summaryrefslogtreecommitdiff
path: root/data/settings.js
diff options
context:
space:
mode:
authorRuben Rodriguez <ruben@gnu.org>2019-05-10 19:07:01 -0400
committerRuben Rodriguez <ruben@gnu.org>2019-05-10 19:07:01 -0400
commit33c8ab4188e24f5097d63874c2ffc1b333e80374 (patch)
tree35a3cb8ee9b712ee65a3452cba60cab32f37fb4f /data/settings.js
parent1c06105ba01eb0a9c01b842b89afc091ad31b1b2 (diff)
settings.js: enabled privacy.firstparty.isolate, network.http.referer.spoofSource, disabled network.http.originextension
Diffstat (limited to 'data/settings.js')
-rw-r--r--data/settings.js7
1 files changed, 6 insertions, 1 deletions
diff --git a/data/settings.js b/data/settings.js
index 4c1d91d..d3753ac 100644
--- a/data/settings.js
+++ b/data/settings.js
@@ -36,6 +36,9 @@ pref("nglayout.initialpaint.delay", 0);
// Disable third party cookies
pref("network.cookie.cookieBehavior", 1);
+//privacy.firstparty.isolate
+pref("privacy.firstparty.isolate", true);
+
// Extensions cannot be updated without permission
pref("extensions.update.enabled", false);
// Use LANG environment variable to choose locale
@@ -119,7 +122,9 @@ pref("datareporting.policy.dataSubmissionEnabled", false);
pref("datareporting.healthreport.service.enabled", false);
pref("browser.slowStartup.notificationDisabled", true);
pref("network.http.sendRefererHeader", 2);
-pref("network.http.referer.spoofSource", false);
+pref("network.http.referer.spoofSource", true);
+// We don't want to send the Origin header
+pref("network.http.originextension", false);
//http://grack.com/blog/2010/01/06/3rd-party-cookies-dom-storage-and-privacy/
//pref("dom.storage.enabled", false);
pref("dom.event.clipboardevents.enabled",false);