user.js

commit 3d5276484a5a278b9881867852c9ce67be7e1494
parent 542b81481472ba778af463d5ea46ff1cf225fcb2
Author: earthlng <earthlng@users.noreply.github.com>
Date:   Mon, 19 Feb 2018 11:40:53 +0100

0370 fixup

data: works perfectly fine here. No need to use https and no need to connect to localhost because something could be listening there.
data is the fastest and best solution.
Diffstat:
M
user.js
 | 
3
+--

1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/user.js b/user.js
@@ -205,9 +205,8 @@ user_pref("browser.newtabpage.enabled", false);
 user_pref("browser.newtabpage.enhanced", false);
 user_pref("browser.newtabpage.introShown", true);
 /* 0370: disable "Snippets" (Mozilla content shown on about:home screen)
- * MUST use HTTPS - arbitrary content injected into this page via http opens up MiTM attacks
  * [1] https://wiki.mozilla.org/Firefox/Projects/Firefox_Start/Snippet_Service ***/
-user_pref("browser.aboutHomeSnippets.updateUrl", "https://127.0.0.1");
+user_pref("browser.aboutHomeSnippets.updateUrl", "data:,");
 
 /*** 0400: BLOCKLISTS / SAFE BROWSING / TRACKING PROTECTION
      This section has security & tracking protection implications vs privacy concerns vs effectiveness