3 Extensions - Willie169/combinedfox GitHub Wiki

Introduction

Here, suggested extensions for Firefox-based browsers for desktop and Android are listed. My Settings and Remarks columns contain my settings file and remarks such as what my settings do and what extensions are replaced by that extension.

For Android, if an extension is shown as un available, click Desktop site and ensure the link starts with https://addons.mozilla.org/en-US/firefox instead of https://addons.mozilla.org/en-US/android (en-US may be replaced with other languages), then the Add to Firefox button may become clickable. Those need this will be labeled Android (Desktop) below. However, Firefox for Android lacks many APIs needed by some extensions. Thus, being able to be added doesn't imply being able to function.

Security

According to arkenfox wiki 4.1 Extensions,

We recommend keeping extensions to a minimum: they have privileged access within your browser, require you to trust the developer, can make you stand out, and weaken site isolation. For those interested, here is an ongoing series on the basics of browser extension security by Wladimir Palant.

The following extensions or functionalities of extensions should not be used:

  • Privacy Badger: It sends Do Not Track (DNT) HTTP header and is redundant with Enhanced Tracking Protection (ETP) Strict mode and uBlock Origin. Refer to Do Not Track (DNT) and Global Privacy Control (GPC) section for more information.
  • Cookie or supercookie-related ones that don't work well with Total Cookie Protection (TCP) / dynamic First Party Isolation (dFPI), State Partitioning, or Multi-Account Containers (if you use it), such as Cookie AutoDelete: I recommend using Cookie Manager instead. Refer to Cookie Manager in Optional section and Cookies and Supercookies section for more information.
  • uMatrix: It is no longer maintained and redundant with uBlock Origin and Header Editor. Refer to uBlock Origin section and Header Editor in Optional section for more information.
  • Ghostery – Privacy Ad Blocker, Disconnect, AdGuard AdBlocker, and other advertising, trackers, and/or pop-ups blockers: They are redundant with Enhanced Tracking Protection (ETP) Strict mode and uBlock Origin.
  • Fingerprinting protection ones: Refer to Fingerprint section for why.
  • LocalCDN, Decentraleyes, and other Content Delivery Network (CDN) emulation ones: They may break some sites and may be fingerprinted according to cypherpunks, a Tor Project developer.
  • Ones with security vulnerability. Refer to Extension-Security-Basics by Wladimir Palant for more information.

Regarding Content-Security-Policy (CSP) headers confliction among extensions that you may see from some sources, the bug has been resolved. Refer to Bug 1462989, Bug 1477696, and CanvasBlocker issue 214 for more information.

uBlock Origin

uBlock Origin is a must.

Name Source Code Desktop Android My Settings and Remarks Self Description
uBlock Origin GitHub Desktop Android My settings is my-ublock-backup.txt, which uses dynamic filtering of third-party iframe tags enhanced easy mode to avoid site breaking, Block Page Visibility to allow background audio/vedio playback, combinedfox filters - quick fixes (quick-fixes.txt), combinedfox filters - social media (social-media.txt), and more. A lot of lists including some large and complex lists are used in it, which may slow down site loading for devices with limited resources. Try to disable some lists if you encounter performance issue. For people with higher threat model, consider higher blocking mode of uBlock Origin but expect some site breakings. Refer to uBlock Origin wiki for more information. Finally, an efficient wide-spectrum content blocker. Easy on CPU and memory.

A related project of mine is combinedfox-all-in-one-filterlist, which combines the lists used above and is designed for situations where using single list is the only option or more convenient, such as Content Filtering of Brave for Android to not add lists one by one manually. For situations where multiple lists can be used, imported, and exported easily, such as uBlock Origin extension, using the original lists is recommended.

