Commit Graph

28 Commits

Author SHA1 Message Date
Akash Yadav
9084915aeb fix: allow build date overrides using system env vars
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-18 01:59:31 +05:30
celenity
02de41af05 fix: Minor fix to patches.yaml
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 11:58:31 -04:00
celenity
a6dd044071 feat: Include fonts at build-time (like ex. Tor Browser)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 11:46:30 -04:00
celenity
babfc26392 feat: Disable HLS at build-time
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 19:36:58 -04:00
celenity
f7530d12c6 fix: Limit scope of certificate pinning - unfortunately too difficult to maintain in its current state, and causing issues for users. In the future, I'd like to look into expanding this again though (and if you run/operate a website, please reach out and we'd be glad to add you!).
That being said, we still improve upon Firefox's standard certificate pinning, notably:

* We remove AffirmTrust & Entrust for Google's domains (as Google no longer uses these CAs, and in fact even plans to distrust them in Chrome entirely...)
* We pin our domains
* We pin Brave's domains (with info they provide from https://github.com/brave/brave-core/blob/master/chromium_src/net/tools/transport_security_state_generator/input_file_parsers.cc)
* We pin `aus4.mozilla.org`, `aus5.mozilla.org`, `firefox.com`, & `telemetry.mozilla.org` (which are typically only set to `test` mode, meaning they're not enforced)
* We remove the pin for `dns.google.com` (to ensure Google DNS is always available for those who use it)

Signed-off-by: celenity <celenity@celenity.dev>
2025-05-05 02:47:25 -04:00
Akash Yadav
440329f733 fix: remove extension-recommendations.patch from patches.yaml
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-29 14:55:18 +05:30
celenity
58c3a8b606 fix: Allow building without legacy/unnecessary AutoConfig functionality
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-29 00:20:56 -04:00
celenity
67fbef34d5 fix: Update enable-secret-settings.patch for 138
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-29 00:19:52 -04:00
celenity
8a9b269ff2 feat: Disable Mozilla's GeoIP/Region Service
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 13:56:11 -04:00
celenity
b72cab8bc4 feat: Update gecko-liberate.patch to ensure MediaDrm is disabled (and remove internal GMP sources for redundancy)
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-27 13:49:38 -04:00
celenity
c0deb2be3a feat: Disable the new Unified Trust Panel by default due to phishing concerns, as it unfortunately doesn't currently display the full URL if it's too long. Hopefully we can re-enable this in the future once it's ready and this issue has been resolved.
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-24 16:13:41 -04:00
celenity
dcfcfc7bb8 feat: Add toggles to enable/disable JavaScript, JIT, & WASM
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-24 04:25:17 -04:00
celenity
395605f194 feat: Disable CSP Reporting - (We already block them by default with uBlock Origin, but this disables them on the browser level to better ensure users are always expected, especially if they ex. don't use uBlock Origin or just disable it for certain sites (or globally altogether)
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-23 00:28:50 -04:00
celenity
10dff8da3a feat: Harden PDF.js with various changes inspired by GrapheneOS's PDF Viewer - https://gitlab.com/ironfox-oss/IronFox/-/issues/79
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-22 04:41:57 -04:00
celenity
3940c02db8 feat: Add a toggle to enable/disable Safe Browsing
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-22 01:12:02 -04:00
celenity
68a31b31f6 feat: Take back control of all Safe Browsing preferences, meaning they're now defined in phoenix-android.js/ironfox.js (so we no longer need the configure-safe-browsing patch...), and users can now freely configure any Safe Browsing preference as desired from the about:config
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-21 22:40:23 -04:00
celenity
a3d8e73c75 feat: Update and significantly improve/expand upon Mozilla's built-in certificate pinning
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-21 15:57:53 -04:00
Michel Le Bihan
f5d6638f74 feat: add domain highlighting and alignment 2025-04-20 14:12:47 +05:30
celenity
3e62307945 fix: Rename enable-aboutconfig.patch to expose-aboutconfig.patch + update description
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-17 04:58:39 -04:00
celenity
05db57e415 feat: Limit Remote Settings to only download what we specify in preferences, using an adapted patch from LibreWolf
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-17 04:52:07 -04:00
celenity
9067683378 feat: Harden FPP internally instead of using the privacy.fingerprintingProtection.overrides preference + provide FPP granular overrides internally with a custom Remote Settings dump instead of using the privacy.fingerprintingProtection.granularOverrides preference, making it significantly easier for users to add their own overrides if desired. Also include more Remote Settings dumps (like desktop Firefox) to ensure these dumps are available out of the box.
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-17 02:56:48 -04:00
celenity
ab0c2dcb37 feat: Prevent addons.mozilla.org from being able to query a list of the user's installed add-ons + prevent it from enabling and uninstalling add-ons
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-16 02:58:43 -04:00
celenity
0433f68265 fix: disable-accessibility-services-by-default.patch
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-15 17:54:13 -04:00
celenity
6d19c7cc3b feat: Disable Accessibility Services by default
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-15 01:50:37 -04:00
celenity
70d5101571 fix: Description for global-privacy-control.patch
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-14 21:33:41 -04:00
celenity
aa3dbf7670 feat: Prevent extensions from changing various browser settings
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-14 20:19:44 -04:00
celenity
1a6112a740 feat: Set PDF.js prefs via PdfJsOverridePrefs.js instead of using a patch
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-14 17:58:36 -04:00
Akash Yadav
70f3bff03a feat: add configuration to build IronFox site
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-04-13 18:18:56 +05:30