From b951c222db268efe16760dfe2f8c853a3700bb57 Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Mon, 17 Dec 2018 16:20:35 +0000 Subject: [PATCH] 0900s: add some default tags, #585 - although we *may* remove some of these prefs (but I doubt it, but persuade me in the open issue). - I also don't want to pollute the js with tags on every fucking line. You started adding these for your diffs, right?. I'm not sure exactly how adding them to some prefs but not others helps you? - that said, it is a nice way to show that we're *enforcing* something and does help end users, as well as the shiny overdactyl project --- user.js | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/user.js b/user.js index a454252..36130b8 100644 --- a/user.js +++ b/user.js @@ -634,17 +634,17 @@ user_pref("signon.autofillForms", false); user_pref("signon.storeWhenAutocompleteOff", true); // [DEFAULT: true] /* 0907: display warnings for logins on non-secure (non HTTPS) pages * [1] https://bugzilla.mozilla.org/1217156 ***/ -user_pref("security.insecure_password.ui.enabled", true); +user_pref("security.insecure_password.ui.enabled", true); // [DEFAULT: true] /* 0908: remove user & password info when attempting to fix an entered URL (i.e. 0802 is true) * e.g. //user:password@foo -> //user@(prefix)foo(suffix) NOT //user:password@(prefix)foo(suffix) ***/ -user_pref("browser.fixup.hide_user_pass", true); +user_pref("browser.fixup.hide_user_pass", true); // [DEFAULT: true] /* 0909: disable formless login capture for Password Manager [FF51+] ***/ user_pref("signon.formlessCapture.enabled", false); /* 0910: disable autofilling saved passwords on HTTP pages and show warning [FF52+] * [1] https://www.fxsitecompat.com/en-CA/docs/2017/insecure-login-forms-now-disable-autofill-show-warning-beneath-input-control/ * [2] https://bugzilla.mozilla.org/buglist.cgi?bug_id=1217152,1319119 ***/ -user_pref("signon.autofillForms.http", false); -user_pref("security.insecure_field_warning.contextual.enabled", true); +user_pref("signon.autofillForms.http", false); // [DEFAULT: false] +user_pref("security.insecure_field_warning.contextual.enabled", true); // [DEFAULT: true] /* 0912: limit (or disable) HTTP authentication credentials dialogs triggered by sub-resources [FF41+] * hardens against potential credentials phishing * 0=don't allow sub-resources to open HTTP authentication credentials dialogs