mirror/IronFox
1
0
Fork 0
mirror of https://github.com/ironfox-oss/IronFox.git synced 2026-06-11 01:34:46 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'main' into v134.0

Browse Source
This commit is contained in:
Akash Yadav
2025-01-04 09:10:36 +05:30
parent ac6cbe96c4 959c8be191
commit 76cd784dc2
4 changed files with 113 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
patches/preferences/ironfox.js
View File

@@ -14,3 +14,5 @@ pref("browser.safebrowsing.blockedURIs.enabled", false);
pref("browser.safebrowsing.downloads.enabled", false); // [DEFAULT]
pref("browser.safebrowsing.malware.enabled", false);
pref("browser.safebrowsing.phishing.enabled", false);
pref("browser.ironfox.applied", true);

14
patches/preferences/phoenix-extended.js
View File

@@ -9,6 +9,8 @@
pref("security.ssl.require_safe_negotiation", true);
pref("browser.phoenix.extended.001.applied", true);
// 002 FINGERPRINTING PROTECTION
/// Enable RFP (resistFingerprinting)
@@ -23,6 +25,8 @@ pref("privacy.resistFingerprinting", true);
pref("webgl.disabled", true);
pref("browser.phoenix.extended.002.applied", true);
/// 003 WEBRTC
// Never leak IP addresses - This *will* break WebRTC
@@ -30,6 +34,8 @@ pref("webgl.disabled", true);
pref("media.peerconnection.ice.default_address_only", true);
pref("media.peerconnection.ice.no_host", true);
pref("browser.phoenix.extended.003.applied", true);
// 004 MISC. PRIVACY
/// Disable ETP WebCompat & Heuristics
@@ -44,6 +50,8 @@ pref("privacy.restrict3rdpartystorage.heuristic.window_open", false); // [DEFAUL
pref("network.http.referer.XOriginPolicy", 2);
pref("browser.phoenix.extended.004.applied", true);
// 005 ATTACK SURFACE REDUCTION
/// Disable WebAssembly
@@ -51,6 +59,8 @@ pref("network.http.referer.XOriginPolicy", 2);
pref("javascript.options.wasm", false);
pref("browser.phoenix.extended.005.applied", true);
// 006 MISC.
/// Prevent sites from automatically refreshing
@@ -60,3 +70,7 @@ pref("browser.meta_refresh_when_inactive.disabled", true); // [DEFAULT]
/// Stricter Autoplay Blocking
pref("media.autoplay.blocking_policy", 2); // [Default = 0]
pref("browser.phoenix.extended.006.applied", true);
pref("browser.phoenix.extended.applied", true);

