]> git.p6c8.net - policy-templates.git/commitdiff
Merge pull request #1196 from gregstoll/master
authorMichael Kaply <345868+mkaply@users.noreply.github.com>
Mon, 24 Mar 2025 15:29:21 +0000 (11:29 -0400)
committerGitHub <noreply@github.com>
Mon, 24 Mar 2025 15:29:21 +0000 (11:29 -0400)
Add Content Analysis policies for PlainTextOnly and TimeoutResult

1  2 
docs/index.md

diff --combined docs/index.md
index dca29963135a2521e2b4418a53f1a3569ecfd52d,58c401616d6f964d9133eb179b5b134a5093ed0a..1fa7e71e32c8a00df33143de59d52367c371bfbf
@@@ -676,7 -676,7 +676,7 @@@ to workaround the limit on the length o
  
  OMA-URI:
  ```
 -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/AutoLaunchProtocolsFromOriginsOneLine
 +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOriginsOneLine
  ```
  Value (string):
  ```
@@@ -954,7 -954,7 +954,7 @@@ to workaround the limit on the length o
  
  OMA-URI:
  ```
 -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/BookmarksOneLine
 +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BookmarksOneLine
  ```
  Value (string):
  ```
@@@ -1199,7 -1199,7 +1199,7 @@@ to workaround the limit on the length o
  
  OMA-URI:
  ```
 -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ContainersOneLine
 +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ContainersOneLine
  ```
  Value (string):
  ```
@@@ -1246,7 -1246,7 +1246,7 @@@ Configure Firefox to use an agent for D
  
  `AgentName` is the name of the DLP agent. This is used in dialogs and notifications about DLP operations. The default is "A DLP Agent".
  
- `AgentTimeout` is the timeout in number of seconds after a DLP request is sent to the agent. After this timeout, the request will be denied unless `DefaultResult` is set to 1 or 2. The default is 30.
+ `AgentTimeout` is the timeout in number of seconds after a DLP request is sent to the agent. After this timeout, the request will be denied unless `TimeoutResult` is set to 1 or 2. The default is 300.
  
  `AllowUrlRegexList` is a space-separated list of regular expressions that indicates URLs for which DLP operations will always be allowed without consulting the agent. The default is "^about:(?!blank&#124;srcdoc).*", meaning that any pages that start with "about:" will be exempt from DLP except for "about:blank" and "about:srcdoc", as these can be controlled by web content.
  
  
  * The `Clipboard` entry controls clipboard operations for files and text.
    * `Enabled` indicates whether clipboard operations should use DLP. The default is true.
+   * `PlainTextOnly` indicates whether to only analyze the text/plain format on the clipboard. If this
+     value is false, all formats will be analyzed, which some DLP agents may not expect. Regardless of
+     this value, files will be analyzed as usual. The default is true.
  * The `DragAndDrop` entry controls drag and drop operations for files and text.
    * `Enabled` indicates whether drag and drop operations should use DLP. The default is true.
+   * `PlainTextOnly` indicates whether to only analyze the text/plain format in what is being dropped.
+     If this value is false, all formats will be analyzed, which some DLP agents may not expect.
+     Regardless of this value, files will be analyzed as usual. The default is true.
  * The `FileUpload` entry controls file upload operations for files chosen from the file picker.
    * `Enabled` indicates whether file upload operations should use DLP. The default is true.
  * The `Print` entry controls print operation.
  
  `ShowBlockedResult` indicates whether Firefox should show a notification when a DLP request is denied. The default is true.
  
- **Compatibility:** Firefox 136\
+ `TimeoutResult` indicates the desired behavior for DLP requests if the DLP agent does not respond to a request in less than `AgentTimeout` seconds. The default is 0.
+ | Value | Description
+ | --- | --- |
+ | 0 | Deny the request (default)
+ | 1 | Warn the user and allow them to choose whether to allow or deny
+ | 2 | Allow the request
+ **Compatibility:** Firefox 137\
  **CCK2 Equivalent:** N/A\
- **Preferences Affected:** `browser.contentanalysis.agent_name`, `browser.contentanalysis.agent_timeout`, `browser.contentanalysis.allow_url_regex_list`, `browser.contentanalysis.bypass_for_same_tab_operations`, `browser.contentanalysis.client_signature`, `browser.contentanalysis.default_result`, `browser.contentanalysis.deny_url_regex_list`, `browser.contentanalysis.enabled`, `browser.contentanalysis.interception_point.clipboard.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.enabled`, `browser.contentanalysis.interception_point.file_upload.enabled`, `browser.contentanalysis.interception_point.print.enabled`, `browser.contentanalysis.is_per_user`, `browser.contentanalysis.pipe_path_name`, `browser.contentanalysis.show_blocked_result`
+ **Preferences Affected:** `browser.contentanalysis.agent_name`, `browser.contentanalysis.agent_timeout`, `browser.contentanalysis.allow_url_regex_list`, `browser.contentanalysis.bypass_for_same_tab_operations`, `browser.contentanalysis.client_signature`, `browser.contentanalysis.default_result`, `browser.contentanalysis.deny_url_regex_list`, `browser.contentanalysis.enabled`, `browser.contentanalysis.interception_point.clipboard.enabled`, `browser.contentanalysis.interception_point.clipboard.plain_text_only`, `browser.contentanalysis.interception_point.drag_and_drop.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.plain_text_only`, `browser.contentanalysis.interception_point.file_upload.enabled`, `browser.contentanalysis.interception_point.print.enabled`, `browser.contentanalysis.is_per_user`, `browser.contentanalysis.pipe_path_name`, `browser.contentanalysis.show_blocked_result`, `browser.contentanalysis.timeout_result`
  
  #### Windows (GPO)
  ```
@@@ -1298,12 -1313,15 +1313,15 @@@ Software\Policies\Mozilla\Firefox\Conte
  Software\Policies\Mozilla\Firefox\ContentAnalysis\DenyUrlRegexList = "https://example\.com/.* https://subdomain\.example\.com/.*"
  Software\Policies\Mozilla\Firefox\ContentAnalysis\Enabled = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\Clipboard\Enabled = 0x1 | 0x0
+ Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\Clipboard\PlainTextOnly = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\DragAndDrop\Enabled = 0x1 | 0x0
+ Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\DragAndDrop\PlainTextOnly = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\FileUpload\Enabled = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\Print\Enabled = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\ContentAnalysis\IsPerUser = 0x1 | 0x0
  Software\Policies\Mozilla\Firefox\ContentAnalysis\PipePathName = "pipe_custom_name"
  Software\Policies\Mozilla\Firefox\ContentAnalysis\ShowBlockedResult = 0x1 | 0x0
+ Software\Policies\Mozilla\Firefox\ContentAnalysis\TimeoutResult = 0x0 | 0x1 | 0x2
  ```
  
  #### Windows (Intune)
@@@ -1379,7 -1397,7 +1397,7 @@@ Value (string)
  ```
  OMA-URI:
  ```
- ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Clipboard
+ ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Clipboard_Enabled
  ```
  Value (string):
  ```
  ```
  OMA-URI:
  ```
- ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_DragAndDrop
+ ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Clipboard_PlainTextOnly
  ```
  Value (string):
  ```
  ```
  OMA-URI:
  ```
- ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_FileUpload
+ ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_DragAndDrop_Enabled
  ```
  Value (string):
  ```
  ```
  OMA-URI:
  ```
- ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Print
+ ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_DragAndDrop_PlainTextOnly
+ ```
+ Value (string):
+ ```
+ <enabled/> or <disabled/>
+ ```
+ OMA-URI:
+ ```
+ ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_FileUpload_Enabled
+ ```
+ Value (string):
+ ```
+ <enabled/> or <disabled/>
+ ```
+ OMA-URI:
+ ```
+ ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Print_Enabled
  ```
  Value (string):
  ```
@@@ -1434,6 -1468,15 +1468,15 @@@ Value (string)
  ```
  <enabled/> or <disabled/>
  ```
+ OMA-URI:
+ ```
+ ./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis/ContentAnalysis_TimeoutResult
+ ```
+ Value (string):
+ ```
+ <enabled/>
+ <data id="ContentAnalysis_TimeoutResult" value="1"/>
+ ```
  
  #### policies.json
  ```
        "Enabled": true | false,
        "InterceptionPoints": {
          "Clipboard": {
-           "Enabled": true | false
+           "Enabled": true | false,
+           "PlainTextOnly": true | false
          },
          "DragAndDrop": {
-           "Enabled": true | false
+           "Enabled": true | false,
+           "PlainTextOnly": true | false
          },
          "FileUpload": {
            "Enabled": true | false
        "IsPerUser": true | false,
        "PipePathName": "pipe_custom_name",
        "ShowBlockedResult": true | false,
+       "TimeoutResult": 0 | 1 | 2,
      }
    }
  }
@@@ -3027,7 -3073,7 +3073,7 @@@ to workaround the limit on the length o
  
