path: root/pcr/iceweasel-hardening/vendor.js

pref("extensions.getAddons.search.url", "https://directory.fsf.org/wiki/GNU_IceCat");
pref("extensions.getAddons.link.url", "https://directory.fsf.org/wiki/GNU_IceCat");
pref("extensions.getAddons.search.browseURL", "https://directory.fsf.org/wiki/GNU_IceCat");
pref("accessibility.blockautorefresh", true);
pref("browser.meta_refresh_when_inactive.disabled", true);
pref("extensions.webservice.discoverURL", "https://directory.fsf.org/wiki/GNU_IceCat");
pref("app.faqURL", "https://libreplanet.org/wiki/Group:IceCat/FAQ");
pref("app.update.auto", false);
pref("app.update.checkInstallTime", false);
pref("app.update.enabled", false);
pref("app.update.staging.enabled", false); 
pref("app.update.url", "about:blank");
pref("beacon.enabled", false);
pref("breakpad.reportURL", "about:blank");
pref("browser.EULA.override", true);
pref("browser.aboutHomeSnippets.updateUrl", "about:blank");
pref("browser.apps.URL", "about:blank");
pref("browser.cache.disk.enable", false);
pref("browser.cache.offline.enable", false);
pref("browser.casting.enabled", false);
pref("browser.search.order.US.1", "");
pref("browser.search.order.US.2", "");
pref("browser.search.order.US.3", "");
pref("gecko.handlerService.schemes.mailto.0.name", "");
pref("browser.disableResetPrompt", true);
pref("browser.display.max_font_attempts",10);
pref("browser.display.max_font_count",10);
pref("browser.display.use_document_fonts", 0); // Prevent font fingerprinting
pref("browser.download.manager.addToRecentDocs", false);
pref("browser.download.manager.retention", 1);
pref("browser.download.manager.scanWhenDone", false); // prevents AV remote reporting of downloads
pref("browser.download.useDownloadDir", false);
pref("browser.eme.ui.enabled", false);
pref("browser.fixup.alternate.enabled", false);
pref("browser.formfill.enable", false);
pref("browser.history.allowPopState", false); // HTML5 privacy https://bugzilla.mozilla.org/show_bug.cgi?id=500328
pref("browser.history.allowPushState", false);
pref("browser.history.allowReplaceState", false);
pref("browser.link.open_newwindow.restriction", 0); // Bug 9881: Open popups in new tabs (to avoid fullscreen popups)
pref("browser.newtab.preload", false);
pref("browser.newtabpage.directory.ping", "about:blank");
pref("browser.newtabpage.directory.source", "about:blank");
pref("browser.newtabpage.enabled", false);
pref("browser.newtabpage.enhanced", false);
pref("browser.newtabpage.introShown", true);
pref("browser.pocket.api", "about:blank");
pref("browser.pocket.enabled", false);
pref("browser.pocket.enabledLocales", "about:blank");
pref("browser.pocket.oAuthConsumerKey", "about:blank");
pref("browser.pocket.site", "about:blank");
pref("browser.pocket.useLocaleList", false);
pref("browser.preferences.inContent",false);
//pref("browser.privatebrowsing.autostart", true);
pref("browser.rights.3.shown", true);
pref("browser.safebrowsing.appRepURL", "about:blank");
pref("browser.safebrowsing.enabled", false);
pref("browser.safebrowsing.malware.enabled", false);
pref("browser.safebrowsing.provider.mozilla.gethashURL", "about:blank");
pref("browser.safebrowsing.provider.mozilla.updateURL", "about:blank");
pref("browser.safebrowsing.downloads.remote.block_dangerous", false);
pref("browser.safebrowsing.downloads.remote.block_dangerous_host", false);
pref("browser.safebrowsing.downloads.remote.block_potentially_unwanted", false);
pref("browser.safebrowsing.downloads.remote.block_uncommon", false);
pref("browser.safebrowsing.downloads.remote.enabled", false);
pref("browser.safebrowsing.downloads.remote.url", "");
pref("browser.safebrowsing.provider.google.gethashURL", "");
pref("browser.safebrowsing.provider.google.updateURL", "");
pref("browser.safebrowsing.provider.google.lists", "");
