`Allow` is a list of origins (not domains) where cookies are always allowed. You must include http or https.
+`AllowSession` is a list of origins (not domains) where cookies are only allowed for the current session. You must include http or https.
+
`Block` is a list of origins (not domains) where cookies are always blocked. You must include http or https.
`Default` determines whether cookies are accepted at all.
`Locked` prevents the user from changing cookie preferences.
-**Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker was added in Firefox 63)\
+**Compatibility:** Firefox 60, Firefox ESR 60 (RejectTracker added in Firefox 63, AllowSession added in Firefox 79/78.1)\
**CCK2 Equivalent:** N/A\
**Preferences Affected:** `network.cookie.cookieBehavior`,`network.cookie.lifetimePolicy`
#### Windows (GPO)
```
Software\Policies\Mozilla\Firefox\Cookies\Allow\1 = "https://example.com"
+Software\Policies\Mozilla\Firefox\Cookies\AllowSession\1 = "https://example.edu"
Software\Policies\Mozilla\Firefox\Cookies\Block\1 = "https://example.org"
Software\Policies\Mozilla\Firefox\Cookies\Default = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\Cookies\AcceptThirdParty = "always" | "never" | "from-visited"
```
OMA-URI:
```
+./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_AllowSession
+```
+Value (string):
+```
+<enabled/>
+<data id="Cookies_Allow" value="1https://example.edu"/>
+```
+OMA-URI:
+```
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Cookies/Cookies_Block
```
Value (string):
<array>
<string>http://example.com</string>
</array>
+ <key>AllowSession</key>
+ <array>
+ <string>http://example.edu</string>
+ </array>
<key>Block</key>
<array>
<string>http://example.org</string>
"policies": {
"Cookies": {
"Allow": ["http://example.org/"],
+ "AllowSession": ["http://example.edu/"],
"Block": ["http://example.edu/"],
"Default": true | false,
"AcceptThirdParty": "always" | "never" | "from-visited",
<array>
<string>https://www.example.org/</string>
</array>
+ <key>Allowsession</key>
+ <array>
+ <string>https://www.example.edu/</string>
+ </array>
<key>Block</key>
<array>
<string>https://www.example.edu/</string>
<string id="EncryptedMediaExtensions_group">DRM-Medien Erweiterungen</string>
<string id="PDFjs_group">PDFjs</string>
<string id="Allow">Erlaubte Seiten</string>
+ <string id="AllowSession">Erlaubte Seiten (Session Only)</string>
<string id="Block">Gesperrte Seiten</string>
<string id="AppAutoUpdate">Automatisches Update</string>
<string id="AppAutoUpdate_Explain">Wenn diese Richtlinieneinstellung aktiviert ist, wird Firefox automatisch ohne Zustimmung des Benutzers aktualisiert.
<string id="Cookies_Allow_Explain">Wenn Sie die Richtlinieneinstellung aktivieren, sind Cookies immer für die angegebenen URLs erlaubt. Wenn eine Top-Level-Domain angegeben ist (http://example.org), sind Cookies auch für alle Sub-Domains zulässig.
Wenn Sie die Richtlinieneinstellung deaktivieren oder nicht konfigurieren, wird die Standard Cookie Richtlinie verwendet.</string>
+ <string id="Cookies_AllowSession_Explain">If this policy is enabled, cookies are allowed for the origins indicated, but removed at the end of the session. If a top level domain is specified (http://example.org), cookies are allowed for all subdomains as well.
+
+If this policy is disabled or not configured, the default cookie policy is followed.</string>
<string id="Cookies_Block_Explain">Wenn Sie die Richtlinieneinstellung aktivieren, sind Cookies für die angegebenen URLs gesperrt. Wenn eine Top-Level-Domain angegeben ist (http://example.org), werden Cookies von allen Sub-Domains ebenfalls blockiert.
