/
firefox.cfg
361 lines (302 loc) · 16.7 KB
/
firefox.cfg
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
//
// firefox.cfg
//
// http://kb.mozillazine.org/App.update.auto
// true - Download and install updates automatically (default)
// false - Ask the user what he wants to do when an update is available
lockPref("app.update.auto", false);
// http://kb.mozillazine.org/Browser.cache.disk.enable
// true - Store cache on the hard drive (default)
// false - Don't store cache on the hard drive
lockPref("browser.cache.disk.enable", false);
// http://kb.mozillazine.org/Browser.cache.disk.capacity
// Note: browser.cache.disk.enable must be set to "true"
// Amount of disk space allowed for the browser's cache (in KB, default: 50000)
lockPref("browser.cache.disk.capacity", 0);
lockPref("browser.cache.disk.smart_size.enabled", false);
// http://kb.mozillazine.org/Browser.cache.disk_cache_ssl
// Note: browser.cache.disk.enable must be set to "true"
// true - Cache to disk content retrieved by SSL (default)
// false - Don't cache to disk content retrieved by SSL
lockPref("browser.cache.disk_cache_ssl", false);
// http://kb.mozillazine.org/Browser.cache.check_doc_frequency
// Note: browser.cache.disk.enable or browser.cache.memory.enable must be set to "true"
// 0 - Check for a new version of a page once per session
// 1 - Check for a new version every time a page is loaded
// 2 - Never check for a new version
// 3 - Check for a new version when the page is out of date (default)
lockPref("browser.cache.check_doc_frequency", 1);
// http://kb.mozillazine.org/Unable_to_save_or_download_files
// true - Use browser.download.downloadDir (default)
// false - Do not use browser.download.downloadDir
defaultPref("browser.download.useDownloadDir", false);
// http://kb.mozillazine.org/Browser.safebrowsing.enabled
// true - Compare visited URLs against a blacklist or submit URLs to a third party
// to determine whether a site is legitimate (default)
// false - Disable Safe Browsing
lockPref("browser.safebrowsing.enabled", false);
// http://kb.mozillazine.org/Browser.safebrowsing.malware.enabled
// true - Download data about malware and use it to screen downloads (default)
// false - Do not download malware blacklists and do not check downloads
lockPref("browser.safebrowsing.malware.enabled", false);
// http://kb.mozillazine.org/Browser.startup.homepage
lockPref("browser.startup.homepage", "about:");
// http://kb.mozillazine.org/Browser.startup.page
// 0 - Start with about:blank
// 1 - Start with browser.startup.homepage (default)
// 2 - Load the last visited page
// 3 - Resume the previous browser session
defaultPref("browser.startup.page", 3);
// https://bugzilla.mozilla.org/show_bug.cgi?id=648683
// Expose tabs on-demand preference
defaultPref("browser.sessionstore.restore_on_demand", true);
// When changing "browser.newtab.url" is there any way to prevent the
// address bar from getting focus?
// https://support.mozilla.org/en-US/questions/929071
lockPref("browser.newtab.preload", false);
lockPref("browser.newtabpage.enabled", false);
lockPref("browser.newtab.url", "about:blank");
// https://developer.mozilla.org/en-US/docs/Mozilla/Preferences/Preference_reference/browser.pagethumbnails.capturing_disabled
// true - The application doesn't create screenshots of visited web pages
// false - The application creates screenshots of visited web pages (default)
lockPref("browser.pagethumbnails.capturing_disabled", true);
// Find and manage downloaded files
// https://support.mozilla.org/en-US/kb/find-and-manage-downloaded-files
// true - Use old download manager
// false - Use new download manger (default)
defaultPref("browser.download.useToolkitUI", true);
// http://kb.mozillazine.org/Browser.underline_anchors
// true - Links are underlined by default (default)
// false - Links are not underlined by default
defaultPref("browser.underline_anchors", false);
// http://kb.mozillazine.org/Layout.spellcheckDefault
// 0 - Disable spellchecker
// 1 - Enable spellchecker for multi-line controls (default)
// 2 - Enable spellchecker for multi-line controls and single-line controls
defaultPref("layout.spellcheckDefault", 0);
// http://kb.mozillazine.org/Network.cookie.cookieBehavior
// 0 - All cookies are allowed (default)
// 1 - Only cookies from the originating server are allowed
// 2 - No cookies are allowed
