@@ -1535,75 +1535,6 @@ user_pref("ghacks_user.js.parrot", "No no he's not dead, he's, he's restin'! Rem
1535
1535
// 2614: (51+) disable SPDY
1536
1536
// user_pref("network.http.spdy.enabled.v3-1", false);
1537
1537
1538
- /**- 9998: TO INVESTIGATE - TOR UPLIFT
1539
- https://wiki.mozilla.org/Security/Tor_Uplift/Tracking
1540
- // RESOLVED
1541
- // 1400's: set whitelisted system fonts only (FF52+)
1542
- // If whitelist is empty, then whitelisting is considered disabled and all fonts are allowed.
1543
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1121643
1544
- // user_pref("font.system.whitelist", "");
1545
- // 2698-append: privacy.firstparty.isolate.restrict_opener_access
1546
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1319773
1547
- // ACTIVE
1548
- // 1200's: Isolate the HSTS and HPKP cache by first party domain
1549
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1323644
1550
- // 2400's: reduce precision of time exposed by javascript
1551
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1217238
1552
- // user_pref("javascript.options.privacy.reduce_time_precision", true);
1553
- // 2699-append: resource://URIs leak
1554
- // https://trac.torproject.org/projects/tor/ticket/8725
1555
- // https://bugzilla.mozilla.org/show_bug.cgi?id=863246
1556
- // test: https://www.browserleaks.com/firefox
1557
- // ASSIGNED
1558
- // 2001: preference to fully disable WebRTC JS API
1559
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1314443
1560
- // 2699-append: enable fingerprinting resistence to WebGL
1561
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1217290
1562
- // 2699-append: checkbox in about#preferences#privacy for privacy.resistFingerprinting
1563
- // when this lands, add note to 2699
1564
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1308340
1565
- // 2699-append: use UTC timezone (spoof as UTC 0)
1566
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1330890
1567
- // 2699-append: new window sizes to round to hundreds
1568
- // Note: override values, future may enforce a select set of (inner) window measurements
1569
- // If override values are too big, the code falls back and determines it for you
1570
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1330882
1571
- // user_pref("privacy.window.maxInnerWidth", 1366);
1572
- // user_pref("privacy.window.maxInnerHeight", 768);
1573
- // BACKLOG
1574
- // 1400's: prevent local font enumeration
1575
- // https://bugzilla.mozilla.org/show_bug.cgi?id=732096
1576
- // 1800's: disable "This Plugin is Disabled" overlay
1577
- // https://bugzilla.mozilla.org/show_bug.cgi?id=967979
1578
- // user_pref("privacy.plugin_disabled_barrier.enabled", false);
1579
- // 2500's: disable/mitigate canvas fingerprinting
1580
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1041818
1581
- // 2500's: enable prompt (site permission) before allowing canvas data extraction
1582
- // https://bugzilla.mozilla.org/show_bug.cgi?id=967895
1583
- // 2600's: window.name
1584
- // https://bugzilla.mozilla.org/show_bug.cgi?id=444222
1585
- // 2698-append: checkbox in about:preferences#privacy for privacy.firstparty.isolate
1586
- // when this lands, add note to 2611
1587
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1312655
1588
- // 2698-append: FPI and HTTP Alternative Services (see 2666)
1589
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1334690
1590
- // 2698-append: FPI and SPDY/HTTP2
1591
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1334693
1592
- // 2699-append: disable keyboard fingerprinting
1593
- // Test: https://w3c.github.io/uievents/tools/key-event-viewer.html
1594
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1222285
1595
- // 2699-append: disable WebSpeech API
1596
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1333641
1597
- // see also: web speech exposes TTS engines
1598
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1233846
1599
- // 2699-append: spoof Navigator API
1600
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1333651
1601
- // 2699-append: set and enforce various prefs with privacy.resistFingerprinting
1602
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1333933
1603
- // 2699-append: bundle and whitelist fonts with privacy.resistFingerprinting
1604
- // https://bugzilla.mozilla.org/show_bug.cgi?id=1336208
1605
- ***/
1606
-
1607
1538
/**- 9999: TO INVESTIGATE - OTHER
1608
1539
// 1600's: restrict the contents of referrers attached to cross-origin requests (FF52+)
1609
1540
// 0- 1- 2-scheme+hostname+port
@@ -1631,7 +1562,7 @@ user_pref("ghacks_user.js.parrot", "No no he's not dead, he's, he's restin'! Rem
1631
1562
// sandbox levels (recommended to leave at what Firefox sets it to)
1632
1563
// http://www.ghacks.net/2017/01/23/how-to-change-firefoxs-sandbox-security-level/
1633
1564
// security.sandbox.content.level
1634
- ***/
1565
+ ***/
1635
1566
1636
1567
/**- APPENDIX
1637
1568
A: GLOSSARY:
0 commit comments