Optional

Name Source Code Desktop Android My Settings and Remarks Self Description
addy.io - Protect Your Real Email With Aliases GitHub Desktop Android (Desktop) Open-source Anonymous Email Forwarding. Protect your real email address by using a different email alias for every site. Quickly and easily view, search, manage and create new aliases in just a few clicks using the addy.io browser extension.
Bitwarden Password Manager GitHub Desktop No need on Android. Use native app from F-Droid or Google Play Store instead. Do not use the browsers' built-in password managers. They are not as secure as dedicated password managers. I recommend those recommended by Privacy Guides. At home, at work, or on the go, Bitwarden easily secures all your passwords, passkeys, and sensitive information.
ClearURLs GitHub Desktop Android Removes tracking elements from URLs.
Cookie Manager GitHub Desktop Android

You may turn off the Open the Cookie Manager when the extension starts up, which is on by default.

Supported features:
  • Viewing all cookies
  • Querying cookies by any combination of url, domain, path, cookie content (name/value), httpOnly/secure/sameSite/session flags, expiration time range.
  • Recognizes cookie jars (default, private browsing mode, container tabs aka userContext).
  • Allows you to remove individual cookies, or all matching cookies with one click.
  • Supports Firefox for Android (Fenix)
  • Supports the TOR Browser (and first-party domain cookies)
  • Supports partitioned cookies (known as State Partitioning or Total Cookie Protection)
  • Add cookies
  • Edit cookies
  • Import / export cookies
    • JSON format for backup and restoration purposes.
    • Netscape HTTP Cookie File format for use with other tools like curl and wget.
  • Copying cookies to a different cookie jar
  • Whitelisting cookies

Refer to Cookies and Supercookies section.

 An efficient cookie manager. View, edit, delete and search for cookies. Supports private mode and Firefox mobile too. Designed for privacy and security aware users. Enable this extension to open the cookie manager, disable it if you are done.
Copy Link Text GitHub Desktop No need on Android. The only extension that lets you effortlessly copy link text on both desktop and mobile—via right-click, Alt+C shortcut, or Copy mode activation.
Download All Images GitHub Desktop Not available on Android. Easily save images with a wide range of customization features, such as file size, dimensions, and image type.
Extension source viewer GitHub Desktop Android (Desktop) A similar tool as a website is CRX Viewer by the same author with source code in the same repo. View source code of Firefox add-ons and Chrome extensions (crx/nex/xpi) from addons.mozilla.org, the Chrome Webstore and elsewhere, with CRX Viewer (crxviewer).
Firefox Multi-Account Containers GitHub Desktop Not available on Android due to Bug 1807456. Read Android - Firefox Profiles and Containers Alternative for more information. Refer to Cookies and Supercookies section for my remarks. Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs. Cookies are separated by container, allowing you to use the web with multiple accounts and integrate Mozilla VPN for an extra layer of privacy.
Firefox Relay GitHub Desktop Android Need login to Mozilla account. Firefox Relay lets you generate email aliases that forward to your real inbox. Use it to hide your real email address and protect yourself from hackers and unwanted mail.
floccus GitHub Desktop
Floccus requires specific bookmarks APIs, however, which have not been implemented in Firefox for Android yet. So, we still wait, but the waiting won't be long.

You can sync with Nextcloud Bookmarks (cannot make use of end-to-end encryption), with Linkwarden (cannot make use of end-to-end encryption and does not support keeping the order of bookmarks across syncs), with Karakeep (cannot make use of end-to-end encryption and does not support keeping the order of bookmarks across syncs), via WebDAV (can choose to use end-to-end encryption), via Git over HTTPS (can not make use of end-to-end encryption and currently not available in the mobile app), and via Google Drive (can choose to use end-to-end encryption), and via Dropbox (can choose to use end-to-end encryption).

The Android app floccus bookmark sync is available on F-Droid, GitHub release, and Google Play Store.

 Securely synchronize bookmarks across Chrome, Firefox, Edge, and more using your own cloud storage.
Force Copy GitHub Desktop Android Do not use Start since it may break some sites. It's recommended to use Once when you need. Force Copy professionally circumvents limitations pertaining to Web Copying, Keyboard Usage, and Right-click Functionalities, facilitating an unhindered browsing experience. Open Source Project: https://github.com/WindrunnerMax/TKScript.
FoxyProxy Standard GitHub Desktop Android My settings is FoxyProxy.json, which is configured to proxy I2P sites to 127.0.0.1:4444, at which you can run an I2P HTTP tunnel. Open the extension and select Proxy by Patterns after importing the settings. On desktop, you may need to setup I2P at http://127.0.0.1:7657. On Android, I2P app with Fennec F-Droid is recommended since IronFox may not work. Refer to Fennec F-Droid section for more information. FoxyProxy is an open-source, advanced proxy management tool that completely replaces Firefox's limited proxying capabilities. No paid accounts are necessary; bring your own proxies or buy from any vendor. The original proxy tool, since 2006.
Header Editor GitHub Desktop Android (Desktop) It can replace domain-based redirecting extensions and User-Agent changing extensions with more powerful features such as regular expression matching. Be careful to not unwantedly alter your fingerprints. For Phoenix and IronFox, you need to add back unsafe-eval to extensions.webextensions.base-content-security-policy to unblock functionalities such as custom function, which will show a rule blocked by CSP pop-up when blocked, which is described in IronFox. My rules are in HE.json, with explanations in Header Editor Rules. Manage browser's requests, include modify the request headers and response headers, redirect requests, cancel requests
MobiDevTools SourceForge No need on desktop. Android an extension that adds Eruda developer tools to Firefox Android. Lets you use the console, inspect elements, and network monitor on your phone
mozlz4-edit GitHub Desktop Not available on Android. View and edit .mozlz4 files, notably search.json.mozlz4 in Firefox profile folder. A similar tool as a command-line tool is mozlz4. The addon lets you add custom search engines to the Mozilla Firefox without the Internet connection using! Add your own search engine to the Firefox! Actually mozlz4-edit is a simple mozlz4 file editor. You can open, edit and save mozlz4 files.
NoScript Security Suite GitHub Desktop Android Despite that its functionality is largely covered by uBlock Origin and preferences, when your intended behavior is simply block unless manually allowed, NoScript Security Suite may be easier to use. If that's not what you want, you probably should not use this extension and should use uBlock Origin instead. The best security you can get in a web browser! Allow potentially malicious web content to run only from sites you trust. Protect yourself against XSS other web security exploits.
Plasma Integration KDE's GitLab Desktop No need on Android. No need if you are not using KDE Plasma desktop environment. Multitask efficiently by controlling browser functions from the Plasma desktop.
Read Aloud: A Text to Speech Voice Reader GitHub Desktop Android Read out loud the current web-page article with one click. Supports 40+ languages.
Redirect AMP to HTML GitHub Desktop Android Automatically redirects AMP pages to the regular web page variant.
Refined GitHub GitHub Desktop Android Simplifies the GitHub interface and adds many useful features.
Return YouTube Dislike GitHub Desktop Android (Desktop) Returns ability to see dislike statistics on youtube
RSSHub-Radar GitHub Desktop Android Easily find and subscribe to RSS and RSSHub.
Search by Image GitHub Desktop Android A powerful reverse image search tool, with support for various search engines, such as Google, Bing, Yandex, Baidu and TinEye.
SingleFile GitHub Desktop Android Save an entire web page—including images and styling—as a single HTML file.
TWP - Translate Web Pages GitHub Desktop Android
Privacy policy: We do not collect any information. However, to translate, the contents of the web pages will be sent to Google or Yandex servers.
 Translate your page in real time using Google, Bing or Yandex. It is not necessary to open new tabs.
Ultra Volume Booster GitHub Desktop Android Boost audio volume up to 1000% with a sleek dark glassmorphism UI
User-Agent Switcher and Manager GitHub Desktop Android (Desktop) Be careful to not unwantedly alter your fingerprints. Spoof websites trying to gather information about your web navigation—like your browser type and operating system—to deliver distinct content you may not want.
Violentmonkey GitHub Desktop Android I recommended using Violentmonkey for userscript support over Greasemonkey, which lacks many APIs and functionalities, and Tampermonkey, which is not open source. My settings and installed scripts are in violentmonkey.zip, with explanations in Violentmonkey Userscripts. Userscript support for browsers, open source.
Web Archives GitHub Desktop Android View archived and cached versions of web pages on various search engines, such as the Wayback Machine and Archive․is.