Wenn Sie die Richtlinieneinstellung deaktivieren oder nicht konfigurieren, sind Cookies standardmäßig nicht blockiert.</string>
<string id="EncryptedMediaExtensions_group">Encrypted Media Extensions</string>
<string id="PDFjs_group">PDFjs</string>
<string id="Allow">Allowed Sites</string>
+ <string id="AllowSession">Allowed Sites (Session Only)</string>
<string id="Block">Blocked Sites</string>
<string id="AppAutoUpdate">Application Autoupdate</string>
<string id="AppAutoUpdate_Explain">If this policy is enabled, Firefox is automatically updated without user approval.
If this policy is not configured or enabled, add-ons can be installed.</string>
<string id="Cookies_Allow_Explain">If this policy is enabled, cookies are always allowed for the origins indicated. If a top level domain is specified (http://example.org), cookies are allowed for all subdomains as well.
+If this policy is disabled or not configured, the default cookie policy is followed.</string>
+ <string id="Cookies_AllowSession_Explain">If this policy is enabled, cookies are allowed for the origins indicated, but removed at the end of the session. If a top level domain is specified (http://example.org), cookies are allowed for all subdomains as well.
+
If this policy is disabled or not configured, the default cookie policy is followed.</string>
<string id="Cookies_Block_Explain">If this policy is enabled, cookies are blocked for the origins indicated. If a top level domain is specified (http://example.org), cookies are blocked from all subdomains as well.
<string id="EncryptedMediaExtensions_group">Extensiones de medios cifrados</string>
<string id="PDFjs_group">PDFjs</string>
<string id="Allow">Sitios permitidos</string>
+ <string id="AllowSession">Sitios permitidos (Session Only)</string>
<string id="Block">Sitios bloqueados</string>
<string id="AppAutoUpdate">Actualización automática de aplicación</string>
<string id="AppAutoUpdate_Explain">Si esta política está habilitada, Firefox se actualizará automáticamente sin la aprobación del usuario.
<string id="Cookies_Allow_Explain">Si esta política está habilitada, las cookies siempre estarán permitidas para los orígenes indicados. Si se especifica un dominio de nivel superior (http://ejemplo.org), también se permitirán cookies para todos los subdominios.
Si esta política está deshabilitada o no está configurada, se seguirá la política de cookies predeterminada.</string>
+ <string id="Cookies_AllowSession_Explain">If this policy is enabled, cookies are allowed for the origins indicated, but removed at the end of the session. If a top level domain is specified (http://example.org), cookies are allowed for all subdomains as well.
+
+If this policy is disabled or not configured, the default cookie policy is followed.</string>
<string id="Cookies_Block_Explain">Si esta política está habilitada, las cookies estarán bloqueadas por los orígenes indicados. Si se especifica un dominio de nivel superior (http://ejemplo.org), también se bloquearán las cookies de todos los subdominios.
Si esta política está deshabilitada o no está configurada, las cookies no estarán bloqueadas de manera predeterminada.</string>
<list id="Permissions" key="Software\Policies\Mozilla\Firefox\Cookies\Allow" valuePrefix=""/>
</elements>
</policy>
+ <policy name="Cookies_AllowSession" class="Both" displayName="$(string.AllowSession)" explainText="$(string.Cookies_AllowSession_Explain)" key="Software\Policies\Mozilla\Firefox" presentation="$(presentation.Permissions)">
+ <parentCategory ref="Cookies"/>
+ <supportedOn ref="SUPPORTED_FF79"/>
+ <elements>
+ <list id="Permissions" key="Software\Policies\Mozilla\Firefox\Cookies\AllowSession" valuePrefix=""/>
+ </elements>
+ </policy>
<policy name="Cookies_Block" class="Both" displayName="$(string.Block)" explainText="$(string.Cookies_Block_Explain)" key="Software\Policies\Mozilla\Firefox" presentation="$(presentation.Permissions)">
<parentCategory ref="Cookies"/>
<supportedOn ref="SUPPORTED_FF60"/>
<string id="EncryptedMediaExtensions_group">Encrypted Media Extensions</string>\r
<string id="PDFjs_group">PDFjs</string>\r
<string id="Allow">Sites autorisés</string>\r
+ <string id="AllowSession">Sites autorisés (Session Only)</string>\r
<string id="Block">Sites bloqués</string>\r
<string id="AppAutoUpdate">Application Autoupdate</string>\r
<string id="AppAutoUpdate_Explain">Si cette stratégie est activée, Firefox est automatiquement mis a jour sans aprobation de l'utilisateur.\r
<string id="Cookies_Allow_Explain">Si cette stratégie est activée, les cookies sont toujours autorisés pour les origines indiquées. Si un domaine de premier niveau est spécifié (http://example.org), les cookies sont également autorisés pour tous les sous-domaines.\r
\r
Si cette stratégie est désactivée ou non configurée, la stratégie de cookie par défaut est appliquée.</string>\r
+ <string id="Cookies_AllowSession_Explain">If this policy is enabled, cookies are allowed for the origins indicated, but removed at the end of the session. If a top level domain is specified (http://example.org), cookies are allowed for all subdomains as well.\r
+\r
+If this policy is disabled or not configured, the default cookie policy is followed.</string>\r
<string id="Cookies_Block_Explain">Si cette stratégie est activée, les cookies sont bloqués pour les origines indiquées. Si un domaine de premier niveau est spécifié (http://example.org), les cookies sont également bloqués pour tous les sous-domaines.\r
\r
Si cette stratégie est désactivée ou non configurée, les cookies ne sont pas bloqués par défaut.</string>\r
<string id="EncryptedMediaExtensions_group">Encrypted Media Extensions</string>
<string id="PDFjs_group">PDFjs</string>
<string id="Allow">Siti consentiti</string>
+ <string id="AllowSession">Siti consentiti (Session Only)</string>
<string id="Block">Siti bloccati</string>
<string id="AppAutoUpdate">Aggiornamento automatico applicazione</string>
<string id="AppAutoUpdate_Explain">Se questo criterio è abilitato, Firefox è aggiornato automaticamente senza l'approvazione dell'utente.
<string id="Cookies_Allow_Explain">Se questo criterio è abilitato, i cookie dai siti indicati sono sempre consentiti. Se è specificato un dominio di primo livello (http://example.org), i cookie sono consentiti anche da tutti i sottodomini.
Se questo criterio è disabilitato o non configurato, viene seguita la politica predefinita per i cookie.</string>
+ <string id="Cookies_AllowSession_Explain">If this policy is enabled, cookies are allowed for the origins indicated, but removed at the end of the session. If a top level domain is specified (http://example.org), cookies are allowed for all subdomains as well.
+
+If this policy is disabled or not configured, the default cookie policy is followed.</string>
<string id="Cookies_Block_Explain">Se questo criterio è abilitato, i cookie dai siti indicati sono bloccati. Se è specificato un dominio di primo livello (http://example.org), i cookie sono bloccati anche da tutti i sottodomini.
Se questo criterio è disabilitato o non configurato, i cookie non sono bloccati per impostazione predefinita.</string>
<string id="EncryptedMediaExtensions_group">加密媒體擴充功能</string>
<string id="PDFjs_group">PDFjs</string>
<string id="Allow">允許的網站</string>
+ <string id="AllowSession">允許的網站 (Session Only)</string>
<string id="Block">封鎖的網站</string>
<string id="AppAutoUpdate">應用程式自動更新</string>
<string id="AppAutoUpdate_Explain">若啟用此原則,Firefox 會不經使用者同意自動更新。
<string id="Cookies_Allow_Explain">若啟用此原則,將允許來自指定來源網址的 Cookie。若指定了頂級網域名稱(例如 http://example.org),也將允許所有來自子網域的 Cookie。
若停用或不設定此原則,則遵循預設的 Cookie 原則。</string>
+ <string id="Cookies_AllowSession_Explain">If this policy is enabled, cookies are allowed for the origins indicated, but removed at the end of the session. If a top level domain is specified (http://example.org), cookies are allowed for all subdomains as well.
+
+If this policy is disabled or not configured, the default cookie policy is followed.</string>
<string id="Cookies_Block_Explain">若啟用此原則,將封鎖來自指定來源網址的 Cookie。若指定了頂級網域名稱(例如 http://example.org),也將封鎖所有來自子網域的 Cookie。
若停用或不設定此原則,則預設不封鎖 Cookie。</string>