X-Git-Url: https://git.p6c8.net/policy-templates.git/blobdiff_plain/85f6aee6b2f929ac3279dedc5cfa3a056fdcbfd5..31011c5fa2a59945707468e5803cd9187979f2e8:/docs/index.md diff --git a/docs/index.md b/docs/index.md index ab5268f..af0b065 100644 --- a/docs/index.md +++ b/docs/index.md @@ -2884,9 +2884,13 @@ If `Fingerprinting` is set to true, fingerprinting scripts on websites are block If `EmailTracking` is set to true, hidden email tracking pixels and scripts on websites are blocked. (Firefox 112) +If `SuspectedFingerprinting` is set to true, Firefox reduces the amount of information exposed to websites to protect against potential fingerprinting attempts. (Firefox 142, Firefox ESR 140.2) + `Exceptions` are origins for which tracking protection is not enabled. -**Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5)\ +`Category` can be either ```strict``` or ```standard```. If category is set, it overrides all other settings except `Exceptions` and the user cannot change the category. (Firefox 142, Firefox ESR 140.2) + +**Compatibility:** Firefox 60, Firefox ESR 60 (Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5. Category added in Firefox 142/140.2.)\ **CCK2 Equivalent:** N/A\ **Preferences Affected:** `privacy.trackingprotection.enabled`, `privacy.trackingprotection.pbmode.enabled`, `privacy.trackingprotection.cryptomining.enabled`, `privacy.trackingprotection.fingerprinting.enabled` @@ -2897,7 +2901,9 @@ Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\EmailTracking = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\EnableTrackingProtection\SuspectedFingerprinting = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com" +Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Category = "strict" | "standard" ``` #### Windows (Intune) OMA-URI: @@ -2949,6 +2955,22 @@ Value (string): ``` or ``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/G_TrackingProtection_Category +``` +Value (string): +``` + +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~TrackingProtection/H_TrackingProtection_SuspectedFingerprinting +``` +Value (string): +``` + or +``` #### macOS ``` @@ -2964,7 +2986,11 @@ Value (string): | EmailTracking | + SuspectedFingerprinting + | Exceptions + Category + strict | standard https://example.com @@ -2981,6 +3007,8 @@ Value (string): "Cryptomining": true | false, "Fingerprinting": true | false, "EmailTracking": true | false, + "SuspectedFingerprinting": true | false, + "Category": "strict" | "standard", "Exceptions": ["https://example.com"] } } @@ -3421,7 +3449,7 @@ Value (string): ### FirefoxHome Customize the Firefox Home page. -**Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4, Snippets was deprecated in Firefox 122) +**Compatibility:** Firefox 68, Firefox ESR 68 (SponsoredTopSites and SponsoredPocket were added in Firefox 95, Firefox ESR 91.4, Snippets was deprecated in Firefox 122, Stories and SponsoredStories were added in Firefox 141 to replace Pocket and SponsoredPocket.) **CCK2 Equivalent:** N/A\ **Preferences Affected:** `browser.newtabpage.activity-stream.showSearch`, `browser.newtabpage.activity-stream.feeds.topsites`, `browser.newtabpage.activity-stream.feeds.section.highlights`, `browser.newtabpage.activity-stream.feeds.section.topstories`, `browser.newtabpage.activity-stream.feeds.snippets`, `browser.newtabpage.activity-stream.showSponsoredTopSites`, `browser.newtabpage.activity-stream.showSponsored` @@ -3444,14 +3472,14 @@ OMA-URI: Value (string): ``` - - - - - - - - + + + + + + + + ``` #### macOS ``` @@ -3468,8 +3496,12 @@ Value (string): | Pocket | + Stories + | SponsoredPocket | + SponsoredStories + | Snippets | Locked @@ -3487,7 +3519,9 @@ Value (string): "SponsoredTopSites": true | false, "Highlights": true | false, "Pocket": true | false, + "Stories": true | false, "SponsoredPocket": true | false, + "SponsoredStories": true | false, "Snippets": true | false, "Locked": true | false } @@ -4857,9 +4891,9 @@ Set permissions associated with camera, microphone, location, notifications, aut `Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68. -**Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2)\ +**Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8, VirtualReality added in Firefox 80, Firefox ESR 78.2, ScreenShare added in Firefox 142, Firefox ESR 140.2)\ **CCK2 Equivalent:** N/A\ -**Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr` +**Preferences Affected:** `permissions.default.camera`, `permissions.default.microphone`, `permissions.default.geo`, `permissions.default.desktop-notification`, `media.autoplay.default`, `permissions.default.xr`, `permissions.default.screen` #### Windows (GPO) ``` @@ -4893,6 +4927,11 @@ Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Allow\2 = "https:// Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Block\1 = "https://example.edu" Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\BlockNewRequests = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\Permissions\VirtualReality\Locked = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\Permissions\ScreenShare\Allow\1 = "https://example.org" +Software\Policies\Mozilla\Firefox\Permissions\ScreenShare\Allow\2 = "https://example.com" +Software\Policies\Mozilla\Firefox\Permissions\ScreenShare\Block\1 = "https://example.edu" +Software\Policies\Mozilla\Firefox\Permissions\ScreenShare\BlockNewRequests = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\Permissions\ScreenShare\Locked = 0x1 | 0x0 ``` #### Windows (Intune) OMA-URI: @@ -5085,7 +5124,41 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~Notifications/VirtualReality_Locked +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~VirtualReality/VirtualReality_Locked +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~ScreenShare/ScreenShare_Allow +``` +Value (string): +``` + + +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~ScreenShare/ScreenShare_Block +``` +Value (string): +``` + + +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~ScreenShare/ScreenShare_BlockNewRequests +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Permissions~ScreenShare/ScreenShare_Locked ``` Value (string): ``` @@ -5172,6 +5245,36 @@ Value (string): Locked | + VirtualReality + + Allow + + https://example.org + + Block + + https://example.edu + + BlockNewRequests + | + Locked + | + + ScreenShare + + Allow + + https://example.org + + Block + + https://example.edu + + BlockNewRequests + | + Locked + | + ``` @@ -5209,6 +5312,18 @@ Value (string): "Block": ["https://example.edu"], "Default": "allow-audio-video" | "block-audio" | "block-audio-video", "Locked": true | false + }, + "VirtualReality": { + "Allow": ["https://example.org"], + "Block": ["https://example.edu"], + "BlockNewRequests": true | false, + "Locked": true | false + }, + "ScreenShare": { + "Allow": ["https://example.org"], + "Block": ["https://example.edu"], + "BlockNewRequests": true | false, + "Locked": true | false } } } @@ -5399,20 +5514,28 @@ intl. keyword.enabled (Firefox 95, Firefox ESR 91.4) layers. layout. +mathml.disabled (Firefox 141, Firefox ESR 140.1) media. network. pdfjs. (Firefox 84, Firefox ESR 78.6) places. pref. print. +privacy.baselineFingerprintingProtection, privacy.baselineFingerprintingProtection.* (Firefox 141, Firefox ESR 140.1) +privacy.fingerprintingProtection, privacy.fingerprintingProtection.* (Firefox 141, Firefox ESR 140.1) privacy.globalprivacycontrol.enabled (Firefox 127, Firefox ESR 128.0) privacy.userContext.enabled (Firefox 126, Firefox ESR 115.11) privacy.userContext.ui.enabled (Firefox 126, Firefox ESR 115.11) signon. (Firefox 83, Firefox ESR 78.5) spellchecker. (Firefox 84, Firefox ESR 78.6) +svg.context-properties.content.enabled (Firefox 141, Firefox ESR 140.1) +svg.disabled (Firefox 141, Firefox ESR 140.1) toolkit.legacyUserProfileCustomizations.stylesheets (Firefox 95, Firefox ESR 91.4) ui. +webgl.disabled (Firefox 141, Firefox ESR 140.1) +webgl.force-enabled (Firefox 141, Firefox ESR 140.1) widget. +xpinstall.enabled (Firefox 141, Firefox ESR 140.1) xpinstall.signatures.required (Firefox ESR 102.10, Firefox ESR only) xpinstall.whitelist.required (Firefox 118, Firefox ESR 115.3) ``` @@ -5420,12 +5543,14 @@ as well as the following security preferences: | Preference | Type | Default | --- | --- | --- | +| security.csp.reporting.enabled | bool | true +|     If set to false, disables CSP reporting. (Firefox 141, Firefox ESR 140.1) | security.default_personal_cert | string | Ask Every Time |     If set to Select Automatically, Firefox automatically chooses the default personal certificate. | security.disable_button.openCertManager | string | N/A -|     If set to true and locked, the View Certificates button in preferences is disabled (Firefox 121, Firefox ESR 115.6) +|     If set to true and locked, the View Certificates button in preferences is disabled. (Firefox 121, Firefox ESR 115.6) | security.disable_button.openDeviceManager | string | N/A -|     If set to true and locked, the Security Devices button in preferences is disabled (Firefox 121, Firefox ESR 115.6) +|     If set to true and locked, the Security Devices button in preferences is disabled. (Firefox 121, Firefox ESR 115.6) | security.insecure_connection_text.enabled | bool | false |     If set to true, adds the words "Not Secure" for insecure sites. | security.insecure_connection_text.pbmode.enabled | bool | false