My Firefox Settings - Revision history

Admin: /* Browser UI & Maintenance Tweaks */

2026-05-18T11:09:21Z

Browser UI & Maintenance Tweaks

← Older revision		Revision as of 11:09, 18 May 2026
Line 76:		Line 76:

	'''General'''		'''General'''
	* '''Tabs:''' Enable ''Open links in tabs instead of new windows''. Disable ''Show an image preview when you hover on a tab'' and ''~~Disable~~ link previews''.		* '''Tabs:''' Enable ''Open links in tabs instead of new windows''. Disable ''Show an image preview when you hover on a tab'' and disable ''Enable link previews''.
	* '''Fonts:''' Uncheck ''Allow pages to choose their own fonts, instead of your selections above''.		* '''Fonts:''' Uncheck ''Allow pages to choose their own fonts, instead of your selections above''.
	* '''Language:''' Set to English (US). Enable ''Request English versions of web pages for enhanced privacy''. Disable ''Enable full page translations''.		* '''Language:''' Set to English (US). Enable ''Request English versions of web pages for enhanced privacy''. Disable ''Enable full page translations''.

Admin: /* Core Modifications & Bloatware Removal */

2026-05-18T11:07:45Z

Core Modifications & Bloatware Removal

← Older revision		Revision as of 11:07, 18 May 2026
Line 8:		Line 8:
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	cd /usr/lib/firefox/browser/features		cd /usr/lib/firefox/browser/features
	~~doas~~ rm *.xpi		sudo rm *.xpi
	</syntaxhighlight>		</syntaxhighlight>

Admin: /* Custom GUI Settings */

2026-05-18T11:06:51Z

Custom GUI Settings

← Older revision		Revision as of 11:06, 18 May 2026
Line 76:		Line 76:

	'''General'''		'''General'''
	* '''Tabs:''' Enable ''Open links in tabs instead of new windows''. Disable ''Show an image preview when you hover on a tab'' and ''~~Enable~~ link previews''.		* '''Tabs:''' Enable ''Open links in tabs instead of new windows''. Disable ''Show an image preview when you hover on a tab'' and ''Disable link previews''.
	* '''Fonts:''' Uncheck ''Allow pages to choose their own fonts, instead of your selections above''.		* '''Fonts:''' Uncheck ''Allow pages to choose their own fonts, instead of your selections above''.
	* '''Language:''' Set to English (US). Enable ''Request English versions of web pages for enhanced privacy''. Disable ''Enable full page translations''.		* '''Language:''' Set to English (US). Enable ''Request English versions of web pages for enhanced privacy''. Disable ''Enable full page translations''.

Admin at 11:00, 18 May 2026

2026-05-18T11:00:01Z

← Older revision		Revision as of 11:00, 18 May 2026
Line 39:		Line 39:
	# Find the '''Profile Directory''' row and click the '''Open Directory''' button.		# Find the '''Profile Directory''' row and click the '''Open Directory''' button.
	# Create a new text file in this directory and name it exactly <code>user.js</code>.		# Create a new text file in this directory and name it exactly <code>user.js</code>.
	# Open the file using a text editor ~~(e.g., <code>micro</code> on Arch Linux or <code>vim</code> on OpenBSD)~~.		# Open the file using a text editor.
	# Paste your desired configuration settings from the templates below into the file and save it.		# Paste your desired configuration settings from the templates below into the file and save it.
	# Restart Firefox for the changes to take effect.		# Restart Firefox for the changes to take effect.

Admin at 10:56, 18 May 2026

2026-05-18T10:56:04Z

@@ Line 34: / Line 34: @@
 Instead of manually configuring <code>about:config</code>, you can use pre-configured <code>user.js</code> files.
-TODO: Add information about how to set up user.js here.
+To use a <code>user.js</code> file, you need to place it in your Firefox profile directory. This file is read every time Firefox starts, overriding any matching settings in <code>about:config</code> or <code>prefs.js</code>:
 '''Generators:'''
@@ Line 64: / Line 71: @@
 * '''Block Pop-Ups''': [https://support.mozilla.org/bm/questions/1369602 Mozilla Support thread on native pop-up blocking].
 * '''GeckoView Config''': You can access deeper settings via [chrome://geckoview/content/config.xhtml chrome://geckoview/content/config.xhtml].
-block popups and 3rd party redirect -> true
+=== Custom GUI Settings ===
-warn if websites install extensions -> true
+'''General'''
-data collection -> disallow everything
+'''Home'''
-https only mode -> enable
+'''Search'''
-dns over https -> max protection with a privacy friendly provider
+'''Privacy & Security'''
 == Comprehensive Hardening Guides & Reading ==

