Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

User.js - hardening of privacy and security

  • 7 replies
  • 0 have this problem
  • 1 view
  • Last reply by cor-el

more options

HI all! Hope you all are doing well.

I am using user.js file to harden my Firefox to the best possible way. I have few question about that process.

1. Where i can find the complete list of all active user_pref settings? All of the options i have to edit them. like user_pref("security.sandbox.content.level", 6); - now i have 6 by default but what is the range?

2. Is there any tool i can use to update my list with the latest entries, and to remove the obsolete entries?

3. Sandbox - what are the best possible ranges and settings for the below entries?

ser_pref("security.sandbox.socket.win32k-disable", true); user_pref("security.sandbox.content.level", 6); user_pref("security.sandbox.content.shadow-stack.enabled", true); user_pref("security.sandbox.gmp.win32k-disable", true); user_pref("security.sandbox.gpu.shadow-stack.enabled", true); user_pref("security.sandbox.gpu.level", 2);

Thanks well in advance! Firefox 116.0.3

HI all! Hope you all are doing well. I am using user.js file to harden my Firefox to the best possible way. I have few question about that process. 1. Where i can find the complete list of all active user_pref settings? All of the options i have to edit them. like user_pref("security.sandbox.content.level", 6); - now i have 6 by default but what is the range? 2. Is there any tool i can use to update my list with the latest entries, and to remove the obsolete entries? 3. Sandbox - what are the best possible ranges and settings for the below entries? ser_pref("security.sandbox.socket.win32k-disable", true); user_pref("security.sandbox.content.level", 6); user_pref("security.sandbox.content.shadow-stack.enabled", true); user_pref("security.sandbox.gmp.win32k-disable", true); user_pref("security.sandbox.gpu.shadow-stack.enabled", true); user_pref("security.sandbox.gpu.level", 2); Thanks well in advance! Firefox 116.0.3

All Replies (7)

more options

You can search for preferences on searchfox. org

more options

Thanks i will check it out - to assume if i am search for "security.sandbox.content.level", 6); and there is like level 7 in the code - it will be described so i can understand what is it etc.?

i am not able to make browser.search.defaultenginename - to switch to DuckDuckGo...

any ideas what would work with user.js?

Modified by stopper11

more options

Changing the default search engine programmatically is intentionally difficult to avoid abuse. Enterprise policies only allows this for ESR versions.

more options

Can you please clarify - what abuse means?! I dont want to use google and that is shoveled into my face. I would like to switch to DuckDuckGo lets say? How is that abuse?

more options

You can change the default search engine in Settings > Search.

https://support.mozilla.org/en-US/kb/change-your-default-search-settings-firefox

more options

Ye sure thanks, i am kind of aware, really not helpful... "i am not able to make browser.search.defaultenginename - to switch to DuckDuckGo...

any ideas what would work with user.js?"

I need a solution that works only with user.js. Thanks

more options

Like written above, you can't set/change the default search engine via a pref as this was abused by malware in the past. Changing the default search engine can only be done via advanced JavaScript or via a policy if you use a Firefox ESR version. See SearchEngines: