Home

Awesome

<p align="center"> <a href="https://github.com/intika/Librefox/"><img width="727" src="https://img.shields.io/badge/Librefox-Browser-lightgray.svg?logo=appveyor&longCache=true&style=popout"></a> </p> <p align="center"> <a href="https://www.opendesktop.org/p/1275853/" target="_blank"><img src="https://img.shields.io/badge/Download-%20Librefox-green.svg"></a> <a href="https://github.com/intika/Librefox/releases"><img src="https://img.shields.io/badge/Version-2.1--64.0-green.svg"></a> <a href="https://github.com/intika/Librefox/commits/master"><img src="https://img.shields.io/badge/Maintained-Yes-green.svg"></a> <a href="https://github.com/intika/Librefox/pulls"><img src="https://img.shields.io/badge/PR-9-green.svg"></a> <a href="https://github.com/intika/Librefox/issues?q=is%3Aissue+is%3Aclosed"><img src="https://img.shields.io/badge/Solved%20Issues-49-green.svg"></a> <a href="https://www.mozilla.org/en-US/MPL/2.0/" target="_blank"><img src="https://img.shields.io/badge/License-Mozilla--MLP2-blue.svg"></a> <a href="https://www.mozilla.org/en-US/MPL/" target="_blank"><img src="https://badges.frapsoft.com/os/v2/open-source.png?v=103"></a> </p>

Librefox: Browse With Freedom Tweet

This project aims at enforcing privacy and security of Firefox without forking the project.

Librefox uses more than 500 privacy/security/performance settings, patches, Librefox-Addons (optional) and a cleaned bundle of Firefox (updater, crashreporter and Firefox's integrated addons that don't respect privacy are removed).

Librefox is NOT associated with Mozilla or its products.

Features

Index

<pre> <a href="#features" >> Librefox: Features ............................................................... </a> <a href="#download" >> Librefox: Download ............................................................... </a> <a href="#capture" >> Librefox: Capture ................................................................ </a> <a href="#librefox-addons" >> Addons: Librefox Addons .......................................................... </a> <a href="#recommended-addons" >> Addons: Recommended Addons ....................................................... </a> <a href="#recommended-addons-settings" >> Addons: Recommended Addons Settings .............................................. </a> <a href="#reviewing-extensions-code" >> Addons: Reviewing Addons Source Code ............................................. </a> <a href="#other-addons" >> Addons: Other Useful Addons Listing .............................................. </a> <a href="#installation-instructions" >> Wiki: Installation Instructions .................................................. </a> <a href="#extensions-firewall" >> Wiki: Extensions Network Firewall ................................................ </a> <a href="#ijwy-i-just-want-you-to-shut-up" >> Wiki: IJWY (I Just Want You To Shut Up) .......................................... </a> <a href="#edit-locked-settings" >> Wiki: Edit Locked Settings ....................................................... </a> <a href="#settings-index" >> Wiki: Settings Index ............................................................. </a> <a href="#cookies-settings" >> Wiki: Cookies Settings ........................................................... </a> <a href="#tracking-protection" >> Wiki: Tracking Protection ........................................................ </a> <a href="#comparing-changes-and-updates" >> Wiki: Comparing Changes And Updates .............................................. </a> <a href="#documentation" >> Wiki: Documentation .............................................................. </a> <a href="#librefox-dark-theme" >> Wiki: Librefox Dark Theme ........................................................ </a> <a href="#tuning-librefox" >> Wiki: Tuning Librefox ............................................................ </a> <a href="#librefox-esr" >> Wiki: Librefox ESR ............................................................... </a> <a href="#tor-compatibility" >> Wiki: Tor Compatibility .......................................................... </a> <a href="#drm-compatibility" >> Wiki: DRM Compatibility .......................................................... </a> <a href="#building-and-packaging" >> Wiki: Building And Packaging ..................................................... </a> <a href="#browser-tests---securityfingerprint" >> Browser Tests: Security/Fingerprint .............................................. </a> <a href="#browser-tests---performances" >> Browser Tests: Performance ....................................................... </a> <a href="#browser-tests---dnsvpnproxy-leak" >> Browser Tests: DNS/VPN/Proxy Leak ................................................ </a> <a href="#librefox-roadmap" >> Infos: Librefox Roadmap .......................................................... </a> <a href="#changelog" >> Infos: Changelog ................................................................. </a> <a href="#about" >> Infos: About ..................................................................... </a> </pre>

Download

Important notice: this is a temporary version, awaiting a correct build of the project, Librefox is distributed as a configuration files for Firefox. To apply Librefox configuration to Firefox extract the compressed file to Firefox's installation directory (detailed installation instructions). Future Librefox version will have its own trademark and therefore solve this issue.

Linux

Windows

Mac

Capture

<p align="center"> <img width="650" src="https://raw.githubusercontent.com/intika/Librefox/master/capture.png"> </p>

Librefox Addons

Librefox addons are not bundled and need to be installed manually

Recommended Addons

Recommended addons are not bundled and need to be installed manually

Recommended Addons Settings

uBlock Origin: Additional filters are availables here: https://filterlists.com/ (don't surcharge it to avoid performance loss)

Browser Plugs Privacy Firewall: Keep settings light to make privacy.resistFingerprinting efficient because too much customization will lead to uniqueness and therefore easy fingerprinting.