Admin at 10:54, 18 May 2026

2026-05-18T10:54:28Z

@@ Line 64: / Line 64: @@
 * '''Block Pop-Ups''': [https://support.mozilla.org/bm/questions/1369602 Mozilla Support thread on native pop-up blocking].
 * '''GeckoView Config''': You can access deeper settings via [chrome://geckoview/content/config.xhtml chrome://geckoview/content/config.xhtml].
-TODO update this part with my settings
+TODO update this part with my settings My settings are
 == Comprehensive Hardening Guides & Reading ==

Admin: /* Privacy, Security & Networking */

2026-05-17T21:04:49Z

Privacy, Security & Networking

← Older revision		Revision as of 21:04, 17 May 2026
Line 23:		Line 23:

	=== Privacy, Security & Networking ===		=== Privacy, Security & Networking ===
	~~; <code>network.http.referrer.spoofSource</code> : Set to <code>true</code>.~~
	; <code>accessibility.blockautorefresh</code> : Set to <code>true</code> to disable forced redirections. Combining this with disabled CSS and JS yields raw, unmangled result links. [https://pedantic.software/fxc/blog/why_there_is_no_css_on_my_website.html (via Pedantic Software)]		; <code>accessibility.blockautorefresh</code> : Set to <code>true</code> to disable forced redirections. Combining this with disabled CSS and JS yields raw, unmangled result links. [https://pedantic.software/fxc/blog/why_there_is_no_css_on_my_website.html (via Pedantic Software)]
	; <code>browser.sessionstore.interval</code> : Set to a very high value to reduce disk writes and SessionStore tracking.		; <code>browser.sessionstore.interval</code> : Set to a very high value to reduce disk writes and SessionStore tracking.
Line 34:		Line 33:

	Instead of manually configuring <code>about:config</code>, you can use pre-configured <code>user.js</code> files.		Instead of manually configuring <code>about:config</code>, you can use pre-configured <code>user.js</code> files.

			TODO: Add information about how to set up user.js here.

	'''Generators:'''		'''Generators:'''
Line 42:		Line 43:
	# [https://github.com/arkenfox/user.js/raw/master/user.js Arkenfox] (Highly recommended, well-known)		# [https://github.com/arkenfox/user.js/raw/master/user.js Arkenfox] (Highly recommended, well-known)
	# [https://raw.githubusercontent.com/pyllyukko/user.js/master/user.js Pyllyukko] (Security focused)		# [https://raw.githubusercontent.com/pyllyukko/user.js/master/user.js Pyllyukko] (Security focused)
	# [https://git.nixnet.services/Narsil/desktop_user.js/raw/branch/master/user.js Narsil's user.js] (Privacy focused)		# [https://git.nixnet.services/Narsil/desktop_user.js/raw/branch/master/user.js Narsil's user.js] (Privacy focused) (I use this one)
	# [https://codeberg.org/polarhive/vulpes Vulpes]		# [https://codeberg.org/polarhive/vulpes Vulpes]
	# [https://git.nixnet.services/Narsil/palemoon_user.js Narsil's user.js for Pale Moon] (Privacy focused)		# [https://git.nixnet.services/Narsil/palemoon_user.js Narsil's user.js for Pale Moon] (Privacy focused)
Line 63:		Line 64:
	* '''Block Pop-Ups''': [https://support.mozilla.org/bm/questions/1369602 Mozilla Support thread on native pop-up blocking].		* '''Block Pop-Ups''': [https://support.mozilla.org/bm/questions/1369602 Mozilla Support thread on native pop-up blocking].
	* '''GeckoView Config''': You can access deeper settings via [chrome://geckoview/content/config.xhtml chrome://geckoview/content/config.xhtml].		* '''GeckoView Config''': You can access deeper settings via [chrome://geckoview/content/config.xhtml chrome://geckoview/content/config.xhtml].
			TODO update this part with my settings

	== Comprehensive Hardening Guides & Reading ==		== Comprehensive Hardening Guides & Reading ==

Admin: /* Privacy, Security & Networking */

2026-05-17T20:55:59Z

Privacy, Security & Networking

← Older revision		Revision as of 20:55, 17 May 2026
Line 24:		Line 24:
	=== Privacy, Security & Networking ===		=== Privacy, Security & Networking ===
	; <code>network.http.referrer.spoofSource</code> : Set to <code>true</code>.		; <code>network.http.referrer.spoofSource</code> : Set to <code>true</code>.
	~~; <code>browser.display.use_document_fonts</code> : Set to <code>0</code> to mitigate font fingerprinting.~~
	; <code>accessibility.blockautorefresh</code> : Set to <code>true</code> to disable forced redirections. Combining this with disabled CSS and JS yields raw, unmangled result links. [https://pedantic.software/fxc/blog/why_there_is_no_css_on_my_website.html (via Pedantic Software)]		; <code>accessibility.blockautorefresh</code> : Set to <code>true</code> to disable forced redirections. Combining this with disabled CSS and JS yields raw, unmangled result links. [https://pedantic.software/fxc/blog/why_there_is_no_css_on_my_website.html (via Pedantic Software)]
	; <code>browser.sessionstore.interval</code> : Set to a very high value to reduce disk writes and SessionStore tracking.		; <code>browser.sessionstore.interval</code> : Set to a very high value to reduce disk writes and SessionStore tracking.

Admin: /* Privacy, Security & Networking */

2026-05-17T20:55:11Z

Privacy, Security & Networking

← Older revision		Revision as of 20:55, 17 May 2026
Line 20:		Line 20:
	* <code>webcompat@mozilla.org.xpi</code> — Web Compatibility Reporter		* <code>webcompat@mozilla.org.xpi</code> — Web Compatibility Reporter

	== Configuration Tweaks (about:config) ==		== Configuration Tweaks (about:config) (if user.js does not cover them) ==

	=== Privacy, Security & Networking ===		=== Privacy, Security & Networking ===
	~~; <code>security.tls.version.min</code> : Set to <code>3</code> to enforce strict TLS standards.~~
	; <code>network.http.referrer.spoofSource</code> : Set to <code>true</code>.		; <code>network.http.referrer.spoofSource</code> : Set to <code>true</code>.
	; <code>browser.display.use_document_fonts</code> : Set to <code>0</code> to mitigate font fingerprinting.		; <code>browser.display.use_document_fonts</code> : Set to <code>0</code> to mitigate font fingerprinting.
	~~; <code>browser.urlbar.maxRichResults</code> : Set to <code>0</code> (or desired low number) to limit URL bar suggestions.~~
	; <code>accessibility.blockautorefresh</code> : Set to <code>true</code> to disable forced redirections. Combining this with disabled CSS and JS yields raw, unmangled result links. [https://pedantic.software/fxc/blog/why_there_is_no_css_on_my_website.html (via Pedantic Software)]		; <code>accessibility.blockautorefresh</code> : Set to <code>true</code> to disable forced redirections. Combining this with disabled CSS and JS yields raw, unmangled result links. [https://pedantic.software/fxc/blog/why_there_is_no_css_on_my_website.html (via Pedantic Software)]
	; <code>browser.sessionstore.interval</code> : Set to a very high value to reduce disk writes and SessionStore tracking.		; <code>browser.sessionstore.interval</code> : Set to a very high value to reduce disk writes and SessionStore tracking.

Admin: /* Configuration Tweaks (about:config) */

2026-05-17T20:52:57Z

Configuration Tweaks (about:config)

← Older revision		Revision as of 20:52, 17 May 2026
Line 23:		Line 23:

	=== Privacy, Security & Networking ===		=== Privacy, Security & Networking ===
	; <code>network.trr.mode</code> : Set to <code>3</code> to force DNS over HTTPS (DoH) every time you make a DNS request, even if your DNS server doesn't respond. (Alternatively, change the "DNS protection" preference in Settings).
	; <code>security.tls.version.min</code> : Set to <code>3</code> to enforce strict TLS standards.		; <code>security.tls.version.min</code> : Set to <code>3</code> to enforce strict TLS standards.
	; <code>network.http.referrer.spoofSource</code> : Set to <code>true</code>.		; <code>network.http.referrer.spoofSource</code> : Set to <code>true</code>.
Line 30:		Line 29:
	; <code>accessibility.blockautorefresh</code> : Set to <code>true</code> to disable forced redirections. Combining this with disabled CSS and JS yields raw, unmangled result links. [https://pedantic.software/fxc/blog/why_there_is_no_css_on_my_website.html (via Pedantic Software)]		; <code>accessibility.blockautorefresh</code> : Set to <code>true</code> to disable forced redirections. Combining this with disabled CSS and JS yields raw, unmangled result links. [https://pedantic.software/fxc/blog/why_there_is_no_css_on_my_website.html (via Pedantic Software)]
	; <code>browser.sessionstore.interval</code> : Set to a very high value to reduce disk writes and SessionStore tracking.		; <code>browser.sessionstore.interval</code> : Set to a very high value to reduce disk writes and SessionStore tracking.

	~~=== Media & Autoplay Limitations ===~~
	~~To disable autoplay and drastically reduce background video caching, apply the following:~~
	* <code>media.autoplay.enabled</code> = <code>false</code>
	* <code>media.cache_readahead_limit</code> = <code>0</code>
	* <code>media.cache_resume_threshold</code> = <code>10</code>
	* <code>media.autoplay.blocking_policy</code> = <code>1</code>
	* <code>media.autoplay.allow-muted</code> = <code>false</code>

	=== Additional Hardening Actions ===		=== Additional Hardening Actions ===