dom.enable_user_timing -> false

Hopefully this would also mitigate against ASLR^Cache (AnC) See: http://www.cs.vu.nl//~herbertb/download/papers/anc_ndss17.pdf
pyllyukko · Feb 20, 2017 · f37fceb · f37fceb · pyllyukko · Feb 20, 2017
1 parent fca0827
commit f37fceb
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/user.js b/user.js
@@ -19,6 +19,10 @@
  *                                                                            *
  ******************************************************************************/
 
+// Make sure the User Timing API does not provide a new high resolution timestamp
+// https://trac.torproject.org/projects/tor/ticket/16336
+user_pref("dom.enable_user_timing",				false);
+
 // Disable "Are you sure you want to leave this page?" popups
 // https://support.mozilla.org/en-US/questions/1043508
 user_pref("dom.disable_beforeunload",				true);