From 3655e8bcc79ca15c6155f056c74d8b4ab33f989f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?L=C3=A9ana=20=E6=B1=9F?= <leana.jiang+git@icloud.com>
Date: Sat, 4 Oct 2025 13:17:47 +0800
Subject: [PATCH] firefox: harden WebRTC leak

---
 nix/homeModules/common/firefox.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nix/homeModules/common/firefox.nix b/nix/homeModules/common/firefox.nix
index 231eed2d..f282c657 100644
--- a/nix/homeModules/common/firefox.nix
+++ b/nix/homeModules/common/firefox.nix
@@ -79,6 +79,10 @@ in {
         "browser.ml.chat.page" = false;
         "browser.ml.chat.shortcuts" = false;
         "browser.ml.chat.sidebar" = false;
+
+        # Prevent WebRTC leak
+        # https://mullvad.net/en/help/webrtc
+        "media.peerconnection.enabled" = false;
       };
 
       extensions.packages = let