  OMA-URI:
  ```
 -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExemptDomainFileTypePairsFromFileTypeDownloadWarningsOneLine
 +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarningsOneLine
  ```
  Value (string):
  ```
@@@ -3174,7 -3220,6 +3220,7 @@@ The configuration for each extension i
  | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension.
  | `default_area` | (Firefox 113) String that indicates where to place the extension icon by default. Possible values are `navbar` and `menupanel`.
  | `temporarily_allow_weak_signatures`| (Firefox 127) A boolean that indicates whether to allow installing extensions signed using deprecated signature algorithms.
 +| `private_browsing`| (Firefox 136, Firefox ESR 128.8) A boolean that indicates whether or not this extension should be enabled in private browsing.
  
  **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\
  **CCK2 Equivalent:** N/A\
@@@ -3228,7 -3273,8 +3274,7 @@@ Value (string)
      "installation_mode": "force_installed",
      "install_url": "https://addons.mozilla.org/firefox/downloads/latest/adguardadblocker@adguard.com/latest.xpi"
    },
 -  {
 -    "https-everywhere@eff.org": {
 +  "https-everywhere@eff.org": {
      "installation_mode": "allowed",
      "updates_disabled": false
    }
@@@ -3645,7 -3691,7 +3691,7 @@@ to workaround the limit on the length o
  
  OMA-URI:
  ```
 -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/HandlersOneLine
 +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HandlersOneLine
  ```
  Value (string):
  ```
@@@ -4261,7 -4307,7 +4307,7 @@@ to workaround the limit on the length o
  
  OMA-URI:
  ```
 -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ManagedBoomarksOneLine
 +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBoomarksOneLine
  ```
  Value (string):
  ```
@@@ -5473,7 -5519,7 +5519,7 @@@ to workaround the limit on the length o
  
  OMA-URI:
  ```
 -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/PreferencesOneLine
 +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PreferencesOneLine
  ```
  Value (string):
  ```
@@@ -6929,7 -6975,7 +6975,7 @@@ to workaround the limit on the length o
  
  OMA-URI:
  ```
 -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/WebsiteFilterOneLine
 +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WebsiteFilterOneLine
  ```
  Value (string):
  ```

patrick-canterino.de