diff options
| -rw-r--r-- | README.md | 8 | ||||
| -rw-r--r-- | docs/Addons.md | 60 | ||||
| -rw-r--r-- | docs/DRM.md | 12 | ||||
| -rw-r--r-- | docs/Extensions Firewall.md | 31 | ||||
| -rw-r--r-- | docs/Pocket.md | 1 | ||||
| -rw-r--r-- | docs/README.md | 74 | ||||
| -rw-r--r-- | docs/Settings.md | 86 | ||||
| -rw-r--r-- | docs/Testing.md | 26 | ||||
| -rw-r--r-- | docs/Tor.md | 15 |
9 files changed, 3 insertions, 310 deletions
@@ -3,16 +3,14 @@ # LibreWolf: Browse With Freedom [](https://gitlab.com/librewolf-community/librewolf/releases) [](https://LibreWolf-Community.gitlab.io) -[](https://librewolf.readthedocs.io) [](https://gitter.im/librewolf-community/librewolf) [](https://gitlab.com/librewolf-community/librewolf/commits/master) [](https://gitlab.com/librewolf-community/librewolf/pipelines) -[](https://librewolf.readthedocs.io/en/latest/) This project is an independent fork of Firefox, with the primary goals of privacy security and user freedom. It is the community run successor to [LibreFox](https://github.com/intika/Librefox) -## [Documentation](https://librewolf.readthedocs.io) +## [Documentation](https://librewolf-community.gitlab.io/docs) -https://librewolf.readthedocs.io +https://librewolf-community.gitlab.io/docs -The docs are built from the `docs` folder of this repository. +The docs are built from the [`content/docs`](https://gitlab.com/librewolf-community/librewolf-community.gitlab.io/tree/master/content/docs) folder of [the librewolf-community.gitlab.io repo](https://gitlab.com/librewolf-community/librewolf-community.gitlab.io). diff --git a/docs/Addons.md b/docs/Addons.md deleted file mode 100644 index a41f58f..0000000 --- a/docs/Addons.md +++ /dev/null @@ -1,60 +0,0 @@ -## Addons - -- [Addons](#addons) - - [Recommended Addons](#recommended-addons) - - [Recommended Addons Settings](#recommended-addons-settings) - - [Reviewing Extensions Code](#reviewing-extensions-code) - - [Other Addons](#other-addons) - - [Privacy addons](#privacy-addons) - - [Other useful addons](#other-useful-addons) - -### Recommended Addons - -Recommended addons are not bundled and need to be installed manually - -- [Cookie Master](https://addons.mozilla.org/en-US/firefox/addon/cookiemaster/): Block all cookies and only allow authorized sites -- [First Party Isolation](https://addons.mozilla.org/en-US/firefox/addon/first-party-isolation/): Enable/Disable FPI with the click of a button -- [User Agent Platform Spoofer](https://addons.mozilla.org/en-US/firefox/addon/user-agent-platform-spoofer/): Spoof a different UserAgent OS Linux/Windows/Mac -- [Browser Plugs Privacy Firewall](https://addons.mozilla.org/en-US/firefox/addon/browser-plugs-privacy-firewall/): Sets of settings to prevent fingerprinting and security issues -- [uBlock Origin](https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/) [+ IDCAC List](https://www.i-dont-care-about-cookies.eu/) [+ Nano-Defender List](https://jspenguin2017.github.io/uBlockProtector/#extra-installation-steps-for-ublock-origin): Block web advertisement and tracking - -### Recommended Addons Settings - -- `uBlock Origin`: Additional filters are availables here: https://filterlists.com/ (don't surcharge it to avoid performance loss) -- `Browser Plugs Privacy Firewall`: Keep settings light to make `privacy.resistFingerprinting` efficient because too much customization will lead to uniqueness and therefore easy fingerprinting. - -``` - - Privacy / Fingerprint / Fake values for getClientRects - - Privacy / Fingerprint / Randomize Canvas Fingerprint - - Privacy / Fingerprint / 100% Randomize ALL Fingerprint Hash - - Firewall / Experimental / Block SVG getBBox and getComputedTextLength - - Privacy / Font / Randomize - - Privacy / Font / Enable protection for font and glyph fingerprinting -``` - -### Other Addons - -#### Privacy addons - -- [NoHTTP](https://addons.mozilla.org/en-US/firefox/addon/nohttp): Block http traffic and/or redirect it to https (Excellent replacement for the unrecommended https-everywhere) -- [Google-Container](https://addons.mozilla.org/en-US/firefox/addon/google-container/): Open all Google sites in a container -- [Facebook-Container](https://addons.mozilla.org/en-US/firefox/addon/facebook-container/): Open all Facebook sites in a container -- [Request-Blocker](https://addons.mozilla.org/en-US/firefox/addon/request-blocker-we/): Hosts style blocking sites -- [Decentraleyes](https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/): Makes a lot of web