Show DEV: hifox - Firefox hardening with autoconfig, drift detection, and isolated webapps
Most Firefox hardening setups stop at a static user.js. That is useful, but I wanted something stricter and easier to audit over time, so I built hifox. https://github.com/q1sh101/hifox hifox treat...

Source: DEV Community
Most Firefox hardening setups stop at a static user.js. That is useful, but I wanted something stricter and easier to audit over time, so I built hifox. https://github.com/q1sh101/hifox hifox treats the repo as the source of truth and Firefox as the deployed target. Instead of relying mainly on editable profile prefs, it generates autoconfig.cfg, uses lockPref() for the main hardening layer, keeps policy-only behavior in policies.json, and then verifies that the live browser still matches what the repo says it should be. The basic model is: hifox deploy pushes the generated hardening into Firefox hifox verify checks for drift in deployed files and important prefs if hardening breaks or drifts, Firefox can be stopped and a notification can be raised It also supports isolated Firefox webapps. That part was important to me because I did not want the answer to be "just weaken the main profile until everything works." With hifox, the main profile can stay maximally hardened, while separate