pref("browser.search.geoSpecificDefaults.url", "about:blank");
pref("browser.search.geoSpecificDefaults", false);
pref("browser.search.geoip.url", "about:blank");
pref("browser.search.suggest.enabled", false);
pref("browser.search.update", false);
pref("browser.selfsupport.url", "about:blank");
pref("browser.send_pings", false);
pref("browser.sessionstore.privacy_level", 2);
pref("browser.shell.checkDefaultBrowser", false);
pref("browser.slowStartup.maxSamples", 0);
pref("browser.slowStartup.notificationDisabled", true);
pref("browser.slowStartup.samples", 0);
pref("browser.snippets.enabled", false);
pref("browser.snippets.geoUrl", "about:blank");
pref("browser.snippets.statsUrl", "about:blank");
pref("browser.snippets.syncPromo.enabled", false);
pref("browser.snippets.updateUrl", "about:blank");
pref("browser.startup.homepage_override.buildID", "20100101");
pref("browser.startup.homepage_override.mstone", "9001.0.0");
pref("browser.syncPromoViewsLeftMap", "{\"addons\":0, \"passwords\":0, \"bookmarks\":0}"); // Don't promote sync
pref("browser.newtabpage.remote", false);
pref("browser.tabs.crashReporting.sendReport", false);
pref("browser.tabs.remote.desktopbehavior", false);
pref("browser.toolbarbuttons.introduced.pocket-button", true);
pref("browser.uitour.enabled", false); // https://trac.torproject.org/projects/tor/ticket/19047
pref("browser.urlbar.maxRichResults", 0);
pref("browser.webapps.checkForUpdates", 0);
pref("browser.webapps.updateCheckUrl", "about:blank");
pref("browser.zoom.siteSpecific", false);
pref("camera.control.autofocus_moving_callback.enabled", false);
pref("camera.control.face_detection.enabled", false);
pref("captivedetect.canonicalURL", "about:blank");
pref("datareporting.healthreport.about.reportUrl", "about:blank");
pref("datareporting.healthreport.documentServerURI", "about:blank");
pref("datareporting.healthreport.service.enabled", false); // Yes, all three of these must be set
pref("datareporting.healthreport.uploadEnabled", false);
pref("datareporting.policy.dataSubmissionEnabled", false);
pref("datareporting.policy.dataSubmissionPolicyVersion", 2);
pref("datareporting.policy.firstRunTime", 0);
pref("device.sensors.enabled", false);
pref("devtools.debugger.remote-enabled",  false); // https://developer.mozilla.org/docs/Tools/Remote_Debugging/Debugging_Firefox_Desktop#Enable_remote_debugging
pref("devtools.devices.url",  "about:blank");
pref("devtools.gcli.imgurUploadURL", "about:blank");
pref("devtools.gcli.jquerySrc", "about:blank");
pref("devtools.gcli.lodashSrc", "about:blank");
pref("devtools.gcli.underscoreSrc", "about:blank");
pref("devtools.remote.wifi.scan", false); // http://forum.top-hat-sec.com/index.php?topic=4951.5;wap2
pref("devtools.remote.wifi.visible", false);
pref("devtools.webide.adaptersAddonURL", "about:blank");
pref("devtools.webide.adbAddonURL", "about:blank");
pref("devtools.webide.addonsURL", "about:blank");
pref("devtools.webide.enabled", false);  //https://trac.torproject.org/projects/tor/ticket/16222
pref("devtools.webide.simulatorAddonsURL", "about:blank");
pref("devtools.webide.templatesURL", "about:blank");
pref("dom.battery.enabled", false); // fingerprinting due to differing OS implementations
pref("dom.enable_performance", false);
pref("dom.event.clipboardevents.enabled",false);
pref("dom.gamepad.enabled", false); // bugs.torproject.org/13023
pref("dom.indexedDB.enabled", false);
pref("dom.enable_user_timing", false);
pref("dom.event.highrestimestamp.enabled", false);
pref("dom.ipc.plugins.flash.subprocess.crashreporter.enabled", false);
pref("dom.mozApps.signed_apps_installable_from", "about:blank");
pref("dom.netinfo.enabled", false); // Network Information API provides general information about the system's connection type (WiFi, cellular, etc.)