  - Privacy / Fingerprint / Fake values for getClientRects
  - Privacy / Fingerprint / Randomize Canvas Fingerprint
  - Privacy / Fingerprint / 100% Randomize ALL Fingerprint Hash
  - Firewall / Experimental / Block SVG getBBox and getComputedTextLength
  - Privacy / Font / Randomize
  - Privacy / Font / Enable protection for font and glyph fingerprinting

Reviewing Extensions Code

Recommended extensions code have been reviewed for potential unwanted behaviour... reviewed version are available under extensions directory.

Extensions Firewall

Extensions Firewall - Description

This is a test experiment feature and it is disabled by default !!! A new section Extensions Manager is added to manage addons globally (and addons networking in the subsection Extensions Firewalling). Firewalling the network for addons is doable, but it requires a considerable amount of additional work in Librefox to make it usable through a button or in a per addon basis (this may or may not be added in a future version, it also could be abandoned as it is a test feature). Currently you can block a list of domains or block the whole network for all the extensions.

Extensions Firewall - The Settings

Available native network restriction settings for addons:

Extensions Firewall - Blocking A Domain

Edit the restricted domains setting as follow under the about:config page:

Extensions Firewall - Blocking The Network

To enable the feature and block the network for all the extensions open mozilla.cfg search for Enable-Firewall-Feature-In-The-Next-Line and remove the // in the next line.

Note that this will block the network access for all the extensions and a lot of extensions needs to be connected in order to work. In the current version of Librefox you can block the network for all the extensions or allow it for all of them, a future version may provide additional features like "per addon" setting (By default Librefox allows networking for extensions).

Extensions Firewall - More Infos

Check debug-notes.log for additional info about future version and researches about the subject. Also check CSP Documentations, its sources code and implementation.

IJWY (I Just Want You To Shut Up)

This is a set of settings that aim to remove all the server links embedded in Firefox and other calling home functions in the purpose of blocking un-needed connections. The objective is zero unauthorized connection (ping/telemetry/Mozilla/Google...).

Changelog

Available in the releases page

Installation Instructions

Notice: in the current state of the project Librefox is a set of configuration files for Firefox (awaiting a correct build of the project), therefore if you already have a Firefox profile, that profile will be used and temporary files will be removed (cookies and current session), make sure to backup your current Firefox's profile before using Librefox. Using Librefox simultaneously with Firefox is possilbe through a different profile you can follow this wiki to do so. Future Librefox version will be independent from Firefox and therefore will solve this issue.

Windows

Linux

Mac

Uninstall

Edit Locked Settings

Just edit mozilla.cfg, save and restart Librefox.

Browser Tests - Security/Fingerprint

Firefox 60 and privacy.resistFingerprinting are relatively new, please give it some time to be more widely used and thus less finger-printable; If you are using a different site to analyze your browser make sure to read and understand what the test is about.

Browser Tests - Performances

Performance tests can be done here LVP Octane, it needs to be launched alone with other applications closed and with no other activity but the benchmark, also it's recommended to launch it many times and then calculate the average.

Browser Tests - DNS/VPN/Proxy Leak

About

License: Mozilla Public License 2.0

Inspired from: ungoogled-chromium

Author: Intika (from Liege/Belgium), contact: intika@librefox.org

Donation: Paypal - support@librefox.org if you like it you can offer me a coffee :)

Based on: gHacks-user.js, pyllyukko-user.js and privaconf big thanks to everyone.

Acknowledgement, special thanks to:

Librefox Roadmap

Objectives for future versions of Librefox (this may change)

Todo for future versions of Librefox (this may change)

Settings Index

// ==============================
// Index mozilla.cfg .......... :
// ==============================
//
// ---------------------------------------------------------------------
// Section: User settings                    // Bench Diff: +0    / 5000
// Section: Defaulting Settings              // Bench Diff: +0    / 5000
// ------------------------------------------
// Section: Controversial                    // Bench Diff: +0    / 5000
// Section: Firefox Fingerprint              // Bench Diff: +0    / 5000
// Section: Locale/Time                      // Bench Diff: +0    / 5000
// Section: Ghacks-user Selection            // Bench Diff: +100  / 5000
// Section: Extensions Manager               // Bench Diff: +0    / 5000
// Section: IJWY To Shut Up                  // Bench Diff: +0    / 5000
// Section: Microsoft Windows                // Bench Diff: +0    / 5000
// Section: Firefox ESR60.x                  // Bench Diff: +0    / 5000
// ------------------------------------------
// Section: Security 1/3                     // Bench Diff: +0    / 5000
// Section: Security 2/3                     // Bench Diff: +0    / 5000
// Section: Security 3/3 (Cipher)            // Bench Diff: +0    / 5000
// ------------------------------------------
// Section: Performance 1/5                  // Bench Diff: +650  / 5000
// Section: Performance 2/5                  // Bench Diff: -800  / 5000
// Section: Performance 3/5                  // Bench Diff: -1720 / 5000
// Section: Performance 4/5                  // Bench Diff: -200  / 5000
// Section: Performance 5/5                  // Bench Diff: -50   / 5000
// ------------------------------------------
// Section: General Settings 1/3             // Bench Diff: +100  / 5000
// Section: General Settings 2/3             // Bench Diff: +0    / 5000
// Section: General Settings 3/3             // Bench Diff: -40   / 5000
// ------------------------------------------
// Section: Disabled - ON/OFF                // Bench Diff: +0    / 5000
// Section: Disabled - Deprecated Active     // Bench Diff: +0    / 5000
// Section: Disabled - Deprecated Inactive   // Bench Diff: +0    / 5000
// ---------------------------------------------------------------------

