Commit Graph

968 Commits

Author SHA1 Message Date
Akash Yadav
b25035e20b fix: update env var names to better reflect their purpose
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-18 01:59:32 +05:30
Akash Yadav
cc16f49c66 fix: disallow manual version specification
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-18 01:59:32 +05:30
Akash Yadav
9084915aeb fix: allow build date overrides using system env vars
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-18 01:59:31 +05:30
celenity
b3c62d2687 feat: Block zoho.com, zoho.com.au, zoho.eu, zoho.in, zoho.jp, & zoho.sa from extracting canvas data, as they don't need access and attempts to prompt users for it on desktop...
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-17 13:59:02 -04:00
celenity
042eeaf475 feat: Block rezka-ua.in from extracting canvas data, as it doesn't need access and attempts to prompt users for it on desktop...
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-16 15:18:21 -04:00
celenity
29798151cc feat: Block southwest.com from extracting canvas data, as it doesn't need access and attempts to prompt users for it on desktop...
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-16 03:00:08 -04:00
celenity
bd6f350a20 feat: Ensure we always report Firefox as the app name in the UA string (like LibreWolf's new patch: 4cf9d97a50/patches/firefox-in-ua.patch) - we weren't impacted by an issue like this AFAIK, but let's ensure one doesn't happen in the future...
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-15 02:22:17 -04:00
celenity
8c9a9dea1d feat: Update uBlock Origin assets.json per latest upstream changes - 47f1a19e9e + 3cd04c3806
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-15 01:49:55 -04:00
celenity
ff602b5681 fix: Add back the currentAppVersion parameter to the extension update URL - we already expose this anyways with other parameters, and this appears to cause issues on Thunderbird when missing - so let's add it back to be safe... - extensions.update.background.url -> https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID%&version=%ITEM_VERSION%&status=%ITEM_STATUS%&appID=%APP_ID%&appVersion=%APP_VERSION%&currentAppVersion=%CURRENT_APP_VERSION%&updateType=%UPDATE_TYPE% & extensions.update.url -> https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID%&version=%ITEM_VERSION%&status=%ITEM_STATUS%&appID=%APP_ID%&appVersion=%APP_VERSION%&currentAppVersion=%CURRENT_APP_VERSION%&updateType=%UPDATE_TYPE%
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 17:05:30 -04:00
celenity
0f3593042a fix: disable-telemetry.patch
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 13:28:17 -04:00
celenity
915f6aecd2 feat: update to v138.0.3
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 11:59:42 -04:00
celenity
02de41af05 fix: Minor fix to patches.yaml
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 11:58:31 -04:00
celenity
a5605f71f3 feat: Update disable-telemetry.patch
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 11:46:50 -04:00
celenity
a6dd044071 feat: Include fonts at build-time (like ex. Tor Browser)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 11:46:30 -04:00
celenity
344c59ae15 fix: Update disable-firefox-suggest.patch, disable-nimbus.patch, and our default RFP (FPP) targets for v138.0.2
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-13 00:10:18 -04:00
celenity
0a74a1b0ca fix: Update link for v138.0.2
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-12 18:26:12 -04:00
celenity
17f991f688 feat: update to v138.0.2 - fixes https://gitlab.com/ironfox-oss/IronFox/-/issues/98
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 19:38:20 -04:00
celenity
babfc26392 feat: Disable HLS at build-time
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 19:36:58 -04:00
celenity
5807ba450f feat: Disable PHC (Probabilistic Memory Checker - only relevant for use with the crash reporter
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 19:22:03 -04:00
celenity
46e4cdd90b feat: Enable the ability to replace the memory allocator implementation (replace-malloc)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 19:21:02 -04:00
celenity
7f9626d249 feat: Allow configuring more preferences via the about:config (+ ensure we disable android:debuggable)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 17:19:21 -04:00
celenity
3b071c351b feat: Update to Phoenix 2025.05.11.1 - https://codeberg.org/celenity/Phoenix/releases/tag/2025.05.11.1
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 17:18:43 -04:00
celenity
9c7a32ec4d fix: Clean-up gecko-liberate.patch - https://codeberg.org/celenity/Phoenix/issues/108
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 03:16:53 -04:00
celenity
b3a5559bdf fix: Unbreak Megacloud/various streaming websites (ex. anicrush.to, aniwatchtv.to, arc018.to, & hianimez.to)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 01:20:11 -04:00
celenity
97af9a9ed5 fix: Unbreak pogo.com
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 01:18:19 -04:00
celenity
300fc2b2a6 Fix syntax for third-party FPP overrides
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-11 00:46:01 -04:00
celenity
43d1a21978 feat: Prevent fetching fallback domains remotely
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-10 20:36:48 -04:00
celenity
aaa49e4d70 feat: Re-enable canvas randomization for Google domains by default
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-10 20:20:48 -04:00
celenity
a402c81c55 feat: Block icloud.com & icloud.com.cn from extracting canvas data/before user input to prevent them from unnecessarily prompting users (despite not needing the permission)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-10 19:09:26 -04:00
celenity
b4f5535e58 feat: Use stricter fingerprinting protection/enable additional targets for various (third-party) domains (most of which are ex. used for social widgets, third party sign-in, click/bounce tracking, etc...)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-10 18:57:08 -04:00
celenity
01ea39282a feat: Enable timezone spoofing for cloudflare.com, favicon.io, moviezapiya.fun, & tileman.io + spoof CSS prefers-color-scheme & frame rate for cloudflare.com `in third party contexts - as they simply don't need access...
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-10 04:24:33 -04:00
celenity
8aa8be2a28 feat: Block Amazon domains from extracting canvas data/before user input to prevent them from unnecessarily prompting users (despite not needing the permission)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-10 04:18:03 -04:00
celenity
e0f87a5d96 feat: Block cloudflare.com, epicgames.com, riverside.fm, stacksocial.com, tiktok.com, tileman.io, usps.com, & yahoo.com from extracting (randomized) canvas data before user input, as these don't need access and attempt to prompt users for it on desktop...
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-08 17:01:38 -04:00
celenity
f7530d12c6 fix: Limit scope of certificate pinning - unfortunately too difficult to maintain in its current state, and causing issues for users. In the future, I'd like to look into expanding this again though (and if you run/operate a website, please reach out and we'd be glad to add you!).
That being said, we still improve upon Firefox's standard certificate pinning, notably:

* We remove AffirmTrust & Entrust for Google's domains (as Google no longer uses these CAs, and in fact even plans to distrust them in Chrome entirely...)
* We pin our domains
* We pin Brave's domains (with info they provide from https://github.com/brave/brave-core/blob/master/chromium_src/net/tools/transport_security_state_generator/input_file_parsers.cc)
* We pin `aus4.mozilla.org`, `aus5.mozilla.org`, `firefox.com`, & `telemetry.mozilla.org` (which are typically only set to `test` mode, meaning they're not enforced)
* We remove the pin for `dns.google.com` (to ensure Google DNS is always available for those who use it)

Signed-off-by: celenity <celenity@celenity.dev>
2025-05-05 02:47:25 -04:00
celenity
bc63e65a3d fix: Update certificate pinning for tiktokv.com - fixes https://gitlab.com/ironfox-oss/IronFox/-/issues/90
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-04 14:07:51 -04:00
celenity
bf4f77d50b feat: Update build arguments:
Most of these are related to debugging/development/testing (and likely already set elsewhere) or currently just default - but it's a good idea to set them explicitly and ensure we're always covered

Though there are a few notable exceptions that may be of interest:

`--disable-artifact-builds` - Ensures Mozilla's artifacts/prebuilds are disabled, to ensure we're building from source

`--disable-backgroundtasks` - Disables `background tasks` - currently only used for Mozilla's updater (which we disable) & telemetry

`--disable-negotiateauth` - Disables GSS-API/Negotiate authentication

`MOZ_LTO`, `MOZ_PGO`, & `RUSTC_OPT_LEVEL` - Enables various performance optimizations. This does unfortunately appear to cause builds to take longer - but I'm seeing a noticeable improvement in performance on my device, and I think optimizations like this are especially important for us to potentially help compensate for ex. disabling JIT, so I think the trade-off is probably worth it.

Signed-off-by: celenity <celenity@celenity.dev>
2025-05-04 02:56:44 -04:00
celenity
0181b64355 fix: Update certificate pinning for protonweb.com - fixes https://codeberg.org/celenity/Phoenix/issues/104
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-04 02:27:02 -04:00
celenity
4239dd54e7 fix: JIT toggle (+ clean-up & refine our other toggles)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-04 00:06:52 -04:00
celenity
daecc12f0c fix: Update certificate pinning for lineageos.org
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-03 22:59:23 -04:00
celenity
566121da29 fix: Update certificate pinning for f-droid.org
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-03 20:30:19 -04:00
celenity
b6df8fe730 fix: Update certificate pinning for beacondb.net, openstreetmap.org, & openstreetmaps.org - fixes https://gitlab.com/ironfox-oss/IronFox/-/issues/89
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-03 17:02:30 -04:00
celenity
2d34400fda fix: Ensure we don't pin DNS resolvers (so we can ensure they're always available and prevent issues...)
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-03 16:13:32 -04:00
celenity
b19990d5c7 fix: Update certificate pinning for kernel.org - fixes https://gitlab.com/ironfox-oss/IronFox/-/issues/88
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-03 16:02:46 -04:00
Akash Yadav
b402fc6bdf fix: update VERSION_NAME to v138.0.1
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-02 19:24:23 +05:30
Akash Yadav
6bdff67cd6 fix: remove version code override
Signed-off-by: Akash Yadav <itsaky01@gmail.com>
2025-05-02 15:20:37 +05:30
celenity
fb29eb1f65 feat: Add a subtitle to the settings for Gecko logs , JIT, & Safe Browsing to warn users before restarting the browser
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-01 23:52:15 -04:00
celenity
73de673c97 fix: sanitize-on-exit.patch - fixes https://gitlab.com/ironfox-oss/IronFox/-/issues/85 + fixes https://gitlab.com/ironfox-oss/IronFox/-/issues/86
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-01 17:23:32 -04:00
celenity
268b5c1b91 feat: update to v138.0.1
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-01 12:25:32 -04:00
celenity
c5acf3496c feat: Minor update/re-organization for disable-nimbus.patch & librewolf-rs-blocker.patch
Signed-off-by: celenity <celenity@celenity.dev>
2025-05-01 11:55:05 -04:00
celenity
4980ab4bdd feat: Update disable-telemetry.patch
Signed-off-by: celenity <celenity@celenity.dev>
2025-04-30 04:05:22 -04:00