resources available locally to improve privacy -- [Dont-Track-Me-Google](https://addons.mozilla.org/en-US/firefox/addon/dont-track-me-google1/): Cleaning Google search result links -- [Canvas-Blocker](https://addons.mozilla.org/en-US/firefox/addon/canvasblocker/): Prevent some fingerprinting techniques (This should not be used with browser plugins addon as it provide similar features) -- [Cookie-Quick-Manager](https://addons.mozilla.org/en-US/firefox/addon/cookie-quick-manager/): View and edit cookies -- [Mozilla-Multi-Account-Containers](https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/): Manage containers and assign sites to specific container -- [Switch-Containers](https://addons.mozilla.org/en-US/firefox/addon/switch-container/): Switching container for the current tab easily -- [Temporary-Containers](https://addons.mozilla.org/en-US/firefox/addon/temporary-containers/): Maximizing and automating container potential -- [Smart-Referer](https://addons.mozilla.org/en-US/firefox/addon/smart-referer/): Manage referer with a button (Send referers only when staying on the same domain.) - -#### Other useful addons - -- [Dormancy](https://addons.mozilla.org/en-US/firefox/addon/dormancy/): Unload tab after a certain time, useful for performance when opening a lot of tabs -- [Add Custom Search Engine](https://addons.mozilla.org/en-US/firefox/addon/add-custom-search-engine/): Customize your search engine -- [ProxySwitcheroo](https://addons.mozilla.org/en-US/firefox/addon/proxyswitcheroo/): Apply proxy settings in a click -- [UndoCloseTabButton](https://addons.mozilla.org/en-US/firefox/addon/undoclosetabbutton/): Reopen last closed tab -- [Advanced Github Notifier](https://addons.mozilla.org/en-US/firefox/addon/advanced-github-notifier/): Github notifications -- [Shortkeys](https://addons.mozilla.org/en-US/firefox/addon/shortkeys/): Add custom shortkeys -- [Tabboo](https://addons.mozilla.org/en-US/firefox/addon/tabboo-session-manager/): Session manager diff --git a/docs/DRM.md b/docs/DRM.md deleted file mode 100644 index 660033c..0000000 --- a/docs/DRM.md +++ /dev/null @@ -1,12 +0,0 @@ -## DRM Compatibility - -Digital rights management (DRM) is enforced off by default (this is needed for Netflix and similar); you can enable it with the following instructions: - -- Open `librewolf.cfg` -- Under the section `Section: User Settings` -- Comment the active lines with `// ` under the subsection `User Settings: DRM/CDM - Main` -- Comment the active lines with `// ` under the subsection `User Settings: DRM/CDM - Widevine` -- Restart Firefox then open `about:preferences` and enable `Play DRM...` under general section -- Firefox will download Widevine and enable it (under `about:addons` plugins section) you can force the download by clicking `Check for updates` under the tools button - - diff --git a/docs/Extensions Firewall.md b/docs/Extensions Firewall.md deleted file mode 100644 index 86fe5ea..0000000 --- a/docs/Extensions Firewall.md +++ /dev/null @@ -1,31 +0,0 @@ -## Extensions Firewall - -### Description - -*This is a test experiment feature and it is disabled by default.* - -A new section `Extensions Manager` is added to manage addons globally (and addons networking in the subsection `Extensions Firewalling`). Firewalling the network for addons is doable, but it requires a considerable amount of additional work in LibreWolf to make it usable through a button or in a per addon basis (this may or may not be added in a future version, it also could be abandoned as it is a test feature). Currently you can block a list of domains or block the whole network for all the extensions. - -### The Settings - -Available native network restriction settings for addons: - -- Restricted domains list: `extensions.webextensions.restrictedDomains` this is a list of restricted domains that will be used to block some hosts for all the extensions, Firefox uses this setting to block extensions from accessing mozilla's domains/sites, by default in LibreWolf this setting is set to allow extensions to access all the web (You can edit that list to match your needs or to block a specific domain, note that the domain name has to be 'exact' (for instance facebook.com will only block facebook.com not mobile.facebook.com) -- Content security policy: `extensions.webextensions.base-content-security-policy` and `extensions.webextensions.default-content-security-policy` the later settings can be redefined/changed within an extension so it's not