From ced77009f553911f9815e313f581d8469dcac9b4 Mon Sep 17 00:00:00 2001 From: Brian Smith Date: Wed, 9 Sep 2026 16:56:07 +0200 Subject: [PATCH 1/3] feat: Add values section for reference docs a-c --- .../policies/AllowFileSelectionDialogs.mdx | 5 +++++ .../reference/policies/AllowedDomainsForApps.mdx | 7 +++++++ .../docs/reference/policies/AppAutoUpdate.mdx | 12 ++++++++---- .../docs/reference/policies/AppUpdatePin.mdx | 7 +++++++ .../docs/reference/policies/AppUpdateURL.mdx | 4 ++++ .../docs/reference/policies/Authentication.mdx | 16 ++++++++++++++-- .../policies/AutoLaunchProtocolsFromOrigins.mdx | 9 +++++++++ .../policies/AutofillAddressEnabled.mdx | 5 +++++ .../policies/AutofillCreditCardEnabled.mdx | 5 +++++ .../reference/policies/BackgroundAppUpdate.mdx | 5 +++++ .../docs/reference/policies/BlockAboutAddons.mdx | 5 +++++ .../docs/reference/policies/BlockAboutConfig.mdx | 5 +++++ .../reference/policies/BlockAboutProfiles.mdx | 5 +++++ .../reference/policies/BlockAboutSupport.mdx | 5 +++++ .../docs/reference/policies/Bookmarks.mdx | 15 ++++++++++++--- .../reference/policies/BrowserDataBackup.mdx | 14 ++++++++++++++ .../policies/CNSA2KeyAgreementEnabled.mdx | 5 +++++ .../docs/reference/policies/CaptivePortal.mdx | 5 +++++ 18 files changed, 125 insertions(+), 9 deletions(-) diff --git a/src/content/docs/reference/policies/AllowFileSelectionDialogs.mdx b/src/content/docs/reference/policies/AllowFileSelectionDialogs.mdx index a05a42a..15892a0 100644 --- a/src/content/docs/reference/policies/AllowFileSelectionDialogs.mdx +++ b/src/content/docs/reference/policies/AllowFileSelectionDialogs.mdx @@ -17,6 +17,11 @@ Enable or disable file selection dialogs. +## Values + +- Set to `true` to allow file selection dialogs. This is the same as not setting the policy. +- Set to `false` to stop Firefox opening file selection dialogs. Downloads go straight to the download directory and the user cannot change that. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/AllowedDomainsForApps.mdx b/src/content/docs/reference/policies/AllowedDomainsForApps.mdx index e7bdd50..39f535b 100644 --- a/src/content/docs/reference/policies/AllowedDomainsForApps.mdx +++ b/src/content/docs/reference/policies/AllowedDomainsForApps.mdx @@ -19,6 +19,13 @@ If this policy is enabled, users can only access Google Workspace using accounts +## Values + +`AllowedDomainsForApps` expects a comma-separated list of domains, sent to Google as the `X-GoogApps-Allowed-Domains` header: + +- A domain, such as `example.com`, allows Google Workspace accounts from that domain. +- `consumer_accounts` allows personal Gmail accounts. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/AppAutoUpdate.mdx b/src/content/docs/reference/policies/AppAutoUpdate.mdx index afbfbeb..599a40b 100644 --- a/src/content/docs/reference/policies/AppAutoUpdate.mdx +++ b/src/content/docs/reference/policies/AppAutoUpdate.mdx @@ -4,11 +4,10 @@ description: "Enable or disable **automatic** application update." category: "Device update settings" --- -Enable or disable **automatic** application update. +Enable or disable automatic application update. -If set to `true`, application updates are installed without user approval within Firefox. The operating system might still require approval. - -If set to `false`, application updates are downloaded but the user can choose when to install the update. +Allows application updates to be installed without user approval within Firefox, although the operating system might still require approval. +When the policy is disabled, application updates are downloaded and the user can choose when to install the update. If you have disabled updates via [`DisableAppUpdate`](/reference/policies/disableappupdate/), this policy has no effect. @@ -23,6 +22,11 @@ If you have disabled updates via [`DisableAppUpdate`](/reference/policies/disabl +## Values + +- Set to `true` to install application updates without user approval, and prevent the user from turning automatic updates off. The operating system might still require approval. +- Set to `false` to download updates but let the user choose when to install them, and prevent the user from turning automatic updates on. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/AppUpdatePin.mdx b/src/content/docs/reference/policies/AppUpdatePin.mdx index 62d7444..8c45878 100644 --- a/src/content/docs/reference/policies/AppUpdatePin.mdx +++ b/src/content/docs/reference/policies/AppUpdatePin.mdx @@ -29,6 +29,13 @@ If you specify a version that doesn't exist, Firefox will update beyond that ver +## Values + +`AppUpdatePin` expects a version prefix ending in a dot: + +- `MAJOR.`, such as `140.`, pins Firefox to the major version and allows every update within it. +- `MAJOR.MINOR.`, such as `140.0.`, pins Firefox to the minor version and allows only patch updates within it. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/AppUpdateURL.mdx b/src/content/docs/reference/policies/AppUpdateURL.mdx index 4d08ed8..779216a 100644 --- a/src/content/docs/reference/policies/AppUpdateURL.mdx +++ b/src/content/docs/reference/policies/AppUpdateURL.mdx @@ -17,6 +17,10 @@ Change the URL for application update if you are providing Firefox updates from +## Values + +`AppUpdateURL` expects the URL of the update XML on your update server, such as `https://www.example.com/update.xml`. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/Authentication.mdx b/src/content/docs/reference/policies/Authentication.mdx index 22830f8..27c7c50 100644 --- a/src/content/docs/reference/policies/Authentication.mdx +++ b/src/content/docs/reference/policies/Authentication.mdx @@ -7,8 +7,6 @@ category: "Authentication" Configure sites that support integrated authentication. See [Integrated authentication](https://htmlpreview.github.io/?https://github.com/mdn/archived-content/blob/main/files/en-us/mozilla/integrated_authentication/raw.html) for more information. -The `PrivateBrowsing` member enables integrated authentication in private browsing. - ## Compatibility @@ -22,6 +20,20 @@ The `PrivateBrowsing` member enables integrated authentication in private browsi +## Values + +- `SPNEGO`: A list of sites permitted to use SPNEGO (Kerberos) authentication. +- `Delegated`: A list of sites permitted to use Kerberos delegation. +- `NTLM`: A list of sites permitted to use NTLM authentication. +- `AllowNonFQDN`: Allows authentication for hosts that are not fully qualified domain names. + Accepts `SPNEGO` and `NTLM`, each a boolean. +- `AllowProxies`: Allows authentication to proxies. + Accepts `SPNEGO` and `NTLM`, each a boolean. +- `PrivateBrowsing`: Set to `true` to allow integrated authentication in private browsing. +- `Locked`: Prevents the user from changing these settings. + Unlike most policies, this defaults to `true`. + Set it to `false` to apply the values as defaults that users can still change. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/AutoLaunchProtocolsFromOrigins.mdx b/src/content/docs/reference/policies/AutoLaunchProtocolsFromOrigins.mdx index 8049a5d..9df4a27 100644 --- a/src/content/docs/reference/policies/AutoLaunchProtocolsFromOrigins.mdx +++ b/src/content/docs/reference/policies/AutoLaunchProtocolsFromOrigins.mdx @@ -21,6 +21,15 @@ This also means that you cannot specify a wildcard (`*`) for all origins. +## Values + +Each entry in the list accepts the following keys: + +- `protocol` (required): The external protocol scheme, without the colon, such as `zoommtg`. +- `allowed_origins` (required): A list of origins allowed to launch that protocol without a prompt. + Each origin is a scheme, hostname and optional port. + Paths and wildcards are not supported. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/AutofillAddressEnabled.mdx b/src/content/docs/reference/policies/AutofillAddressEnabled.mdx index d28d093..2d7fba9 100644 --- a/src/content/docs/reference/policies/AutofillAddressEnabled.mdx +++ b/src/content/docs/reference/policies/AutofillAddressEnabled.mdx @@ -20,6 +20,11 @@ See [Automatically fill in your address on web forms](https://support.mozilla.or +## Values + +- Set to `true` to save and autofill addresses, and prevent the user from changing it. +- Set to `false` to stop saving and autofilling addresses, and prevent the user from changing it. