Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
Firefox: new revision
put location bar prefs together
change 'browser.fixup.alternate.enabled'
back to defaultPref and remove duplicated entry
  • Loading branch information
david committed Nov 29, 2022
1 parent 6b1f624 commit cd6ef01
Showing 1 changed file with 5 additions and 13 deletions.
18 changes: 5 additions & 13 deletions firefox.be0
Expand Up @@ -2,7 +2,7 @@

#export BEE_TMP_TMPDIR=/dev/shm BEE_TMP_BUILDROOT=/dev/shm/bee-root BEE_MAKEFLAGS='-j80'

# BEE_VERSION firefox-107.0-1
# BEE_VERSION firefox-107.0-2

#https://ftp.mozilla.org/pub/firefox/releases/$pkgversion/SOURCE to find the right download link
#SRCURL[0]="https://ftp.mozilla.org/pub/firefox/releases/${PKGVERSION}/source/firefox-${PKGVERSION}.source.tar.xz"
Expand Down Expand Up @@ -249,17 +249,6 @@ lockPref("browser.send_pings.require_same_host", true);
* [3] https://en.wikipedia.org/wiki/GIO_(software) ***/
pref("network.gio.supported-protocols", ""); // [HIDDEN PREF]

//disable location bar using search - PRIVACY
defaultPref("keyword.enabled", false);
/* 0802: disable location bar domain guessing
* domain guessing intercepts DNS "hostname not found errors" and resends a
* request (e.g. by adding www or .com). This is inconsistent use (e.g. FQDNs), does not work
* via Proxy Servers (different error), is a flawed use of DNS (TLDs: why treat .com
* as the 411 for DNS errors?), privacy issues (why connect to sites you didn't
* intend to), can leak sensitive data (e.g. query strings: e.g. Princeton attack),
* and is a security risk (e.g. common typos & malicious sites set up to exploit this) ***/
pref("browser.fixup.alternate.enabled", false);

/* 0806: disable location bar leaking single words to a DNS provider **after searching** [FF78+]
* 0=never resolve single words, 1=heuristic (default), 2=always resolve
* [1] https://bugzilla.mozilla.org/1642623 ***/
Expand All @@ -271,8 +260,11 @@ pref("browser.urlbar.dnsResolveSingleWordsAfterSearch", 0);
pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false); // [FF95+]
pref("browser.urlbar.suggest.quicksuggest.sponsored", false);

//disable location bar using search - PRIVACY
defaultPref("keyword.enabled", false);

//disable location bar domain guessing - PRIVACY/SECURITY
pref("browser.fixup.alternate.enabled", false);
defaultPref("browser.fixup.alternate.enabled", false);

//display all parts of the url in the location bar - helps SECURITY
lockPref("browser.urlbar.trimURLs", false);
Expand Down

0 comments on commit cd6ef01

Please sign in to comment.