user.js

commit 74f029566ecbd757abac025e1e7ec45add1ac6d6
parent 571be93ae0eafe65c150be491f369b9adfb167bc
Author: Thorin-Oakenpants <Thorin-Oakenpants@users.noreply.github.com>
Date:   Tue,  4 Dec 2018 10:34:02 +0000

enforce DOMHighResTimeStamp API #491

flipped true in FF54: https://bugzilla.mozilla.org/show_bug.cgi?id=1026804 but unsure when the pref itself was introduced. note: other timing prefs were always in 2400's see 4602: [2411] disable resource/navigation timing / 4603: [2412] disable timing attacks
Diffstat:
M
user.js
 | 
3
+++

1 file changed, 3 insertions(+), 0 deletions(-)
diff --git a/user.js b/user.js
@@ -1208,6 +1208,9 @@ user_pref("dom.IntersectionObserver.enabled", false);
  * [1] https://github.com/tc39/ecmascript_sharedmem/blob/master/TUTORIAL.md
  * [2] https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/ ***/
 user_pref("javascript.options.shared_memory", false);
+/* 2428: enforce DOMHighResTimeStamp API
+ * [WARNING] Required for normalization of timestamps and any timer resolution mitigations ***/
+user_pref("dom.event.highrestimestamp.enabled", true); // default: true
 
 /*** [SECTION 2500]: HARDWARE FINGERPRINTING ***/
 user_pref("_user.js.parrot", "2500 syntax error: the parrot's shuffled off 'is mortal coil!");