Header Editor Rules

This section explains my Header Editor rules in HE.json, which includes spoofing User-Agent HTTP header similar to what User-Agent Switcher and Manager does, redirecting to alternative privacy-friendly frontends similar to what LibRedirect does, redirecting with parameter added to disable AI, similar to what disable-ai does, etc.

  • BiliBili and NicoNico: Redirect videos to watch.typetype.video, the official TypeType instance. Parameters after ? are discarded since some of them will cause TypeType to fail to redirect to the video. Since TypeType currently doesn't seem to support BiliBili and NicoNico channels and goes to https://watch.typetype.video/channel?url=<original_url_with_url_encoding>, e.g., https://watch.typetype.video/channel?url=https%3A%2F%2Fwww.nicovideo.jp%2Fuser%2F<channel_id>, which shows Unable to load channel right now., as of the time I tried, I redirect them back to the original URL with Redirect watch.typetype.video channel?url with 2 substrings to original URL for BiliBili and Redirect watch.typetype.video channel?url with 3 substrings to original URL for NicoNico. For the BiliBili channel pages, I spoof User-Agent to Linux Firefox since otherwise it will copy the URL instead and try to open the BiliBili app on Android.
  • Brave Search: Disable AI by setting summary=0 parameter unless summary parameter is already set, e.g., https://search.brave.com/search?summary=1&q=<query>.
  • Discord: Spoof User-Agent to Linux Firefox for invite links, that is https://discord.com/invite/<name>, to use Discord website instead of trying to open Discord app on Android. You need to enable desktop site on Android when at the invite link for this to work.
  • Google Chat: Spoof User-Agent to Linux Firefox to use Google Chat website instead of trying to open Google Chat app on Android. You need to enable desktop site on Android for this to work.
  • Google redirect: Redirect Google redirecting link https://www.google.com/url?q=<actual_url>[&trackers] to <actual_url>.
  • Google Search: Disable AI by setting udm=14 parameter unless udm parameter is already set, e.g., https://www.google.com/search?udm=0&q=<query>.
  • Instagram: Redirect to kittygram.irelephant.net, the official Kittygram instance.
  • Pixiv: Redirect artworks and users to pixiv.perennialte.ch, the official PixivFE instance.
  • Reddit: Redirect to redlib.catsarch.com, an Redlib instance, except RSS links, that is, <subreddit or user link>.rss.
  • X (Twitter): Redirect to nitter.meowing.monster, an Nitter instance.
  • YouTube: Redirect to invidious.nerdvpn.de, an Invidious instance that allows embedded videos. Not redirecting to watch.typetype.video, the official TypeType instance, is because that it doesn't work for YouTube as of the time I tried. youtube-nocookie.com is not redirected since doing so will break Duck Player.
  • Zhihu: Spoof User-Agent to Android Firefox to skip login on desktop. If you are using AdGuard – Mobile App Banners filterlist, also use combinedfox filters - quick fixes (quick-fixes.txt) to fix that 点击查看全文 (Click to view the full text) can't be clicked.

Violentmonkey Userscripts

This section lists my installed userscripts in violentmonkey.zip.

Next: 4. Search Engines

⚠️ **GitHub.com Fallback** ⚠️