"ProviderURL_outside_europe_aminda_comment":"Swap to https://unfiltered.adguard-dns.com/dns-query if device is expected to cross continents from Europe?",
"ProviderURL_with_ECS_comment":"If changing this to something with non-private ECS, remember to disable ECS in preferences of TRR!"
},
"DisableEncryptedClientHello":false,
"DisableFirefoxAccounts":false,
"DisableFirefoxScreenshots":false,
"DisableFirefoxStudies":true,
"DisableForgetButton":false,
"DisablePocket":true,
"DisableSecurityBypass":{
"InvalidCertificate":true,
"SafeBrowsing":false
},
"DisplayBookmarksToolbar":"never",
"DontCheckDefaultBrowser":true,
"EnableTrackingProtection":{
"Comment":"Managing tracking protection is left for the user unless there is a heavy reason to do otherwise.",
"comment":"While this won't sync and requires manually enabling the other one when the policy is missing, it's less confusing for the automatic configuration not existing. Additionally I have some suspicion towards Mozilla Anonym.",
"Comment":"Preference not allowed for stability reasons. :(",
"Status":"locked",
"Type":"boolean",
"Value":true
},
"autoadmin.refresh_interval":{
"Comment":"Preference not allowed for stability reasons. :(",
"Status":"locked",
"Type":"number",
"Value":120
},
"browser.aboutConfig.showWarning":{
"Status":"default",
"Type":"boolean",
"Value":false
},
"browser.cache.disk.enable":{
"Status":"user",
"Type":"boolean",
"Value":false
},
"browser.cache.memory.enable":{
"Status":"user",
"Type":"boolean",
"Value":true
},
"browser.contentblocking.category":{
"Comment":"The best option would be strict, but amongst other things that disables system font visibility and may cause accessibility issues for me. There is also other content blocking already such as PrivacyBadger and uBlock Origin.",
"Comment":"This means the same, but without personalization.",
"Status":"locked",
"Type":"boolean",
"Value":false
},
"extensions.webextensions.restrictedDomains":{
"Comment":"Don't protect Mozilla domains from privacy extensions. Always reset it to modified/empty so I can access the original value if I ever need it.",
"Status":"user",
"Type":"string",
"Value":""
},
"font.default.el":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"serif"
},
"font.default.x-cyrillic":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"serif"
},
"font.default.x-western":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"serif"
},
"font.name-list.monospace.x-cyrillic":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"clear",
"Type":"string",
"Value":"Noto Shanns Mono, monospace"
},
"font.name-list.monospace.x-western":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"clear",
"Type":"string",
"Value":"Noto Shanns Mono, monospace"
},
"font.name-list.sans-serif.x-cyrillic":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"clear",
"Type":"string",
"Value":"Noto Sans, sans-serif"
},
"font.name-list.sans-serif.x-western":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"clear",
"Type":"string",
"Value":"Noto Sans, sans-serif"
},
"font.name-list.serif.x-cyrillic":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"clear",
"Type":"string",
"Value":"Noto Serif, serif"
},
"font.name-list.serif.x-western":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"clear",
"Type":"string",
"Value":"Noto Serif, serif"
},
"font.name.monospace.el":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"Liberation Mono"
},
"font.name.monospace.x-cyrillic":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"Liberation Mono"
},
"font.name.monospace.x-western":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"Liberation Mono"
},
"font.name.sans-serif.el":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"Liberation Sans"
},
"font.name.sans-serif.x-cyrillic":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"Liberation Sans"
},
"font.name.sans-serif.x-western":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"Liberation Sans"
},
"font.name.serif.el":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"Liberation Serif"
},
"font.name.serif.x-cyrillic":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"Liberation Serif"
},
"font.name.serif.x-western":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"Liberation Serif"
},
"font.system.whitelist":{