// 3 - Third-party cookies are allowed only if that site has stored cookies
// already from a previous visit
defaultPref("network.cookie.cookieBehavior", 1);
// http://kb.mozillazine.org/Network.cookie.lifetimePolicy
// 0 - The cookie's lifetime is supplied by the server (default)
// 1 - The user is prompted for the cookie's lifetime
// 2 - The cookie expires at the end of the session (when the browser closes)
// 3 - The cookie lasts for the number of days specified by network.cookie.lifetime.days
lockPref("network.cookie.lifetimePolicy", 3);
// http://kb.mozillazine.org/Network.cookie.lifetime.days
// Number of days to keep cookies (default: 90)
defaultPref("network.cookie.lifetime.days", 1);
// Clear on shutdown
lockPref("privacy.sanitize.sanitizeOnShutdown", true);
lockPref("privacy.clearOnShutdown.cache", true);
lockPref("privacy.clearOnShutdown.cookies", true);
lockPref("privacy.clearOnShutdown.downloads", true);
lockPref("privacy.clearOnShutdown.formdata", false);
lockPref("privacy.clearOnShutdown.history", false);
lockPref("privacy.clearOnShutdown.offlineApps", true);
lockPref("privacy.clearOnShutdown.passwords", false);
lockPref("privacy.clearOnShutdown.sessions", true);
defaultPref("privacy.clearOnShutdown.siteSettings", false);
// Clear on demand
lockPref("privacy.cpd.cache", true);
lockPref("privacy.cpd.cookies", true);
lockPref("privacy.cpd.downloads", true);
lockPref("privacy.cpd.formdata", false);
lockPref("privacy.cpd.history", false);
lockPref("privacy.cpd.offlineApps", true);
lockPref("privacy.cpd.passwords", false);
lockPref("privacy.cpd.sessions", true);
defaultPref("privacy.cpd.siteSettings", false);
// http://kb.mozillazine.org/Privacy.donottrackheader.enabled
// true - Send information about the user's tracking preferences to all websites.
// Prior to Firefox 21.0 and SeaMonkey 2.18, this is always "Do Not Track";
// in Firefox 21.0 and later as well as SeaMonkey 2.18 and later, the header
// sent depends on the privacy.donottrackheader.value setting
// false - Do not send any tracking preferences to any website (default)
lockPref("privacy.donottrackheader.enabled", true);
// http://kb.mozillazine.org/Privacy.donottrackheader.value
// Note: privacy.donottrackheader.enabled must be set to "true"
// 0 - A header stating consent to being tracked is sent
// 1 - A header stating the request not to be tracked is sent (default)
lockPref("privacy.donottrackheader.value", 1);
// http://kb.mozillazine.org/Network.http.sendRefererHeader
// 0 - Never send the Referer header or set document.referrer
// 1 - Send the Referer header when clicking on a link, and set document.referrer for the following page
// 2 - Send the Referer header when clicking on a link or loading an image, and set document.referrer for the following page
// Note: see the RefControl add-on for sending Referer Header on a per-site basis
// https://addons.mozilla.org/en-US/firefox/addon/refcontrol/
defaultPref("network.http.sendRefererHeader", 0);
// http://kb.mozillazine.org/Network.http.sendSecureXSiteReferrer
// Note: network.http.sendRefererHeader must be set to 1 or 2
// true - Send the Referer header when navigating from a https site to another https site
// false - Don't send the Referer header when navigating from a https site to another https site
lockPref("network.http.sendSecureXSiteReferrer", false);
// Disable Location-Aware Browsing
// https://www.mozilla.org/en-US/firefox/geolocation/
lockPref("geo.enabled", false);
// Privacy-related changes coming to CSS :visited
// https://hacks.mozilla.org/2010/03/privacy-related-changes-coming-to-css-vistited/
// true - show visited links in a different color (default)
// false - don't show visited links in a different color
lockPref("layout.css.visited_links_enabled", false);
// http://kb.mozillazine.org/Network.security.ports.banned
// A comma delimited list of port numbers to additionally block
// default: http://lxr.mozilla.org/seamonkey/source/netwerk/base/src/nsIOService.cpp#85
// lockPref("network.security.ports.banned", "21,80");
// http://kb.mozillazine.org/Network.security.ports.banned.override
// A comma delimited list of port numbers to allow
// default: http://lxr.mozilla.org/seamonkey/source/netwerk/base/src/nsIOService.cpp#85
// lockPref("network.security.ports.banned.override", "8080,8443");
// http://kb.mozillazine.org/About:config_entries#Browser.