pref("dom.network.enabled",false); // fingerprinting due to differing OS implementations
pref("dom.push.enabled", false);
pref("dom.push.serverURL", "");
pref("dom.presentation.discovery.enabled", false);
pref("dom.presentation.discoverable", false);
pref("dom.storage.enabled", false);
pref("dom.telephony.enabled",  false); // https://wiki.mozilla.org/WebAPI/Security/WebTelephony
pref("dom.vibrator.enabled", false);
pref("dom.vr.enabled", false);
pref("dom.vr.cardboard.enabled", false);
pref("dom.vr.oculus.enabled", false);
pref("dom.vr.oculus050.enabled", false);
pref("dom.vr.poseprediction.enabled", false);
pref("dom.vr.add-test-devices", 0);
pref("dom.workers.sharedWorkers.enabled", false); // See https://bugs.torproject.org/15562
pref("dom.idle-observers-api.enabled", false); // disable idle observation
pref("experiments.enabled", false);
pref("experiments.manifest.uri", "about:blank");
pref("extensions.blocklist.detailsURL", "about:blank");
pref("extensions.blocklist.enabled", false);
pref("extensions.blocklist.itemURL", "about:blank");
pref("extensions.blocklist.url", "about:blank");
pref("extensions.bootstrappedAddons", "{}");
pref("extensions.databaseSchema", 3);
pref("extensions.enabledScopes", 1);
// Don't disable our bundled extensions in the application directory
pref("extensions.autoDisableScopes", 11);
pref("extensions.shownSelectionUI", true);
pref("extensions.getAddons.cache.enabled", false); // https://blog.mozilla.org/addons/how-to-opt-out-of-add-on-metadata-updates/
pref("extensions.getAddons.get.url", "about:blank");
pref("extensions.getAddons.getWithPerformance.url", "about:blank");
pref("extensions.getAddons.recommended.url", "about:blank");
pref("extensions.pendingOperations", false);
pref("extensions.pocket.api", "about:blank");
pref("extensions.pocket.enabled", false);
pref("extensions.shownSelectionUI", true);
pref("extensions.ui.lastCategory", "addons://list/extension");
pref("extensions.update.autoUpdateDefault", false);
pref("extensions.update.enabled", false); // Fingerprints all installed addons, best to let the user decide when to run updates manually.
pref("extensions.update.background.url", ""); // User can still update manually, but we disable background updates.
pref("extensions.systemAddon.update.url", ""); // The system add-ons infrastructure that's used to ship Hello and Pocket in Firefox
pref("font.default.x-western", "sans-serif");
pref("general.appname.override", "Netscape");
pref("general.appversion.override", "5.0 (Windows)");
pref("general.buildID.override", "20100101");
pref("general.oscpu.override", "Windows NT 6.1");
pref("general.platform.override", "Win32");
pref("general.productSub.override", "20100101");
pref("general.useragent.compatMode.firefox", true);
pref("general.useragent.override", "Mozilla/5.0 (Windows NT 6.1; rv:49.0) Gecko/20100101 Firefox/49.0");
pref("general.useragent.vendor", "");
pref("general.useragent.vendorSub", "");
pref("general.warnOnAboutConfig", false);
pref("geo.enabled", false);
pref("geo.wifi.uri", "about:blank");
pref("gfx.direct2d.disabled", true);
pref("gfx.downloadable_fonts.fallback_delay", -1);
pref("gfx.font_rendering.opentype_svg.enabled", false);  // https://wiki.mozilla.org/SVGOpenTypeFonts - iSEC Partners Report recommends to disable this
pref("healthreport.uploadEnabled", false);
pref("identity.fxaccounts.auth.uri", "about:blank");
pref("intl.charset.default", "windows-1252");
pref("intl.locale.matchOS", true);
pref("javascript.options.asmjs", false); // Multiple security advisories, low level js
pref("javascript.options.wasm", false); // https://hacks.mozilla.org/2016/03/a-webassembly-milestone/
pref("javascript.use_us_english_locale", true);
pref("javascript.options.typeinference", false);
pref("javascript.options.baselinejit.content", false);
pref("javascript.options.ion.content", false); // https://trac.torproject.org/projects/tor/ticket/9387#comment:43
pref("keyword.enabled", false);
pref("layers.acceleration.disabled", true);
pref("layout.css.visited_links_enabled", false);
pref("lightweightThemes.update.enabled", false); // We can update our themes manually, may fingerprint the user.
pref("loop.copy.throttler", "about:blank");
pref("loop.enabled",false); //Disable Firefox Hello
pref("loop.facebook.appId", "about:blank");
pref("loop.facebook.enabled", false);
pref("loop.facebook.fallbackUrl", "about:blank");
pref("loop.facebook.shareUrl", "about:blank");
pref("loop.feedback.baseUrl", "about:blank");
pref("loop.feedback.formURL", "about:blank");
pref("loop.feedback.manualFormURL", "about:blank");
pref("loop.gettingStarted.url", "about:blank");
pref("loop.learnMoreUrl", "about:blank");
pref("loop.legal.ToS_url", "about:blank");
pref("loop.legal.privacy_url", "about:blank");
pref("loop.linkClicker.url", "about:blank");
pref("loop.oauth.google.redirect_uri", "about:blank");
pref("loop.oauth.google.scope", "about:blank");
pref("loop.remote.autostart", false);
pref("loop.server", "about:blank");
pref("loop.soft_start_hostname", "about:blank");
pref("loop.support_url", "about:blank");
pref("loop.throttled2",false);
pref("mathml.disabled", true); // https://www.torproject.org/projects/torbrowser/design
pref("media.audio_data.enabled", false);
pref("media.autoplay.enabled", false);
pref("media.cache_size", 0);
pref("media.eme.apiVisible", false); // Disable Freedom Violating DRM Feature
pref("media.eme.enabled", false);
pref("media.getusermedia.screensharing.allowed_domains", ""); // We really don't want to be promoting Cisco and Cloudflare in a whitelist here.
pref("media.getusermedia.screensharing.enabled", false);
pref("media.gmp-eme-adobe.enabled", false);
pref("media.gmp-gmpopenh264.enabled", false);
pref("media.gmp-manager.url", "about:blank"); // Disable Gecko media plugins: https://wiki.mozilla.org/GeckoMediaPlugins
pref("media.gmp-manager.url.override", "data:text/plain");
pref("media.gmp-provider.enabled", false);
pref("media.gmp.trial-create.enabled", false);
pref("media.navigator.enabled", false);
pref("media.peerconnection.enabled", false); // Disable WebRTC interfaces
pref("media.peerconnection.ice.default_address_only", true);
pref("media.video_stats.enabled", false);
pref("media.webspeech.recognition.enable", false);
pref("media.webspeech.synth.enabled", false);
pref("network.allow-experiments", false);
pref("network.http.altsvc.enabled", false);
pref("network.http.altsvc.oe", false);  // https://trac.torproject.org/projects/tor/ticket/16673
pref("network.dns.disablePrefetch", true);
pref("network.http.connection-retry-timeout", 0);
pref("network.http.max-persistent-connections-per-proxy", 256);
pref("network.http.pipelining", true);
pref("network.http.pipelining.aggressive", true);
pref("network.http.pipelining.max-optimistic-requests", 3);
pref("network.http.pipelining.maxrequests", 10);
pref("network.http.pipelining.maxrequests", 12);
pref("network.http.pipelining.read-timeout", 60000);
pref("network.http.pipelining.reschedule-timeout", 15000);
pref("network.http.pipelining.ssl", true);
pref("network.http.proxy.pipelining", true);
pref("network.http.speculative-parallel-limit", 0);
pref("network.jar.block-remote-files", true); // https://bugzilla.mozilla.org/show_bug.cgi?id=1173171
pref("network.jar.open-unsafe-types", false);
pref("network.manage-offline-status", false); // https://trac.torproject.org/projects/tor/ticket/18945
pref("network.predictor.enabled", false); // https://trac.torproject.org/projects/tor/ticket/16625
pref("network.prefetch-next", false);
pref("network.protocol-handler.external-default", false);
pref("network.protocol-handler.external.mailto", false);
pref("network.protocol-handler.external.news", false);
pref("network.protocol-handler.external.nntp", false);
pref("network.protocol-handler.external.snews", false);
pref("network.protocol-handler.warn-external.mailto", true);
pref("network.protocol-handler.warn-external.news", true);
pref("network.protocol-handler.warn-external.nntp", true);
pref("network.protocol-handler.warn-external.snews", true);
pref("network.proxy.no_proxies_on", ""); // For fingerprinting and local service vulns (#10419)
pref("network.proxy.socks", "127.0.0.1");
pref("network.proxy.socks_port", 9050);
pref("network.proxy.socks_remote_dns", true);
pref("network.proxy.type", 0); // Setup for TOR for default proxy, but do not enable by default.
