Merge branch 'master' of github.com:mozilla/policy-templates

[policy-templates.git] / docs / index.md

diff --git a/docs/index.md b/docs/index.md
index 9cbf5164aab33a6c94f5e9ab74e49cee8f3ae5df..547851697246ef5428e387406810c9675bbbe653 100644 (file)
--- a/docs/index.md
+++ b/docs/index.md
@@ -2884,9 +2884,13 @@ If `Fingerprinting` is set to true, fingerprinting scripts on websites are block
 
 If `EmailTracking` is set to true, hidden email tracking pixels and scripts on websites are blocked. (Firefox 112)
 
 
 If `EmailTracking` is set to true, hidden email tracking pixels and scripts on websites are blocked. (Firefox 112)
 

+If `SuspectedFingerprinting` is set to true, Firefox reduces the amount of information exposed to websites to protect against potential fingerprinting attempts. (Firefox 142, Firefox ESR 140.2)
+

 `Exceptions` are origins for which tracking protection is not enabled.
 
 `Exceptions` are origins for which tracking protection is not enabled.
 

-**Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\
+`Category` can be either ```strict``` or ```standard```. If category is set, it overrides all other settings except `Exceptions` and the user cannot change the category. (Firefox 142, Firefox ESR 140.2)
+
+**Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5. Category added in Firefox 142/140.2.)\

 **CCK2 Equivalent:** N/A\
 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
 
 **CCK2 Equivalent:** N/A\
 **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled`
 


@@ -2897,7 +2901,9 @@ Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\EmailTracking = 0x1 | 0x0
 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\EmailTracking = 0x1 | 0x0

+Software\Policies\Mozilla\Firefox\EnableTrackingProtection\SuspectedFingerprinting = 0x1 | 0x0

 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"

+Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Category = "strict" | "standard"

 ```
 #### Windows (Intune)
 OMA-URI:
 ```
 #### Windows (Intune)
 OMA-URI:


@@ -2949,6 +2955,22 @@ Value (string):
 ```
 <enabled/> or <disabled/>
 ```
 ```
 <enabled/> or <disabled/>
 ```

+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/G_TrackingProtection_Category
+```
+Value (string):
+```
+<data id="TrackingProtection_Category" value="strict | standard"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/H_TrackingProtection_SuspectedFingerprinting
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```

 #### macOS
 ```
 <dict>
 #### macOS
 ```
 <dict>


@@ -2964,7 +2986,11 @@ Value (string):
     <true/> | <false/>
     <key>EmailTracking</key>
     <true/> | <false/>
     <true/> | <false/>
     <key>EmailTracking</key>
     <true/> | <false/>

+    <key>SuspectedFingerprinting</key>
+    <true/> | <false/>

     <key>Exceptions</key>
     <key>Exceptions</key>

+    <key>Category</key>
+    <string>strict | standard</string>

     <array>
       <string>https://example.com</string>
     </array>
     <array>
       <string>https://example.com</string>
     </array>


@@ -2981,6 +3007,8 @@ Value (string):
       "Cryptomining": true | false,
       "Fingerprinting": true | false,
       "EmailTracking": true | false,
       "Cryptomining": true | false,
       "Fingerprinting": true | false,
       "EmailTracking": true | false,

+      "SuspectedFingerprinting": true | false,
+      "Category": "strict" | "standard",

       "Exceptions": ["https://example.com"]
     }
   }
       "Exceptions": ["https://example.com"]
     }
   }


@@ -3859,9 +3887,14 @@ Configure the default homepage and how Firefox starts.
 
 `Additional` allows for more than one homepage.
 
 
 `Additional` allows for more than one homepage.
 

-`StartPage` is how Firefox starts. The choices are no homepage, the default homepage or the previous session.
+`StartPage` is how Firefox starts.

 
 

-With Firefox 78, an additional option as added for `Startpage`, `homepage-locked`. If this is value is set for the Startpage, the user will always get the homepage at startup and cannot choose to restore their session.
+| Value             | Description
+|-------------------|-----------------------------------------------------------------------------
+| `none`            | Start with a blank page (no homepage, no previous session).
+| `homepage`        | Start with the homepage in `URL` policy.
+| `previous-session`| Restore the previous session (all tabs and windows reopen).
+| `homepage-locked` | Always force the homepage at startup, users cannot choose session restore. (Firefox 78)

 
 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
 **CCK2 Equivalent:** `homePage`,`lockHomePage`\
 
 **Compatibility:** Firefox 60, Firefox ESR 60 (StartPage was added in Firefox 60, Firefox ESR 60.4, homepage-locked added in Firefox 78)\
 **CCK2 Equivalent:** `homePage`,`lockHomePage`\


@@ -4863,9 +4896,9 @@ Set permissions associated with camera, microphone, location, notifications, aut
 
 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
 
 
 `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68.
 