118
patches/preferences/phoenix.js
View File

@@ -13,6 +13,8 @@ pref("general.aboutConfig.enable", true);
/// Disable annoying warnings when attempting to access the about:config
pref("general.warnOnAboutConfig", false);
pref("browser.phoenix.000.applied", true);
// 001 DATA COLLECTION
/// Shield Studies/Normandy/Nimbus
@@ -24,17 +26,17 @@ pref("general.warnOnAboutConfig", false);
// https://experimenter.info/
// resource://nimbus/ExperimentAPI.sys.mjs
pref("app.normandy.api_url", "");
pref("app.normandy.enabled", false);
pref("app.normandy.first_run", false);
pref("app.normandy.last_seen_buildid", "");
pref("app.normandy.logging.level", 70); // Limits logging to fatal only
pref("app.normandy.user_id", "");
pref("app.shield.optoutstudies.enabled", false);
pref("app.normandy.api_url", ""); // [HIDDEN]
pref("app.normandy.enabled", false); // [HIDDEN]
pref("app.normandy.first_run", false); // [HIDDEN]
pref("app.normandy.last_seen_buildid", ""); // [HIDDEN]
pref("app.normandy.logging.level", 70); // [HIDDEN], Limits logging to fatal only
pref("app.normandy.user_id", ""); // [HIDDEN]
pref("app.shield.optoutstudies.enabled", false); // [HIDDEN]
pref("messaging-system.log", "off"); // Disables logging
pref("messaging-system.rsexperimentloader.enabled", false);
pref("messaging-system.rsexperimentloader.collection_id", "");
pref("nimbus.appId", ""); // https://searchfox.org/mozilla-central/source/toolkit/components/backgroundtasks/defaults/backgroundtasks_browser.js
pref("messaging-system.rsexperimentloader.enabled", false); // [HIDDEN]
pref("messaging-system.rsexperimentloader.collection_id", ""); // [HIDDEN]
pref("nimbus.appId", ""); // [HIDDEN], https://searchfox.org/mozilla-central/source/toolkit/components/backgroundtasks/defaults/backgroundtasks_browser.js
pref("toolkit.telemetry.pioneer-new-studies-available", false); // [HIDDEN]
/// WebVTT Testing Events
@@ -147,6 +149,8 @@ pref("extensions.recommendations.privacyPolicyUrl", ""); // [DEFAULT]
pref("toolkit.crashreporter.infoURL", ""); // [HIDDEN]
pref("toolkit.datacollection.infoURL", ""); // [HIDDEN]
pref("browser.phoenix.001.applied", true);
// 002 MOZILLA CRAP™
/// Firefox Recommendations & "Discovery"
@@ -184,6 +188,8 @@ pref("extensions.getAddons.search.browseURL", "https://addons.mozilla.org/%LOCAL
pref("extensions.webcompat-reporter.enabled", false); // [DEFAULT except for Beta & Nightly releases...]
pref("extensions.webcompat-reporter.newIssueEndpoint", "");
pref("browser.phoenix.002.applied", true);
// 003 Search & URL Bar
/// Allow using a different search engine in Private Windows vs. Normal Windows
@@ -199,6 +205,8 @@ pref("browser.search.separatePrivateDefault.urlbarResult.enabled", true); // [HI
pref("network.IDN_show_punycode", true);
pref("browser.phoenix.003.applied", true);
// 004 Implicit Connections
/// Disable Network Prefetching
@@ -219,6 +227,8 @@ pref("network.prefetch-next", false);
pref("browser.search.suggest.enabled", false);
pref("browser.search.suggest.enabled.private", false);
pref("browser.phoenix.004.applied", true);
// 005 HTTP(S) - Mixed Content & General Network Hardening
/// Enforce using HTTPS as much as possible
@@ -307,6 +317,8 @@ pref("network.proxy.failover_direct", false);
pref("network.proxy.socks_remote_dns", true);
pref("network.proxy.socks5_remote_dns", true); // [DEFAULT]
pref("browser.phoenix.005.applied", true);
// 006 DNS
/// Disable Mozilla's DoH Rollout
@@ -317,7 +329,7 @@ pref("doh-rollout.skipHeuristicsCheck", true); // [HIDDEN]
pref("doh-rollout.uri", ""); // [HIDDEN]
pref("network.trr.default_provider_uri", "");
/// Set Quad9 as default DoH resolver
/// Enable DoH & Set to Quad9 by default
pref("network.trr.custom_uri", "https://dns.quad9.net/dns-query");
pref("network.trr.mode", 3);
@@ -351,6 +363,8 @@ pref("network.dns.native_https_query", true); // [DEFAULT]
pref("network.dns.preferIPv6", true);
pref("browser.phoenix.006.applied", true);
// 007 CERTIFICATES
/// Enforce OCSP & Stapling
@@ -381,6 +395,8 @@ pref("security.pki.certificate_transparency.mode", 2); // [Default = 0]
pref("security.pki.certificate_transparency.disable_for_hosts", ""); // [DEFAULT]