// true - Hide certain parts of the url (default)
// false - All parts of the url are shown
lockPref("browser.urlbar.trimURLs", false);
// http://kb.mozillazine.org/About:config_entries#Browser.
// true - The domain name including the top level domain is highlighted in the address
// bar by coloring it black and the other parts grey (default)
// false - All parts of the url are given the same color: black
lockPref("browser.urlbar.formatting.enabled", false);
// http://kb.mozillazine.org/Location_Bar_search
// true - Add browser.fixup.alternate.prefix & browser.fixup.alternate.suffix
// to "invalid" URLs
// false - Don't add "www" and ".com" to "invalid" URLs
lockPref("browser.fixup.alternate.enabled", false);
// How do I go Back/Forward and Pinch to zoom in Firefox using my MacBook Pro?
// https://support.mozilla.org/en-US/questions/903953
// lockPref("browser.gesture.swipe.down", NULL);
// lockPref("browser.gesture.swipe.left", NULL);
// lockPref("browser.gesture.swipe.right", NULL);
// lockPref("browser.gesture.swipe.up", NULL);
// Gecko user agent string reference
// https://developer.mozilla.org/en-US/docs/Gecko_user_agent_string_reference
// a) defaultPref("general.useragent.override", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:23.0) Gecko/20100101 Firefox/23.0");
// b) defaultPref("general.useragent.override", "Mozilla/5.0 (X11; Linux x86_64; rv:29.0) Gecko/20100101 Firefox/29.0");
// defaultPref("general.useragent.override", "Mozilla/5.0 (X11; Linux x86_64; rv:30.0) Gecko/20100101 Firefox/30.0");
// http://kb.mozillazine.org/Browser.tabs.closeButtons
// 0 - Display a close button on the active tab only
// 1 - Display close buttons on all tabs (default)
// 2 - Don’t display any close buttons
// 3 - Display a single close button at the end of the tab strip
defaultPref("browser.tabs.closeButtons", 3);
// http://kb.mozillazine.org/About:config_entries#Browser.
// true - Open new tabs to the right of the parent tab (default)
// false - New tabs are opened at the far right of the tabs bar.
defaultPref("browser.tabs.insertRelatedAfterCurrent", false);
// http://kb.mozillazine.org/Browser.link.open_newwindow
// 1 - Open links, that would normally open in a new window, in the current tab/window
// 2 - Open links, that would normally open in a new window, in a new window
// 3 - Open links, that would normally open in a new window, in a new tab in the current window (default)
// defaultPref("browser.link.open_newwindow", 3);
// http://kb.mozillazine.org/Browser.link.open_newwindow.restriction
// 0 - Divert all links according to browser.link.open_newwindow
// 1 - Do not divert any links (browser.link.open_newwindow will have no effect)
// 2 - Divert all links according to browser.link.open_newwindow, unless the new
// window specifies how it should be displayed (default)
defaultPref("browser.link.open_newwindow.restriction", 0);
// http://kb.mozillazine.org/Layout.word_select.stop_at_punctuation
// true - "Word" selection includes surrounding punctuation and only stops at whitespace, so
// that for example double-clicking example.com/the/path and the other above-mentioned
// shortcuts select the entire URL
// false - Word selection using the above mentioned shortcuts ends at punctuation characters
// defaultPref("layout.word_select.stop_at_punctuation", false);
// http://kb.mozillazine.org/Issues_related_to_plugins
defaultPref("plugins.click_to_play", true);
// http://kb.mozillazine.org/Keyword.enabled
// true - If Mozilla cannot determine a URL from information entered in the Location Bar,
// append the information to the URL in keyword.URL and redirect the user there (default)
// false - Display an error message indicating the entered information is not a valid URL
lockPref("keyword.enabled", false);
// http://kb.mozillazine.org/Network.proxy.type
// 0 - Direct connection, no proxy
// 1 - Manual proxy configuration
// 2 - Proxy auto-configuration (PAC)
// 4 - Auto-detect proxy settings
// 5 - Use system proxy settings (default)
defaultPref("network.proxy.type", 5);
// http://kb.mozillazine.org/Network.proxy.autoconfig_url
// When using local PAC files:
