about summary refs log tree commit diff
path: root/pkgs
diff options
context:
space:
mode:
authoraszlig <aszlig@nix.build>2023-07-19 10:31:09 +0200
committeraszlig <aszlig@nix.build>2023-07-19 10:31:09 +0200
commit23ab331d5f702290e38361221d24ef76e7021335 (patch)
tree16a00be4a1320b567bfe6f7dea36825804733e27 /pkgs
parentdedbc0ea74ed700abc2406df3d4046cd431cd47c (diff)
firefox: Add a few more prefs from Betterfox
I roughly went through the preferences set by Betterfox[1] and checked
whether they'd make sense for my Firefox version.

While most of these options are pretty straightforward, the captive and
connectivity services are features for convenience, eg. when travelling.

However, since the only thing they do is giving UI hints that otherwise
can be found out via a quick detour to the shell or visiting a random
"http://" URL I don't think the convenience outweights repeatedly
pinging detectportal.firefox.com.

[1]: https://github.com/yokoffing/Betterfox

Signed-off-by: aszlig <aszlig@nix.build>
Diffstat (limited to 'pkgs')
-rw-r--r--pkgs/aszlig/firefox/default.nix14
1 files changed, 14 insertions, 0 deletions
diff --git a/pkgs/aszlig/firefox/default.nix b/pkgs/aszlig/firefox/default.nix
index 3ae44e4a..05e0a095 100644
--- a/pkgs/aszlig/firefox/default.nix
+++ b/pkgs/aszlig/firefox/default.nix
@@ -65,14 +65,28 @@ in wrapFirefox firefoxNoSigning {
     lockPref('browser.newtab.privateAllowed', false);
     lockPref('browser.newtabpage.enabled', false);
     lockPref('browser.rights.3.shown', true);
+    lockPref('browser.safebrowsing.downloads.remote.enabled', false);
     lockPref('browser.safebrowsing.malware.enabled', false);
     lockPref('browser.safebrowsing.phishing.enabled', false);
     lockPref('browser.shell.checkDefaultBrowser', false);
     lockPref('devtools.theme', 'dark');
+    lockPref('extensions.getAddons.cache.enabled', false);
+    lockPref('extensions.blocklist.enabled', false);
     lockPref('extensions.webextensions.restrictedDomains', "");
+    lockPref('network.captive-portal-service.enabled', false);
+    lockPref('network.connectivity-service.enabled', false);
     lockPref('privacy.donottrackheader.enabled', true);
     lockPref('privacy.query_stripping.enabled', true);
     lockPref('privacy.query_stripping.enabled.pbmode', true);
+    lockPref('privacy.query_stripping.strip_list', '${toString [
+      # Stolen from <https://github.com/yokoffing/Betterfox>:
+      "__hsfp" "__hssc" "__hstc" "__s" "_hsenc" "_openstat" "dclid" "fbclid"
+      "gbraid" "gclid" "hsCtaTracking" "igshid" "mc_eid" "ml_subscriber"
+      "ml_subscriber_hash" "msclkid" "oft_c" "oft_ck" "oft_d" "oft_id"
+      "oft_ids" "oft_k" "oft_lk" "oft_sk" "oly_anon_id" "oly_enc_id"
+      "rb_clickid" "s_cid" "twclid" "vero_conv" "vero_id" "wbraid" "wickedid"
+      "yclid"
+    ]}');
     lockPref('privacy.trackingprotection.enabled', true);
     lockPref('privacy.trackingprotection.socialtracking.enabled', true);
     lockPref('reader.color_scheme', 'dark');