user.js

Unnamed repository; edit this file 'description' to name the repository.
Log | Files | Refs | README

commit ca11a88189d3d055862618b93a44324803967721
parent a290b3ad3d48c1e16952174be8a28b885760e5bd
Author: Thorin-Oakenpants <Thorin-Oakenpants@users.noreply.github.com>
Date:   Tue,  6 Feb 2018 23:50:30 +0000

minor edits
Diffstat:
Muser.js | 6+++---
1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/user.js b/user.js @@ -844,9 +844,9 @@ user_pref("gfx.font_rendering.graphite.enabled", false); // user_pref("font.system.whitelist", ""); // (hidden pref) /*** 1600: HEADERS / REFERERS - Only *cross domain* referers need controlling and XOriginPolicy (1603) is perfect for that. - Thus we enforce the default values for 1601, 1602, 1605 and 1606 to minimize breakage, - and only tweak 1603 (+1604). + Only *cross domain* referers need controlling and XOriginPolicy (1603) is perfect for that. Thus we enforce + the default values for 1601, 1602, 1605 and 1606 to minimize breakage, and only tweak 1603 and 1604. + Our default settings provide the best balance between protection and amount of breakage. To harden it a bit more you can set XOriginPolicy (1603) to 2 (+ optionally 1604 to 1 or 2). To fix broken sites, temporarily set XOriginPolicy=0 and XOriginTrimmingPolicy=2 in about:config,