mirror of
https://github.com/ironfox-oss/IronFox.git
synced 2026-04-18 22:22:18 -04:00
feat: Download Phoenix (with the version specified at versions.sh, instead of having to manually copy, paste, and update it
Signed-off-by: celenity <celenity@celenity.dev>
This commit is contained in:
2
.gitignore
vendored
2
.gitignore
vendored
@@ -9,3 +9,5 @@ __pycache__
|
||||
/wasi-sdk
|
||||
/scripts/env_local.sh
|
||||
.DS_Store
|
||||
/patches/preferences/phoenix.js
|
||||
/patches/preferences/phoenix-extended.js
|
||||
|
||||
@@ -1,95 +0,0 @@
|
||||
|
||||
//
|
||||
|
||||
//
|
||||
// Copyright (C) 2024-2025 celenity
|
||||
//
|
||||
// This file is part of Phoenix.
|
||||
//
|
||||
// Phoenix is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
|
||||
//
|
||||
// Phoenix is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
||||
//
|
||||
// You should have received a copy of the GNU General Public License along with Phoenix. If not, see https://www.gnu.org/licenses/.
|
||||
//
|
||||
|
||||
// This file contains preferences shared across Phoenix 'Extended' configs.
|
||||
|
||||
/* INDEX
|
||||
|
||||
001: FINGERPRINTING PROTECTION
|
||||
002: WEBRTC
|
||||
003: ATTACK SURFACE REDUCTION
|
||||
004: MISC. PRIVACY + SECURITY (ANDROID ONLY)
|
||||
005: MISC. PRIVACY
|
||||
|
||||
*/
|
||||
|
||||
/* KEY
|
||||
|
||||
Unspecified = This preference should be set EVERYWHERE
|
||||
|
||||
[ANDROID-ONLY] = This preference should ONLY be set for Android
|
||||
|
||||
[NO-LINUX] = This preference should be set everywhere, EXCEPT for GNU/Linux
|
||||
[NO-MAIL] = This preference should be set everywhere, EXCEPT for Thunderbird (Used for ex. Dove)
|
||||
[NO-OSX] = This preference should be set everywhere, EXCEPT for macOS
|
||||
[NO-WINDOWS] = This preference should be set everywhere, EXCEPT for Windows
|
||||
|
||||
*/
|
||||
|
||||
|
||||
/*** 001 FINGERPRINTING PROTECTION ***/
|
||||
|
||||
|
||||
/// Further harden FPP...
|
||||
// As explained here: https://codeberg.org/celenity/Phoenix/wiki/Extended#fingerprinting
|
||||
// Compared to standard, this just removes '-JSDateTimeUTC' - meaning timezone is spoofed to UTC-0
|
||||
pref("privacy.fingerprintingProtection.overrides", "+AllTargets,-CanvasExtractionBeforeUserInputIsBlocked,-CSSPrefersColorScheme,-FrameRate,-CanvasImageExtractionPrompt"); // [ANDROID-ONLY]
|
||||
pref("browser.phoenix.status.extended", "001");
|
||||
|
||||
/*** 002 WEBRTC ***/
|
||||
// This will likely break WebRTC...
|
||||
|
||||
/// Always exclude local IP addresses, even in trusted scenarios
|
||||
pref("media.peerconnection.ice.no_host", true);
|
||||
|
||||
/// Force a single candidate for ICE generation
|
||||
pref("media.peerconnection.ice.default_address_only", true);
|
||||
|
||||
/// Only use TURN servers/relays
|
||||
// No P2P
|
||||
// https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/issues/40#note_2884663
|
||||
pref("media.peerconnection.ice.relay_only", true);
|
||||
|
||||
pref("browser.phoenix.status.extended", "002");
|
||||
|
||||
/*** 003 ATTACK SURFACE REDUCTION ***/
|
||||
|
||||
/// Disable WebAssembly (WASM)
|
||||
// https://spectrum.ieee.org/more-worries-over-the-security-of-web-assembly
|
||||
pref("javascript.options.wasm", false);
|
||||
|
||||
pref("browser.phoenix.status.extended", "003");
|
||||
|
||||
/*** 004 MISC. PRIVACY + SECURITY ***/
|
||||
|
||||
/// Disable WebGL [ANDROID-ONLY]
|
||||
// PRIVACY: Fingerprinting concerns [ANDROID-ONLY]
|
||||
// SECURITY: Attack Surface Reduction [ANDROID-ONLY]
|
||||
// https://blog.browserscan.net/docs/webgl-fingerprinting [ANDROID-ONLY]
|
||||
// https://security.stackexchange.com/questions/13799/is-webgl-a-security-concern [ANDROID-ONLY]
|
||||
// On desktop we're no longer setting/recommending this in favor of the built-in `Block WebGL` filterlist in uBlock Origin, but on Android, we can't necessarily control uBlock Origin/set policies, so let's just make sure this is disabled. [ANDROID-ONLY]
|
||||
pref("webgl.disabled", true); // [ANDROID-ONLY]
|
||||
|
||||
pref("browser.phoenix.status.extended", "004");
|
||||
|
||||
/*** 005 MISC. PRIVACY ***/
|
||||
|
||||
/// Only send cross-origin referers if hosts match
|
||||
// https://wiki.mozilla.org/Security/Referrer
|
||||
pref("network.http.referer.XOriginPolicy", 2);
|
||||
|
||||
pref("browser.phoenix.status.extended", "005");
|
||||
|
||||
pref("browser.phoenix.status.extended", "successfully applied :D", locked);
|
||||
File diff suppressed because one or more lines are too long
@@ -162,6 +162,11 @@ clone_repo "https://github.com/mozilla/glean" "$GLEANDIR" "$GLEAN_TAG"
|
||||
# Clone MicroG
|
||||
clone_repo "https://github.com/microg/GmsCore" "$GMSCOREDIR" "$GMSCORE_TAG"
|
||||
|
||||
# Download Phoenix
|
||||
echo "Downloading Phoenix..."
|
||||
download "https://gitlab.com/celenityy/Phoenix/-/raw/$PHOENIX_TAG/android/phoenix.js" "$PATCHDIR/preferences/phoenix.js"
|
||||
download "https://gitlab.com/celenityy/Phoenix/-/raw/$PHOENIX_TAG/android/phoenix-extended.js" "$PATCHDIR/preferences/phoenix-extended.js"
|
||||
|
||||
# Get WebAssembly SDK
|
||||
if [[ -z ${FDROID_BUILD+x} ]]; then
|
||||
echo "Downloading prebuilt wasi-sdk..."
|
||||
|
||||
@@ -9,6 +9,7 @@ FIREFOX_RELEASE_PATH="releases/${FIREFOX_VERSION}"
|
||||
WASI_TAG="wasi-sdk-20"
|
||||
GLEAN_TAG="v64.3.1"
|
||||
GMSCORE_TAG="v0.3.7.250932"
|
||||
PHOENIX_TAG="2025.06.24.1"
|
||||
APPSERVICES_BRANCH="release-v140"
|
||||
|
||||
# Tools
|
||||
|
||||
Reference in New Issue
Block a user