efficient for a firewall purpose. CSP settings are used in Firefox as an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for everything from data theft to site defacement to distribution of malware; In short: CSP settings block and allow certain domains under certain circumstances and thus could be used to firewall the extensions ([CSP Documentations](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP), its [sources code](https://code.compassfoundation.io/general/mozilla-central/commit/623a4f866576815dfcbab26323d13b7144806bdf?view=inline&w=1) and [implementation](https://github.com/mozilla/gecko/blob/central/toolkit/components/extensions/ExtensionPolicyService.cpp)) - -### Blocking A Domain - -Edit the restricted domains setting as follow under the `about:config` page: - -- Restricted Domains Setting: `extensions.webextensions.restrictedDomains` Value: `ExactDomains1,ExactDomains2,ExactDomains3` etc. - -### Blocking The Network - -To enable the feature and block the network for all the extensions open `librewolf.cfg` search for `Enable-Firewall-Feature-In-The-Next-Line` and remove the `//` in the next line. - -Note that this will block the network access for all the extensions and a lot of extensions needs to be connected in order to work. In the current version of LibreWolf you can block the network for all the extensions or allow it for all of them, a future version may provide additional features like "per addon" setting (By default LibreWolf allows networking for extensions). - -### More Infos - -Check `debug-notes.log` for additional info about future version and researches about the subject. Also check [CSP Documentations](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP), its [sources code](https://code.compassfoundation.io/general/mozilla-central/commit/623a4f866576815dfcbab26323d13b7144806bdf?view=inline&w=1) and [implementation](https://github.com/mozilla/gecko/blob/central/toolkit/components/extensions/ExtensionPolicyService.cpp). - diff --git a/docs/Pocket.md b/docs/Pocket.md deleted file mode 100644 index 098fa6c..0000000 --- a/docs/Pocket.md +++ /dev/null @@ -1 +0,0 @@ -Pocket has been removed from librewolf's compilation as it available already as an addon here: https://inmypocketaddon.com/ diff --git a/docs/README.md b/docs/README.md deleted file mode 100644 index 7225b62..0000000 --- a/docs/README.md +++ /dev/null @@ -1,74 +0,0 @@ - - -# LibreWolf: Browse With Freedom -[](https://gitlab.com/librewolf-community/librewolf/releases) -[](https://LibreWolf-Community.gitlab.io) -[](https://librewolf.readthedocs.io) -[](https://gitter.im/librewolf-community/librewolf) -[](https://gitlab.com/librewolf-community/librewolf/commits/master) -[](https://gitlab.com/librewolf-community/librewolf/pipelines) -[](https://librewolf.readthedocs.io/en/latest/) - -This project is an independent fork of Firefox, with the primary goals of privacy security and user freedom. It is the community run successor to [LibreFox](https://github.com/intika/Librefox) - -LibreWolf uses more than 500 privacy/security/performance settings, patches, LibreWolf-Addons (optional) and is designed to minimize data collection and telemetry as much as possible (updater, crashreporter and Firefox's integrated addons that don't respect privacy are removed). - -**LibreWolf is NOT associated with Mozilla or its products.** - - -## Features -- Latest Version of Firefox: LibreWolf is compiled directly from the latest build of Firefox Stable. You will have the the latest features, and security updates. -- Completely Independent Build: LibreWolf uses a completely independent build from Firefox and has its own settings, profile folder and installation path. As a result, it can be installed alongside Firefox or any other browser. -- Extensions firewall: limit internet access for extensions. -- IJWY (I Just Want You To Shut Up): embedded server links and other calling home functions are removed. In other words, zero unauthorized or background connections by default. -- User settings updates: gHacks/pyllyukko base is kept up to date. -- Settings protection: important settings are enforced/locked within `librewolf.cfg` and `policies.json`, those settings cannot be changed by addons/updates/LibreWolf itself or unwanted/accidental manipulation; To change those settings you can easily do it by editing `librewolf.cfg` and `policies.json`. -- LibreWolf-addons: set of optional LibreWolf extensions -- Statistics disabled: telemetry and