firefox policies: also keep sidebery installed

Although not really used in this repo

.pre-commit-config.yaml

@@ -58,6 +58,12 @@ repos:
           [--autofix, --no-ensure-ascii]
         #- id: requirements-txt-fixer
 
+  # Synchronize dependencies between this file and package managers
+  - repo: https://github.com/pre-commit/sync-pre-commit-deps
+    rev: v0.0.1
+    hooks:
+      - id: sync-pre-commit-deps
+
   # Checks the ci: section on top of the file
   - repo: https://github.com/pre-commit-ci/pre-commit-ci-config
     rev: v1.6.1

conf/librewolf.overrides.cfg

@@ -8,15 +8,9 @@
 // and finally becoming Firefox autoconfig file copied from
 // https://codeberg.org/librewolf/settings/src/branch/master/librewolf.cfg
 
-// -----
-// I often need to refer to these options which aren't yet remembered by heart
-
-// Note to self on disabling protection of Mozilla pages. This may be a
-// LibreWolf default so thus commented:
 // via https://www.ghacks.net/2017/10/27/how-to-enable-firefox-webextensions-on-mozilla-websites/
 pref("extensions.webextensions.restrictedDomains", "");
-pref("privacy.resistFingerprinting.block_mozAddonManage", true);
-
+//pref("privacy.resistFingerprinting.block_mozAddonManage", true);
 // Block cookie banners. Warning: may result to auto-accepting cookies.
 // https://www.ghacks.net/2022/12/24/configure-firefox-to-reject-cookie-banners-automatically/
 pref("cookiebanners.service.mode", 2);
@@ -26,32 +20,40 @@ pref("cookiebanners.bannerClicking.enabled", true);
 // https://globalprivacycontrol.org/ the successor of DNT
 pref("privacy.globalprivacycontrol.enabled", true);
 pref("privacy.globalprivacycontrol.functionality.enabled", true);
-// and DNT itself
 pref("privacy.donottrackheader.enabled", true);
 pref("privacy.donottrackheader.value", 1);
 
-// -----
-
-// I would like to use this, but forced light mode is a dealbreaker
-// (floaters), UTC makes Mobilizon difficult, Privacy Badger blocks 3rd party
-// canvas and I want to appear as a Finnish Linux user rather than English
-// Windows NT one (telemetry, voting vs spying).
-defaultPref("privacy.resistFingerprinting", true);
-// Or I could excempt things from it? Other than it not overriding timezone
-defaultPref("privacy.resistFingerprinting.testGranularityMask", 4);
-defaultPref(
-	"privacy.resistFingerprinting.exemptedDomains",
-	"jarkkaa.fi,*.element.io,*.google.com,*.pikaviestin.fi,*.envs.net,*.wikimedia.org,*.wikipedia.org,duckduckgo.com,*.duckduckgo.com,*.blesmrt.net,*.piraatit.fi,*.piraattipuolue.fi,*.apple.com,*.op.fi,*.s-pankki.fi,*.revolut.com,*.n26.com,fedoraproject.org,*.fedoraproject.org,music.youtube.com"
-);
-
+// Conflicts with fingerprintingProtection
+pref("privacy.resistFingerprinting", false);
+pref("privacy.resistFingerprinting.pbmode", false);
 // Enable letterboxing
 pref("privacy.resistFingerprinting.letterboxing", true);
-
 // Timezone spoofing. I cannot handle it with many pages.
-pref("privacy.resistFingerprinting.spoofTimezone", false);
+//pref("privacy.resistFingerprinting.spoofTimezone", false);
+
+// Fingerprinting protection and what to not protect. Via https://superuser.com/questions/1610744/how-do-i-get-around-resistfingerprinting-setting-my-preferred-firefox-theme-to-l/1815927#1815927
+pref("privacy.fingerprintingProtection", true);
+pref("privacy.fingerprintingProtection.pbmode", true);
+// Use all protections, except make compromises for accessibility and
+// usability. https://searchfox.org/mozilla-central/source/toolkit/components/resistfingerprinting/RFPTargets.inc
+pref("privacy.fingerprintingProtection.overrides", "+AllTargets,-KeyboardEvents,-SpeechSynthesis,-CSSPrefersColorScheme,-CSSPrefersReducedMotion,-JSDateTimeUTC");
+
+// :( but fingerprintability
+pref("javascript.use_us_english_locale", true);
+//pref("intl.accept_languages", "en-US, en");
+// Then again I already lost the fingerprintability game
+pref("intl.accept_languages", "fi, en");
+
+// No JavaScript allowed in internal pdf viewer
+pref("pdfjs.enableScripting", false);
+
+// Dark mode
+pref("ui.systemUsesDarkTheme", 1);
+pref("prefers-color-scheme", "dark");
+pref("pdfjs.viewerCssTheme", 2);
 
 // Enable Firefox accounts
-defaultPref("identity.fxaccounts.enabled", true);
+pref("identity.fxaccounts.enabled", true);
 
 // Settings on what to clear on quit
 // - Goal: let Element Web & co stay logged in
@@ -93,10 +95,7 @@ pref("network.trr.disable-ECS", false);
 pref("network.dns.echconfig.enabled", true);
 pref("network.dns.use_https_rr_as_altsvc", true);
 pref("network.trr.exclude-etc-hosts", false);
-pref(
-	"network.trr.excluded-domains",
-	"http.badssl.com,norwegianwifi.com,mywifiext.net,tplinkrepeater.net,router.asus.com",
-);
+pref("network.trr.excluded-domains", "http.badssl.com,norwegianwifi.com,mywifiext.net,tplinkrepeater.net,router.asus.com",);
 
 // Default UI scale
 pref("layout.css.devPixelsPerPx", "1.5");
@@ -206,20 +205,11 @@ pref("permissions.manager.defaultsUrl", ""); // revoke special permissions for s
 
 // Aminda stripped safebrowsing here as even in LibreWolf filtering DNS is used + the extensions.
 
-pref("pdfjs.enableScripting", false); // disable js scripting in the built-in pdf reader
-
 pref("geo.provider.network.url", "https://location.services.mozilla.com/v1/geolocate?key=%MOZILLA_API_KEY%");
 // Although I doubt they will improve accuracy, why not?
 pref("geo.provider.use_gpsd", true); // [LINUX]
 pref("geo.provider.use_geoclue", true); // [LINUX]
 
-// Aminda: :(
-/** [SECTION] LANGUAGE
- * show language as en-US for all users, regardless of their OS language and browser language.
- * both prefs must use pref() and not defaultPref to work.
- */
-pref("javascript.use_us_english_locale", true);
-pref("intl.accept_languages", "en-US, en");
 // disable region specific updates from mozilla
 pref("browser.region.network.url", "");
 pref("browser.region.update.enabled", false);

etc/firefox/policies/policies.json

@@ -40,7 +40,7 @@
       },
       "{3c078156-979c-498b-8990-85f7987dd929}": {
         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/sidebery/latest.xpi",
-        "installation_mode": "normal_installed"
+        "installation_mode": "force_installed"
       },
       "{446900e4-71c2-419f-a6a7-df9c091e268b}": {
         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi",