2025.01.12.1
-
Disabled JIT within Firefox's main process -
javascript.options.main_process_disable_jit
->true
-
Disabled the JIT Baseline Interpreter -
javascript.options.blinterp
->false
-
Disabled marking JIT code pages as both writable and exeuctable -
javascript.options.content_process_write_protect_code
->true
-
Enabled
fdlibm
forMath.sin
,Math.cos
, andMath.tan
, as it is less fingerprintable -javascript.options.use_fdlibm_for_sin_cos_tan
->true
-
Disabled Preconnect -
network.preconnect
->false
-
Disabled Early Hints -
network.early-hints.enabled
&network.early-hints.preconnect.enabled
->false
-
Explicitly disabled AI/"ML Autofill" by default -
extensions.formautofill.ml.experiment.enabled
->false
-
Fully disabled the use of SharedArrayBuffer using window.postMessage, regardless of context -
dom.postMessage.sharedArrayBuffer.bypassCOOP_COEP.insecure.enabled
&dom.postMessage.sharedArrayBuffer.withCOOP_COEP
->false
-
Enforced various important security preferences - See https://codeberg.org/celenity/Phoenix/commit/df260a8161046f333ac49bb7544336fcdfd4bd24 & https://codeberg.org/celenity/Phoenix/commit/24c193f0d0310e19f05b89a0e43cb4b71a62b5ed for details...
-
Desktop: Enforced applying Content Security Policy (CSP) to the internal
browser.xhtml
-security.browser_xhtml_csp.enabled
->true
-
Desktop: Locked
general.config.obscure_value
to prevent severe breakage... -general.config.obscure_value
->0
-
Minor tweaks/fixes & re-organization
Codeberg: See here for more details.
GitHub: See here for more details.
:)