// Tor Browser at the Safer security level: JavaScript runs on https sites
// (NoScript allows it there and blocks it on http), so a page has more to
// attack than at Safest. Used by Wren Linux extras/tor-browser-unsafe.sh.
// Tor Browser checks at startup that the prefs bound to the security
// slider match it, and asks for a restart if they don't, so all of them
// are set (from SecurityLevel.sys.mjs in Tor Browser 16, the Safer column).
user_pref("browser.security_level.security_slider", 2);
user_pref("browser.security_level.security_custom", false);
user_pref("javascript.options.ion", false);
user_pref("javascript.options.baselinejit", false);
user_pref("javascript.options.native_regexp", false);
user_pref("javascript.options.asmjs", false);
user_pref("javascript.options.wasm", true);
user_pref("mathml.disabled", true);
user_pref("svg.disabled", false);
user_pref("gfx.font_rendering.graphite.enabled", false);
user_pref("gfx.font_rendering.opentype_svg.enabled", false);
// The red frame (userChrome.css) that reminds you some JavaScript runs
user_pref("toolkit.legacyUserProfileCustomizations.stylesheets", true);