From 5bf5378f03bbda84c23d4658da62711c8c7948eb Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Wed, 5 Feb 2025 15:14:40 -0500 Subject: [PATCH 01/16] Add InterceptionPoints --- docs/index.md | 8 ++--- windows/de-DE/firefox.adml | 2 +- windows/en-US/firefox.adml | 19 ++++++++++- windows/firefox.admx | 67 +++++++++++++++++++++++++++++++------- windows/fr-FR/firefox.adml | 2 +- windows/ru-RU/firefox.adml | 2 +- 6 files changed, 80 insertions(+), 20 deletions(-) diff --git a/docs/index.md b/docs/index.md index 51cb08a..e083181 100644 --- a/docs/index.md +++ b/docs/index.md @@ -1379,7 +1379,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis/ContentAnalysis_InterceptionPoints_Clipboard_Enabled +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Print ``` Value (string): ``` @@ -1387,7 +1387,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis/ContentAnalysis_InterceptionPoints_DragAndDrop_Enabled +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_DragAndDrop ``` Value (string): ``` @@ -1395,7 +1395,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis/ContentAnalysis_InterceptionPoints_FileUpload_Enabled +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_FileUpload ``` Value (string): ``` @@ -1403,7 +1403,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis/ContentAnalysis_InterceptionPoints_Print_Enabled +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Print ``` Value (string): ``` diff --git a/windows/de-DE/firefox.adml b/windows/de-DE/firefox.adml index 5529238..247c55d 100644 --- a/windows/de-DE/firefox.adml +++ b/windows/de-DE/firefox.adml @@ -75,7 +75,7 @@ Firefox 130 oder höher, Firefox 128.2 ESR oder höher Firefox 130 oder höher Firefox 131 oder höher, Firefox 128.3 ESR oder höhe - Firefox 136 oder höher + Firefox 137 oder höher Firefox Berechtigungen Kamera diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml index ca1f3ff..f28aec4 100644 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@ -75,7 +75,7 @@ Firefox 130 or later, Firefox 128.2 ESR or later Firefox 130 or later Firefox 131 or later, Firefox 128.3 ESR or later - Firefox 136 or later + Firefox 137 or later Firefox Permissions Camera @@ -104,6 +104,7 @@ Security Devices Firefox Suggest (US only) Content Analysis (DLP) + Interception Points Allowed Sites Allowed Sites (Session Only) Blocked Sites @@ -1184,6 +1185,22 @@ If this policy is disabled or not configured, the default pipe name of 'path_use If this policy is disabled, Firefox will not show a notification when a DLP request is denied. If this policy is enabled or not configured, Firefox will show a notification when a DLP request is denied. + Clipboard + If this policy is disabled, clipboard operations will not use DLP. + +If this policy is enabled or not configured, clipboard operations will use DLP. + Drag And Drop + If this policy is disabled, drag and drop operations will not use DLP. + +If this policy is enabled or not configured, drag and drop operations will use DLP. + File Upload + If this policy is disabled, file upload operations will not use DLP. + +If this policy is enabled or not configured, file upload operations will use DLP. + Print + If this policy is disabled, print operations will not use DLP. + +If this policy is enabled or not configured, print operations will use DLP. If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. For a description of the preference, see: diff --git a/windows/firefox.admx b/windows/firefox.admx index 6a43ed4..7ef174e 100644 --- a/windows/firefox.admx +++ b/windows/firefox.admx @@ -77,7 +77,7 @@ - + @@ -174,6 +174,9 @@ + + + @@ -4311,28 +4314,28 @@ - + - + - + - + @@ -4342,14 +4345,14 @@ - + - + @@ -4372,14 +4375,14 @@ - + - + @@ -4389,7 +4392,7 @@ - + @@ -4399,14 +4402,54 @@ - + - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/windows/fr-FR/firefox.adml b/windows/fr-FR/firefox.adml index 08249d6..31fe03d 100644 --- a/windows/fr-FR/firefox.adml +++ b/windows/fr-FR/firefox.adml @@ -75,7 +75,7 @@ Firefox 130 ou supérieur, Firefox 128.2 ESR ou supérieur Firefox 130 ou supérieur Firefox 131 ou supérieur, Firefox 128.3 ESR ou supérieur - Firefox 136 ou supérieur + Firefox 137 ou supérieur Firefox Permissions Caméra diff --git a/windows/ru-RU/firefox.adml b/windows/ru-RU/firefox.adml index 2ca51ae..c028018 100644 --- a/windows/ru-RU/firefox.adml +++ b/windows/ru-RU/firefox.adml @@ -76,7 +76,7 @@ Firefox 130 или более поздние версии, Firefox 128.2 ESR или более поздние версии Firefox 130 или более поздние версии Firefox 131 или более поздние версии, Firefox 128.3 ESR или более поздние версии - Firefox 136 или более поздние версии + Firefox 137 или более поздние версии Firefox Разрешения Камера -- 2.43.0 From 34817007b3555e82d8c3bfd97e729c5b1532fe7b Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Wed, 5 Feb 2025 15:36:01 -0500 Subject: [PATCH 02/16] Correct typo --- docs/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/index.md b/docs/index.md index e083181..231c4b5 100644 --- a/docs/index.md +++ b/docs/index.md @@ -1379,7 +1379,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Print +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Clipboard ``` Value (string): ``` -- 2.43.0 From 78f295c4448bd2b26f08204bc9c3cc0d91f6c8fd Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Thu, 6 Feb 2025 11:51:03 -0500 Subject: [PATCH 03/16] Add new security prefs --- docs/index.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/index.md b/docs/index.md index 231c4b5..6d7aaa2 100644 --- a/docs/index.md +++ b/docs/index.md @@ -5378,6 +5378,8 @@ as well as the following security preferences: |      If true, if an OCSP request times out, the connection fails. | security.osclientcerts.assume_rsa_pss_support | boolean | true |      If false, we don't assume an RSA key can do RSA-PSS. (Firefox 114, Firefox ESR 102.12) +| security.pki.certificate_transparency.disable_for_hosts +| security.pki.certificate_transparency.disable_for_spki_hashes | security.pki.certificate_transparency.mode | integer | 0 |      Configures Certificate Transparency support mode (Firefox 133) | security.ssl.enable_ocsp_stapling | boolean | true -- 2.43.0 From 5307aa1608387f1119f95fb794ef33f4685058e7 Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Thu, 6 Feb 2025 11:57:05 -0500 Subject: [PATCH 04/16] Point CT prefs to source code --- docs/index.