// Linux: file:///home/NAME/.proxy.pac
// MacOS: file:///Users/NAME/.proxy.pac
// Windows: file:///C:/Documents%20and%20Settings/NAME/proxy.pac
defaultPref("network.proxy.autoconfig_url", "http://proxy.example.org/proxy.pac");
// http://kb.mozillazine.org/Network.proxy.(protocol)
// http://kb.mozillazine.org/Network.proxy.(protocol)_port
defaultPref("network.proxy.http", "10.0.0.1");
defaultPref("network.proxy.http_port", 8080);
defaultPref("network.proxy.ssl", "10.0.0.1");
defaultPref("network.proxy.ssl_port", 8080);
defaultPref("network.proxy.ftp", "10.0.0.1");
defaultPref("network.proxy.ftp_port", 8080);
defaultPref("network.proxy.socks", "10.0.0.1");
defaultPref("network.proxy.socks_port", 8080);
// http://kb.mozillazine.org/Network.proxy.share_proxy_settings
// true - Save the HTTP proxy as the proxy for the other protocols
// false - Save the proxy protocol settings separately (default)
defaultPref("network.proxy.share_proxy_settings", true);
// http://kb.mozillazine.org/Network.proxy.no_proxies_on
defaultPref("network.proxy.no_proxies_on", "localhost, 127.0.0.1");
// http://kb.mozillazine.org/Network.proxy.socks_version
defaultPref("network.proxy.socks_version", 5);
// http://kb.mozillazine.org/Network.proxy.socks_remote_dns
// true - Have the (SOCKS v5) proxy server perform DNS lookups
// false - Perform DNS lookups on the client
lockPref("network.proxy.socks_remote_dns", true);
// http://kb.mozillazine.org/Network.dns.disablePrefetch
// https://trac.torproject.org/projects/tor/wiki/doc/Preventing_Tor_DNS_Leaks
lockPref("network.dns.disablePrefetch", true);
// https://hg.mozilla.org/mozilla-central/file/tip/services/datareporting
// https://support.mozilla.org/en-US/questions/954790
lockPref("datareporting.policy.dataSubmissionEnabled", false);
lockPref("datareporting.policy.dataSubmissionPolicyAccepted", false);
lockPref("datareporting.policy.dataSubmissionPolicyBypassAcceptance", false);
// http://support.mozilla.org/en-US/questions/898549
lockPref("toolkit.telemetry.enabled", false);
lockPref("toolkit.telemetry.prompted", 2);
lockPref("toolkit.telemetry.rejected", true);
// https://blog.mozilla.org/blog/2013/05/14/stay-social-with-firefox/
// https://support.mozilla.org/en-US/questions/942293
lockPref("social.enabled", false);
lockPref("social.toast-notifications.enabled", false);
lockPref("social.manifest.cliqz", "");
lockPref("social.manifest.facebook", "");
lockPref("social.manifest.mixi", "");
lockPref("social.manifest.msnnow", "");
// about:healthreport
// Delete healthreport.sqlite in your Firefox profile too!
lockPref("datareporting.healthreport.service.enabled", false);
lockPref("datareporting.healthreport.uploadEnabled", false);
lockPref("datareporting.healthreport.pendingDeleteRemoteData", true);
// http://kb.mozillazine.org/Security.tls.version.*
defaultPref("security.tls.version.min", 1)
defaultPref("security.tls.version.max", 3)
// Disable weak DHE export ciphers
// https://weakdh.org/sysadmin.html
defaultPref("security.ssl3.dhe_rsa_aes_128_sha", false)
defaultPref("security.ssl3.dhe_rsa_aes_256_sha", false)
// Bug #873349 / "Add a whitelist for mixed content blocking" was closed with
// WONTFIX. However, we still may be able to allow mixed content, especially
// in coroprate environments.
// https://bugzilla.mozilla.org/show_bug.cgi?id=873349
// defaultPref("security.mixed_content.block_active_content", false);
// Disable the annoying "...is now in fullscreen" message
// https://support.mozilla.org/en-US/questions/937742
defaultPref("full-screen-api.approval-required", false);
// I usually disable the "Menu bar" in Firefox but it will become visible
// when the "Alt" key is pressed (ui.key.generalAccessKey et al.). One can
// disable the "Menu bar" altogether by creating chrome/userChrome.css with the
// following content:
//
// #toolbar-menubar {
// display:none !important;
// }
//
// But now the "Menu bar" will be hidden forever. So, lets just disable it
// when pressing "Alt", it can still be shown via "right-click".
// http://kb.mozillazine.org/About:config_entries#UI.
//
lockPref("ui.key.menuAccessKeyFocuses", false);
// END