celenity/Phoenix 2025.11.27.1

on Codeberg

Changes

• Blocked privileged about: pages from loading remote scripts.
• Disabled fetching Firefox Relay's denylist by default.
• Disabled Native Messaging by default (Details).
  • To re-enable it, at the cost of privacy and security, you can set the following prefs:
    • webextensions.native-messaging.max-input-message-bytes -> 1048576
    • webextensions.native-messaging.max-output-message-bytes -> 999999999
• Disabled semantic history by default.
• Hardened protocol handling.
• Set the browser's region to a dummy value (XX), instead of US. This is beneficial as it ensures that certain functionality (such as Firefox Suggest and Mozilla's DoH rollout) are disabled by default, allows us to disable features like Firefox Suggest by default without locking them, and in general, ensures we aren't impacted by unwanted geo targetting.
• Other minor tweaks and adjustments.

Desktop-only

• Disabled Firefox's new Unified Trust Panel by default, as it prevents setting per-site exceptions for the built-in cookie banner blocker.
• Disabled new tab attribution.
• Disabled Sports URL bar suggestions by default.
• For macOS and Windows: [Enabled the ability to warn users upon potentially misconfigured/problematic settings at about:preferences#privacy](https://codeberg.org/celenity/Phoenix/commit/d937b0010f092a88726cf4b1c7958b7a156ac262). (On Linux, this currently breaks about:preferences#privacy).
• For Windows: Disabled taskbar lists by default.
• Leveraged new profile-related preferences to disable the Firefox Messaging System.
• Removed the DisableProfileImport policy.
• Removed the DisplayBookmarksToolbar policy (We still always display the bookmarks toolbar by default though, just with the pref instead).
• Removed DNS0 from the list of default DNS over HTTPS providers, due to its unfortunate discontinuation.
• Removed the Mullvad Leta search engine, due to its unfortunate discontinuation.
• Updated preferences to disable IP Protection (Mozilla VPN) by default.

Specialized Configs

This release includes significant improvements for Phoenix's handling of specialized configs. Browser functionality and UI have been minimized, in order to make using them as close to using a native app as possible. This section will not be exhaustive, but will do it's best to cover the notable changes.

• Disabled add-on abuse reporting.
• Disabled the bookmark edit dialog.
• Disabled the bookmarks toolbar.
• Disabled camera permission prompts (except for the Discord and Element configs, where users may wish to allow them).
• Disable the Close duplicate tabs context menu item.
• Disabled the download panel.
• Disabled favicons.
• Disabled file picker dialogs (except for the Discord, Element, Photopea, and Twitter configs, where they are needed).
• Disabled Firefox Home. The config's corresponding app/service is now loaded immediately (except for on the first launch, to allow uBlock Origin to install).
• Disabled machine learning functionality.
• Disabled microphone permission prompts (except for the Discord, Element, and Twitter configs, where users may wish to allow them).
• Disabled origin headers.
• Disabled Password Manager/Autofill functionality.
• Disabled Picture-in-Picture (except for the Discord, Element, Twitter, and YouTube configs, where they are needed).
• Disabled printing.
• Disabled referers (except for the Twitter config, where they are needed).
• Disabled session restore functionality.
• Disabled the Share URL menu item.
• Disabled support for web applications manifests.
• Disabled tab detachment.
• Disabled tab switching with Ctrl + Tab.
• Disabled Taskbar Tabs (PWAs).
• Disabled text fragments.
• Disabled toolbar keyboard navigation.
• Disabled tooltips.
• Disabled the Unload Tab context menu item.
• Disabled unloading tabs on low memory.
• Disabled URL fix-up.
• Disabled user certificate/key databases.
• Disabled Web Compatibility interventions (except for the YouTube config, where they are needed).
• Disabled warnings on closing tabs and quitting the browser.
• Enabled vertical tabs. In combination with our other changes, this effectively hides the tab bar entirely.
• For Linux and Windows: Disabled the menu bar.
• Hid the UI to automatically delete files downloaded in Private Browsing.
• Introduced a new specialized config for YouTube Music.
• Prevented the browser from trying to open internally-handled attachments.
• Removed the link to download themes.
• Set links to always open in the current tab/browsing window.

Codeberg: See here for more details.

GitLab: See here for more details.

GitHub: See here for more details.

:)