From 15a3b6e3d76508ce20c86bd40ac375b51d952462 Mon Sep 17 00:00:00 2001 From: Aminda Suomalainen Date: Thu, 6 Feb 2025 09:06:15 +0200 Subject: [PATCH] firefox: cleanup policy and autoconfig --- conf/firefox-forbidden-policies.js | 78 +++++++++--------- etc/firefox/policies/policies.json | 122 +---------------------------- 2 files changed, 43 insertions(+), 157 deletions(-) diff --git a/conf/firefox-forbidden-policies.js b/conf/firefox-forbidden-policies.js index 15caf3ce..7ec7d699 100644 --- a/conf/firefox-forbidden-policies.js +++ b/conf/firefox-forbidden-policies.js @@ -20,40 +20,40 @@ lockPref("cookiebanners.service.mode.privateBrowsing", 2); // I can set my preferred fonts in an order! :O // but obviously this is forbidden in policies.json! -lockPref("font.default.el", "serif"); -lockPref("font.default.x-cyrillic", "serif"); -//clearPref("font.default.el"); -//clearPref("font.default.x-cyrillic"); +//lockPref("font.default.el", "serif"); +//lockPref("font.default.x-cyrillic", "serif"); +clearPref("font.default.el"); +clearPref("font.default.x-cyrillic"); //lockPref("font.default.x-western", "serif"); -lockPref("font.default.x-western", "sans-serif"); -//clearPref("font.default.x-western"); -lockPref( - "font.name-list.monospace.x-cyrillic", - "Roboto Mono, Noto Sans Mono, monospace", -); -lockPref( - "font.name-list.monospace.x-western", - "Roboto Mono, Noto Sans Mono, monospace", -); -lockPref( - "font.name-list.sans-serif.x-cyrillic", - "Roboto, Noto Sans, sans-serif", -); -lockPref( - "font.name-list.sans-serif.x-western", - "Inclusive Sans, Comic Neue, Roboto, Noto Sans, sans-serif", -); -lockPref( - "font.name-list.serif.x-cyrillic", - "Roboto Serif, Noto Serif, serif", -); -lockPref("font.name-list.serif.x-western", "Roboto Serif, Noto Serif, serif"); -//clearPref("font.name-list.monospace.x-cyrillic"); -//clearPref("font.name-list.monospace.x-western"); -//clearPref("font.name-list.sans-serif.x-cyrillic"); -//clearPref("font.name-list.sans-serif.x-western"); -//clearPref("font.name-list.serif.x-cyrillic"); -//clearPref("font.name-list.serif.x-western"); +//lockPref("font.default.x-western", "sans-serif"); +// clearPref("font.default.x-western"); +// lockPref( +// "font.name-list.monospace.x-cyrillic", +// "Roboto Mono, Noto Sans Mono, monospace", +// ); +// lockPref( +// "font.name-list.monospace.x-western", +// "Roboto Mono, Noto Sans Mono, monospace", +// ); +// lockPref( +// "font.name-list.sans-serif.x-cyrillic", +// "Roboto, Noto Sans, sans-serif", +// ); +// lockPref( +// "font.name-list.sans-serif.x-western", +// "Inclusive Sans, Comic Neue, Roboto, Noto Sans, sans-serif", +// ); +// lockPref( +// "font.name-list.serif.x-cyrillic", +// "Roboto Serif, Noto Serif, serif", +// ); +// lockPref("font.name-list.serif.x-western", "Roboto Serif, Noto Serif, serif"); +clearPref("font.name-list.monospace.x-cyrillic"); +clearPref("font.name-list.monospace.x-western"); +clearPref("font.name-list.sans-serif.x-cyrillic"); +clearPref("font.name-list.sans-serif.x-western"); +clearPref("font.name-list.serif.x-cyrillic"); +clearPref("font.name-list.serif.x-western"); // //lockPref("font.name.monospace.el", "Liberation Mono"); clearPref("font.name.monospace.el"); @@ -76,11 +76,11 @@ clearPref("font.name.serif.x-cyrillic"); //lockPref("font.name.serif.x-western", "Liberation Serif"); clearPref("font.name.serif.x-western"); // Allow these fonts regardless of the fingerprinting resistance -lockPref( - "font.system.whitelist", - "Arimo, Comic Neue, Comic Neue Angular, Comic Neue Angular Light, Comic Neue Angular Light Italic, Comic Neue Light, Cousine, Inclusive Sans, Liberation Mono, Liberation Sans, Liberation Serif, Noto Color Emoji, Noto Emoji, Noto Math, Noto Mono, Noto Sans, Noto Sans CJK JP, Noto Music, Roboto, Roboto Flex, Roboto Mono, Roboto Serif, Tinos, Twemoji Mozilla", -); -//clearPref("font.system.whitelist"); +// lockPref( +// "font.system.whitelist", +// "Arimo, Comic Neue, Comic Neue Angular, Comic Neue Angular Light, Comic Neue Angular Light Italic, Comic Neue Light, Cousine, Inclusive Sans, Liberation Mono, Liberation Sans, Liberation Serif, Noto Color Emoji, Noto Emoji, Noto Math, Noto Mono, Noto Sans, Noto Sans CJK JP, Noto Music, Roboto, Roboto Flex, Roboto Mono, Roboto Serif, Tinos, Twemoji Mozilla", +// ); +clearPref("font.system.whitelist"); // Play animated images only once, accessibility. lockPref("image.animation.mode", "once"); @@ -101,7 +101,7 @@ lockPref("privacy.fingerprintingProtection", true); //lockPref("privacy.fingerprintingProtection", false); pref( "privacy.fingerprintingProtection.overrides", - "+AllTargets,-KeyboardEvents,-SpeechSynthesis,-CSSPrefersColorScheme,-CSSPrefersReducedMotion,-NavigatorUserAgent,-JSDateTimeUTC,-HttpUserAgent", + "+AllTargets,-KeyboardEvents,+SpeechSynthesis,-CSSPrefersColorScheme,-CSSPrefersReducedMotion,-NavigatorUserAgent,-JSDateTimeUTC,-HttpUserAgent", ); //clearPref("privacy.fingerprintingProtection.overrides"); lockPref("privacy.fingerprintingProtection.pbmode", true); diff --git a/etc/firefox/policies/policies.json b/etc/firefox/policies/policies.json index 7ad6c0ba..c568f8af 100644 --- a/etc/firefox/policies/policies.json +++ b/etc/firefox/policies/policies.json @@ -339,7 +339,7 @@ }, "browser.contentblocking.category": { "Comment": "The best option would be strict, but amongst other things that disables system font visibility and may cause accessibility issues for me. There is also other content blocking already such as PrivacyBadger and uBlock Origin.", - "Status": "locked", + "Status": "clear", "Type": "string", "Value": "standard" }, @@ -547,120 +547,6 @@ "Type": "string", "Value": "" }, - "font.default.el": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "serif" - }, - "font.default.x-cyrillic": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "serif" - }, - "font.default.x-western": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "serif" - }, - "font.name-list.monospace.x-cyrillic": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "clear", - "Type": "string", - "Value": "Noto Shanns Mono, monospace" - }, - "font.name-list.monospace.x-western": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "clear", - "Type": "string", - "Value": "Noto Shanns Mono, monospace" - }, - "font.name-list.sans-serif.x-cyrillic": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "clear", - "Type": "string", - "Value": "Noto Sans, sans-serif" - }, - "font.name-list.sans-serif.x-western": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "clear", - "Type": "string", - "Value": "Noto Sans, sans-serif" - }, - "font.name-list.serif.x-cyrillic": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "clear", - "Type": "string", - "Value": "Noto Serif, serif" - }, - "font.name-list.serif.x-western": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "clear", - "Type": "string", - "Value": "Noto Serif, serif" - }, - "font.name.monospace.el": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "Liberation Mono" - }, - "font.name.monospace.x-cyrillic": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "Liberation Mono" - }, - "font.name.monospace.x-western": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "Liberation Mono" - }, - "font.name.sans-serif.el": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "Liberation Sans" - }, - "font.name.sans-serif.x-cyrillic": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "Liberation Sans" - }, - "font.name.sans-serif.x-western": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "Liberation Sans" - }, - "font.name.serif.el": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "Liberation Serif" - }, - "font.name.serif.x-cyrillic": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "Liberation Serif" - }, - "font.name.serif.x-western": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "Liberation Serif" - }, - "font.system.whitelist": { - "Comment": "Preference not allowed for stability reasons.", - "Status": "default", - "Type": "string", - "Value": "Liberation Serif, Tinos, Times New Roman, Liberation Sans, Arimo, Arial, Liberation Mono, Cousine, Courier New, Noto Sans, Noto Serif, Noto Mono, OpenDyslexic, Noto Emoji, Noto Color Emoji, Comic Neue" - }, "general.config.obscure_value": { "Comment": "Required for autoconfig.", "Status": "locked", @@ -691,7 +577,7 @@ "Value": "once" }, "intl.accept_languages": { - "Status": "user", + "Status": "clear", "Type": "string", "Value": "fi-FI, fi, en-FI, en-US, en, ru-RU, ru" }, @@ -868,7 +754,7 @@ "Comment": "Preference not allowed for stability reasons. :( https://searchfox.org/mozilla-central/source/toolkit/components/resistfingerprinting/RFPTargets.inc", "Status": "locked", "Type": "string", - "Value": "+AllTargets,-KeyboardEvents,-SpeechSynthesis,-CSSPrefersColorScheme,-CSSPrefersReducedMotion,-NavigatorUserAgent,-JSDateTimeUTC,-HttpUserAgent" + "Value": "+AllTargets,-KeyboardEvents,+SpeechSynthesis,-CSSPrefersColorScheme,-CSSPrefersReducedMotion,-NavigatorUserAgent,-JSDateTimeUTC,-HttpUserAgent" }, "privacy.fingerprintingProtection.pbmode": { "Comment": "Preference not allowed for stability reasons. :(", @@ -1047,7 +933,7 @@ ], "Default": "Ecosia" }, - "SearchSuggestEnabled": true, + "SearchSuggestEnabled": false, "SecurityDevices": { "Add": { "Fujitsu mPollux DigiSignApplication": "/usr/lib64/libcryptoki.so"