similar functions are disabled -- Tested settings: settings are performance aware -- Multi-platform (Windows/Linux/Mac/and soon Android) -- Dark theme (classic and advanced) -- Recommended and *code reviewed* addons list -- Community-Driven -- And much more... - - -## Download and Installation - -### Linux - -#### Manual Compilation -- Build instruction will be updated soon - -#### AppImage -LibreWolf is available in an AppImage Format. Check out the [releases page](https://gitlab.com/librewolf-community/librewolf/-/releases) for downloads. - -#### Binary Tarball -LibreWolf is available as a binary tarball. Check out the [releases page](https://gitlab.com/librewolf-community/librewolf/-/releases) for downloads. - - -#### Arch -LibreWolf is available on the AUR in both [source code](https://aur.archlinux.org/packages/librewolf/) and [binary](https://aur.archlinux.org/packages/librewolf-bin) format. - -### Windows -Build instruction will be updated soon - -### Mac -Build instruction will be updated soon - -## Roadmap -See https://gitlab.com/librewolf-community/librewolf/issues - - -## About -* **License:** [Mozilla Public License 2.0](https://gitlab.com/librewolf-community/librewolf/blob/master/LICENSE) -* **Inspired from:** [ungoogled-chromium](https://github.com/Eloston/ungoogled-chromium) -* **Based on:** [Librefox](https://github.com/intika/Librefox), whose development seems to have halted. -* **Acknowledgement**, special thanks to: - * @intika for putting Librefox together - * The Mozilla team for their amazing work on Firefox - * The gHacks-User team for allowing the usage of their work - * All the stargazers (users that are encouraging this project by starring it) - * Icons were created with images by [OpenClipart-Vectors](https://pixabay.com/users/OpenClipart-Vectors-30363) from [Pixabay](https://pixabay.com) and from <a href="https://www.flaticon.com/authors/vaadin" title="Vaadin">Vaadin</a> on <a href="https://www.flaticon.com/" title="Flaticon">www.flaticon.com</a> is licensed by <a href="http://creativecommons.org/licenses/by/3.0/" title="Creative Commons BY 3.0" target="_blank">CC 3.0 BY</a> - - diff --git a/docs/Settings.md b/docs/Settings.md deleted file mode 100644 index da5d163..0000000 --- a/docs/Settings.md +++ /dev/null @@ -1,86 +0,0 @@ -## Documentation - -`librewolf.cfg`: Locking and defaulting LibreWolf settings for security, privacy and performance. - -`Policies.json`: Policies for enterprise environments (the settings available with `policies.json` are limited right now because this is a new feature of Firefox). - -`Bench diff`: Impact on the performance of LibreWolf, it can be a gain or a loss of performance +100/5000 stand for 2% gained performance and -1500/5000 stand for -30% performance loss. - -`lockPref`: Locked preference can not be changed by extensions or updates, they can only be changed in `librewolf.cfg`. - -`Defaulting VS Enforcing`: Defaulted settings can be changed by the user or an extension if permitted within the browser while enforced settings are locked and can not be changed within the browser, enforced settings can be changed in `librewolf.cfg`. - -`About:config`: http://kb.mozillazine.org/About:config_entries. - - -## Settings Index - -`librewolf.cfg`: - -| Section | Bench Diff | -|---------|------------| -| User settings | +0 / 5000 | -| Defaulting Settings | +0 / 5000 | -||| -| Controversial | +0 / 5000 | -| Firefox Fingerprint | +0 / 5000 | -| Locale/Time | +0 / 5000 | -| Ghacks-user Selection | +100 / 5000 | -| Extensions Manager | +0 / 5000 | -| IJWY To Shut Up | +0 / 5000 | -| Microsoft Windows | +0 / 5000 | -| Firefox ESR60.x | +0 / 5000 | -| -| Security 1/3 | +0 / 5000 | -| Security 2/3 | +0 / 5000 | -| Security 3/3 (Cipher) | +0 / 5000 | -||| -| Performance 1/5 | +650 / 5000 | -| Performance 2/5 | -800 / 5000 | -| Performance 3/5 | -1720 / 5000 | -| Performance 4/5 | -200 / 5000 | -| Performance 5/5 | -50 / 5000 | -||| -| General Settings 1/3 | +100 / 5000 | -| General Settings 2/3 | +0 / 5000 | -| General Settings 3/3 | -40 / 5000 | -||| -| Disabled - ON/OFF | +0 / 5000 | -| Disabled - Deprecated Active | +0 / 5000 | -| Disabled - Deprecated Inactive | +0 / 5000 | - -`local-settings.js`: - -| Section | Bench Diff | -|---------|------------| -| General settings | ++ / 5000 | - -## IJWY (I Just Want You To Shut Up) - -This is a set of settings that aim to remove all the server links embedded in Firefox and other calling home functions in the purpose of