// ==============================
// Index local-settings.js .... :
// ==============================
//
// ---------------------------------------------------------------------
// Section: General Settings                 // Bench Diff: ++    / 5000
// ---------------------------------------------------------------------

Cookies Settings

Using different web services without cookies is impossible and cookie settings in a browser are very important when it come to privacy, in Librefox the settings are locked to avoid unwanted changes in such an important setting, but they can be easily changed in mozilla.cfg under User Settings: Cookies settings.

Tracking Protection

Firefox now integrates a tracking protection feature (based on disconnect.me) it's a small content blocking list, the listing can not be edited, this feature is disabled in Librefox. It's recommended to use uBlock Origin instead. This feature is disabled:

You can however easily enable this feature in mozilla.cfg under User Settings: Track Protection (just comment active lines with // or remove the entire section).

Comparing Changes And Updates

If you want to compare changes over updates or if you already have a user.js/mozilla.cfg/policies.json. consider using Compare-UserJS, it's an amazing tool to compare user.js files and output the diffs in detailed breakdown, developed by gHack's very own resident cat, claustromaniac :cat:

Usage: If not on windows install PowerShell then (for example) pwsh Compare-UserJS.ps1 mozilla.cfg user.js (Warning that PowerShell connects to Microsoft sometimes).

Documentation

Mozilla.cfg: Locking and defaulting Librefox settings for security, privacy and performance.

Policies.json: Policies for enterprise environments (the settings available with policies.json are limited right now because this is a new feature of Firefox).

Bench diff: Impact on the performance of Librefox, it can be a gain or a loss of performance +100/5000 stand for 2% gained performance and -1500/5000 stand for -30% performance loss.

lockPref: Locked preference can not be changed by extensions or updates, they can only be changed in mozilla.cfg.

Section: Description of the settings section separated by ">>>".

Defaulting VS Enforcing: Defaulted settings can be changed by the user or an extension if permitted within the browser while enforced settings are locked and can not be changed within the browser, enforced settings can be changed in mozilla.cfg.

About:config: http://kb.mozillazine.org/About:config_entries.

Librefox Dark Theme

Librefox provides a classic dark theme extension (Librefox Dark Theme) but also a purified version of ShadowFox available under dark-theme directory to install it just copy the directory chrome to your Librefox profile directory and then restart Librefox, this will expand the dark theme to internal pages like settings pages.

Tuning Librefox

Restart Button

One simple solution is to bookmark about:restartrequired or about:profiles ... when restart is needed open that page and click "normal restart". You can even go further and add the bookmarks links to your icons bar and rename the link to an empty text (you will then have a direct icon to about:profiles and a 2 clicks restart).

capture ...

Alternative Dark Theme

<a href="https://github.com/overdodactyl/ShadowFox" target="_blank"><img height=80px src="https://raw.githubusercontent.com/overdodactyl/ShadowFox/master/.github/Screenshots/header.png"></a>

Linux Fix Text Colors

On Linux when using a dark desktop theme Librefox could display white text over white background or black text on black input on some sites or addons, this is fixed in Librefox with lockPref("ui.use_standins_for_native_colors", true);.

If ui.use_standins_for_native_colors is not enough to fix everything you can fix this issue with an other additional solution by using the following values in about:config (you need to have Adwaita theme installed) more details (Note that this is not needed with the default Librefox settings as it is already fixed)

widget.content.allow-gtk-dark-theme;false
widget.chrome.allow-gtk-dark-theme;false
widget.content.gtk-theme-override;Adwaita:light

Other Addons

Other privacy addons

Other useful addons

Librefox Addons For ESR And Tor

Tor Compatibility

We do not recommend connecting over Tor on Librefox classic version (because of the missing Librefox-Tor-Addons, they are only included in the tor version for obvious reasons), use instead Librefox-Tor version if your threat model calls for it, or for accessing hidden services (Thus said tor settings have been enabled since v2 on all Librefox versions for user toriffying/proxifying their entire connection).

Currently Librefox-TBB is in beta test, Tor compatibility may change.

DRM Compatibility

Digital rights management (DRM) is enforced off by default (this is needed for Netflix and similar); you can enable it with the following instructions:

Librefox ESR

For ESR users if you opt for Librefox HTTP Watcher you need to use this version Librefox HTTP Watcher ESR - Tor MoD

Building And Packaging

Linux

Windows

Mac