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/index.md b/docs/index.md index 6d7aaa2..6618e5f 100644 --- a/docs/index.md +++ b/docs/index.md @@ -5378,8 +5378,10 @@ as well as the following security preferences: |      If true, if an OCSP request times out, the connection fails. | security.osclientcerts.assume_rsa_pss_support | boolean | true |      If false, we don't assume an RSA key can do RSA-PSS. (Firefox 114, Firefox ESR 102.12) -| security.pki.certificate_transparency.disable_for_hosts -| security.pki.certificate_transparency.disable_for_spki_hashes +| security.pki.certificate_transparency.disable_for_hosts | | +|      See [this page](https://searchfox.org/mozilla-central/rev/d1fbe983fb7720f0a4aca0e748817af11c1a374e/modules/libpref/init/StaticPrefList.yaml#16334) for more details. +| security.pki.certificate_transparency.disable_for_spki_hashes | | +|      See [this page](https://searchfox.org/mozilla-central/rev/d1fbe983fb7720f0a4aca0e748817af11c1a374e/modules/libpref/init/StaticPrefList.yaml#16344) for more details. | security.pki.certificate_transparency.mode | integer | 0 |      Configures Certificate Transparency support mode (Firefox 133) | security.ssl.enable_ocsp_stapling | boolean | true -- 2.43.0 From 70f1f40e1b65df34ad6a9ffc32991e6bd521081b Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Mon, 10 Feb 2025 16:48:52 -0500 Subject: [PATCH 05/16] Add English DLP policies to translations --- windows/de-DE/firefox.adml | 17 +++++++++++++++++ windows/fr-FR/firefox.adml | 17 +++++++++++++++++ windows/ru-RU/firefox.adml | 17 +++++++++++++++++ 3 files changed, 51 insertions(+) diff --git a/windows/de-DE/firefox.adml b/windows/de-DE/firefox.adml index 247c55d..7d05d82 100644 --- a/windows/de-DE/firefox.adml +++ b/windows/de-DE/firefox.adml @@ -104,6 +104,7 @@ Sicherheitsmodule Firefox Suggest (nur USA) Verhinderung von Datenverlust (DLP) + Interception Points Erlaubte Seiten Erlaubte Seiten (Session Only) Gesperrte Seiten @@ -1190,6 +1191,22 @@ Wenn diese Richtlinieneinstellung deaktiviert oder nicht konfiguriert ist, wird Wenn diese Richtlinieneinstellung deaktiviert ist, zeigt Firefox keine Benachrichtigung an, wenn eine DLP-Anfrage abgelehnt wird. Wenn diese Richtlinieneinstellung aktiviert oder nicht konfiguriert ist, zeigt Firefox eine Benachrichtigung an, wenn eine DLP-Anfrage abgelehnt wird. + Clipboard + If this policy is disabled, clipboard operations will not use DLP. + +If this policy is enabled or not configured, clipboard operations will use DLP. + Drag And Drop + If this policy is disabled, drag and drop operations will not use DLP. + +If this policy is enabled or not configured, drag and drop operations will use DLP. + File Upload + If this policy is disabled, file upload operations will not use DLP. + +If this policy is enabled or not configured, file upload operations will use DLP. + Print + If this policy is disabled, print operations will not use DLP. + +If this policy is enabled or not configured, print operations will use DLP. Wenn diese Richtlinieneinstellung aktiviert ist, ist die Einstellung auf true gesperrt. Wenn diese Richtlinieneinstellung deaktiviert ist, ist die Einstellung auf false gesperrt. Für eine Beschreibung der Einstellung, siehe: diff --git a/windows/fr-FR/firefox.adml b/windows/fr-FR/firefox.adml index 31fe03d..1b75eed 100644 --- a/windows/fr-FR/firefox.adml +++ b/windows/fr-FR/firefox.adml @@ -104,6 +104,7 @@ Périphériques de sécurité Firefox Suggest (US seulement) Content Analysis (DLP) + Interception Points Sites autorisés Sites autorisés (Session seulement) Sites bloqués @@ -1184,6 +1185,22 @@ If this policy is disabled or not configured, the default pipe name of 'path_use If this policy is disabled, Firefox will not show a notification when a DLP request is denied. If this policy is enabled or not configured, Firefox will show a notification when a DLP request is denied. + Clipboard + If this policy is disabled, clipboard operations will not use DLP. + +If this policy is enabled or not configured, clipboard operations will use DLP. + Drag And Drop + If this policy is disabled, drag and drop operations will not use DLP. + +If this policy is enabled or not configured, drag and drop operations will use DLP. + File Upload + If this policy is disabled, file upload operations will not use DLP. + +If this policy is enabled or not configured, file upload operations will use DLP. + Print + If this policy is disabled, print operations will not use DLP. + +If this policy is enabled or not configured, print operations will use DLP. Si cette stratégie est activée, la préférence est verrouillée sur "true". Si cette stratégie est désactivée, la préférence est verrouillée sur "false". Pour une description de la préférence, consultez : diff --git a/windows/ru-RU/firefox.adml b/windows/ru-RU/firefox.adml index c028018..59020e0 100644 --- a/windows/ru-RU/firefox.adml +++ b/windows/ru-RU/firefox.adml @@ -105,6 +105,7 @@ Устройства безопасности Firefox Suggest (US only) Content Analysis (DLP) + Interception Points Разрешённые сайты Разрешённые сайты (Session Only) Заблокированные сайты @@ -1187,6 +1188,22 @@ If this policy is disabled or not configured, the default pipe name of 'path_use If this policy is disabled, Firefox will not show a notification when a DLP request is denied. If this policy is enabled or not configured, Firefox will show a notification when a DLP request is denied. + Clipboard + If this policy is disabled, clipboard operations will not use DLP. + +If this