Forráskód Böngészése

enforce DOMHighResTimeStamp API #491

flipped true in FF54: https://bugzilla.mozilla.org/show_bug.cgi?id=1026804 but unsure when the pref itself was introduced. note: other timing prefs were always in 2400's see 4602: [2411] disable resource/navigation timing / 4603: [2412] disable timing attacks
Thorin-Oakenpants 6 éve
szülő
commit
74f029566e
1 módosított fájl, 3 hozzáadás és 0 törlés
  1. 3 0
      user.js

+ 3 - 0
user.js

@@ -1208,6 +1208,9 @@ user_pref("dom.IntersectionObserver.enabled", false);
  * [1] https://github.com/tc39/ecmascript_sharedmem/blob/master/TUTORIAL.md
  * [2] https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/ ***/
 user_pref("javascript.options.shared_memory", false);
+/* 2428: enforce DOMHighResTimeStamp API
+ * [WARNING] Required for normalization of timestamps and any timer resolution mitigations ***/
+user_pref("dom.event.highrestimestamp.enabled", true); // default: true
 
 /*** [SECTION 2500]: HARDWARE FINGERPRINTING ***/
 user_pref("_user.js.parrot", "2500 syntax error: the parrot's shuffled off 'is mortal coil!");