Akash Yadav
9084915aeb
fix: allow build date overrides using system env vars
...
Signed-off-by: Akash Yadav <itsaky01@gmail.com >
2025-05-18 01:59:31 +05:30
celenity
02de41af05
fix: Minor fix to patches.yaml
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-05-13 11:58:31 -04:00
celenity
a6dd044071
feat: Include fonts at build-time (like ex. Tor Browser)
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-05-13 11:46:30 -04:00
celenity
babfc26392
feat: Disable HLS at build-time
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-05-11 19:36:58 -04:00
celenity
f7530d12c6
fix: Limit scope of certificate pinning - unfortunately too difficult to maintain in its current state, and causing issues for users. In the future, I'd like to look into expanding this again though (and if you run/operate a website, please reach out and we'd be glad to add you!).
...
That being said, we still improve upon Firefox's standard certificate pinning, notably:
* We remove AffirmTrust & Entrust for Google's domains (as Google no longer uses these CAs, and in fact even plans to distrust them in Chrome entirely...)
* We pin our domains
* We pin Brave's domains (with info they provide from https://github.com/brave/brave-core/blob/master/chromium_src/net/tools/transport_security_state_generator/input_file_parsers.cc )
* We pin `aus4.mozilla.org`, `aus5.mozilla.org`, `firefox.com`, & `telemetry.mozilla.org` (which are typically only set to `test` mode, meaning they're not enforced)
* We remove the pin for `dns.google.com` (to ensure Google DNS is always available for those who use it)
Signed-off-by: celenity <celenity@celenity.dev >
2025-05-05 02:47:25 -04:00
Akash Yadav
440329f733
fix: remove extension-recommendations.patch from patches.yaml
...
Signed-off-by: Akash Yadav <itsaky01@gmail.com >
2025-04-29 14:55:18 +05:30
celenity
58c3a8b606
fix: Allow building without legacy/unnecessary AutoConfig functionality
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-29 00:20:56 -04:00
celenity
67fbef34d5
fix: Update enable-secret-settings.patch for 138
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-29 00:19:52 -04:00
celenity
8a9b269ff2
feat: Disable Mozilla's GeoIP/Region Service
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-27 13:56:11 -04:00
celenity
b72cab8bc4
feat: Update gecko-liberate.patch to ensure MediaDrm is disabled (and remove internal GMP sources for redundancy)
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-27 13:49:38 -04:00
celenity
c0deb2be3a
feat: Disable the new Unified Trust Panel by default due to phishing concerns, as it unfortunately doesn't currently display the full URL if it's too long. Hopefully we can re-enable this in the future once it's ready and this issue has been resolved.
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-24 16:13:41 -04:00
celenity
dcfcfc7bb8
feat: Add toggles to enable/disable JavaScript, JIT, & WASM
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-24 04:25:17 -04:00
celenity
395605f194
feat: Disable CSP Reporting - (We already block them by default with uBlock Origin, but this disables them on the browser level to better ensure users are always expected, especially if they ex. don't use uBlock Origin or just disable it for certain sites (or globally altogether)
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-23 00:28:50 -04:00
celenity
10dff8da3a
feat: Harden PDF.js with various changes inspired by GrapheneOS's PDF Viewer - https://gitlab.com/ironfox-oss/IronFox/-/issues/79
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-22 04:41:57 -04:00
celenity
3940c02db8
feat: Add a toggle to enable/disable Safe Browsing
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-22 01:12:02 -04:00
celenity
68a31b31f6
feat: Take back control of all Safe Browsing preferences, meaning they're now defined in phoenix-android.js/ironfox.js (so we no longer need the configure-safe-browsing patch...), and users can now freely configure any Safe Browsing preference as desired from the about:config
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-21 22:40:23 -04:00
celenity
a3d8e73c75
feat: Update and significantly improve/expand upon Mozilla's built-in certificate pinning
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-21 15:57:53 -04:00
Michel Le Bihan
f5d6638f74
feat: add domain highlighting and alignment
2025-04-20 14:12:47 +05:30
celenity
3e62307945
fix: Rename enable-aboutconfig.patch to expose-aboutconfig.patch + update description
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-17 04:58:39 -04:00
celenity
05db57e415
feat: Limit Remote Settings to only download what we specify in preferences, using an adapted patch from LibreWolf
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-17 04:52:07 -04:00
celenity
9067683378
feat: Harden FPP internally instead of using the privacy.fingerprintingProtection.overrides preference + provide FPP granular overrides internally with a custom Remote Settings dump instead of using the privacy.fingerprintingProtection.granularOverrides preference, making it significantly easier for users to add their own overrides if desired. Also include more Remote Settings dumps (like desktop Firefox) to ensure these dumps are available out of the box.
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-17 02:56:48 -04:00
celenity
ab0c2dcb37
feat: Prevent addons.mozilla.org from being able to query a list of the user's installed add-ons + prevent it from enabling and uninstalling add-ons
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-16 02:58:43 -04:00
celenity
0433f68265
fix: disable-accessibility-services-by-default.patch
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-15 17:54:13 -04:00
celenity
6d19c7cc3b
feat: Disable Accessibility Services by default
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-15 01:50:37 -04:00
celenity
70d5101571
fix: Description for global-privacy-control.patch
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-14 21:33:41 -04:00
celenity
aa3dbf7670
feat: Prevent extensions from changing various browser settings
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-14 20:19:44 -04:00
celenity
1a6112a740
feat: Set PDF.js prefs via PdfJsOverridePrefs.js instead of using a patch
...
Signed-off-by: celenity <celenity@celenity.dev >
2025-04-14 17:58:36 -04:00
Akash Yadav
70f3bff03a
feat: add configuration to build IronFox site
...
Signed-off-by: Akash Yadav <itsaky01@gmail.com >
2025-04-13 18:18:56 +05:30