blocking un-needed connections. The objective is zero unauthorized connection (ping/telemetry/Mozilla/Google...). - -## Edit Locked Settings - -Just edit `librewolf.cfg`, save and restart LibreWolf. - - -## Cookies Settings - -Using different web services without cookies is impossible and cookie settings in a browser are very important when it come to privacy, in LibreWolf the settings are locked to avoid unwanted changes in such an important setting, but they can be easily changed in `librewolf.cfg` under `User Settings: Cookies settings`. - -## Tracking Protection - -Firefox now integrates a tracking protection feature (based on disconnect.me) it's a small content blocking list, the listing can not be edited, this feature is disabled in LibreWolf. It's recommended to use uBlock Origin instead. This feature is disabled: - -- Until it evolves and integrates at least list editing. -- Because double filtering (this + ublock) is not suitable for performance. - -You can however easily enable this feature in `librewolf.cfg` under `User Settings: Track Protection` (just comment active lines with `//` or remove the entire section). - -## Comparing Changes And Updates - -If you want to compare changes over updates or if you already have a `user.js`/`librewolf.cfg`/`policies.json`. consider using [Compare-UserJS](https://github.com/claustromaniac/Compare-UserJS), it's an amazing tool to compare user.js files and output the diffs in detailed breakdown, developed by gHack's very own resident cat, [claustromaniac](https://github.com/claustromaniac) :cat: - -Usage: If not on windows install [PowerShell](https://github.com/PowerShell/PowerShell) then (for example) `pwsh Compare-UserJS.ps1 librewolf.cfg user.js` (Warning that PowerShell connects to Microsoft sometimes). - - diff --git a/docs/Testing.md b/docs/Testing.md deleted file mode 100644 index e7d8fdd..0000000 --- a/docs/Testing.md +++ /dev/null @@ -1,26 +0,0 @@ -## Browser Tests - -### Security/Fingerprint - -Firefox 60 and `privacy.resistFingerprinting` are relatively new, please give it some time to be more widely used and thus less finger-printable; If you are using a different site to analyze your browser make sure to read and understand what the test is about. - -- [SSLLabs](https://www.ssllabs.com/ssltest/viewMyClient.html) -- [AmiUnique](https://amiunique.org/fp) -- [BrowserLeaks](https://browserleaks.com/) -- [BrowserPlugs](https://www.browserplugs.com/fingerprint-test/index.html) -- [FingerPrintJS2](https://valve.github.io/fingerprintjs2/) -- [Third-Party-Cookies](https://alanhogan.github.io/web-experiments/3rd/third-party-cookies.html) -- [Testing-Notifications](https://www.bennish.net/web-notifications.html) -- [Browser-Storage-Abuser](https://demo.agektmr.com/storage/) -- [Service-Workers-Push-Test](https://gauntface.github.io/simple-push-demo/) - -### Performances - -Performance tests can be done here [LVP Octane](https://intika.github.io/lvp-octane/), it needs to be launched alone with other applications closed and with no other activity but the benchmark, also it's recommended to launch it many times and then calculate the average. - -### DNS/VPN/Proxy Leak - -- [IPLeak](https://ipleak.net/) -- [Tenta-Test](https://tenta.com/test/) -- [IP-Browserleaks](https://browserleaks.com/ip) - diff --git a/docs/Tor.md b/docs/Tor.md deleted file mode 100644 index b0ece14..0000000 --- a/docs/Tor.md +++ /dev/null @@ -1,15 +0,0 @@ -#### NOTE: It is not recommended to use Tor with current builds of librewolf - -### LibreWolf Addons For ESR And Tor - -- [LibreWolf HTTP Watcher ESR - Tor MoD](https://addons.mozilla.org/en-US/firefox/addon/LibreWolf-http-watcher-tor-mod/): Change the url bar color on http and onion sites (to green/red) -- [LibreWolf NoHTTP - Tor MoD](https://addons.mozilla.org/en-US/firefox/addon/nohttp-LibreWolf-mod-for-tor/): Block http traffic and/or redirect it to https (Excellent replacement for the unrecommended https-everywhere) - -## Tor Compatibility - -We do not recommend connecting over Tor on LibreWolf classic version (because of the missing LibreWolf-Tor-Addons, they are only included in the tor version for obvious reasons), use instead LibreWolf-Tor version if your threat model calls for it, or for accessing hidden services (Thus said tor settings have been enabled since v2 on all LibreWolf versions for user toriffying/proxifying their entire connection). - -Currently LibreWolf-TBB is in beta test, Tor compatibility may change. - - - |