2025.02.01.1 ____ * **DESKTOP**: Rather than automatically grabbing the latest version of our `assets.json` configuration file for uBlock Origin, we now specify a specific commit and download it directly from Phoenix's Codeberg repo. This helps to improve trust/transparency and security, by ensuring the file is only updated with the rest of Phoenix (rather than updating on its own) - meaning it's easier to audit, and keeps the user always in control. - `assetsBootstrapLocation` *(Policy)* & `librewolf.uBO.assetsBootstrapLocation` -> `https://codeberg.org/celenity/Phoenix/raw/commit/08d147ee865c1d740540e8ec83c758d7a4df3e8b/uBlock/assets.json` - https://codeberg.org/celenity/Phoenix/issues/48#issuecomment-2665313 https://github.com/celenityy/Phoenix/issues/4#issuecomment-2627740229 * **DESKTOP**: Similar to the `assets.json` file, we now also specify both a specific commit and specific version for our included search engines/'extensions' in `policies.json`, and we explicitly disable automatic/out of band updates for them - meaning these 'extensions' are now **also** only updated alongside the rest of Phoenix, and never on their own. This further helps to improve transparency/auditability and protect users. - https://codeberg.org/celenity/Phoenix/issues/48#issuecomment-2665313 https://github.com/celenityy/Phoenix/issues/4#issuecomment-2627740229 * **DESKTOP**: Similar to what we've already been doing on Android, we now manually enable various ETP/ETP Strict tracking protections/features. We still enable & enforce ETP Strict itself *(meaning we're still covered by Mozilla's updates/enhancements)*; but unfortunately, Firefox doesn't honor/configure ETP Strict on its first launch, so we need to ensure we also enable these protections manually to always protect users. - https://codeberg.org/celenity/Phoenix/commit/4a6e135e3647ef34021e3786f28cc64914554335 * Set `browser.policies.loglevel`, `geo.provider.network.logging.enabled`, & `permissions.memory_only` to their default values, so that they can be easily set in the `about:config`... - `browser.policies.loglevel` -> `error`, `geo.provider.network.logging.enabled` & `permissions.memory_only` -> `false` * Disabled the [Beacon API](https://developer.mozilla.org/docs/Web/API/Beacon_API) *([`Navigator.sendBeacon`](https://udn.realityripple.com/docs/Web/API/Navigator/sendBeacon))* - `beacon.enabled` -> `false` - https://codeberg.org/celenity/Phoenix/commit/a3d7322f5de7fe72bf12753e2fa685497a827bcf * Other minor tweaks, fixes, and enhancements. ___ Codeberg: See [here](https://codeberg.org/celenity/Phoenix/compare/2025.01.30.1...2025.02.01.1) for more details. GitLab: See [here](https://gitlab.com/celenity/Phoenix/-/compare/2025.01.30.1...2025.02.01.1) for more details. GitHub: See [here](https://github.com/celenityy/Phoenix/compare/2025.01.30.1...2025.02.01.1) for more details. ___ :)