diff options
| -rw-r--r-- | nonprism/iceweasel-hardened-preferences/PKGBUILD | 7 | ||||
| -rw-r--r-- | nonprism/iceweasel-hardened-preferences/iceweasel-branding.js | 9 |
2 files changed, 12 insertions, 4 deletions
diff --git a/nonprism/iceweasel-hardened-preferences/PKGBUILD b/nonprism/iceweasel-hardened-preferences/PKGBUILD index 61487e747..55a137cc4 100644 --- a/nonprism/iceweasel-hardened-preferences/PKGBUILD +++ b/nonprism/iceweasel-hardened-preferences/PKGBUILD @@ -2,7 +2,7 @@ # Contributor: André Silva <emulatorman@parabola.nu> pkgname=iceweasel-hardened-preferences -pkgver=0.6 +pkgver=0.7 pkgrel=1 pkgdesc="Hardened preferences script which runs Iceweasel to protect from a variety of privacy, security, and fingerprinting attacks." arch=(any) @@ -11,6 +11,7 @@ replaces=('iceweasel-hardened') conflicts=('iceweasel-hardened') depends=('firejail') optdepends=('iceweasel-noscript: XSS and Javascript Protection (Important)' +'iceweasel-no-resource-uri-leak: Deny resource:// access to Web content (Important)' 'iceweasel-ublock-origin: Block ads and trackers') url="https://wiki.parabola.nu/${pkgname%%-*}" install=iceweasel-hardened.install @@ -20,11 +21,11 @@ source=('firefox-branding.js' 'iceweasel-hardened.install') sha512sums=('cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e' 'd542452fa1d619d22e9c9b6e4af58d7310abdc5c81d871a1abbddb0087c53913c8a244af2b7be416a2c439383afc2480c439078ebde0ccac518300d9027b4800' - 'f6ea9ff386371ea24617eea0f6addab8f31b4bffc08a36329f0c50c291b3ba8b220b1ca7ad2d187f7f6270b4a4e541296779276769134915cf8f096fa2d60cf5' + '5ab3f4ec5e7a8e9475a50553a126074287cc6429ecf415905fdcbbce4ce884dd50598ebc9843e856de73252bc9c8679bcff8e36ec989cdd153357587de300682' 'e9baa13d50195ff5be507093c45c00bb06a77c9e633ac183ec2fd74eebb11bfc07bde334fe4455b763e8700cde146ae223578ebd8d13066739220502b6eebff6') whirlpoolsums=('19fa61d75522a4669b44e39c1d2e1726c530232130d407f89afee0964997f7a73e83be698b288febcf88e3e03c4f0757ea8964e59b63d93708b138cc42a66eb3' 'f7cb38e58f644ddeae9f931c290ae1d96e54d0a8937171f2ebad498b65b87f2115cbd0a0f2a55e12dceba7a387e70fd2432678010a87975f8322c9c27b41efd2' - '968c14842d6ff14522f322b493b28af84c04901ceb3a2543fe1e485a6c301e90ff3df48b7ecdf79fcdf0afb8288e1056931218d948fc271aa52b7bf80dcd1203' + '27234c2cd31c6305d83cfa013212738122bc0e2a1b0f02afbfa1a8dda4a26b93c47aed4472227c0db6167d0219089274c7b51692df341915df0ba95962ce01f9' '44b57bbbf8f00ffee11afc84f5ea3daedc39e59da3ee91e337c1eaad24c014caf5680eb250e25a3e046db9caaf6829c3b667693de9f040d8864be34b96300bb9') package() { diff --git a/nonprism/iceweasel-hardened-preferences/iceweasel-branding.js b/nonprism/iceweasel-hardened-preferences/iceweasel-branding.js index 91b8fde42..776649aa1 100644 --- a/nonprism/iceweasel-hardened-preferences/iceweasel-branding.js +++ b/nonprism/iceweasel-hardened-preferences/iceweasel-branding.js @@ -26,6 +26,11 @@ pref("browser.chrome.favicons", false); pref("browser.chrome.site_icons", false); pref("browser.shell.shortcutFavicons", false); +// We want to use en-US everywhere. +pref("extesnsions.webservice.discoverURL", "https://discovery.addons.mozilla.org/en-US/firefox/discovery/pane/%VERSION%/Windows/%COMPATIBILITY_MODE%"); +pref("extensions.getAddons.search.url", "https://services.addons.mozilla.org/en-US/firefox/api/%API_VERSION%/search/%TERMS%/all/%MAX_RESULTS%/Windows/%VERSION%/%COMPATIBILITY_MODE%?src=firefox"); +pref("extensions.webservice.discoverURL", "https://discovery.addons.mozilla.org/en-US/firefox/discovery/pane/%VERSION%/Windows/%COMPATIBILITY_MODE%"); + /****************************************************************************** * HTML5 / APIs / DOM * * * @@ -712,7 +717,9 @@ pref("browser.snippets.updateUrl", "about:blank"); // Disable WAN IP leaks pref("captivedetect.canonicalURL", "about:blank"); pref("network.captive-portal-service.enabled", false); -pref("noscript.ABE.wanIpAsLocal", false); // NoScript ignores this preference? +// Note: NoScript seems to ignore these and leak WAN anyway. +pref("noscript.ABE.wanIpAsLocal", false); +pref("noscript.ABE.wanIpCheckURL", "about:blank"); // Disable Default Protocol Handlers, always warn user instead pref("network.protocol-handler.external-default", false); |