policy is enabled or not configured, clipboard operations will use DLP. + Drag And Drop + If this policy is disabled, drag and drop operations will not use DLP. + +If this policy is enabled or not configured, drag and drop operations will use DLP. + File Upload + If this policy is disabled, file upload operations will not use DLP. + +If this policy is enabled or not configured, file upload operations will use DLP. + Print + If this policy is disabled, print operations will not use DLP. + +If this policy is enabled or not configured, print operations will use DLP. Если эта политика включена, предпочтение заблокировано на true. Если эта политика отключена, предпочтение заблокировано на false. Описание предпочтения см.: -- 2.43.0 From 2d369a6c22c70dbe5fcf3e650eb5b96770478d5a Mon Sep 17 00:00:00 2001 From: Greg Stoll Date: Mon, 24 Feb 2025 10:45:51 -0600 Subject: [PATCH 06/16] add PlainTextOnly policies added in bug 1938188 --- docs/index.md | 40 +++++++++++++++++++++++++++++++++------- 1 file changed, 33 insertions(+), 7 deletions(-) diff --git a/docs/index.md b/docs/index.md index 6618e5f..f236134 100644 --- a/docs/index.md +++ b/docs/index.md @@ -1270,8 +1270,14 @@ Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compati * The `Clipboard` entry controls clipboard operations for files and text. * `Enabled` indicates whether clipboard operations should use DLP. The default is true. + * `PlainTextOnly` indicates whether to only analyze the text/plain format on the clipboard. If this + value is false, all formats will be analyzed, which some DLP agents may not expect. Regardless of + this value, files will be analyzed as usual. The default is true. * The `DragAndDrop` entry controls drag and drop operations for files and text. * `Enabled` indicates whether drag and drop operations should use DLP. The default is true. + * `PlainTextOnly` indicates whether to only analyze the text/plain format in what is being dropped. + If this value is false, all formats will be analyzed, which some DLP agents may not expect. + Regardless of this value, files will be analyzed as usual. The default is true. * The `FileUpload` entry controls file upload operations for files chosen from the file picker. * `Enabled` indicates whether file upload operations should use DLP. The default is true. * The `Print` entry controls print operation. @@ -1285,7 +1291,7 @@ Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compati **Compatibility:** Firefox 136\ **CCK2 Equivalent:** N/A\ -**Preferences Affected:** `browser.contentanalysis.agent_name`, `browser.contentanalysis.agent_timeout`, `browser.contentanalysis.allow_url_regex_list`, `browser.contentanalysis.bypass_for_same_tab_operations`, `browser.contentanalysis.client_signature`, `browser.contentanalysis.default_result`, `browser.contentanalysis.deny_url_regex_list`, `browser.contentanalysis.enabled`, `browser.contentanalysis.interception_point.clipboard.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.enabled`, `browser.contentanalysis.interception_point.file_upload.enabled`, `browser.contentanalysis.interception_point.print.enabled`, `browser.contentanalysis.is_per_user`, `browser.contentanalysis.pipe_path_name`, `browser.contentanalysis.show_blocked_result` +**Preferences Affected:** `browser.contentanalysis.agent_name`, `browser.contentanalysis.agent_timeout`, `browser.contentanalysis.allow_url_regex_list`, `browser.contentanalysis.bypass_for_same_tab_operations`, `browser.contentanalysis.client_signature`, `browser.contentanalysis.default_result`, `browser.contentanalysis.deny_url_regex_list`, `browser.contentanalysis.enabled`, `browser.contentanalysis.interception_point.clipboard.enabled`, `browser.contentanalysis.interception_point.clipboard.plain_text_only`, `browser.contentanalysis.interception_point.drag_and_drop.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.plain_text_only`, `browser.contentanalysis.interception_point.file_upload.enabled`, `browser.contentanalysis.interception_point.print.enabled`, `browser.contentanalysis.is_per_user`, `browser.contentanalysis.pipe_path_name`, `browser.contentanalysis.show_blocked_result` #### Windows (GPO) ``` @@ -1298,7 +1304,9 @@ Software\Policies\Mozilla\Firefox\ContentAnalysis\DefaultResult = 0x0 | 0x1 | 0x Software\Policies\Mozilla\Firefox\ContentAnalysis\DenyUrlRegexList = "https://example\.com/.* https://subdomain\.example\.com/.*" Software\Policies\Mozilla\Firefox\ContentAnalysis\Enabled = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\Clipboard\Enabled = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\Clipboard\PlainTextOnly = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\DragAndDrop\Enabled = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\DragAndDrop\PlainTextOnly = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\FileUpload\Enabled = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\Print\Enabled = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\ContentAnalysis\IsPerUser = 0x1 | 0x0 @@ -1379,7 +1387,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Clipboard +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Clipboard_Enabled ``` Value (string): ``` @@ -1387,7 +1395,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_DragAndDrop +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Clipboard_PlainTextOnly ``` Value (string): ``` @@ -1395,7 +1403,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_FileUpload +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_DragAndDrop_Enabled ``` Value (string): ``` @@ -1403,7 +1411,23 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Print +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_DragAndDrop_PlainTextOnly +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_FileUpload_Enabled +``` +Value (string): +``` + or +``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Print_Enabled ``` Value (string): ``` @@ -1450,10 +1474,12 @@ Value (string): "Enabled": true | false, "InterceptionPoints": { "Clipboard": { - "Enabled": true | false + "Enabled": true | false, + "PlainTextOnly": true | false }, "DragAndDrop": { - "Enabled": true | false + "Enabled": true | false, + "PlainTextOnly": true | false }, "FileUpload": { "Enabled": true | false -- 2.43.0 From ab3e3914cccdfe29160bad8a2a06aaa19e2093a1 Mon Sep 17 00:00:00 2001 From: Greg Stoll Date: Mon, 24 Feb 2025 10:54:56 -0600 Subject: [PATCH 07/16] add TimeoutResult policy added in bug 1944395 --- docs/index.md | 24 ++++++++++++++++++++++-- 1 file changed, 22 insertions(+), 2 deletions(-) diff --git a/docs/index.md b/docs/index.md index f236134..d974fe4 100644 --- a/docs/index.md +++ b/docs/index.md @@ -1246,7 +1246,7 @@ Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compati `AgentName` is the name of the DLP agent. This is used in dialogs and notifications about DLP operations. The default is "A DLP Agent". -`AgentTimeout` is the timeout in number of seconds after a DLP request is sent to the agent. After this timeout, the request will be denied unless `DefaultResult` is set to 1 or 2. The default is 30. +`AgentTimeout` is the timeout in number of seconds after a DLP request is sent to the agent. After this timeout, the request will be denied unless `TimeoutResult` is set to 1 or 2. The default is 30. `AllowUrlRegexList` is a space-separated list of regular expressions that indicates URLs for which DLP operations will always be allowed without consulting the agent. The default is "^about:(?!blank|srcdoc).*", meaning that any pages that start with "about:" will be exempt from DLP except for "about:blank" and "about:srcdoc", as these can be controlled by web content. @@ -1289,9 +1289,18 @@ Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compati `ShowBlockedResult` indicates whether Firefox should show a notification when a DLP request is denied. The default is true. +`TimeoutResult` indicates the desired behavior for DLP requests if the DLP agent does not respond to a request in less than `AgentTimeout` seconds. The default is 0. + +| Value | Description +| --- | --- | +| 0 | Deny the request (default) +| 1 | Warn the user and allow them to choose whether to allow or deny +| 2 | Allow the request + + **Compatibility:** Firefox 136\ **CCK2 Equivalent:** N/A\ -**Preferences Affected:** `browser.contentanalysis.agent_name`, `browser.contentanalysis.agent_timeout`, `browser.contentanalysis.allow_url_regex_list`, `browser.contentanalysis.bypass_for_same_tab_operations`, `browser.contentanalysis.client_signature`, `browser.contentanalysis.default_result`, `browser.contentanalysis.deny_url_regex_list`, `browser.contentanalysis.enabled`, `browser.contentanalysis.interception_point.clipboard.enabled`, `browser.contentanalysis.interception_point.clipboard.plain_text_only`, `browser.contentanalysis.interception_point.drag_and_drop.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.plain_text_only`, `browser.contentanalysis.interception_point.file_upload.enabled`, `browser.contentanalysis.interception_point.print.enabled`, `browser.contentanalysis.is_per_user`, `browser.contentanalysis.pipe_path_name`, `browser.contentanalysis.show_blocked_result` +**Preferences Affected:** `browser.contentanalysis.agent_name`, `browser.contentanalysis.agent_timeout`, `browser.contentanalysis.allow_url_regex_list`, `browser.contentanalysis.bypass_for_same_tab_operations`, `browser.contentanalysis.client_signature`, `browser.contentanalysis.default_result`, `browser.contentanalysis.deny_url_regex_list`, `browser.contentanalysis.enabled`, `browser.contentanalysis.interception_point.clipboard.enabled`, `browser.contentanalysis.interception_point.clipboard.plain_text_only`, `browser.contentanalysis.interception_point.drag_and_drop.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.plain_text_only`, `browser.contentanalysis.interception_point.file_upload.enabled`, `browser.contentanalysis.interception_point.print.enabled`, `browser.contentanalysis.is_per_user`, `browser.contentanalysis.pipe_path_name`, `browser.contentanalysis.show_blocked_result`, `browser.contentanalysis.timeout_result` #### Windows (GPO) ``` @@ -1312,6 +1321,7 @@ Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\Print\Enabl Software\Policies\Mozilla\Firefox\ContentAnalysis\IsPerUser = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\ContentAnalysis\PipePathName = "pipe_custom_name" Software\Policies\Mozilla\Firefox\ContentAnalysis\ShowBlockedResult = 0x1 | 0x0 +Software\Policies\Mozilla\Firefox\ContentAnalysis\TimeoutResult = 0x0 | 0x1 | 0x2 ``` #### Windows (Intune) @@ -1458,6 +1468,15 @@ Value (string): ``` or ``` +OMA-URI: +``` +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis/ContentAnalysis_TimeoutResult +``` +Value (string): +``` + + +``` #### policies.json ``` @@ -1491,6 +1510,7 @@ Value (string): "IsPerUser": true | false, "PipePathName": "pipe_custom_name", "ShowBlockedResult": true | false, + "TimeoutResult": 0 | 1 | 2, } } } -- 2.43.0 From 8b4437b123798843eede5706075d9dc4af078870 Mon Sep 17 00:00:00 2001 From: Greg Stoll Date: Mon, 24 Feb 2025 10:57:45 -0600 Subject: [PATCH 08/16] update default ContentAnalysis AgentTimeout done as a part of bug 1936020 --- docs/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/index.md b/docs/index.md index d974fe4..8d3c726 100644 --- a/docs/index.md +++ b/docs/index.md @@ -1246,7 +1246,7 @@ Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compati `AgentName` is the name of the DLP agent. This is used in dialogs and notifications about DLP operations. The default is "A DLP Agent". -`AgentTimeout` is the timeout in number of seconds after a DLP request is sent to the agent. After this timeout, the request will be denied unless `TimeoutResult` is set to 1 or 2. The default is 30. +`AgentTimeout` is the timeout in number of seconds after a DLP request is sent to the agent. After this timeout, the request will be denied unless `TimeoutResult` is set to 1 or 2. The default is 300. `AllowUrlRegexList` is a space-separated list of regular expressions that indicates URLs for which DLP operations will always be allowed without consulting the agent. The default is "^about:(?!blank|srcdoc).*", meaning that any pages that start with "about:" will be exempt from DLP except for "about:blank" and "about:srcdoc", as these can be controlled by web content. -- 2.43.0 From 1d831ed978da808a05152e15eec880509801eee8 Mon Sep 17 00:00:00 2001 From: Greg Stoll Date: Mon, 24 Feb 2025 10:58:32 -0600 Subject: [PATCH 09/16] bumping supported version for Content Analysis --- docs/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/index.md b/docs/index.md index 8d3c726..58c4016 100644 --- a/docs/index.md +++ b/docs/index.md @@ -1298,7 +1298,7 @@ Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compati | 2 | Allow the request -**Compatibility:** Firefox 136\ +**Compatibility:** Firefox 137\ **CCK2 Equivalent:** N/A\ **Preferences Affected:** `browser.contentanalysis.agent_name`, `browser.contentanalysis.agent_timeout`, `browser.contentanalysis.allow_url_regex_list`, `browser.contentanalysis.bypass_for_same_tab_operations`, `browser.contentanalysis.client_signature`, `browser.contentanalysis.default_result`, `browser.contentanalysis.deny_url_regex_list`, `browser.contentanalysis.enabled`, `browser.contentanalysis.interception_point.clipboard.enabled`, `browser.contentanalysis.interception_point.clipboard.plain_text_only`, `browser.contentanalysis.interception_point.drag_and_drop.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.plain_text_only`, `browser.contentanalysis.interception_point.file_upload.enabled`, `browser.contentanalysis.interception_point.print.enabled`, `browser.contentanalysis.is_per_user`, `browser.contentanalysis.pipe_path_name`, `browser.contentanalysis.show_blocked_result`, `browser.contentanalysis.timeout_result` -- 2.43.0 From b5e8ac11f48b7ed7b61807b28c05c5192f9a1036 Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Wed, 5 Mar 2025 09:45:38 -0500 Subject: [PATCH 10/16] Add private_browsing option to ExtensionSettings --- docs/index.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/index.md b/docs/index.md index 6618e5f..9923f2e 100644 --- a/docs/index.md +++ b/docs/index.md @@ -3174,6 +3174,7 @@ The configuration for each extension is another dictionary that can contain the | `updates_disabled` | (Firefox 89, Firefox ESR 78.11) Boolean that indicates whether or not to disable automatic updates for an individual extension. | `default_area` | (Firefox 113) String that indicates where to place the extension icon by default. Possible values are `navbar` and `menupanel`. | `temporarily_allow_weak_signatures`| (Firefox 127) A boolean that indicates whether to allow installing extensions signed using deprecated signature algorithms. +| `private_browsing`| (Firefox 136, Firefox ESR 128.8) A boolean that indicates whether or not this extension should be enabled in private browsing. **Compatibility:** Firefox 69, Firefox ESR 68.1 (As of Firefox 85, Firefox ESR 78.7, installing a theme makes it the default.)\ **CCK2 Equivalent:** N/A\ -- 2.43.0 From b1c579af76b3ee864cde94093ff8272d22d2b985 Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Wed, 5 Mar 2025 14:48:04 -0500 Subject: [PATCH 11/16] Bump version for release --- windows/de-DE/firefox.adml | 2 +- windows/en-US/firefox.adml | 2 +- windows/firefox.admx | 4 ++-- windows/fr-FR/firefox.adml | 2 +- windows/ru-RU/firefox.adml | 2 +- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/de-DE/firefox.adml b/windows/de-DE/firefox.adml index 7d05d82..8ec4c78 100644 --- a/windows/de-DE/firefox.adml +++ b/windows/de-DE/firefox.adml @@ -1,5 +1,5 @@ - + diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml index f28aec4..0033bbd 100644 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@ -1,5 +1,5 @@ - + diff --git a/windows/firefox.admx b/windows/firefox.admx index 7ef174e..83d29c0 100644 --- a/windows/firefox.admx +++ b/windows/firefox.admx @@ -1,10 +1,10 @@ - + - + diff --git a/windows/fr-FR/firefox.adml b/windows/fr-FR/firefox.adml index 1b75eed..c6f25ee 100644 --- a/windows/fr-FR/firefox.adml +++ b/windows/fr-FR/firefox.adml @@ -1,5 +1,5 @@ - + diff --git a/windows/ru-RU/firefox.adml b/windows/ru-RU/firefox.adml index 59020e0..57f753f 100644 --- a/windows/ru-RU/firefox.adml +++ b/windows/ru-RU/firefox.adml @@ -1,5 +1,5 @@ - + -- 2.43.0 From b4f624993ef0b526560d08399b80f7aed3eb54fc Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Wed, 19 Mar 2025 14:11:21 +0100 Subject: [PATCH 12/16] Fix a few typos. Fixes #1204 --- docs/index.md | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/docs/index.md b/docs/index.md index 9923f2e..dca2996 100644 --- a/docs/index.md +++ b/docs/index.md @@ -676,7 +676,7 @@ to workaround the limit on the length of strings. Put all of your JSON on one li OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/AutoLaunchProtocolsFromOriginsOneLine +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/AutoLaunchProtocolsFromOriginsOneLine ``` Value (string): ``` @@ -954,7 +954,7 @@ to workaround the limit on the length of strings. Put all of your JSON on one li OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/BookmarksOneLine +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/BookmarksOneLine ``` Value (string): ``` @@ -1199,7 +1199,7 @@ to workaround the limit on the length of strings. Put all of your JSON on one li OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ContainersOneLine +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ContainersOneLine ``` Value (string): ``` @@ -3027,7 +3027,7 @@ to workaround the limit on the length of strings. Put all of your JSON on one li OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ExemptDomainFileTypePairsFromFileTypeDownloadWarningsOneLine +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ExemptDomainFileTypePairsFromFileTypeDownloadWarningsOneLine ``` Value (string): ``` @@ -3228,8 +3228,7 @@ Value (string): "installation_mode": "force_installed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/adguardadblocker@adguard.com/latest.xpi" }, - { - "https-everywhere@eff.org": { + "https-everywhere@eff.org": { "installation_mode": "allowed", "updates_disabled": false } @@ -3646,7 +3645,7 @@ to workaround the limit on the length of strings. Put all of your JSON on one li OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/HandlersOneLine +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/HandlersOneLine ``` Value (string): ``` @@ -4262,7 +4261,7 @@ to workaround the limit on the length of strings. Put all of your JSON on one li OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/ManagedBoomarksOneLine +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/ManagedBoomarksOneLine ``` Value (string): ``` @@ -5474,7 +5473,7 @@ to workaround the limit on the length of strings. Put all of your JSON on one li OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/PreferencesOneLine +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/PreferencesOneLine ``` Value (string): ``` @@ -6930,7 +6929,7 @@ to workaround the limit on the length of strings. Put all of your JSON on one li OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~Extensions/WebsiteFilterOneLine +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox/WebsiteFilterOneLine ``` Value (string): ``` -- 2.43.0 From 4045f0ce951d76bccf7cbc8ad72579a7b19737e0 Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Wed, 2 Apr 2025 14:03:53 -0400 Subject: [PATCH 13/16] Update policies for content analysis --- docs/index.md | 9 ++-- windows/de-DE/firefox.adml | 22 +++++++++- windows/en-US/firefox.adml | 22 +++++++++- windows/firefox.admx | 85 ++++++++++++++++++++++++++++++-------- windows/fr-FR/firefox.adml | 22 +++++++++- windows/ru-RU/firefox.adml | 22 +++++++++- 6 files changed, 151 insertions(+), 31 deletions(-) diff --git a/docs/index.md b/docs/index.md index 1fa7e71..3e7a6b5 100644 --- a/docs/index.md +++ b/docs/index.md @@ -1396,8 +1396,7 @@ Value (string): or ``` OMA-URI: -``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Clipboard_Enabled +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints~Clipboard/ContentAnalysis_InterceptionPoints_Clipboard ``` Value (string): ``` @@ -1405,7 +1404,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_Clipboard_PlainTextOnly +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints~Clipboard/ContentAnalysis_InterceptionPoints_Clipboard_PlainTextOnly ``` Value (string): ``` @@ -1413,7 +1412,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_DragAndDrop_Enabled +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints~DragAndDrop/ContentAnalysis_InterceptionPoints_DragAndDrop ``` Value (string): ``` @@ -1421,7 +1420,7 @@ Value (string): ``` OMA-URI: ``` -./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints/ContentAnalysis_InterceptionPoints_DragAndDrop_PlainTextOnly +./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis~InterceptionPoints~DragAndDrop/ContentAnalysis_InterceptionPoints_DragAndDrop_PlainTextOnly ``` Value (string): ``` diff --git a/windows/de-DE/firefox.adml b/windows/de-DE/firefox.adml index 8ec4c78..b927549 100644 --- a/windows/de-DE/firefox.adml +++ b/windows/de-DE/firefox.adml @@ -76,6 +76,7 @@ Firefox 130 oder höher Firefox 131 oder höher, Firefox 128.3 ESR oder höhe Firefox 137 oder höher + Firefox 138 oder höher Firefox Berechtigungen Kamera @@ -105,6 +106,8 @@ Firefox Suggest (nur USA) Verhinderung von Datenverlust (DLP) Interception Points + Clipboard + Drag And Drop Erlaubte Seiten Erlaubte Seiten (Session Only) Gesperrte Seiten @@ -1191,14 +1194,22 @@ Wenn diese Richtlinieneinstellung deaktiviert oder nicht konfiguriert ist, wird Wenn diese Richtlinieneinstellung deaktiviert ist, zeigt Firefox keine Benachrichtigung an, wenn eine DLP-Anfrage abgelehnt wird. Wenn diese Richtlinieneinstellung aktiviert oder nicht konfiguriert ist, zeigt Firefox eine Benachrichtigung an, wenn eine DLP-Anfrage abgelehnt wird. - Clipboard + Enabled If this policy is disabled, clipboard operations will not use DLP. If this policy is enabled or not configured, clipboard operations will use DLP. - Drag And Drop + Plain Text Only + If this policy is disabled, all formats will be analyzed on the clipboard, which some DLP agents may not expect. + +If this policy is enabled or not configured, only the text/plain format will be analyzed on the clipboard. + Enabled If this policy is disabled, drag and drop operations will not use DLP. If this policy is enabled or not configured, drag and drop operations will use DLP. + Plain Text Only + If this policy is disabled, all formats will be analyzed in what is being dropped, which some DLP agents may not expect. + +If this policy is enabled or not configured, only the text/plain format will be analyzed in what is being dropped. File Upload If this policy is disabled, file upload operations will not use DLP. @@ -1207,6 +1218,10 @@ If this policy is enabled or not configured, file upload operations will use DLP If this policy is disabled, print operations will not use DLP. If this policy is enabled or not configured, print operations will use DLP. + Timeout Result + If this policy is enabled, you can indicate the desired behavior for DLP requests if the DLP agent does not respond to a request in less than AgentTimeout seconds. + +If this policy is disabled or not configured, the request will be denied. Wenn diese Richtlinieneinstellung aktiviert ist, ist die Einstellung auf true gesperrt. Wenn diese Richtlinieneinstellung deaktiviert ist, ist die Einstellung auf false gesperrt. Für eine Beschreibung der Einstellung, siehe: @@ -1582,6 +1597,9 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences (E + + + diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml index 0033bbd..76891d8 100644 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@ -76,6 +76,7 @@ Firefox 130 or later Firefox 131 or later, Firefox 128.3 ESR or later Firefox 137 or later + Firefox 138 or later Firefox Permissions Camera @@ -105,6 +106,8 @@ Firefox Suggest (US only) Content Analysis (DLP) Interception Points + Clipboard + Drag And Drop Allowed Sites Allowed Sites (Session Only) Blocked Sites @@ -1185,14 +1188,22 @@ If this policy is disabled or not configured, the default pipe name of 'path_use If this policy is disabled, Firefox will not show a notification when a DLP request is denied. If this policy is enabled or not configured, Firefox will show a notification when a DLP request is denied. - Clipboard + Enabled If this policy is disabled, clipboard operations will not use DLP. If this policy is enabled or not configured, clipboard operations will use DLP. - Drag And Drop + Plain Text Only + If this policy is disabled, all formats will be analyzed on the clipboard, which some DLP agents may not expect. + +If this policy is enabled or not configured, only the text/plain format will be analyzed on the clipboard. + Enabled If this policy is disabled, drag and drop operations will not use DLP. If this policy is enabled or not configured, drag and drop operations will use DLP. + Plain Text Only + If this policy is disabled, all formats will be analyzed in what is being dropped, which some DLP agents may not expect. + +If this policy is enabled or not configured, only the text/plain format will be analyzed in what is being dropped. File Upload If this policy is disabled, file upload operations will not use DLP. @@ -1201,6 +1212,10 @@ If this policy is enabled or not configured, file upload operations will use DLP If this policy is disabled, print operations will not use DLP. If this policy is enabled or not configured, print operations will use DLP. + Timeout Result + If this policy is enabled, you can indicate the desired behavior for DLP requests if the DLP agent does not respond to a request in less than AgentTimeout seconds. + +If this policy is disabled or not configured, the request will be denied. If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. For a description of the preference, see: @@ -1579,6 +1594,9 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences. + + + diff --git a/windows/firefox.admx b/windows/firefox.admx index 83d29c0..bad9a29 100644 --- a/windows/firefox.admx +++ b/windows/firefox.admx @@ -78,6 +78,7 @@ + @@ -177,6 +178,12 @@ + + + + + + @@ -4314,28 +4321,28 @@ - + - + - + - + @@ -4345,14 +4352,14 @@ - + - + @@ -4375,14 +4382,14 @@ - + - + @@ -4392,7 +4399,7 @@ - + @@ -4402,14 +4409,14 @@ - + - + @@ -4418,8 +4425,18 @@ - - + + + + + + + + + + + + @@ -4428,8 +4445,18 @@ - - + + + + + + + + + + + + @@ -4439,7 +4466,7 @@ - + @@ -4449,7 +4476,7 @@ - + @@ -4457,5 +4484,27 @@ - + + + + + + + + + + + + + + + + + + + + + + + diff --git a/windows/fr-FR/firefox.adml b/windows/fr-FR/firefox.adml index c6f25ee..1fadfef 100644 --- a/windows/fr-FR/firefox.adml +++ b/windows/fr-FR/firefox.adml @@ -76,6 +76,7 @@ Firefox 130 ou supérieur Firefox 131 ou supérieur, Firefox 128.3 ESR ou supérieur Firefox 137 ou supérieur + Firefox 138 ou supérieur Firefox Permissions Caméra @@ -105,6 +106,8 @@ Firefox Suggest (US seulement) Content Analysis (DLP) Interception Points + Clipboard + Drag And Drop Sites autorisés Sites autorisés (Session seulement) Sites bloqués @@ -1185,14 +1188,22 @@ If this policy is disabled or not configured, the default pipe name of 'path_use If this policy is disabled, Firefox will not show a notification when a DLP request is denied. If this policy is enabled or not configured, Firefox will show a notification when a DLP request is denied. - Clipboard + Enabled If this policy is disabled, clipboard operations will not use DLP. If this policy is enabled or not configured, clipboard operations will use DLP. - Drag And Drop + Plain Text Only + If this policy is disabled, all formats will be analyzed on the clipboard, which some DLP agents may not expect. + +If this policy is enabled or not configured, only the text/plain format will be analyzed on the clipboard. + Enabled If this policy is disabled, drag and drop operations will not use DLP. If this policy is enabled or not configured, drag and drop operations will use DLP. + Plain Text Only + If this policy is disabled, all formats will be analyzed in what is being dropped, which some DLP agents may not expect. + +If this policy is enabled or not configured, only the text/plain format will be analyzed in what is being dropped. File Upload If this policy is disabled, file upload operations will not use DLP. @@ -1201,6 +1212,10 @@ If this policy is enabled or not configured, file upload operations will use DLP If this policy is disabled, print operations will not use DLP. If this policy is enabled or not configured, print operations will use DLP. + Timeout Result + If this policy is enabled, you can indicate the desired behavior for DLP requests if the DLP agent does not respond to a request in less than AgentTimeout seconds. + +If this policy is disabled or not configured, the request will be denied. Si cette stratégie est activée, la préférence est verrouillée sur "true". Si cette stratégie est désactivée, la préférence est verrouillée sur "false". Pour une description de la préférence, consultez : @@ -1579,6 +1594,9 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences. + + + diff --git a/windows/ru-RU/firefox.adml b/windows/ru-RU/firefox.adml index 57f753f..2eae25a 100644 --- a/windows/ru-RU/firefox.adml +++ b/windows/ru-RU/firefox.adml @@ -77,6 +77,7 @@ Firefox 130 или более поздние версии Firefox 131 или более поздние версии, Firefox 128.3 ESR или более поздние версии Firefox 137 или более поздние версии + Firefox 138 или более поздние версии