pref("security.pki.certificate_transparency.disable_for_spki_hashes", ""); // [DEFAULT]
pref("browser.phoenix.007.applied", true);
// 008 DOWNLOADS
/// Always prompt before downloading files
@@ -392,6 +408,8 @@ pref("browser.download.useDownloadDir", false);
pref("dom.block_download_insecure", true); // [DEFAULT]
pref("browser.phoenix.008.applied", true);
// 009 SAFE BROWSING
/// Enable Safe Browsing by default
@@ -448,6 +466,8 @@ pref("browser.safebrowsing.reportPhishURL", "https://safebrowsing.google.com/saf
pref("browser.safebrowsing.provider.google.reportURL", "https://transparencyreport.google.com/safe-browsing/search?url=");
pref("browser.safebrowsing.provider.google4.reportURL", "https://transparencyreport.google.com/safe-browsing/search?url=");
pref("browser.phoenix.009.applied", true);
// 010 GEOLOCATION
/// Prevent Wi-Fi Scanning
@@ -466,6 +486,8 @@ pref("browser.region.update.enabled", false);
pref("geo.provider.network.url", "https://beacondb.net/v1/geolocate");
pref("browser.phoenix.010.applied", true);
// 011 AI
// https://support.mozilla.org/kb/ai-chatbot
@@ -473,6 +495,8 @@ pref("geo.provider.network.url", "https://beacondb.net/v1/geolocate");
pref("browser.ml.enable", false); // [DEFAULT, except for Nightly] - "Experimental Machine Learning Inference Engine"
pref("browser.phoenix.011.applied", true);
// 012 WEBRTC
/// Enable mDNS Host Obfuscation to prevent leaking local IP addresses
@@ -485,6 +509,8 @@ pref("media.peerconnection.ice.obfuscate_host_addresses", true);
pref("media.peerconnection.ice.proxy_only_if_behind_proxy", true);
pref("browser.phoenix.012.applied", true);
// 013 DISK AVOIDANCE
/// Disable Search & Form History - Can be leaked to sites
@@ -527,6 +553,8 @@ pref("layout.css.visited_links_enabled", false);
pref("browser.pagethumbnails.capturing_disabled", true); // [HIDDEN]
pref("browser.phoenix.013.applied", true);
// 014 EXTENSIONS
// Only allow installing extensions from profile & application directories (Prevents extensions being installed from the system/via other software)
@@ -550,6 +578,8 @@ pref("xpinstall.signatures.weakSignaturesTemporarilyAllowed", false); // [HIDDEN
pref("extensions.blocklist.enabled", true); // [DEFAULT]
pref("browser.phoenix.014.applied", true);
// 015 PDF.js
/// Disable JavaScript
@@ -577,6 +607,8 @@ pref("browser.download.open_pdf_attachments_inline", true); // [DEFAULT]
pref("pdfjs.sidebarViewOnLoad", 2); // [HIDDEN]
pref("browser.phoenix.015.applied", true);
// 016 FINGERPRINTING PROTECTION
/// Set RFP to spoof the English locale by default
@@ -609,6 +641,8 @@ pref("webgl.disable-fail-if-major-performance-caveat", false);
pref("browser.display.use_system_colors", false); // [DEFAULT]
pref("browser.phoenix.016.applied", true);
// 017 MISC. PRIVACY
/// Ensure ETP is set to Strict
@@ -691,6 +725,8 @@ pref("privacy.query_stripping.strip_list", "__hsfp __hssc __hstc __s _hsenc _ope
pref("privacy.query_stripping.strip_on_share.enabled", true);
pref("browser.phoenix.017.applied", true);
// 018 PASSWORDS & AUTHENTICATION
/// Disable Autofill
@@ -746,6 +782,8 @@ pref("network.microsoft-sso-authority-list", ""); // DEFENSE IN DEPTH
pref("network.negotiate-auth.trusted-uris", ""); // [DEFAULT]
pref("browser.phoenix.018.applied", true);
// 019 ATTACK SURFACE REDUCTION
/// Disable JavaScript Just-in-time Compilation (JIT)
@@ -773,7 +811,22 @@ pref("mathml.disabled", true);
pref("gfx.font_rendering.graphite.enabled", false);
pref("gfx.font_rendering.opentype_svg.enabled", false);
// 022 MISC. SECURITY
pref("browser.phoenix.019.applied", true);
// 020 MISC. SECURITY
// Prevent websites from automatically downloading as many files as they want to a user's device...
// Can be used for denial of service
// Allows overriding for specific downloads if needed
// https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41764
// Ex. also enabled by Tor Browser
pref("browser.download.enable_spam_prevention", true);
// Do not disable Spectre mitigations for isolated content...
// https://searchfox.org/mozilla-central/source/modules/libpref/init/StaticPrefList.yaml#8689
