User.js: changelog: v65-beta

[earthlng]

• date: 8-February-2019
• foreword: These are all the changes since the last changelog (v64-beta).
• note: the comments in the code blocks below are for this changelog's commentary

FF65 Release notes
FF65 for developers
FF65 compatibility
FF65 security advisories

---

changelog: [[all changes](https://github.com/ghacksuserjs/ghacks-user.js/compare/e60abd6...5c703f0)]

• all user.js updates for Firefox v65 are detailed in the ToDo: diffs FF64-FF65 issue
  
  
  
  • includes links to the commits made for each pref, links to bugzilla tickets, our discussions etc.
  
  
• for all the rest see the full list of pref changes below

---

all pref changes:

• new active prefs:

user_pref("browser.discovery.enabled", false);
user_pref("browser.newtabpage.activity-stream.asrouter.providers.snippets", "");
user_pref("dom.targetBlankNoOpener.enabled", true);
user_pref("geo.provider.ms-windows-location", false);
user_pref("geo.provider.use_corelocation", false);
user_pref("geo.provider.use_gpsd", false);
user_pref("network.auth.subresource-http-auth-allow", 1);
user_pref("network.connectivity-service.enabled", false);
user_pref("network.http.spdy.websockets", false);
user_pref("toolkit.coverage.endpoint.base", "");
user_pref("toolkit.telemetry.coverage.opt-out", true);

• new in 65beta but commented out by default:

//user_pref("dom.storage_access.enabled", false);

• activated previously commented-out prefs:

user_pref("extensions.systemAddon.update.enabled", false);
user_pref("extensions.systemAddon.update.url", "");

• changed values:

//user_pref("network.cookie.lifetimePolicy", 2); // 64beta: 0

• commented out:

//user_pref("browser.urlbar.autoFill", false);
//user_pref("browser.urlbar.oneOffSearches", false);
//user_pref("browser.urlbar.suggest.bookmark", false);
//user_pref("browser.urlbar.suggest.history", false);
//user_pref("browser.urlbar.suggest.openpage", false);
//user_pref("extensions.getAddons.cache.enabled", false);

• removed from the user.js:

user_pref("browser.contentblocking.enabled", true); // also removed from Firefox
user_pref("browser.urlbar.maxHistoricalSearchSuggestions", 0);

• moved to 4600: RFP ALTERNATIVES:

user_pref("dom.w3c_pointer_events.enabled", false);

• moved to 9999: DEPRECATED / REMOVED:

user_pref("browser.fixup.hide_user_pass", true); // now hardcoded to true in Firefox
user_pref("browser.urlbar.autocomplete.enabled", false);

---

Any and all help, suggestions, recommendations, links, tips and tricks, questions, thank you's or what have you are welcome - signup/login and start typing - thanks

[Thorin-Oakenpants]

Thanks Big E

[KOLANICH]

Remove Shadow DOM and Custom Elements prefs

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash.

Extremily smart :(

[grauenwolfe]

Absolutely love this. Thank you.

[crssi]

Sorry for spam and OT, but THANK YOU for all your hard work @Thorin-Oakenpants and @earthlng.

I :heart: you guys.

Cheers