@PorFin
I mean the code for those trackers is empty, and does absolutely nothing.
There are other requests the browser makes
Hosts for blocking at least some of these requests. If anyone has more please consider expanding or updating this.
#Mozilla
0.0.0.0 shavar.prod.mozaws.net
0.0.0.0 shavar.services.mozilla.com
0.0.0.0 affiliates-cdn.mozilla.org
0.0.0.0 crash-stats.mozilla.com
0.0.0.0 data.mozilla.com
0.0.0.0 detectportal.firefox.com
0.0.0.0 fhr.cdn.mozilla.net
0.0.0.0 fhr.cdn.mozilla.com
0.0.0.0 firefox.settings.services.mozilla.com
0.0.0.0 geo.mozilla.org
0.0.0.0 hang-reports.mozilla.org
0.0.0.0 hardware.metrics.mozilla.com
0.0.0.0 incoming.telemetry.mozilla.org
0.0.0.0 location.services.mozilla.com
0.0.0.0 metrics.mozilla.com
0.0.0.0 push.services.mozilla.com
0.0.0.0 reporter.mozilla.org
0.0.0.0 snippets.cdn.mozilla.net
0.0.0.0 snippets.mozilla.com
0.0.0.0 stun.services.mozilla.com
0.0.0.0 telemetry-experiment.cdn.mozilla.net
0.0.0.0 telemetry.mozilla.org
0.0.0.0 testpilot.mozillalabs.com
0.0.0.0 tiles.cdn.mozilla.net
0.0.0.0 tiles.services.mozilla.com
0.0.0.0 tracking.services.mozilla.comThese are contacted by Fennec today or generally by the upstream Firefox?
Yes. Lol. See Anti-features. 
I think only “shavar…” (safebrowsing) is automatically contacted by Fennec but I don’t know how it behaves under certain conditions.
Initial start of Fennec F-Droid is:
shavar.services.mozilla.com.
firefox.settings.services.mozilla.com.
tracking-protection.cdn.mozilla.net.
content-signature-2.cdn.mozilla.net.
services.addons.mozilla.org.
addons.cdn.mozilla.net.
Initial start of Firefox is:
location.services.mozilla.com.
firefox.settings.services.mozilla.com.
shavar.services.mozilla.com.
tracking-protection.cdn.mozilla.net.
content-signature-2.cdn.mozilla.net.
www.google.com.
services.addons.mozilla.org.
addons.cdn.mozilla.net.
Antifeatures are something, actual behaviour might differ.
Vulnerabilities are found every month, what made you post about them this time? 
BTW I pushed the 81.1.3 update today: Update Fennec F-Droid to 88.1.3 (2292428b) · Commits · F-Droid / Data · GitLab
looked more of interest
@Morgoth @semevos and others: I’m sorry about the late reaction to your requests. as you asked, I’ve updated the addonliberator collection with the following addons:
Redirect AMP to HTML
Privacy Redirect
Dark Reader
Save as PDF
Save PDF
viewing the page source was already possible via View Page Source (Mobile).
Nothing up, I just noticed that there is a fork of fennecbuild and was curious.
I know that Tad maintains a fork of fennecbuild for Mull. No idea about others, I don’t track who and how uses my code, but they are welcome to do this of course
Hi, I’m using Mull (the fork with arkenfox added). I noticed that it is impossible to set new tab to blank. I tried looking at secret settings as explained in a post above but can only see “Use new Tabs Tray” and “Use third party CA certificates”. Changing about:config settings or trying extensions also appears to not do anything. Is this a Mull-specific issue or is it also the case on Fennec?
EDIT: My current method is simply removing all pinned tabs, but data might still be sent and I’m not sure if these tabs will return.
I noticed that it is impossible to set new tab to blank.
Tabs are about:newtab, not about:blank.
I don’t think you can change it.
This is a Fenix thing afaik.
But when I visit about:newtab, it says “invalid address”.
I have blank new tabs, except for “Mull” at upper left and Private Tabs toggle at upper right.
Maybe it is from Settings, Customize, Show most visited sites: Off
That is what I have, too.