pref("javascript.options.spectre.disable_for_isolated_content", false);
// If a website asks for a certificate, always prompt the user
// Never automatically select one...
@@ -805,6 +858,7 @@ pref("browser.contentanalysis.interception_point.print.enabled", false);
pref("dom.ipc.processCount.webIsolated", 1); // [DEFAULT]
pref("fission.autostart", true);
pref("fission.autostart.session", true);
/// Enable GPU Sandboxing
@@ -856,13 +910,17 @@ pref("network.protocol-handler.warn-external.tel", true);
pref("network.protocol-handler.warn-external.vnd.youtube", true);
pref("security.external_protocol_requires_permission", true); // [DEFAULT]
// 023 BLOCK COOKIE BANNERS
pref("browser.phoenix.020.applied", true);
// 021 BLOCK COOKIE BANNERS
pref("cookiebanners.service.mode", 1);
pref("cookiebanners.service.mode.privateBrowsing", 1); // [DEFAULT on Nightly]
pref("cookiebanners.service.enableGlobalRules", true); // [DEFAULT]
// 024 MEDIA
pref("browser.phoenix.021.applied", true);
// 022 MEDIA
/// Enforce validating signature for GMP when updating
// https://searchfox.org/mozilla-central/source/modules/libpref/init/all.js
@@ -889,14 +947,18 @@ pref("media.eme.require-app-approval", true); // [DEFAULT - DEFENSE IN DEPTH]: E
pref("media.gmp-widevinecdm.visible", false);
pref("media.mediadrm-widevinecdm.visible", false); // https://searchfox.org/mozilla-central/source/mobile/android/app/geckoview-prefs.js#320
// 025 UPDATES
pref("browser.phoenix.022.applied", true);
// 023 UPDATES
/// Ensure we're always updating extensions by default
pref("extensions.systemAddon.update.enabled", true); // [DEFAULT]
pref("extensions.update.enabled", true); // [DEFAULT]
// 026 DEBUGGING
pref("browser.phoenix.023.applied", true);
// 024 DEBUGGING
/// Enforce local debugging only
@@ -912,7 +974,9 @@ pref("devtools.debugger.prompt-connection", true); // [DEFAULT]
pref("reader.errors.includeURLs", false); // [DEFAULT]
/// 027 MISC.
pref("browser.phoenix.024.applied", true);
/// 025 MISC.
/// Always allow installing "incompatible" add-ons
@@ -951,7 +1015,9 @@ pref("dom.disable_window_move_resize", true); // [DEFAULT]
pref("media.webspeech.synth.dont_notify_on_error", true); // [HIDDEN]
// 028 PERFORMANCE
pref("browser.phoenix.025.applied", true);
// 026 PERFORMANCE
// A lot of these taken from https://github.com/yokoffing/Betterfox/blob/main/Fastfox.js
pref("browser.sessionstore.max_tabs_undo", 7); // [Default = 10]
@@ -974,11 +1040,15 @@ pref("network.http.max-persistent-connections-per-proxy", 48); // [Default = 20]
pref("network.http.max-persistent-connections-per-server", 10); // [Default = 6]
pref("network.http.max-urgent-start-excessive-connections-per-host", 5); // [Default = 3]
// 029 SMOOTH SCROLLING
pref("browser.phoenix.026.applied", true);
// 027 SMOOTH SCROLLING
pref("general.smoothScroll", true); // [DEFAULT]
// Personal Touch 💜
pref("browser.phoenix.027.applied", true);
// 028 Personal Touch 💜
/// Things that are nice to have™
// Not directly privacy & security related
@@ -996,7 +1066,9 @@ pref("full-screen-api.warning.timeout", 0); // [Default = 3000]
pref("security.xfocsp.hideOpenInNewWindow", false);
pref("view_source.wrap_long_lines", true); // [DEFAULT]
// Sync more prefs
pref("browser.phoenix.028.applied", true);
// 029 Sync more prefs
// Note that for this to work, the below prefs must be set on BOTH the device you are syncing from & to...
// Useful especially if you override our defaults
@@ -1101,3 +1173,7 @@ pref("services.sync.prefs.sync.network.http.max-persistent-connections-per-serve
pref("services.sync.prefs.sync.network.http.max-urgent-start-excessive-connections-per-host", true);
pref("services.sync.prefs.sync.network.http.referer.XOriginPolicy", true);
pref("services.sync.prefs.sync.webgl.disabled", true);
pref("browser.phoenix.029.applied", true);
pref("browser.phoenix.applied", true);

1
scripts/prebuild.sh
View File

@@ -347,7 +347,6 @@ pref("media.gmp-manager.url.override", "data:text/plain,");
// Disable openh264 if it is already downloaded
pref("media.gmp-gmpopenh264.enabled", false);
EOF
cat "$patches/preferences/phoenix.js" >>mobile/android/app/geckoview-prefs.js