-**Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\
+**Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2, ScreenShare added in Firefox 142, Firefox ESR 140.2)\

 **CCK2 Equivalent:** N/A\
 **CCK2 Equivalent:** N/A\

-**Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`
+**Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`, `permissions.default.screen`

 
 #### Windows (GPO)
 ```
 
 #### Windows (GPO)
 ```


@@ -4899,6 +4932,11 @@ Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\2 = "https://
 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0
 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu"
 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0
 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0

+Software\Policies\Mozilla\Firefox\Permissions\ScreenShare\Allow\1 = "https://example.org"
+Software\Policies\Mozilla\Firefox\Permissions\ScreenShare\Allow\2 = "https://example.com"
+Software\Policies\Mozilla\Firefox\Permissions\ScreenShare\Block\1 = "https://example.edu"
+Software\Policies\Mozilla\Firefox\Permissions\ScreenShare\BlockNewRequests = 0x1 | 0x0
+Software\Policies\Mozilla\Firefox\Permissions\ScreenShare\Locked = 0x1 | 0x0

 ```
 #### Windows (Intune)
 OMA-URI:
 ```
 #### Windows (Intune)
 OMA-URI:


@@ -5091,7 +5129,41 @@ Value (string):
 ```
 OMA-URI:
 ```
 ```
 OMA-URI:
 ```

-./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~VirtualReality/VirtualReality_Locked
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~ScreenShare/ScreenShare_Allow
+```
+Value (string):
+```
+<enabled/>
+<data id="Permissions" value="1&#xF000;https://example.org&#xF000;2&#xF000;https://example.com"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~ScreenShare/ScreenShare_Block
+```
+Value (string):
+```
+<enabled/>
+<data id="Permissions" value="1&#xF000;https://example.edu"/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~ScreenShare/ScreenShare_BlockNewRequests
+```
+Value (string):
+```
+<enabled/> or <disabled/>
+```
+OMA-URI:
+```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~ScreenShare/ScreenShare_Locked

 ```
 Value (string):
 ```
 ```
 Value (string):
 ```


@@ -5178,6 +5250,36 @@ Value (string):
       <key>Locked</key>
       <true/> | <false/>
     </dict>
       <key>Locked</key>
       <true/> | <false/>
     </dict>

+    <key>VirtualReality</key>
+    <dict>
+      <key>Allow</key>
+      <array>
+        <string>https://example.org</string>
+      </array>
+      <key>Block</key>
+      <array>
+        <string>https://example.edu</string>
+      </array>
+      <key>BlockNewRequests</key>
+      <true/> | <false/>
+      <key>Locked</key>
+      <true/> | <false/>
+    </dict>
+    <key>ScreenShare</key>
+    <dict>
+      <key>Allow</key>
+      <array>
+        <string>https://example.org</string>
+      </array>
+      <key>Block</key>
+      <array>
+        <string>https://example.edu</string>
+      </array>
+      <key>BlockNewRequests</key>
+      <true/> | <false/>
+      <key>Locked</key>
+      <true/> | <false/>
+    </dict>

   </dict>
 </dict>
 ```
   </dict>
 </dict>
 ```


@@ -5215,6 +5317,18 @@ Value (string):
         "Block": ["https://example.edu"],
         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
         "Locked": true | false
         "Block": ["https://example.edu"],
         "Default": "allow-audio-video" | "block-audio" | "block-audio-video",
         "Locked": true | false

+      },
+      "VirtualReality": {
+        "Allow": ["https://example.org"],
+        "Block": ["https://example.edu"],
+        "BlockNewRequests": true | false,
+        "Locked": true | false
+      },
+      "ScreenShare": {
+        "Allow": ["https://example.org"],
+        "Block": ["https://example.edu"],
+        "BlockNewRequests": true | false,
+        "Locked": true | false

       }
     }
   }
       }
     }
   }