TorSecurity

***************************
1.
Set to "Safest":
Settings > Privacy & Security > Security Level

***************************
2.
Settings > Privacy & Security > Permissions
Set
Location, Camera, Microphone, Notifications and Virtual Reality
to "Block new requests..."

***************************
3.
Settings > Privacy & Security > Permissions
Set
Autoplay
to
"Block Audio and Video"

***************************


The following can be set in the "about:config" menu:
1. Type in the url bar:
about:config
2. accept & continue
3. set/verify the following:


***************************


Set to false

javascript.enabled
app.normandy.enabled
app.update.auto
browser.cache.memory.enable
browser.chrome.site_icons
browser.shell.shortcutFavicons
dom.storage.enabled
media.webm.enabled
network.prefetch-next
network.websocket.delay-failed-reconnects
services.sync.prefs.sync.network.cookie.cookieBehavior
services.sync.prefs.sync.network.cookie.lifetimePolicy

browser.cache.offline.enable
browser.urlbar.speculativeConnect.enabled
dom.battery.enabled
dom.event.clipboardevents.enabled

media.play-stand-alone // download media instead of playing in browser //



media.mp4.enabled = false

media.ogg.enabled = false

media.opus.enabled = false

media.rdd-opus.enabled = false

media.rdd-process.enabled = false

media.rdd-vorbis.enabled = false

media.rdd-wav.enabled = false

media.wave.enabled = false

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

Set to true

network.IDN_show_punycode
pdfjs.disabled
webgl.disabled


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

Set to 0

browser.display.use_document_fonts
network.http.sendRefererHeader


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%


Set to 1


accessibility.force_disabled = 1

Network.cookie.cookieBehavior = 1


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%


Set to 2


media.autoplay.blocking_policy = 2


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

Set to 5

media.autoplay.default = 5


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%


Set to 2  // ? if break websites, try = 1 //

network.http.referer.XOriginPolicy = 2  // ? if break websites, try = 1 //


2 is the more restrictive option,
but it blocks sending a referer header across the same site (base domain) and can break navigation on some file hosters.
Selecting the value 1 prevents leaking what site you arrived from when navigating links.

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%


Set to 2  // ? if break websites, try = 1 //

network.http.referer.trimmingPolicy = 2  // ? if break websites, try = 1 //

network.http.referer.XOriginTrimmingPolicy = 2  // ? if break websites, try = 1 //

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%




%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

permissions
Set to 2


permissions.default.camera = 2
permissions.default.desktop-notification = 2
permissions.default.geo = 2
permissions.default.microphone = 2
permissions.default.xr = 2

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%


Verify Set to false

media.navigator.enabled




browser.cache.disk.enable
browser.safebrowsing.downloads.remote.enabled
browser.send_pings
extensions.pocket.enabled
geo.enabled
media.peerconnection.enabled

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

Verify Set to true


privacy.firstparty.isolate
privacy.resistFingerprinting



%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

Verify Set to 2

network.cookie.lifetimePolicy = 2


%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%


Optionally modify to a lower value

browser.sessionhistory.max_entries

This option determines the number of pages saved in the Browser Back option during the session (the memory is cleared when Tor is closed).

Set it to 0 or a low number if there is a risk of someone else using your computer when the Tor session is open.