Firefox Разрешения Камера @@ -106,6 +107,8 @@ Firefox Suggest (US only) Content Analysis (DLP) Interception Points + Clipboard + Drag And Drop Разрешённые сайты Разрешённые сайты (Session Only) Заблокированные сайты @@ -1188,14 +1191,22 @@ If this policy is disabled or not configured, the default pipe name of 'path_use If this policy is disabled, Firefox will not show a notification when a DLP request is denied. If this policy is enabled or not configured, Firefox will show a notification when a DLP request is denied. - Clipboard + Enabled If this policy is disabled, clipboard operations will not use DLP. If this policy is enabled or not configured, clipboard operations will use DLP. - Drag And Drop + Plain Text Only + If this policy is disabled, all formats will be analyzed on the clipboard, which some DLP agents may not expect. + +If this policy is enabled or not configured, only the text/plain format will be analyzed on the clipboard. + Enabled If this policy is disabled, drag and drop operations will not use DLP. If this policy is enabled or not configured, drag and drop operations will use DLP. + Plain Text Only + If this policy is disabled, all formats will be analyzed in what is being dropped, which some DLP agents may not expect. + +If this policy is enabled or not configured, only the text/plain format will be analyzed in what is being dropped. File Upload If this policy is disabled, file upload operations will not use DLP. @@ -1204,6 +1215,10 @@ If this policy is enabled or not configured, file upload operations will use DLP If this policy is disabled, print operations will not use DLP. If this policy is enabled or not configured, print operations will use DLP. + Timeout Result + If this policy is enabled, you can indicate the desired behavior for DLP requests if the DLP agent does not respond to a request in less than AgentTimeout seconds. + +If this policy is disabled or not configured, the request will be denied. Если эта политика включена, предпочтение заблокировано на true. Если эта политика отключена, предпочтение заблокировано на false. Описание предпочтения см.: @@ -1582,6 +1597,9 @@ https://github.com/mozilla/policy-templates/blob/master/README.md#preferences. + + + -- 2.43.0 From 0f28d97e1e423dc2091b05185ebcaf03d8c15caa Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Wed, 2 Apr 2025 14:15:08 -0400 Subject: [PATCH 14/16] Bump version for release --- windows/de-DE/firefox.adml | 2 +- windows/en-US/firefox.adml | 2 +- windows/firefox.admx | 4 ++-- windows/fr-FR/firefox.adml | 2 +- windows/ru-RU/firefox.adml | 2 +- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/de-DE/firefox.adml b/windows/de-DE/firefox.adml index b927549..29d49d5 100644 --- a/windows/de-DE/firefox.adml +++ b/windows/de-DE/firefox.adml @@ -1,5 +1,5 @@ - + diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml index 76891d8..89a8ab8 100644 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@ -1,5 +1,5 @@ - + diff --git a/windows/firefox.admx b/windows/firefox.admx index bad9a29..6d14d32 100644 --- a/windows/firefox.admx +++ b/windows/firefox.admx @@ -1,10 +1,10 @@ - + - + diff --git a/windows/fr-FR/firefox.adml b/windows/fr-FR/firefox.adml index 1fadfef..870c84b 100644 --- a/windows/fr-FR/firefox.adml +++ b/windows/fr-FR/firefox.adml @@ -1,5 +1,5 @@ - + diff --git a/windows/ru-RU/firefox.adml b/windows/ru-RU/firefox.adml index 2eae25a..b29f6c5 100644 --- a/windows/ru-RU/firefox.adml +++ b/windows/ru-RU/firefox.adml @@ -1,5 +1,5 @@ - + -- 2.43.0 From 5fab38ebbfba94d79e5323e5c33c94bba7d6deda Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Wed, 2 Apr 2025 14:45:01 -0400 Subject: [PATCH 15/16] Update sanitize documentation - Fixes #1206 --- docs/index.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/index.md b/docs/index.md index 3e7a6b5..2efb186 100644 --- a/docs/index.md +++ b/docs/index.md @@ -6014,11 +6014,11 @@ Note: Starting with Firefox 128, History clears FormData and Downloads as well. `Cookies` -`Downloads` Download History (*Deprecated*) +`Downloads` Download History (*Deprecated - part of History*) -`FormData` Form & Search History (*Deprecated*) +`FormData` Form & Search History -`History` Browsing History, Download History, Form & Search History. +`History` Browsing History, Download History `Sessions` Active Logins @@ -6030,7 +6030,7 @@ Note: Starting with Firefox 128, History clears FormData and Downloads as well. **Compatibility:** Firefox 68, Firefox ESR 68 (Locked added in 74/68.6, History update in Firefox 128)\ **CCK2 Equivalent:** N/A\ -**Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`, `privacy.clearOnShutdown_v2.historyFormDataAndDownloads` (Firefox 128), `privacy.clearOnShutdown_v2.cookiesAndStorage` (Firefox 128), `privacy.clearOnShutdown_v2.cache` (Firefox 128), `privacy.clearOnShutdown_v2.siteSettings` (Firefox 128) +**Preferences Affected:** `privacy.sanitize.sanitizeOnShutdown`, `privacy.clearOnShutdown.cache`, `privacy.clearOnShutdown.cookies`, `privacy.clearOnShutdown.downloads`, `privacy.clearOnShutdown.formdata`, `privacy.clearOnShutdown.history`, `privacy.clearOnShutdown.sessions`, `privacy.clearOnShutdown.siteSettings`, `privacy.clearOnShutdown.offlineApps`, `privacy.clearOnShutdown_v2.historyFormDataAndDownloads` (Firefox 128), `privacy.clearOnShutdown_v2.cookiesAndStorage` (Firefox 128), `privacy.clearOnShutdown_v2.cache` (Firefox 128), `privacy.clearOnShutdown_v2.siteSettings` (Firefox 128), `privacy.clearOnShutdown_v2.formdata` (Firefox 128) #### Windows (GPO) ``` -- 2.43.0 From f3926a1c009d70169d94f89e826371bba3ef3b5e Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Wed, 2 Apr 2025 16:28:46 -0400 Subject: [PATCH 16/16] Fix typo --- docs/index.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/index.md b/docs/index.md index 2efb186..c4ab917 100644 --- a/docs/index.md +++ b/docs/index.md @@ -1350,6 +1350,7 @@ OMA-URI: Value (string): ``` +``` ``` OMA-URI: -- 2.43.0