| ... |
... |
@@ -60,6 +60,11 @@ pref("browser.download.useDownloadDir", false); |
|
60
|
60
|
pref("browser.download.always_ask_before_handling_new_types", true);
|
|
61
|
61
|
pref("browser.download.manager.addToRecentDocs", false);
|
|
62
|
62
|
pref("browser.download.start_downloads_in_tmp_dir", true);
|
|
|
63
|
+// tor-browser#42147: Always delete temporary files, also on macOS (this pref is
|
|
|
64
|
+// already true for other platforms).
|
|
|
65
|
+// Also, this always happens in PBM. If not in PBM, requires
|
|
|
66
|
+// browser.download.start_downloads_in_tmp_dir to be true too.
|
|
|
67
|
+pref("browser.helperApps.deleteTempFileOnExit", true);
|
|
63
|
68
|
|
|
64
|
69
|
// Prevent download stuffing / DOS (tor-browser#41764)
|
|
65
|
70
|
pref("browser.download.enable_spam_prevention", true);
|
| ... |
... |
@@ -74,7 +79,7 @@ pref("signon.autofillForms", false); |
|
74
|
79
|
pref("browser.sessionstore.privacy_level", 2);
|
|
75
|
80
|
// Use the in-memory media cache and increase its maximum size (#29120)
|
|
76
|
81
|
pref("browser.privatebrowsing.forceMediaMemoryCache", true);
|
|
77
|
|
-pref("media.memory_cache_max_size", 16384);
|
|
|
82
|
+pref("media.memory_cache_max_size", 65536);
|
|
78
|
83
|
// Disable restore in case of crash (tor-browser#41503)
|
|
79
|
84
|
// This should not be needed in PBM, but we added it anyway like other options.
|
|
80
|
85
|
pref("browser.sessionstore.resume_from_crash", false);
|
| ... |
... |
@@ -182,6 +187,8 @@ pref("default-browser-agent.enabled", false); |
|
182
|
187
|
#endif
|
|
183
|
188
|
// Disable sync by default
|
|
184
|
189
|
pref("identity.fxaccounts.enabled", false);
|
|
|
190
|
+// Blank the sync URL as a defense in depth (added with tor-browser#41496)
|
|
|
191
|
+pref("identity.sync.tokenserver.uri", "");
|
|
185
|
192
|
// Never sync with other browsers
|
|
186
|
193
|
pref("services.sync.engine.addons", false);
|
|
187
|
194
|
pref("services.sync.engine.addresses", false);
|
| ... |
... |
@@ -374,6 +381,9 @@ pref("dom.textMetrics.fontBoundingBox.enabled", false); |
|
374
|
381
|
pref("pdfjs.enableScripting", false);
|
|
375
|
382
|
// Bug 40057: Ensure system colors are not used for CSS4 colors
|
|
376
|
383
|
pref("browser.display.use_system_colors", false);
|
|
|
384
|
+// Enforce non-native widget theme (true by default, defense in depth).
|
|
|
385
|
+// Provides a uniform look and feel across platforms. Added with tor-browser#41496.
|
|
|
386
|
+pref("widget.non-native-theme.enabled", true);
|
|
377
|
387
|
|
|
378
|
388
|
// tor-browser#41943: lock and revisit after it gets flipped to true in stable Firefox
|
|
379
|
389
|
pref("_javascript_.options.spectre.disable_for_isolated_content", false, locked);
|
| ... |
... |
@@ -519,6 +529,12 @@ pref("network.process.enabled", false); |
|
519
|
529
|
|
|
520
|
530
|
// Extension support
|
|
521
|
531
|
pref("extensions.autoDisableScopes", 0);
|
|
|
532
|
+// Only load extensions from the application and user profile.
|
|
|
533
|
+// Do not load from the user directory (AddonManager.SCOPE_USER=2, which is
|
|
|
534
|
+// shared between profiles, e.g., %appdata%\Mozilla\Extensions\ on Windows, or
|
|
|
535
|
+// ~/.mozilla/extensions on Linux for Firefox), and do not load from system
|
|
|
536
|
+// directories/the Windows registry (AddonManager.SCOPE_SYSTEM=8).
|
|
|
537
|
+// More information: https://archive.ph/DYjAM
|
|
522
|
538
|
pref("extensions.enabledScopes", 5); // AddonManager.SCOPE_PROFILE=1 | AddonManager.SCOPE_APPLICATION=4
|
|
523
|
539
|
// We don't know what extensions Mozilla is advertising to our users and we
|
|
524
|
540
|
// don't want to have some random Google Analytics script running either on the
|