"Comment":"Preference not allowed for stability reasons.",
"Status":"default",
"Type":"string",
"Value":"Liberation Serif, Tinos, Times New Roman, Liberation Sans, Arimo, Arial, Liberation Mono, Cousine, Courier New, Noto Sans, Noto Serif, Noto Mono, OpenDyslexic, Noto Emoji, Noto Color Emoji, Comic Neue"
},
"general.config.obscure_value":{
"Comment":"Required for autoconfig.",
"Status":"locked",
"Type":"number",
"Value":0
},
"geo.provider.network.url":{
"Comment":"See geoclue below.",
"Comment_beacondb":"Firefox only sends connected AP that won't work due to _nomap and the server side requires more than one as well. beacondb/beacondb#8",
"Comment":"Dark theme by default, disabling allowed",
"Status":"clear",
"Type":"number",
"Value":0
},
"media.autoplay.default":{
"Comment":"Not even autoplaying silently?",
"Status":"default",
"Type":"number",
"Value":5
},
"network.IDN_show_punycode":{
"Comment":"Protection against identically looking unicode domain names",
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.dns.echconfig.enabled":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.dns.http3_echconfig.enabled":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.dns.native_https_query":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.dns.native_https_query_in_automation":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.dns.native_https_query_win10":{
"Comment":"This is here just as a reminder that it exists. I don't have a Windows 10 and it will likely switch to true when it exists.",
"Status":"clear"
},
"network.dns.preferIPv6":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.dns.use_https_rr_as_altsvc":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.http.referer.XOriginTrimmingPolicy":{
"Status":"clear"
},
"network.http.referer.defaultPolicy":{
"Status":"clear"
},
"network.http.speculative-parallel-limit":{
"Status":"clear"
},
"network.predictor.enable-prefetch":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.predictor.enabled":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.prefetch-next":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.trr.disable-ECS":{
"Status":"locked",
"Type":"boolean",
"Value":false
},
"network.trr.display_fallback_warning":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.trr.early-AAAA":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"network.trr.exclude-etc-hosts":{
"Status":"locked",
"Type":"boolean",
"Value":false
},
"network.trr.useGET":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"pdfjs.enableScripting":{
"Comment":"I don't see a good reason for allowing scripts in pdf files in a web browser.",
"Status":"locked",
"Type":"boolean",
"Value":false
},
"pdfjs.forcePageColors":{
"Status":"default",
"Type":"boolean",
"Value":true
},
"pdfjs.isEvalSupported":{
"Comment":"CVE-2024-4367 and hardening. I don't think pdf files should be that clever.",
"Status":"locked",
"Type":"boolean",
"Value":false
},
"pdfjs.pageColorsBackground":{
"Status":"default",
"Type":"string",
"Value":"#000000"
},
"pdfjs.pageColorsForeground":{
"Status":"default",
"Type":"string",
"Value":"#ffb700"
},
"privacy.donottrackheader.enabled":{
"Comment":"Preference not allowed for stability reasons. :(",
"Status":"locked",
"Type":"boolean",
"Value":true
},
"privacy.donottrackheader.value":{
"Comment":"Preference not allowed for stability reasons. :(",
"Status":"locked",
"Type":"number",
"Value":1
},
"privacy.fingerprintingProtection":{
"Comment":"Preference not allowed for stability reasons. :(",
"Status":"locked",
"Type":"boolean",
"Value":true
},
"privacy.fingerprintingProtection.overrides":{
"Comment":"Preference not allowed for stability reasons. :( https://searchfox.org/mozilla-central/source/toolkit/components/resistfingerprinting/RFPTargets.inc",
"Comment":"Preference not allowed for security reasons. :(",
"Status":"locked",
"Type":"boolean",
"Value":true
},
"security.ssl.enable_ocsp_stapling":{
"Status":"locked",
"Type":"boolean",
"Value":true
},
"security.tls.ech.grease_http3":{
"Comment":"Seems to be required for http3. This defaults to true on Nightly 128 and false on 115.11.0esr. However again not allowed to be deployed here for security :()",
"Status":"locked",
"Type":"boolean",
"Value":true
},
"sidebar.revamp":{
"Comment":"Preference not allowed for stability reasons.",
