From c8626d05093b7aae5de714154a87d6840aa0baa8 Mon Sep 17 00:00:00 2001 From: laniakea64 Date: Thu, 12 Dec 2019 09:45:55 -0500 Subject: [PATCH] Expose a couple useful hidden prefs in about:config by default --- modules/libpref/init/all.js | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/modules/libpref/init/all.js b/modules/libpref/init/all.js index 24e956c6ab594..67b1d0c8e1fd3 100644 --- a/modules/libpref/init/all.js +++ b/modules/libpref/init/all.js @@ -1401,6 +1401,13 @@ pref("privacy.firstparty.isolate", false); // (top level URLs) can access resources through window.opener. // This pref is effective only when "privacy.firstparty.isolate" is true. pref("privacy.firstparty.isolate.restrict_opener_access", true); +// Whether to block postMessage across different first party domains when the targetOrigin is '*'. +// This pref is effective only when "privacy.firstparty.isolate" is true. +pref("privacy.firstparty.isolate.block_post_message", false); + +// If true, DISABLES navigator.mozAddonManager entirely +sticky_pref("privacy.resistFingerprinting.block_mozAddonManager", true); + // We automatically decline canvas permission requests if they are not initiated // from user input. Just in case that breaks something, we allow the user to revert // this behavior with this obscure pref. We do not intend to support this long term.