaccounts.enabled", false); -user_pref("browser.tabs.firefox-view", false); user_pref("permissions.default.desktop-notification", 2); user_pref("permissions.default.geo", 2); user_pref("geo.provider.network.url", "https://location.services.mozilla.com/v1/geolocate?key=%MOZILLA_API_KEY%"); @@ -146,6 +142,8 @@ user_pref("permissions.manager.defaultsUrl", ""); user_pref("webchannel.allowObject.urlWhitelist", ""); /** TELEMETRY ***/ +user_pref("datareporting.policy.dataSubmissionEnabled", false); +user_pref("datareporting.healthreport.uploadEnabled", false); user_pref("toolkit.telemetry.unified", false); user_pref("toolkit.telemetry.enabled", false); user_pref("toolkit.telemetry.server", "data:,"); @@ -157,33 +155,34 @@ user_pref("toolkit.telemetry.bhrPing.enabled", false); user_pref("toolkit.telemetry.firstShutdownPing.enabled", false); user_pref("toolkit.telemetry.coverage.opt-out", true); user_pref("toolkit.coverage.opt-out", true); -user_pref("datareporting.healthreport.uploadEnabled", false); -user_pref("datareporting.policy.dataSubmissionEnabled", false); +user_pref("toolkit.coverage.endpoint.base", ""); +user_pref("browser.ping-centre.telemetry", false); +user_pref("browser.newtabpage.activity-stream.feeds.telemetry", false); +user_pref("browser.newtabpage.activity-stream.telemetry", false); + +/** EXPERIMENTS ***/ user_pref("app.shield.optoutstudies.enabled", false); -user_pref("browser.discovery.enabled", false); +user_pref("app.normandy.enabled", false); +user_pref("app.normandy.api_url", ""); + +/** CRASH REPORTS ***/ user_pref("breakpad.reportURL", ""); user_pref("browser.tabs.crashReporting.sendReport", false); user_pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false); + +/** DETECTION ***/ user_pref("captivedetect.canonicalURL", ""); user_pref("network.captive-portal-service.enabled", false); user_pref("network.connectivity-service.enabled", false); -user_pref("app.normandy.enabled", false); -user_pref("app.normandy.api_url", ""); -user_pref("browser.ping-centre.telemetry", false); -user_pref("browser.newtabpage.activity-stream.feeds.telemetry", false); -user_pref("browser.newtabpage.activity-stream.telemetry", false); /**************************************************************************** * SECTION: PESKYFOX * ****************************************************************************/ /** MOZILLA UI ***/ -user_pref("layout.css.prefers-color-scheme.content-override", 2); -user_pref("toolkit.legacyUserProfileCustomizations.stylesheets", true); -user_pref("app.update.suppressPrompts", true); -user_pref("browser.compactmode.show", true); user_pref("browser.privatebrowsing.vpnpromourl", ""); user_pref("extensions.getAddons.showPane", false); user_pref("extensions.htmlaboutaddons.recommendations.enabled", false); +user_pref("browser.discovery.enabled", false); user_pref("browser.shell.checkDefaultBrowser", false); user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", false); user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features", false); @@ -191,25 +190,31 @@ user_pref("browser.preferences.moreFromMozilla", false); user_pref("browser.tabs.tabmanager.enabled", false); user_pref("browser.aboutConfig.showWarning", false); user_pref("browser.aboutwelcome.enabled", false); + +/** THEME ADJUSTMENTS ***/ +user_pref("toolkit.legacyUserProfileCustomizations.stylesheets", true); +user_pref("browser.compactmode.show", true); user_pref("browser.display.focus_ring_on_anything", true); user_pref("browser.display.focus_ring_style", 0); user_pref("browser.display.focus_ring_width", 0); +user_pref("layout.css.prefers-color-scheme.content-override", 2); user_pref("browser.privateWindowSeparation.enabled", false); // WINDOWS -user_pref("cookiebanners.service.mode", 2); -user_pref("cookiebanners.service.mode.privateBrowsing", 2); -user_pref("browser.translations.enable", true); -/** FULLSCREEN ***/ +/** COOKIE BANNER HANDLING ***/ +user_pref("cookiebanners.service.mode", 1); +user_pref("cookiebanners.service.mode.privateBrowsing", 1); +user_pref("cookiebanners.service.enableGlobalRules", true); + +/** FULLSCREEN NOTICE ***/ user_pref("full-screen-api.transition-duration.enter", "0 0"); user_pref("full-screen-api.transition-duration.leave", "0 0"); user_pref("full-screen-api.warning.delay", -1); user_pref("full-screen-api.warning.timeout", 0); /** URL BAR ***/ -user_pref("browser.urlbar.suggest.engines", false); -user_pref("browser.urlbar.suggest.topsites", false); user_pref("browser.urlbar.suggest.calculator", true); user_pref("browser.urlbar.unitConversion.enabled", true); +user_pref("browser.urlbar.trending.featureGate", false); /** NEW TAB PAGE ***/ user_pref("browser.newtabpage.activity-stream.feeds.topsites", false); @@ -221,28 +226,29 @@ user_pref("extensions.pocket.enabled", false); /** DOWNLOADS ***/ user_pref("browser.download.useDownloadDir", false); user_pref("browser.download.always_ask_before_handling_new_types", true); -user_pref("browser.download.alwaysOpenPanel", false); user_pref("browser.download.manager.addToRecentDocs", false); /** PDF ***/ user_pref("browser.download.open_pdf_attachments_inline", true); -user_pref("pdfjs.sidebarViewOnLoad", 2); /** TAB BEHAVIOR ***/ user_pref("browser.bookmarks.openInTabClosesMenu", false); user_pref("browser.menu.showViewImageInfo", true); user_pref("findbar.highlightAll", true); +user_pref("layout.word_select.eat_space_to_next_word", false); /**************************************************************************** - * SECTION: SMOOTHFOX * + * START: MY OVERRIDES * ****************************************************************************/ -// visit https://github.com/yokoffing/Betterfox/blob/main/Smoothfox.js -// Enter your scrolling prefs below this line: +// visit https://github.com/yokoffing/Betterfox/wiki/Common-Overrides +// visit https://github.com/yokoffing/Betterfox/wiki/Optional-Hardening +// Enter your personal overrides below this line: /**************************************************************************** - * START: MY OVERRIDES * + * SECTION: SMOOTHFOX * ****************************************************************************/ -// Enter your personal prefs below this line: +// visit https://github.com/yokoffing/Betterfox/blob/main/Smoothfox.js +// Enter your scrolling overrides below this line: /**************************************************************************** * END: BETTERFOX *