From 85fbbde60df384c8d02cabf7d578fc3743327e67 Mon Sep 17 00:00:00 2001
From: earthlng <earthlng@users.noreply.github.com>
Date: Fri, 3 Mar 2017 12:48:16 +0100
Subject: [PATCH] network.cookie.leave-secure-alone

---
 user.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/user.js b/user.js
index 68a5be3..b07da82 100644
--- a/user.js
+++ b/user.js
@@ -1274,6 +1274,9 @@ user_pref("dom.storageManager.enabled", false);
  * https://bugzilla.mozilla.org/show_bug.cgi?id=1213990 ***/
 user_pref("extensions.webextensions.keepStorageOnUninstall", false);
 user_pref("extensions.webextensions.keepUuidOnUninstall", false);
+/* 2708: prevent HTTP sites from setting cookies with the "secure" directive (default: true)
+ * https://developer.mozilla.org/en-US/Firefox/Releases/52#HTTP ***/
+user_pref("network.cookie.leave-secure-alone", true);
 
 /*** 2800: SHUTDOWN [SETUP] ***/
 user_pref("ghacks_user.js.parrot", "2800 syntax error: the parrot's bleedin' demised!");