{"id":50817830,"url":"https://github.com/q1sh101/hifox","last_synced_at":"2026-06-13T11:03:52.382Z","repository":{"id":340895475,"uuid":"1157615710","full_name":"q1sh101/hifox","owner":"q1sh101","description":"Deterministic Firefox hardening: lock, verify, detect drift, isolate","archived":false,"fork":false,"pushed_at":"2026-05-05T14:05:09.000Z","size":730,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-05T16:11:47.758Z","etag":null,"topics":["autoconfig","browser-security","firefox","firefox-hardening","flatpak","linux","privacy","shell-script","systemd","webapp"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/q1sh101.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-02-14T03:25:27.000Z","updated_at":"2026-05-05T14:07:38.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/q1sh101/hifox","commit_stats":null,"previous_names":["q1sh101/hifox"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/q1sh101/hifox","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/q1sh101%2Fhifox","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/q1sh101%2Fhifox/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/q1sh101%2Fhifox/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/q1sh101%2Fhifox/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/q1sh101","download_url":"https://codeload.github.com/q1sh101/hifox/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/q1sh101%2Fhifox/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34281700,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-13T02:00:06.617Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["autoconfig","browser-security","firefox","firefox-hardening","flatpak","linux","privacy","shell-script","systemd","webapp"],"created_at":"2026-06-13T11:03:51.493Z","updated_at":"2026-06-13T11:03:52.364Z","avatar_url":"https://github.com/q1sh101.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"  \u003cp align=\"center\"\u003e\n    \u003cimg src=\"docs/hifox.png\" alt=\"hifox\" width=\"221\" /\u003e\n  \u003c/p\u003e\n\n\u003ch1 align=\"center\"\u003e\u003ccode\u003ehifox\u003c/code\u003e\u003c/h1\u003e\n\u003cp align=\"center\"\u003e\n  \u003cimg alt=\"Linux\" src=\"https://img.shields.io/badge/Linux-FFA500?logo=linux\u0026logoColor=black\u0026labelColor=FFA500\"\u003e\n  \u003cimg alt=\"Firefox\" src=\"https://img.shields.io/badge/Firefox-ff7139?logo=firefoxbrowser\u0026logoColor=white\"\u003e\n  \u003cimg alt=\"Shell\" src=\"https://img.shields.io/badge/Shell-2ea44f?logo=gnu-bash\u0026logoColor=white\"\u003e\n\u003c/p\u003e\n\u003cp align=\"center\"\u003eDeterministic Firefox hardening with isolated webapp profiles.\u003c/p\u003e\n\n\n\n## quickstart\n\n```bash\ngit clone https://github.com/q1sh101/hifox \u0026\u0026 cd hifox\n\n# standard Firefox\nbash hifox.sh install --standard\n\n# Flatpak Firefox\nbash hifox.sh install --flatpak\n\n# hifox is single-target: install refuses if both Firefox targets are present.\n# install creates ~/.local/bin/hifox\n# launch Firefox once, close it, then launch again\nhifox verify  # stops Firefox if drift is detected\nhifox status\n```\n\n\u003e **Snap Firefox is not supported** because `/snap/firefox` is read-only. Use Mozilla `.deb`, the `/opt/firefox` tarball, or `--flatpak`.\n\n\u003e `HIFOX_LAUNCHER` applies only to terminal launches; menu icons pin the selected target directly.\n\n\u003e Mozilla tarballs under `/opt/firefox` may need an AppArmor profile on Ubuntu 24.04+.\n\n\u003e **Protected media:** Flatpak Firefox is the tested target for DRM/audio/video webapps. Standard Linux Firefox builds vary by distro sandboxing and codec/CDM integration, so Prime Video, Netflix, or Spotify may fail playback even when hifox is deployed correctly.\n\n## what it does\n\n- Locks Firefox prefs with `lockPref()` so extensions, websites, and runtime code cannot override them.\n- Stops Firefox when deployed prefs or files drift from the repo.\n- Turns Firefox updates into reviewable pref diffs through per-target `generated_pref_dump.\u003ctarget\u003e.txt`.\n- Runs webapps as isolated Firefox profiles with per-app unlocks for things like microphone, screen share, or DRM.\n- Treats the repo as the source of truth: edit config, save, deploy, verify.\n\n## commands\n\n```text\nhifox install \u003c--flatpak|--standard\u003e          save target, deploy, install watchers\nhifox deploy                                  sync repo config to Firefox\nhifox verify                                  verify live state; stop Firefox on drift\nhifox status                                  compare repo state with deployed state\nhifox clean                                   remove stale profile remnants\nhifox purge [--flatpak|--standard]            delete profile data after confirmation\nhifox logs                                    follow deploy and verify logs\nhifox watch install|remove|status             manage systemd file watchers\nhifox install-systemconfig                    register Flatpak systemconfig extension\n```\n\nBefore install creates the `hifox` command, use `bash hifox.sh \u003ccommand\u003e`.\n\n## files\n\n```text\nconfig/global_lockprefs.cfg                   global Firefox lockPrefs\nconfig/policies.json                          Firefox policy controls\nconfig/user.js                                per-profile canary marker\nconfig/autoconfig.js                          bootstrap loader for autoconfig.cfg\nconfig/generate_pref_dump.cfg                 Firefox pref dump generator\nconfig/generated_pref_dump.\u003ctarget\u003e.txt       per-target reviewed Firefox runtime dump\nconfig/hifox.css                              default profile homepage CSS\nwebapp/shared/webapp.cfg                      shared webapp runtime behavior\nwebapp/shared/webapp.css                      webapp chrome CSS\nwebapp/\u003cname\u003e/prefs.cfg                       per-webapp permission overrides\n```\n\n## reference\n\n- [ARCHITECTURE.md](docs/ARCHITECTURE.md) - full system map.\n- [Screenshot](docs/screenshot.png)\n- [MIT License](LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fq1sh101%2Fhifox","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fq1sh101%2Fhifox","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fq1sh101%2Fhifox/lists"}