MB 38: Mullvad Browser configuration (22617737) · Commits · The Tor Project / Applications / Mullvad Browser

browser/app/profile/000-mullvad-browser.js

0 → 100644

+34 −0

Original line number	Diff line number	Diff line
		// Preferences specific to Mullvad Browser

		// Do not show the bookmark panel for now, because it makes the initial browser
		// window (about:home) bigger, and regular pages will show letterbox margins as
		// a result.
		pref("browser.toolbars.bookmarks.visibility", "never");

		// privacy-browser#19: Enable Mullvad's DOH
		pref("network.trr.uri", "https://dns.mullvad.net/dns-query");
		pref("network.trr.default_provider_uri", "https://dns.mullvad.net/dns-query");
		pref("network.trr.mode", 3);
		pref("doh-rollout.provider-list", "[{\"UIName\":\"Mullvad\",\"autoDefault\":true,\"canonicalName\":\"\",\"id\":\"mullvad\",\"last_modified\":0,\"schema\":0,\"uri\":\"https://dns.mullvad.net/dns-query\"},{\"UIName\":\"Mullvad (Ad-blocking)\",\"autoDefault\":false,\"canonicalName\":\"\",\"id\":\"mullvad\",\"last_modified\":0,\"schema\":0,\"uri\":\"https://adblock.dns.mullvad.net/dns-query\"}]");
		// privacy-browser#122: Audit DoH heuristics
		pref("doh-rollout.disable-heuristics", true);

		// privacy-browser#37: Customization for the about dialog
		pref("app.releaseNotesURL.aboutDialog", "about:blank");

		// privacy-browser#70: Temporarily disable the language notification
		// TODO: Remove when we enable other languages
		pref("intl.language_notification.shown", true);

		// privacy-browser#94: Disable legacy global microphone/webcam indicator
		// Disable the legacy Firefox Quantum-styled global webcam/microphone indicator in favor of each
		// platform's native indicator
		pref("privacy.webrtc.legacyGlobalIndicator", false);

		// privacy-browser#87: Windows and Linux need additional work to make the
		// default browser choice working.
		// We are shipping only the portable versions for the initial release anyway, so
		// we leave this popup enabled only on macOS.
		#ifndef XP_MACOSX
		pref("browser.shell.checkDefaultBrowser", false);
		#endif

browser/app/profile/001-base-profile.js

+4 −6

Original line number	Diff line number	Diff line
		@@ -52,9 +52,9 @@ pref("browser.download.manager.addToRecentDocs", false);
		pref("browser.download.enable_spam_prevention", true);

		// Misc privacy: Disk
		pref("signon.rememberSignons", false);
		pref("browser.formfill.enable", false);
		pref("signon.autofillForms", false);
		pref("signon.rememberSignons", false, locked);
		pref("browser.formfill.enable", false, locked);
		pref("signon.autofillForms", false, locked);
		pref("browser.sessionstore.privacy_level", 2);
		// Use the in-memory media cache and increase its maximum size (#29120)
		pref("browser.privatebrowsing.forceMediaMemoryCache", true);
		@@ -250,7 +250,7 @@ pref("security.remote_settings.crlite_filters.enabled", false);
		pref("security.pki.crlite_mode", 0);

		// Disable website password breach alerts
		pref("signon.management.page.breach-alerts.enabled", false);
		pref("signon.management.page.breach-alerts.enabled", false, locked);

		// Disable remote "password recipes"
		pref("signon.recipes.remoteRecipes.enabled", false);
		@@ -277,7 +277,6 @@ pref("dom.disable_window_move_resize", true);
		pref("media.benchmark.vp9.threshold", 0);
		pref("dom.enable_resource_timing", false); // Bug 13024: To hell with this API
		pref("privacy.resistFingerprinting.block_mozAddonManager", true); // Bug 26114
		pref("dom.webaudio.enabled", false); // Bug 13017: Disable Web Audio API
		pref("dom.webmidi.enabled", false); // Bug 41398: Disable Web MIDI API
		pref("dom.w3c_touch_events.enabled", 0); // Bug 10286: Always disable Touch API
		pref("dom.vr.enabled", false); // Bug 21607: Disable WebVR for now
		@@ -380,7 +379,6 @@ pref("network.http.http2.enable-hpack-dump", false, locked);
		// tor-browser#23044: Make sure we don't have any GIO supported protocols
		// (defense in depth measure)
		pref("network.gio.supported-protocols", "");
		pref("media.peerconnection.enabled", false); // Disable WebRTC interfaces
		// Mullvad browser enables WebRTC by default, therefore the following 2 prefs
		// are first-line defense, rather than "in depth" (mullvad-browser#40)
		// tor-browser#41667 - Defense in depth: use mDNS to avoid local IP leaks on Android too if user enables WebRTC

browser/config/mozconfigs/base-browser

+0 −7

Original line number	Diff line number	Diff line
		@@ -19,15 +19,10 @@ ac_add_options --enable-base-browser-update

		ac_add_options --enable-bundled-fonts

		# See bug #41587
		ac_add_options --disable-updater

		ac_add_options --disable-tests
		ac_add_options --disable-debug

		ac_add_options --disable-crashreporter
		# Before removing, please notice that WebRTC does not work on mingw (Bug 1393901)
		ac_add_options --disable-webrtc
		ac_add_options --disable-parental-controls
		# Let's make sure no preference is enabling either Adobe's or Google's CDM.
		ac_add_options --disable-eme
		@@ -49,5 +44,3 @@ ac_add_options --disable-legacy-profile-creation
		if test -z "$WASI_SYSROOT"; then
		ac_add_options --without-wasm-sandboxed-libraries
		fi

		ac_add_options --with-relative-data-dir=BaseBrowser/Data/Browser

browser/config/mozconfigs/mullvad-browser

0 → 100644

+10 −0

Original line number	Diff line number	Diff line
		. $topsrcdir/browser/config/mozconfigs/base-browser

		export MOZ_APP_BASENAME=MullvadBrowser
		mk_add_options MOZ_APP_DISPLAYNAME="Mullvad Browser"

		ac_add_options --with-user-appdir=Mullvad

		ac_add_options --with-relative-data-dir=../Data

		ac_add_options --with-distribution-id=net.mullvad

browser/installer/package-manifest.in

+1 −0

Original line number	Diff line number	Diff line
		@@ -269,6 +269,7 @@
		@RESPATH@/browser/defaults/settings/blocklists
		@RESPATH@/browser/defaults/settings/main
		@RESPATH@/browser/defaults/settings/security-state
		@RESPATH@/browser/@PREF_DIR@/000-mullvad-browser.js
		@RESPATH@/browser/@PREF_DIR@/001-base-profile.js

		; Warning: changing the path to channel-prefs.js can cause bugs (Bug 756325)