To easy understand what i am saying, i will give you this example, you visit domain.com but on this page there are other things from external domains other than domain.com that firefox fetches/connects to - cdn.blabla.com; third-party.socialwebsites.com, etc. What i want, is to simply not connect to any other domain except what i typed in url bar. I understand it can break pages but i dont care.
A while ago, setting permission.default.images to 2 somehow worked and stopped loading of external content. Disabling prefetch/preconnect/predict/predictor does nothing.
p.s. i dont want to use extensions, only about config.
No offense intended, you do you and you don’t owe me any explanations, but I always find these types of post hilarious.
I want to do X. I don’t want to use thing that does exactly X and is used by most people trying to do X. Refuses to elaborate.
what most people do is wrong in most cases. elaboration goes nowhere and in general just derails the topic more.
Just use an ad blocking DNS. It might not block every other domain from connecting but it blocks most of what you want to block.
waste of time. cat and mouse game.
I think uMatrix extension does that? But the user interface might be a little bit unintuitive at first and you have to learn how to enable and disable specific domains. And you have to click the save button to make the settings permanent for that website. The cool thing is, you have detailed control which domain for each website and even what type they can access.
But that is not strict what you was asking. So if you really want strictly prohibit all domains and files from being accessed and loaded up by default, then you should look into other configuration or extension. I am not aware of such a configuration in Firefox itself.
Edit: Yes I know you don’t want to use an extension, but if Firefox itself does not provide it, that would be your best next thing.
an extension has access to eveything you visit. it tracks you and sells/shares your data. not to mention potential bad code injection.
Replace “an extension” with “a browser” and you can say the exact same thing. At some point you have to trust something and I have seen no evidence that uBlock Origin is doing anything nefarious so far.
Not every extension has access to everything. The things that it has access is listed. And if they are open source, then it can be audited that it does not collect data. The filter lists are local on your computer.
However I do understand the concern, it just does not apply to everything. But off course, it would be better if there is a builtin functionality. I am just not aware of something like that in Firefox itself. That’s why I suggested the best next thing.
i hoped there are some config values that i am unaware of to do the changes i want.
open source = some parts of the code can be open at best, it isnt what it sound. license matters. this word is just a trick.
yet, i wouldnt count on someone auditing code, there was lots of big projects with trully open code that had bad code injected for decades and noone noticed.
as much as i know, those extensions call back on developer server for updates/new filters etc. so i skip.
You don’t have to update the filter lists. You can have a totally local offline list that never updates, but you can add your own exceptions and filters. I mean you can do what you want, but I think there are some misconceptions. In example uMatrix is not spyware. It does not send unwanted information to developers back. And people audit not only the code, but also what is sent through network after installation.
If you really don’t trust much, which is understandable (i am not trying to convince you to install spyware), then I think Firefox is not the best browser for you. In that case it would be better to use a browser like LibreWolf, a fork of Firefox with configurations of privacy and security in mind. It comes with uBlock Origin plugin though, if that is a deal breaker.
Good luck finding a solution. I don’t know any way doing it in Firefox without addons.
This simply won’t work.
domain.com sends you an HTML, which is empty. The HTML defined a
<style>tag which your browser will fetch from cdn.com. Do you want to block it? Cool, no CSS for you.It also defined a
<script>tag which your browser will fetch the React library from cdn.com. Do you want to block it? Cool, no content for you.The whole page is just one
<div id="root"></div>.