pref("network.security.ports.banned", "9050,9051,9150,9151");
pref("network.websocket.max-connections", 0);
//pref("nglayout.initialpaint.delay", 0); http://www.mozdev.org/pipermail/fasterfox/2006-January/000509.html
pref("noscript.forbidMedia", true);
pref("offline-apps.allow_by_default", false); // https://support.mozilla.org/en-US/questions/1014708
pref("pdfjs.disabled", true);  // https://www.exploit-db.com/exploits/37958/
pref("permissions.memory_only", true);
pref("pfs.datasource.url", "about:blank"); // Fingerprints the user, not HTTPS. Remove it.
pref("pfs.filehint.url", "about:blank");
pref("plugin.disable", true); // Disable to search plugins on first start
pref("plugin.expose_full_path", false);
pref("plugin.state.flash", 0);
pref("plugin.state.libgnome-shell-browser-plugin", 0); // disable Gnome Shell Integration
pref("plugins.click_to_play", true);
pref("plugins.enumerable_names", "about:blank");
pref("plugins.hideMissingPluginsNotification", true);
pref("plugins.hide_infobar_for_missing_plugin", true);
pref("plugins.hide_infobar_for_outdated_plugin", true);
pref("plugins.notifyMissingFlash", false);
pref("privacy.announcements.enabled", false);
pref("privacy.donottrackheader.enabled", false); // http://www.howtogeek.com/126705/why-enabling-do-not-track-doesnt-stop-you-from-being-tracked/
pref("privacy.donottrackheader.value", 1);
pref("privacy.thirdparty.isolate", 2); // Always enforce third party isolation
pref("privacy.trackingprotection.enabled", true);
pref("privacy.trackingprotection.pbmode.enabled", true);
pref("security.OCSP.enabled", 0); // https://en.wikipedia.org/wiki/Online_Certificate_Status_Protocol#Privacy_concerns
pref("security.OCSP.require", false);
pref("security.ask_for_password", 0);
pref("security.cert_pinning.enforcement_level", 2); // https://trac.torproject.org/projects/tor/ticket/16206
pref("security.enable_tls_session_tickets", false);
pref("security.mixed_content.block_active_content", true); //  Note: Can be disabled for user experience. https://bugzilla.mozilla.org/show_bug.cgi?id=878890
pref("security.nocertdb", false);
pref("security.ssl.errorReporting.url", "");
pref("security.ssl.errorReporting.enabled", false);
pref("security.ssl.disable_session_identifiers", true);
pref("security.ssl.enable_false_start", true);
pref("security.ssl.require_safe_negotiation", true);
pref("security.ssl.treat_unsafe_negotiation_as_broken", true);
pref("security.ssl3.rsa_seed_sha", true);
pref("security.tls.insecure_fallback_hosts.use_static_list", false);
pref("security.tls.unrestricted_rc4_fallback", false);
pref("security.tls.version.max", 3);
pref("security.tls.version.min", 1);
pref("services.kinto.base", "");
pref("services.sync.engine.addons", false);
pref("services.sync.engine.prefs", false); // Never sync prefs, addons, or tabs with other browsers
pref("services.sync.engine.tabs", false);
pref("services.sync.prefs.sync.addons.ignoreUserEnabledChanges", false);
pref("services.sync.prefs.sync.extensions.update.enabled", false);
pref("services.sync.serverURL", "about:blank");
pref("services.sync.jpake.serverURL", "about:blank");
pref("signon.autofillForms", false);  // disable cross-site form exposure from password manager - http://kb.mozillazine.org/Signon.autofillForms
pref("signon.rememberSignons", false);
pref("social.directories", "");
pref("social.enabled", false);
pref("social.remote-install.enabled", false);
pref("social.shareDirectory", "");
pref("social.toast-notifications.enabled", false);
pref("social.whitelist", "");
pref("startup.homepage_override_url", "");
pref("startup.homepage_welcome_url", "");
pref("svg.in-content.enabled", true);
pref("toolkit.telemetry.enabled", false);
pref("toolkit.telemetry.server", "about:blank");
pref("toolkit.telemetry.archive.enabled", false);
pref("ui.key.menuAccessKeyFocuses", false); // Disable "alt" as a shortcut key to open full menu bar. Conflicts with "alt" as a modifier
pref("webgl.disable-extensions", true);
pref("webgl.disabled", true);
pref("webgl.min_capability_mode", true);
pref("xpinstall.signatures.required", true); // Requires AMO signing key for addons
pref("xpinstall.whitelist.add", "");