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/AutofillCreditCardEnabled.mdx b/src/content/docs/reference/policies/AutofillCreditCardEnabled.mdx index 802941d..42d3a7a 100644 --- a/src/content/docs/reference/policies/AutofillCreditCardEnabled.mdx +++ b/src/content/docs/reference/policies/AutofillCreditCardEnabled.mdx @@ -19,6 +19,11 @@ This only applies when payment method autofill is enabled for a particular Firef +## Values + +- Set to `true` to save and autofill payment methods, and prevent the user from changing it. +- Set to `false` to stop saving and autofilling payment methods, and prevent the user from changing it. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/BackgroundAppUpdate.mdx b/src/content/docs/reference/policies/BackgroundAppUpdate.mdx index 15de2c4..dd30120 100644 --- a/src/content/docs/reference/policies/BackgroundAppUpdate.mdx +++ b/src/content/docs/reference/policies/BackgroundAppUpdate.mdx @@ -28,6 +28,11 @@ Windows only. +## Values + +- Set to `true` to install updates in the background, and prevent the user from turning background updates off. +- Set to `false` to stop updates being installed in the background, and prevent the user from turning them on. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/BlockAboutAddons.mdx b/src/content/docs/reference/policies/BlockAboutAddons.mdx index 220db84..6e4f686 100644 --- a/src/content/docs/reference/policies/BlockAboutAddons.mdx +++ b/src/content/docs/reference/policies/BlockAboutAddons.mdx @@ -17,6 +17,11 @@ Block access to the Add-ons Manager (`about:addons`). +## Values + +- Set to `true` to block access to the Add-ons Manager (`about:addons`). +- Set to `false` to leave the Add-ons Manager available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/BlockAboutConfig.mdx b/src/content/docs/reference/policies/BlockAboutConfig.mdx index 9926874..08ba5bf 100644 --- a/src/content/docs/reference/policies/BlockAboutConfig.mdx +++ b/src/content/docs/reference/policies/BlockAboutConfig.mdx @@ -17,6 +17,11 @@ Block access to Advanced Preferences (`about:config`). +## Values + +- Set to `true` to block access to `about:config`. This also turns off browser chrome debugging (`devtools.chrome.enabled`). +- Set to `false` to leave `about:config` available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/BlockAboutProfiles.mdx b/src/content/docs/reference/policies/BlockAboutProfiles.mdx index 857a3af..54fde1e 100644 --- a/src/content/docs/reference/policies/BlockAboutProfiles.mdx +++ b/src/content/docs/reference/policies/BlockAboutProfiles.mdx @@ -17,6 +17,11 @@ Block access to About Profiles (`about:profiles`). +## Values + +- Set to `true` to block the profile pages: `about:profiles`, `about:profilemanager`, `about:editprofile`, `about:newprofile` and `about:deleteprofile`. +- Set to `false` to leave the profile pages available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/BlockAboutSupport.mdx b/src/content/docs/reference/policies/BlockAboutSupport.mdx index ae00b25..d61aa97 100644 --- a/src/content/docs/reference/policies/BlockAboutSupport.mdx +++ b/src/content/docs/reference/policies/BlockAboutSupport.mdx @@ -17,6 +17,11 @@ Block access to Troubleshooting Information (`about:support`). +## Values + +- Set to `true` to block access to troubleshooting information (`about:support`). +- Set to `false` to leave `about:support` available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/Bookmarks.mdx b/src/content/docs/reference/policies/Bookmarks.mdx index 5aadbc5..4203c43 100644 --- a/src/content/docs/reference/policies/Bookmarks.mdx +++ b/src/content/docs/reference/policies/Bookmarks.mdx @@ -9,9 +9,6 @@ category: "Bookmarks" > The `Bookmarks` policy will continue to be supported for backwards-compatibility purposes. Add bookmarks in either the bookmarks toolbar or menu. -Only `Title` and `URL` are required. -If `Placement` is not specified, the bookmark will be placed on the toolbar. -If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together. If you want to clear all bookmarks set with this policy, you can set the value to an empty array (`[]`). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune. @@ -26,6 +23,18 @@ If you want to clear all bookmarks set with this policy, you can set the value t +## Values + +Each entry in the list accepts the following keys: + +- `Title` (required): The name shown for the bookmark. +- `URL` (required): The address the bookmark opens. +- `Favicon`: The URL of an icon to show for the bookmark. +- `Placement`: `toolbar` adds the bookmark to the bookmarks toolbar, `menu` adds it to the bookmarks menu. + Defaults to `toolbar`. +- `Folder`: The name of a folder to put the bookmark in. + The folder is created if it doesn't exist, and bookmarks that name the same folder are grouped together. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/BrowserDataBackup.mdx b/src/content/docs/reference/policies/BrowserDataBackup.mdx index f0b5ec3..95611c0 100644 --- a/src/content/docs/reference/policies/BrowserDataBackup.mdx +++ b/src/content/docs/reference/policies/BrowserDataBackup.mdx @@ -21,6 +21,20 @@ Backup and restore can be disabled individually. +## Values + +`BrowserDataBackup` accepts either a boolean or an object. +When set as a boolean: + +- Set to `true` to allow backup and restore of profile data, and lock both settings. +- Set to `false` to disable backup and restore of profile data, and lock both settings. + +When set as an object, backup and restore can be controlled separately. +Both keys are locked, and a key that is left out keeps its existing value: + +- `AllowBackup`: Set to `false` to stop profile data being backed up. +- `AllowRestore`: Set to `false` to stop a profile being restored from a backup. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/CNSA2KeyAgreementEnabled.mdx b/src/content/docs/reference/policies/CNSA2KeyAgreementEnabled.mdx index 82d0b4c..47905dc 100644 --- a/src/content/docs/reference/policies/CNSA2KeyAgreementEnabled.mdx +++ b/src/content/docs/reference/policies/CNSA2KeyAgreementEnabled.mdx @@ -23,6 +23,11 @@ Setting this policy locks the preference, whether the value is `true` or `false` +## Values + +- Set to `true` to enable ML-KEM-1024 key agreement, and prevent the user from changing it. +- Set to `false` to disable ML-KEM-1024 key agreement, and prevent the user from changing it. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/CaptivePortal.mdx b/src/content/docs/reference/policies/CaptivePortal.mdx index a26dd23..41cce6f 100644 --- a/src/content/docs/reference/policies/CaptivePortal.mdx +++ b/src/content/docs/reference/policies/CaptivePortal.mdx @@ -17,6 +17,11 @@ Enable or disable the detection of captive portals. +## Values + +- Set to `true` to enable captive portal detection, and prevent the user from changing it. +- Set to `false` to disable captive portal detection, and prevent the user from changing it. + ## Windows (GPO) ``` From 0101a220266a4a787e242b079d2c3ba03aaa40d3 Mon Sep 17 00:00:00 2001 From: Brian Smith Date: Wed, 9 Sep 2026 17:02:03 +0200 Subject: [PATCH 2/3] feat: Add values section for reference docs d --- .../reference/policies/DefaultBrowserSettingEnabled.mdx | 5 +++++ .../docs/reference/policies/DefaultDownloadDirectory.mdx | 7 +++++++ src/content/docs/reference/policies/DisableAccounts.mdx | 5 +++++ src/content/docs/reference/policies/DisableAppUpdate.mdx | 5 +++++ .../docs/reference/policies/DisableBuiltinPDFViewer.mdx | 7 +++++++ .../docs/reference/policies/DisableDefaultBrowserAgent.mdx | 5 +++++ .../docs/reference/policies/DisableDeveloperTools.mdx | 5 +++++ .../reference/policies/DisableEncryptedClientHello.mdx | 5 +++++ .../docs/reference/policies/DisableFeedbackCommands.mdx | 5 +++++ .../docs/reference/policies/DisableFirefoxAccounts.mdx | 7 +++++++ .../docs/reference/policies/DisableFirefoxScreenshots.mdx | 5 +++++ .../docs/reference/policies/DisableFirefoxStudies.mdx | 5 +++++ .../docs/reference/policies/DisableForgetButton.mdx | 5 +++++ src/content/docs/reference/policies/DisableFormHistory.mdx | 5 +++++ .../docs/reference/policies/DisableLaunchOnLogin.mdx | 5 +++++ .../docs/reference/policies/DisableLocalPolicies.mdx | 5 +++++ .../reference/policies/DisableMasterPasswordCreation.mdx | 5 +++++ .../docs/reference/policies/DisablePasswordReveal.mdx | 5 +++++ src/content/docs/reference/policies/DisablePocket.mdx | 5 +++++ .../docs/reference/policies/DisablePrivateBrowsing.mdx | 5 +++++ .../docs/reference/policies/DisableProfileImport.mdx | 5 +++++ .../docs/reference/policies/DisableProfileRefresh.mdx | 5 +++++ .../docs/reference/policies/DisableRemoteImprovements.mdx | 5 +++++ .../DisableRemoteSettingsAndAcceptSecurityConsequences.mdx | 5 +++++ src/content/docs/reference/policies/DisableSafeMode.mdx | 5 +++++ .../reference/policies/DisableSetDesktopBackground.mdx | 5 +++++ .../docs/reference/policies/DisableSystemAddonUpdate.mdx | 5 +++++ src/content/docs/reference/policies/DisableTelemetry.mdx | 5 +++++ .../reference/policies/DisableThirdPartyModuleBlocking.mdx | 5 +++++ .../docs/reference/policies/DontCheckDefaultBrowser.mdx | 5 +++++ src/content/docs/reference/policies/DownloadDirectory.mdx | 7 +++++++ 31 files changed, 163 insertions(+) diff --git a/src/content/docs/reference/policies/DefaultBrowserSettingEnabled.mdx b/src/content/docs/reference/policies/DefaultBrowserSettingEnabled.mdx index b11986d..9f8bbfc 100644 --- a/src/content/docs/reference/policies/DefaultBrowserSettingEnabled.mdx +++ b/src/content/docs/reference/policies/DefaultBrowserSettingEnabled.mdx @@ -22,6 +22,11 @@ To suppress the startup check without removing the controls from browser prefere +## Values + +- Set to `true` to check whether Firefox is the default browser at startup, and lock the setting. +- Set to `false` to stop the check, remove the option to make Firefox the default browser, and lock the setting. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DefaultDownloadDirectory.mdx b/src/content/docs/reference/policies/DefaultDownloadDirectory.mdx index 8b720b9..34006c9 100644 --- a/src/content/docs/reference/policies/DefaultDownloadDirectory.mdx +++ b/src/content/docs/reference/policies/DefaultDownloadDirectory.mdx @@ -19,6 +19,13 @@ You can use `${home}` for the native home directory. +## Values + +`DefaultDownloadDirectory` expects a path to the directory downloads are saved to, such as `/Users/username/Documents`. +The user can still change it. + +- `${home}` expands to the user's home directory, so `${home}/Downloads` works across profiles and platforms. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableAccounts.mdx b/src/content/docs/reference/policies/DisableAccounts.mdx index 003c1b7..e086493 100644 --- a/src/content/docs/reference/policies/DisableAccounts.mdx +++ b/src/content/docs/reference/policies/DisableAccounts.mdx @@ -17,6 +17,11 @@ Disable account-based services, including sync. +## Values + +- Set to `true` to disable account-based services, including sync, and block signing in. +- Set to `false` to leave account-based services available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableAppUpdate.mdx b/src/content/docs/reference/policies/DisableAppUpdate.mdx index 365881c..b6bd348 100644 --- a/src/content/docs/reference/policies/DisableAppUpdate.mdx +++ b/src/content/docs/reference/policies/DisableAppUpdate.mdx @@ -17,6 +17,11 @@ Turn off application updates within Firefox. +## Values + +- Set to `true` to stop Firefox updating itself. +- Set to `false` to leave updates enabled. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableBuiltinPDFViewer.mdx b/src/content/docs/reference/policies/DisableBuiltinPDFViewer.mdx index a21225b..34fde57 100644 --- a/src/content/docs/reference/policies/DisableBuiltinPDFViewer.mdx +++ b/src/content/docs/reference/policies/DisableBuiltinPDFViewer.mdx @@ -21,6 +21,13 @@ Disable the built in PDF viewer. PDF files are downloaded and sent externally. +## Values + +- Set to `true` to hand PDF files to the operating system's default PDF handler. +- Set to `false` to open PDF files in Firefox. Unlike most policies, this actively sets the handler back to the built-in viewer rather than doing nothing. + +If the [`Handlers`](/reference/policies/handlers/) policy already configures `application/pdf` or the `pdf` extension, that policy wins and `DisableBuiltinPDFViewer` is ignored. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableDefaultBrowserAgent.mdx b/src/content/docs/reference/policies/DisableDefaultBrowserAgent.mdx index def156d..988edbf 100644 --- a/src/content/docs/reference/policies/DisableDefaultBrowserAgent.mdx +++ b/src/content/docs/reference/policies/DisableDefaultBrowserAgent.mdx @@ -23,6 +23,11 @@ Windows only. +## Values + +- Set to `true` to stop the Windows default browser agent running. +- Set to `false` to leave the agent running. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableDeveloperTools.mdx b/src/content/docs/reference/policies/DisableDeveloperTools.mdx index 1c10c9a..94ee38d 100644 --- a/src/content/docs/reference/policies/DisableDeveloperTools.mdx +++ b/src/content/docs/reference/policies/DisableDeveloperTools.mdx @@ -17,6 +17,11 @@ Remove access to all developer tools. +## Values + +- Set to `true` to disable the developer tools and block `about:debugging`, `about:devtools-toolbox` and `about:profiling`. +- Set to `false` to leave the developer tools available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableEncryptedClientHello.mdx b/src/content/docs/reference/policies/DisableEncryptedClientHello.mdx index 0ca9405..37578b4 100644 --- a/src/content/docs/reference/policies/DisableEncryptedClientHello.mdx +++ b/src/content/docs/reference/policies/DisableEncryptedClientHello.mdx @@ -18,6 +18,11 @@ Note that TLS Client Hellos will still contain an ECH extension, but this extens +## Values + +- Set to `true` to disable Encrypted Client Hello (ECH) for both DNS and HTTP/3. +- Set to `false` to leave ECH enabled. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableFeedbackCommands.mdx b/src/content/docs/reference/policies/DisableFeedbackCommands.mdx index 39456e6..4e1f145 100644 --- a/src/content/docs/reference/policies/DisableFeedbackCommands.mdx +++ b/src/content/docs/reference/policies/DisableFeedbackCommands.mdx @@ -17,6 +17,11 @@ Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site). +## Values + +- Set to `true` to remove the Submit Feedback and Report Deceptive Site items from the Help menu. +- Set to `false` to leave the menu items in place. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableFirefoxAccounts.mdx b/src/content/docs/reference/policies/DisableFirefoxAccounts.mdx index d74767d..ef44c60 100644 --- a/src/content/docs/reference/policies/DisableFirefoxAccounts.mdx +++ b/src/content/docs/reference/policies/DisableFirefoxAccounts.mdx @@ -17,6 +17,13 @@ Disable Firefox Accounts integration (Sync). +## Values + +- Set to `true` to disable Firefox accounts and sync. +- Set to `false` to leave Firefox accounts available. This is the same as not setting the policy. + +If [`DisableAccounts`](/reference/policies/disableaccounts/) is also set, it takes precedence and `DisableFirefoxAccounts` is ignored. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableFirefoxScreenshots.mdx b/src/content/docs/reference/policies/DisableFirefoxScreenshots.mdx index 036c966..e38e58a 100644 --- a/src/content/docs/reference/policies/DisableFirefoxScreenshots.mdx +++ b/src/content/docs/reference/policies/DisableFirefoxScreenshots.mdx @@ -17,6 +17,11 @@ Remove access to Firefox Screenshots. +## Values + +- Set to `true` to remove Firefox Screenshots. +- Set to `false` to leave Firefox Screenshots available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableFirefoxStudies.mdx b/src/content/docs/reference/policies/DisableFirefoxStudies.mdx index 4938a62..e519e5d 100644 --- a/src/content/docs/reference/policies/DisableFirefoxStudies.mdx +++ b/src/content/docs/reference/policies/DisableFirefoxStudies.mdx @@ -17,6 +17,11 @@ Disable Firefox studies (Shield). +## Values + +- Set to `true` to stop Firefox running studies, and turn off add-on and feature recommendations. +- Set to `false` to leave studies enabled. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableForgetButton.mdx b/src/content/docs/reference/policies/DisableForgetButton.mdx index 7b9f467..41a0516 100644 --- a/src/content/docs/reference/policies/DisableForgetButton.mdx +++ b/src/content/docs/reference/policies/DisableForgetButton.mdx @@ -17,6 +17,11 @@ Disable the "Forget" button. +## Values + +- Set to `true` to remove the Forget button. +- Set to `false` to leave the Forget button available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableFormHistory.mdx b/src/content/docs/reference/policies/DisableFormHistory.mdx index 4706307..c4c8795 100644 --- a/src/content/docs/reference/policies/DisableFormHistory.mdx +++ b/src/content/docs/reference/policies/DisableFormHistory.mdx @@ -17,6 +17,11 @@ Turn off saving information on web forms and the search bar. +## Values + +- Set to `true` to stop Firefox remembering form and search history. +- Set to `false` to leave form and search history enabled. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableLaunchOnLogin.mdx b/src/content/docs/reference/policies/DisableLaunchOnLogin.mdx index b9a2c6a..801d397 100644 --- a/src/content/docs/reference/policies/DisableLaunchOnLogin.mdx +++ b/src/content/docs/reference/policies/DisableLaunchOnLogin.mdx @@ -25,6 +25,11 @@ Windows and macOS only; Windows in Firefox 155, and macOS in Firefox 156. +## Values + +- Set to `true` to remove the option to launch Firefox on login, and turn the setting off if it is already on. +- Set to `false` to leave the option available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableLocalPolicies.mdx b/src/content/docs/reference/policies/DisableLocalPolicies.mdx index cb924ae..2e29919 100644 --- a/src/content/docs/reference/policies/DisableLocalPolicies.mdx +++ b/src/content/docs/reference/policies/DisableLocalPolicies.mdx @@ -16,3 +16,8 @@ Disable reading policies from local policy sources. :::caution[Limitation] The policy cannot be applied by policies.json, Windows GPO or macOS plist. ::: + +## Values + +- Set to `true` to stop Firefox reading policies from local policy sources. +- Set to `false` to read local policy sources. This is the same as not setting the policy. diff --git a/src/content/docs/reference/policies/DisableMasterPasswordCreation.mdx b/src/content/docs/reference/policies/DisableMasterPasswordCreation.mdx index dfc4c08..2309807 100644 --- a/src/content/docs/reference/policies/DisableMasterPasswordCreation.mdx +++ b/src/content/docs/reference/policies/DisableMasterPasswordCreation.mdx @@ -21,6 +21,11 @@ If both `DisableMasterPasswordCreation` and [`PrimaryPassword`](/reference/polic +## Values + +- Set to `true` to remove the option to create a primary password. An existing primary password can still be removed. +- Set to `false` to leave primary password creation available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisablePasswordReveal.mdx b/src/content/docs/reference/policies/DisablePasswordReveal.mdx index ab14bf1..2305a64 100644 --- a/src/content/docs/reference/policies/DisablePasswordReveal.mdx +++ b/src/content/docs/reference/policies/DisablePasswordReveal.mdx @@ -17,6 +17,11 @@ Do not allow passwords to be shown in saved logins. +## Values + +- Set to `true` to stop users revealing saved passwords. +- Set to `false` to allow saved passwords to be revealed. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisablePocket.mdx b/src/content/docs/reference/policies/DisablePocket.mdx index 28c7bc1..cc50653 100644 --- a/src/content/docs/reference/policies/DisablePocket.mdx +++ b/src/content/docs/reference/policies/DisablePocket.mdx @@ -17,6 +17,11 @@ Remove Pocket in the Firefox UI. It does not remove it from the new tab page. +## Values + +- Set to `true` to remove Pocket from the Firefox UI. +- Set to `false` to leave Pocket in place. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisablePrivateBrowsing.mdx b/src/content/docs/reference/policies/DisablePrivateBrowsing.mdx index bc922b5..095f94f 100644 --- a/src/content/docs/reference/policies/DisablePrivateBrowsing.mdx +++ b/src/content/docs/reference/policies/DisablePrivateBrowsing.mdx @@ -21,6 +21,11 @@ Remove access to private browsing. +## Values + +- Set to `true` to disable private browsing and block `about:privatebrowsing`. +- Set to `false` to leave private browsing available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableProfileImport.mdx b/src/content/docs/reference/policies/DisableProfileImport.mdx index 8e427b9..1473558 100644 --- a/src/content/docs/reference/policies/DisableProfileImport.mdx +++ b/src/content/docs/reference/policies/DisableProfileImport.mdx @@ -17,6 +17,11 @@ Remove the ability to import data from other browsers. +## Values + +- Set to `true` to remove the option to import data from another browser, including the import wizard. +- Set to `false` to leave importing available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableProfileRefresh.mdx b/src/content/docs/reference/policies/DisableProfileRefresh.mdx index abae2a3..048952b 100644 --- a/src/content/docs/reference/policies/DisableProfileRefresh.mdx +++ b/src/content/docs/reference/policies/DisableProfileRefresh.mdx @@ -17,6 +17,11 @@ Disable the Refresh Firefox button on `about:support` and `support.mozilla.org`, +## Values + +- Set to `true` to remove the Refresh Firefox button from `about:support`, and stop Firefox prompting the user to refresh. +- Set to `false` to leave the Refresh Firefox button available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableRemoteImprovements.mdx b/src/content/docs/reference/policies/DisableRemoteImprovements.mdx index 8c489c2..943c695 100644 --- a/src/content/docs/reference/policies/DisableRemoteImprovements.mdx +++ b/src/content/docs/reference/policies/DisableRemoteImprovements.mdx @@ -17,6 +17,11 @@ Prevent Firefox from applying performance, stability, and feature changes betwee +## Values + +- Set to `true` to stop Firefox applying remotely configured changes between updates. +- Set to `false` to leave remote improvements enabled. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableRemoteSettingsAndAcceptSecurityConsequences.mdx b/src/content/docs/reference/policies/DisableRemoteSettingsAndAcceptSecurityConsequences.mdx index e011459..1ecd705 100644 --- a/src/content/docs/reference/policies/DisableRemoteSettingsAndAcceptSecurityConsequences.mdx +++ b/src/content/docs/reference/policies/DisableRemoteSettingsAndAcceptSecurityConsequences.mdx @@ -22,6 +22,11 @@ Remote Settings is the mechanism Firefox uses to deliver frequently updated data +## Values + +- Set to `true` to stop Firefox connecting to Remote Settings, including for the add-on and plugin blocklists. +- Set to `false` to leave Remote Settings enabled. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableSafeMode.mdx b/src/content/docs/reference/policies/DisableSafeMode.mdx index acf22de..f69c4f5 100644 --- a/src/content/docs/reference/policies/DisableSafeMode.mdx +++ b/src/content/docs/reference/policies/DisableSafeMode.mdx @@ -21,6 +21,11 @@ Windows and macOS only. +## Values + +- Set to `true` to disable safe mode. On Windows, this also disables starting in safe mode from the command line. +- Set to `false` to leave safe mode available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableSetDesktopBackground.mdx b/src/content/docs/reference/policies/DisableSetDesktopBackground.mdx index 6da5401..83b31db 100644 --- a/src/content/docs/reference/policies/DisableSetDesktopBackground.mdx +++ b/src/content/docs/reference/policies/DisableSetDesktopBackground.mdx @@ -17,6 +17,11 @@ Remove the "Set As Desktop Background..." menuitem when right clicking on an ima +## Values + +- Set to `true` to remove the Set as Desktop Background item from the image context menu. +- Set to `false` to leave the menu item in place. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableSystemAddonUpdate.mdx b/src/content/docs/reference/policies/DisableSystemAddonUpdate.mdx index 6d521fe..e2cafe0 100644 --- a/src/content/docs/reference/policies/DisableSystemAddonUpdate.mdx +++ b/src/content/docs/reference/policies/DisableSystemAddonUpdate.mdx @@ -22,6 +22,11 @@ If this policy is set to `true`, Firefox does not install new system add-ons or +## Values + +- Set to `true` to stop Firefox installing or updating system add-ons. +- Set to `false` to leave system add-on updates enabled. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableTelemetry.mdx b/src/content/docs/reference/policies/DisableTelemetry.mdx index 98fe307..31c56f3 100644 --- a/src/content/docs/reference/policies/DisableTelemetry.mdx +++ b/src/content/docs/reference/policies/DisableTelemetry.mdx @@ -22,6 +22,11 @@ From Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is also di +## Values + +- Set to `true` to stop telemetry being collected and uploaded, and block `about:telemetry`. +- Set to `false` to leave telemetry enabled. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DisableThirdPartyModuleBlocking.mdx b/src/content/docs/reference/policies/DisableThirdPartyModuleBlocking.mdx index 03d90ea..b109256 100644 --- a/src/content/docs/reference/policies/DisableThirdPartyModuleBlocking.mdx +++ b/src/content/docs/reference/policies/DisableThirdPartyModuleBlocking.mdx @@ -21,6 +21,11 @@ Windows only, GPO only. +## Values + +- Set to `true` to stop users blocking third-party modules from `about:third-party`. +- Set to `false` to leave third-party module blocking available. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DontCheckDefaultBrowser.mdx b/src/content/docs/reference/policies/DontCheckDefaultBrowser.mdx index 1df0e92..29d6f48 100644 --- a/src/content/docs/reference/policies/DontCheckDefaultBrowser.mdx +++ b/src/content/docs/reference/policies/DontCheckDefaultBrowser.mdx @@ -22,6 +22,11 @@ To remove the controls to set Firefox as the default browser, see the [`DefaultB +## Values + +- Set to `true` to stop Firefox checking whether it is the default browser at startup, and lock the setting. +- Set to `false` to check at startup whether Firefox is the default browser, and lock the setting. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/DownloadDirectory.mdx b/src/content/docs/reference/policies/DownloadDirectory.mdx index 5d07cf2..c5657ae 100644 --- a/src/content/docs/reference/policies/DownloadDirectory.mdx +++ b/src/content/docs/reference/policies/DownloadDirectory.mdx @@ -18,6 +18,13 @@ You can use `${home}` for the native home directory. +## Values + +`DownloadDirectory` expects a path to the directory downloads are saved to, such as `/Users/username/Documents`. +The path is locked, and the user cannot choose where each file is saved. + +- `${home}` expands to the user's home directory, so `${home}/Downloads` works across profiles and platforms. + ## Windows (GPO) ``` From 9b07dfb1bc1df2cb28f87c6bf09550767e8898c2 Mon Sep 17 00:00:00 2001 From: Brian Smith Date: Wed, 9 Sep 2026 17:21:53 +0200 Subject: [PATCH 3/3] feat: Add values section for reference docs [e-x] --- .../docs/reference/policies/3rdparty.mdx | 6 ++++++ .../policies/EnterprisePoliciesEnabled.mdx | 5 +++++ ...eTypePairsFromFileTypeDownloadWarnings.mdx | 8 ++++++++ .../reference/policies/ExtensionUpdate.mdx | 5 +++++ .../reference/policies/FirefoxSuggest.mdx | 10 ++++++++++ ...anetSiteForSingleWordEntryInAddressBar.mdx | 5 +++++ .../policies/HardwareAcceleration.mdx | 5 +++++ .../docs/reference/policies/HttpAllowlist.mdx | 6 ++++++ .../policies/IPProtectionAvailable.mdx | 5 +++++ .../reference/policies/LegacyProfiles.mdx | 5 +++++ .../LegacySameSiteCookieBehaviorEnabled.mdx | 7 +++++++ ...SiteCookieBehaviorEnabledForDomainList.mdx | 7 +++++++ .../reference/policies/LocalFileLinks.mdx | 5 +++++ .../reference/policies/ManagedBookmarks.mdx | 19 ++++++++++++++----- .../policies/ManualAppUpdateOnly.mdx | 5 +++++ .../reference/policies/MicrosoftEntraSSO.mdx | 5 +++++ .../reference/policies/NetworkPrediction.mdx | 5 +++++ .../docs/reference/policies/NewTabPage.mdx | 5 +++++ .../reference/policies/NoDefaultBookmarks.mdx | 5 +++++ .../reference/policies/OfferToSaveLogins.mdx | 5 +++++ .../policies/OfferToSaveLoginsDefault.mdx | 7 +++++++ .../policies/OverrideFirstRunPage.mdx | 10 +++++++++- .../policies/OverridePostUpdatePage.mdx | 9 ++++++++- .../policies/PasswordManagerEnabled.mdx | 5 +++++ .../policies/PasswordManagerExceptions.mdx | 6 ++++++ .../reference/policies/PictureInPicture.mdx | 7 +++++++ .../PostQuantumKeyAgreementEnabled.mdx | 5 +++++ .../reference/policies/PrimaryPassword.mdx | 5 +++++ .../reference/policies/PrintingEnabled.mdx | 5 +++++ .../policies/PromptForDownloadLocation.mdx | 5 +++++ .../reference/policies/RequestedLocales.mdx | 10 ++++++++++ .../docs/reference/policies/SSLVersionMax.mdx | 9 +++++++++ .../docs/reference/policies/SSLVersionMin.mdx | 9 +++++++++ .../docs/reference/policies/SearchBar.mdx | 9 +++++++++ .../policies/SearchSuggestEnabled.mdx | 5 +++++ .../reference/policies/ShowHomeButton.mdx | 5 +++++ .../reference/policies/SkipTermsOfUse.mdx | 5 +++++ .../StartDownloadsInTempDirectory.mdx | 5 +++++ .../reference/policies/TranslateEnabled.mdx | 7 +++++++ .../policies/UseSystemPrintDialog.mdx | 5 +++++ .../policies/VisualSearchEnabled.mdx | 5 +++++ .../docs/reference/policies/WindowsSSO.mdx | 5 +++++ .../docs/reference/policies/XSLTEnabled.mdx | 5 +++++ 43 files changed, 269 insertions(+), 7 deletions(-) diff --git a/src/content/docs/reference/policies/3rdparty.mdx b/src/content/docs/reference/policies/3rdparty.mdx index 6e21272..8f2be5d 100644 --- a/src/content/docs/reference/policies/3rdparty.mdx +++ b/src/content/docs/reference/policies/3rdparty.mdx @@ -19,6 +19,12 @@ For GPO and Intune, the extension developer should provide an ADMX file. +## Values + +- `Extensions`: An object keyed by extension ID. + The value for each ID is the configuration passed to that extension. + Firefox does not define those keys and values, the extension does, so check the extension's documentation for what it accepts. + ## macOS ```xml diff --git a/src/content/docs/reference/policies/EnterprisePoliciesEnabled.mdx b/src/content/docs/reference/policies/EnterprisePoliciesEnabled.mdx index 9dae036..fabaa22 100644 --- a/src/content/docs/reference/policies/EnterprisePoliciesEnabled.mdx +++ b/src/content/docs/reference/policies/EnterprisePoliciesEnabled.mdx @@ -20,6 +20,11 @@ See [Configuring policies](/guides/policies-configuration/) for where each polic > - Setting `EnterprisePoliciesEnabled` in `policies.json` has no effect and is reported as an error in `about:policies`. > For this reason, all non-macOS sections are omitted deliberately from this page. +## Values + +- Set to `true` to enable policy support on macOS, so Firefox reads the policies in the plist. +- Set to `false`, or leave the key out, and Firefox ignores every policy in the plist. + ## macOS ```xml diff --git a/src/content/docs/reference/policies/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings.mdx b/src/content/docs/reference/policies/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings.mdx index 579f1b9..f6499ed 100644 --- a/src/content/docs/reference/policies/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings.mdx +++ b/src/content/docs/reference/policies/ExemptDomainFileTypePairsFromFileTypeDownloadWarnings.mdx @@ -23,6 +23,14 @@ This policy is based on the [Chrome policy](https://chromeenterprise.google/poli +## Values + +Each entry in the list accepts the following keys: + +- `file_extension`: The file extension the exemption applies to, without a leading dot, such as `jnlp`. +- `domains`: A list of domains the exemption applies to, such as `example.com`. + These are domains, not URL patterns, and a wildcard (`*`) is not supported. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/ExtensionUpdate.mdx b/src/content/docs/reference/policies/ExtensionUpdate.mdx index 83e8437..1a5c9d9 100644 --- a/src/content/docs/reference/policies/ExtensionUpdate.mdx +++ b/src/content/docs/reference/policies/ExtensionUpdate.mdx @@ -17,6 +17,11 @@ Control extension updates. +## Values + +- Set to `true` to leave extension updates enabled. This is the same as not setting the policy. +- Set to `false` to stop extensions updating, and prevent the user from turning updates back on. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/FirefoxSuggest.mdx b/src/content/docs/reference/policies/FirefoxSuggest.mdx index 6f9d024..b6e15e7 100644 --- a/src/content/docs/reference/policies/FirefoxSuggest.mdx +++ b/src/content/docs/reference/policies/FirefoxSuggest.mdx @@ -18,6 +18,16 @@ As of Firefox 146, `WebSuggestions` turns off Suggest completely. +## Values + +- `WebSuggestions`: Set to `false` to turn off Firefox Suggest. +- `SponsoredSuggestions`: Set to `false` to stop sponsored suggestions appearing. +- `OnlineEnabled`: Set to `false` to limit Firefox Suggest to suggestions stored locally, rather than fetched as the user types. +- `ImproveSuggest`: Deprecated, use `OnlineEnabled` instead. +- `Locked`: Prevents the user from changing these settings. + +Values are applied as defaults that users can change, unless `Locked` is set to `true`. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/GoToIntranetSiteForSingleWordEntryInAddressBar.mdx b/src/content/docs/reference/policies/GoToIntranetSiteForSingleWordEntryInAddressBar.mdx index cd8a777..d105de8 100644 --- a/src/content/docs/reference/policies/GoToIntranetSiteForSingleWordEntryInAddressBar.mdx +++ b/src/content/docs/reference/policies/GoToIntranetSiteForSingleWordEntryInAddressBar.mdx @@ -17,6 +17,11 @@ Whether to always go through the DNS server before sending a single word search +## Values + +- Set to `true` to send a single word entry to the DNS server before the search engine, and lock the setting. +- Set to `false` to send a single word entry straight to the search engine, and lock the setting. + ## Description If the site exists, it will navigate to the website. diff --git a/src/content/docs/reference/policies/HardwareAcceleration.mdx b/src/content/docs/reference/policies/HardwareAcceleration.mdx index 5bd4baa..5d3d858 100644 --- a/src/content/docs/reference/policies/HardwareAcceleration.mdx +++ b/src/content/docs/reference/policies/HardwareAcceleration.mdx @@ -17,6 +17,11 @@ Control hardware acceleration. +## Values + +- Set to `true` to leave hardware acceleration enabled. This is the same as not setting the policy. +- Set to `false` to disable hardware acceleration, and prevent the user from turning it back on. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/HttpAllowlist.mdx b/src/content/docs/reference/policies/HttpAllowlist.mdx index 8e71e59..76a4b18 100644 --- a/src/content/docs/reference/policies/HttpAllowlist.mdx +++ b/src/content/docs/reference/policies/HttpAllowlist.mdx @@ -18,6 +18,12 @@ The sites are specified as a list of origins. +## Values + +`HttpAllowlist` expects a list of origins that are not upgraded to HTTPS, such as `http://example.org`. +Each entry is a scheme, hostname and optional port. +Paths and wildcards are not supported. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/IPProtectionAvailable.mdx b/src/content/docs/reference/policies/IPProtectionAvailable.mdx index 692e309..b4a7c11 100644 --- a/src/content/docs/reference/policies/IPProtectionAvailable.mdx +++ b/src/content/docs/reference/policies/IPProtectionAvailable.mdx @@ -17,6 +17,11 @@ Prevent the built-in VPN from being available to users. +## Values + +- Set to `true` to leave the built-in VPN available. This is the same as not setting the policy. +- Set to `false` to make the built-in VPN unavailable to users. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/LegacyProfiles.mdx b/src/content/docs/reference/policies/LegacyProfiles.mdx index 78d9907..ffb96cb 100644 --- a/src/content/docs/reference/policies/LegacyProfiles.mdx +++ b/src/content/docs/reference/policies/LegacyProfiles.mdx @@ -31,6 +31,11 @@ Windows only, GPO only. } ``` +## Values + +- Set to `true` to share one profile across every installation, the same as the `MOZ_LEGACY_PROFILES` environment variable. +- Set to `false` to create a separate profile for each installation. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/LegacySameSiteCookieBehaviorEnabled.mdx b/src/content/docs/reference/policies/LegacySameSiteCookieBehaviorEnabled.mdx index 011e475..63dff06 100644 --- a/src/content/docs/reference/policies/LegacySameSiteCookieBehaviorEnabled.mdx +++ b/src/content/docs/reference/policies/LegacySameSiteCookieBehaviorEnabled.mdx @@ -19,6 +19,13 @@ If this policy is set to true, it reverts all cookies to legacy SameSite behavio +## Values + +- Set to `true` to treat cookies with no `SameSite` attribute as `SameSite=None`. +- Set to `false` to treat them as `SameSite=Lax`. + +The policy sets the default behavior rather than locking it, so a user can still change it. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/LegacySameSiteCookieBehaviorEnabledForDomainList.mdx b/src/content/docs/reference/policies/LegacySameSiteCookieBehaviorEnabledForDomainList.mdx index c0fc55e..c7760d7 100644 --- a/src/content/docs/reference/policies/LegacySameSiteCookieBehaviorEnabledForDomainList.mdx +++ b/src/content/docs/reference/policies/LegacySameSiteCookieBehaviorEnabledForDomainList.mdx @@ -19,6 +19,13 @@ If this policy is set to true, cookies set for domains in this list will revert +## Values + +`LegacySameSiteCookieBehaviorEnabledForDomainList` expects a list of domains, such as `example.org`. +Cookies set for those domains revert to legacy `SameSite` behavior. + +The policy sets the default behavior rather than locking it, so a user can still change it. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/LocalFileLinks.mdx b/src/content/docs/reference/policies/LocalFileLinks.mdx index 36b69a1..c6363b2 100644 --- a/src/content/docs/reference/policies/LocalFileLinks.mdx +++ b/src/content/docs/reference/policies/LocalFileLinks.mdx @@ -23,6 +23,11 @@ Intranet applications may need this, for example, to link to files on a shared d +## Values + +`LocalFileLinks` expects a list of origins allowed to link to `file:///` URLs, such as `http://example.org/`. +Each origin is a scheme, hostname and optional port. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/ManagedBookmarks.mdx b/src/content/docs/reference/policies/ManagedBookmarks.mdx index 99756aa..49d8c56 100644 --- a/src/content/docs/reference/policies/ManagedBookmarks.mdx +++ b/src/content/docs/reference/policies/ManagedBookmarks.mdx @@ -10,11 +10,6 @@ The bookmarks are only added as a button on the personal toolbar, they are not i The syntax of this policy is based on the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks), with the addition of the Firefox-specific `favicon` property. -A `favicon` can be specified for each bookmark. -The value must be a `data:`, `http:`, or `https:` URL. - -A bookmark's `url` can be a `javascript:` URL to create a bookmarklet. - ## Compatibility @@ -28,6 +23,20 @@ A bookmark's `url` can be a `javascript:` URL to create a bookmarklet. +## Values + +The first entry in the list names the toolbar folder, and the entries after it are the bookmarks: + +- `toplevel_name`: The name of the folder button added to the bookmarks toolbar. + Only used in the first entry. +- `name`: The name shown for a bookmark or folder. +- `url`: The address the bookmark opens. + A `javascript:` URL creates a bookmarklet. +- `favicon`: The URL of an icon to show for the bookmark. + Must be a `data:`, `http:` or `https:` URL. +- `children`: A list of bookmarks to put in a folder. + Folders can be nested. + ## Windows (GPO) Software\Policies\Mozilla\Firefox\ManagedBookmarks (REG_MULTI_SZ) = diff --git a/src/content/docs/reference/policies/ManualAppUpdateOnly.mdx b/src/content/docs/reference/policies/ManualAppUpdateOnly.mdx index 386a14d..6ae6b45 100644 --- a/src/content/docs/reference/policies/ManualAppUpdateOnly.mdx +++ b/src/content/docs/reference/policies/ManualAppUpdateOnly.mdx @@ -26,6 +26,11 @@ This policy is primarily intended for advanced end users, not for enterprises, b +## Values + +- Set to `true` to switch to manual updates only. +- Set to `false` to leave automatic update checking enabled. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/MicrosoftEntraSSO.mdx b/src/content/docs/reference/policies/MicrosoftEntraSSO.mdx index 4832b70..cf749ed 100644 --- a/src/content/docs/reference/policies/MicrosoftEntraSSO.mdx +++ b/src/content/docs/reference/policies/MicrosoftEntraSSO.mdx @@ -21,6 +21,11 @@ For the Windows equivalent, see the [`WindowsSSO`](/reference/policies/windowsss +## Values + +- Set to `true` to enable single sign-on for Microsoft Entra accounts, and lock the setting. +- Set to `false` to disable single sign-on for Microsoft Entra accounts, and lock the setting. + ## macOS ```xml diff --git a/src/content/docs/reference/policies/NetworkPrediction.mdx b/src/content/docs/reference/policies/NetworkPrediction.mdx index d465b90..fa95e6e 100644 --- a/src/content/docs/reference/policies/NetworkPrediction.mdx +++ b/src/content/docs/reference/policies/NetworkPrediction.mdx @@ -17,6 +17,11 @@ Enable or disable network prediction ([DNS prefetching](https://developer.mozill +## Values + +- Set to `true` to allow DNS prefetching, and lock the setting. +- Set to `false` to stop DNS prefetching, over both HTTP and HTTPS, and lock the setting. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/NewTabPage.mdx b/src/content/docs/reference/policies/NewTabPage.mdx index 820e1c5..3d04b19 100644 --- a/src/content/docs/reference/policies/NewTabPage.mdx +++ b/src/content/docs/reference/policies/NewTabPage.mdx @@ -23,6 +23,11 @@ To keep the New Tab page but change which sections appear on it, use the [`Firef +## Values + +- Set to `true` to open Firefox Home on new tabs, and lock the setting. +- Set to `false` to open a blank page on new tabs, and lock the setting. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/NoDefaultBookmarks.mdx b/src/content/docs/reference/policies/NoDefaultBookmarks.mdx index 2fd23d6..f5c1d6e 100644 --- a/src/content/docs/reference/policies/NoDefaultBookmarks.mdx +++ b/src/content/docs/reference/policies/NoDefaultBookmarks.mdx @@ -19,6 +19,11 @@ This policy is only effective if the user profile has not been created yet. +## Values + +- Set to `true` to stop Firefox creating the default bookmarks. +- Set to `false` to create the default bookmarks. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/OfferToSaveLogins.mdx b/src/content/docs/reference/policies/OfferToSaveLogins.mdx index 73bb399..3efdf6f 100644 --- a/src/content/docs/reference/policies/OfferToSaveLogins.mdx +++ b/src/content/docs/reference/policies/OfferToSaveLogins.mdx @@ -17,6 +17,11 @@ Control whether or not Firefox offers to save passwords. +## Values + +- Set to `true` to offer to save logins and passwords, and prevent the user from changing it. +- Set to `false` to stop offering to save logins and passwords, and prevent the user from changing it. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/OfferToSaveLoginsDefault.mdx b/src/content/docs/reference/policies/OfferToSaveLoginsDefault.mdx index 7a07b4c..7983b76 100644 --- a/src/content/docs/reference/policies/OfferToSaveLoginsDefault.mdx +++ b/src/content/docs/reference/policies/OfferToSaveLoginsDefault.mdx @@ -17,6 +17,13 @@ Sets the default value of `signon.rememberSignons` without locking it. +## Values + +- Set to `true` to offer to save logins and passwords by default. The user can still change it. +- Set to `false` to not offer to save logins and passwords by default. The user can still change it. + +If [`OfferToSaveLogins`](/reference/policies/offertosavelogins/) is also set, it takes precedence and `OfferToSaveLoginsDefault` is ignored. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/OverrideFirstRunPage.mdx b/src/content/docs/reference/policies/OverrideFirstRunPage.mdx index 195e916..9b7e388 100644 --- a/src/content/docs/reference/policies/OverrideFirstRunPage.mdx +++ b/src/content/docs/reference/policies/OverrideFirstRunPage.mdx @@ -4,7 +4,7 @@ description: "Override the first run page." category: "Startup" --- -Override the first run page. If the value is an empty string (`""`), the first run page is not displayed. +Override the first run page. The first run page is what Firefox opens the first time a new profile is used, normally the onboarding tour at `about:welcome`. Setting this policy replaces that page and turns the onboarding tour off, so users go directly to the URL you specify. @@ -24,6 +24,14 @@ For the page shown after Firefox updates, see the [`OverridePostUpdatePage`](/re +## Values + +`OverrideFirstRunPage` expects the URL to show the first time a new profile is used: + +- A URL, such as `https://example.com`, replaces the onboarding tour with that page. + Multiple URLs can be separated by a vertical bar (`|`), each opening in its own tab. +- An empty string (`""`) shows no first run page at all. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/OverridePostUpdatePage.mdx b/src/content/docs/reference/policies/OverridePostUpdatePage.mdx index b8e422f..293c9e1 100644 --- a/src/content/docs/reference/policies/OverridePostUpdatePage.mdx +++ b/src/content/docs/reference/policies/OverridePostUpdatePage.mdx @@ -4,7 +4,7 @@ description: "Override the upgrade page." category: "Startup" --- -Override the upgrade page. If the value is an empty string (`""`), no extra pages are displayed when Firefox is upgraded. +Override the upgrade page. The upgrade page, also called the "What's New" page, is the extra tab Firefox opens the first time it starts after updating to a new version. It is normally a page on mozilla.org describing what changed in that release. @@ -23,6 +23,13 @@ For the page shown the first time a new profile is used, see the [`OverrideFirst +## Values + +`OverridePostUpdatePage` expects the URL to show the first time Firefox starts after an update: + +- A URL, such as `https://example.com`, replaces the What's New page with that page. +- An empty string (`""`) shows no page after an update. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/PasswordManagerEnabled.mdx b/src/content/docs/reference/policies/PasswordManagerEnabled.mdx index 2e1206d..877f4d5 100644 --- a/src/content/docs/reference/policies/PasswordManagerEnabled.mdx +++ b/src/content/docs/reference/policies/PasswordManagerEnabled.mdx @@ -19,6 +19,11 @@ Remove access to the password manager via preferences and block `about:logins`. +## Values + +- Set to `true` to keep the password manager available and offer to save logins, and lock the setting. +- Set to `false` to block `about:logins`, remove password management from settings, and stop Firefox saving logins. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/PasswordManagerExceptions.mdx b/src/content/docs/reference/policies/PasswordManagerExceptions.mdx index 1c4d634..db14292 100644 --- a/src/content/docs/reference/policies/PasswordManagerExceptions.mdx +++ b/src/content/docs/reference/policies/PasswordManagerExceptions.mdx @@ -19,6 +19,12 @@ The sites are specified as a list of origins. +## Values + +`PasswordManagerExceptions` expects a list of origins Firefox never offers to save passwords for, such as `https://example.org`. +Each origin is a scheme, hostname and optional port. +Paths and wildcards are not supported. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/PictureInPicture.mdx b/src/content/docs/reference/policies/PictureInPicture.mdx index 07672b1..7fc744c 100644 --- a/src/content/docs/reference/policies/PictureInPicture.mdx +++ b/src/content/docs/reference/policies/PictureInPicture.mdx @@ -17,6 +17,13 @@ Enable or disable [Picture-in-Picture](https://support.mozilla.org/en-US/kb/abou +## Values + +- `Enabled`: Set to `true` to make the Picture-in-Picture toggle available, or `false` to remove it. +- `Locked`: Set to `true` to prevent the user from changing the setting. + +`Enabled` is applied as a default that users can change, unless `Locked` is set to `true`. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/PostQuantumKeyAgreementEnabled.mdx b/src/content/docs/reference/policies/PostQuantumKeyAgreementEnabled.mdx index 7ca09c5..72ae194 100644 --- a/src/content/docs/reference/policies/PostQuantumKeyAgreementEnabled.mdx +++ b/src/content/docs/reference/policies/PostQuantumKeyAgreementEnabled.mdx @@ -27,6 +27,11 @@ This policy is independent of [`CNSA2KeyAgreementEnabled`](/reference/policies/c +## Values + +- Set to `true` to enable post-quantum key agreement for TLS, HTTP/3 and WebRTC, and lock the settings. +- Set to `false` to disable post-quantum key agreement for TLS, HTTP/3 and WebRTC, and lock the settings. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/PrimaryPassword.mdx b/src/content/docs/reference/policies/PrimaryPassword.mdx index aadbca3..291cbb6 100644 --- a/src/content/docs/reference/policies/PrimaryPassword.mdx +++ b/src/content/docs/reference/policies/PrimaryPassword.mdx @@ -22,6 +22,11 @@ If both `DisableMasterPasswordCreation` and `PrimaryPassword` are used, `Disable +## Values + +- Set to `true` to require a primary password, and stop the user removing it. +- Set to `false` to remove primary password functionality, the same as setting [`DisableMasterPasswordCreation`](/reference/policies/disablemasterpasswordcreation/) to `true`. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/PrintingEnabled.mdx b/src/content/docs/reference/policies/PrintingEnabled.mdx index 8d47493..f6d2177 100644 --- a/src/content/docs/reference/policies/PrintingEnabled.mdx +++ b/src/content/docs/reference/policies/PrintingEnabled.mdx @@ -17,6 +17,11 @@ Enable or disable printing. +## Values + +- Set to `true` to allow printing, and lock the setting. +- Set to `false` to disable printing, and lock the setting. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/PromptForDownloadLocation.mdx b/src/content/docs/reference/policies/PromptForDownloadLocation.mdx index f72632e..544b628 100644 --- a/src/content/docs/reference/policies/PromptForDownloadLocation.mdx +++ b/src/content/docs/reference/policies/PromptForDownloadLocation.mdx @@ -17,6 +17,11 @@ Ask where to save each file before downloading. +## Values + +- Set to `true` to ask where to save each file, and lock the setting. +- Set to `false` to save files to the download directory without asking, and lock the setting. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/RequestedLocales.mdx b/src/content/docs/reference/policies/RequestedLocales.mdx index b814a59..563fa85 100644 --- a/src/content/docs/reference/policies/RequestedLocales.mdx +++ b/src/content/docs/reference/policies/RequestedLocales.mdx @@ -20,6 +20,16 @@ As of Firefox 68, this can be a string so that you can specify an empty value (` +## Values + +`RequestedLocales` accepts either an array of locale codes or a comma-separated string, in order of preference: + +- `["de", "en-US"]` as an array. +- `"de,en-US"` as a string. + +The first locale with an available language pack becomes active. +The policy is applied when its value changes, so a user who switches language afterwards is not switched back. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/SSLVersionMax.mdx b/src/content/docs/reference/policies/SSLVersionMax.mdx index c447524..03c0c39 100644 --- a/src/content/docs/reference/policies/SSLVersionMax.mdx +++ b/src/content/docs/reference/policies/SSLVersionMax.mdx @@ -24,6 +24,15 @@ For setting and locking the minimum version of TLS, see the [`SSLVersionMin`](/r +## Values + +`SSLVersionMax` expects one of the following values: + +- `tls1`: TLS 1.0 +- `tls1.1`: TLS 1.1 +- `tls1.2`: TLS 1.2 +- `tls1.3`: TLS 1.3 + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/SSLVersionMin.mdx b/src/content/docs/reference/policies/SSLVersionMin.mdx index 2ddee5f..0ea2959 100644 --- a/src/content/docs/reference/policies/SSLVersionMin.mdx +++ b/src/content/docs/reference/policies/SSLVersionMin.mdx @@ -24,6 +24,15 @@ For setting and locking the maximum version of TLS, see the [`SSLVersionMax`](/r +## Values + +`SSLVersionMin` expects one of the following values: + +- `tls1`: TLS 1.0 +- `tls1.1`: TLS 1.1 +- `tls1.2`: TLS 1.2 +- `tls1.3`: TLS 1.3 + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/SearchBar.mdx b/src/content/docs/reference/policies/SearchBar.mdx index 83c938f..c1222a5 100644 --- a/src/content/docs/reference/policies/SearchBar.mdx +++ b/src/content/docs/reference/policies/SearchBar.mdx @@ -17,6 +17,15 @@ Set whether or not the [search bar](https://support.mozilla.org/en-US/kb/add-sea +## Values + +`SearchBar` expects one of the following values: + +- `unified`: Search from the address bar, with no separate search box. +- `separate`: Add a search box to the toolbar, next to the address bar. + +The policy sets the placement rather than forcing it, so a user who moves the search bar afterwards is not moved back. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/SearchSuggestEnabled.mdx b/src/content/docs/reference/policies/SearchSuggestEnabled.mdx index f672147..0fa32e9 100644 --- a/src/content/docs/reference/policies/SearchSuggestEnabled.mdx +++ b/src/content/docs/reference/policies/SearchSuggestEnabled.mdx @@ -23,6 +23,11 @@ For the Firefox Suggest results that come from Mozilla rather than from the sear +## Values + +- Set to `true` to show search suggestions in the address bar and search bar, and lock the setting. +- Set to `false` to hide search suggestions, and lock the setting. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/ShowHomeButton.mdx b/src/content/docs/reference/policies/ShowHomeButton.mdx index 8d910a0..7522244 100644 --- a/src/content/docs/reference/policies/ShowHomeButton.mdx +++ b/src/content/docs/reference/policies/ShowHomeButton.mdx @@ -19,6 +19,11 @@ Future versions of Firefox will not show the home button by default. +## Values + +- Set to `true` to add the home button to the toolbar, and stop it being removed by default. +- Set to `false` to remove the home button from the toolbar. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/SkipTermsOfUse.mdx b/src/content/docs/reference/policies/SkipTermsOfUse.mdx index 3ea3ea6..2112768 100644 --- a/src/content/docs/reference/policies/SkipTermsOfUse.mdx +++ b/src/content/docs/reference/policies/SkipTermsOfUse.mdx @@ -20,6 +20,11 @@ You represent that you accept and have the authority to accept the Terms of Use +## Values + +- Set to `true` to skip the Terms of Use and Privacy Notice on startup, accepting them on behalf of your users. +- Set to `false` to show the Terms of Use and Privacy Notice. This is the same as not setting the policy. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/StartDownloadsInTempDirectory.mdx b/src/content/docs/reference/policies/StartDownloadsInTempDirectory.mdx index 8aac2dc..c931ccf 100644 --- a/src/content/docs/reference/policies/StartDownloadsInTempDirectory.mdx +++ b/src/content/docs/reference/policies/StartDownloadsInTempDirectory.mdx @@ -17,6 +17,11 @@ Force downloads to start off in a local, temporary location rather than the defa +## Values + +- Set to `true` to download files to a temporary directory before moving them, and lock the setting. +- Set to `false` to download files straight to the download directory, and lock the setting. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/TranslateEnabled.mdx b/src/content/docs/reference/policies/TranslateEnabled.mdx index a80c12c..052b998 100644 --- a/src/content/docs/reference/policies/TranslateEnabled.mdx +++ b/src/content/docs/reference/policies/TranslateEnabled.mdx @@ -21,6 +21,13 @@ If you only want to disable the popup, you can set the `browser.translations.aut +## Values + +- Set to `true` to enable webpage translation, and lock the setting. +- Set to `false` to disable webpage translation, and lock the setting. + +If [`AIControls`](/reference/policies/aicontrols/) sets `Translations` or `Default`, it takes precedence and `TranslateEnabled` is ignored. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/UseSystemPrintDialog.mdx b/src/content/docs/reference/policies/UseSystemPrintDialog.mdx index cf0e7a9..d16a111 100644 --- a/src/content/docs/reference/policies/UseSystemPrintDialog.mdx +++ b/src/content/docs/reference/policies/UseSystemPrintDialog.mdx @@ -20,6 +20,11 @@ If this policy is set to `true`, Firefox skips that panel and opens the operatin +## Values + +- Set to `true` to print using the operating system print dialog instead of the Firefox print preview, and lock the setting. +- Set to `false` to print using the Firefox print preview, and lock the setting. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/VisualSearchEnabled.mdx b/src/content/docs/reference/policies/VisualSearchEnabled.mdx index 3f06ce7..54b8b0b 100644 --- a/src/content/docs/reference/policies/VisualSearchEnabled.mdx +++ b/src/content/docs/reference/policies/VisualSearchEnabled.mdx @@ -20,6 +20,11 @@ It is only offered when Google is the default search engine, so removing Google +## Values + +- Set to `true` to enable visual search, and lock the setting. +- Set to `false` to disable visual search, and lock the setting. + ## Windows (GPO) ```url diff --git a/src/content/docs/reference/policies/WindowsSSO.mdx b/src/content/docs/reference/policies/WindowsSSO.mdx index 57283fb..8a90ee7 100644 --- a/src/content/docs/reference/policies/WindowsSSO.mdx +++ b/src/content/docs/reference/policies/WindowsSSO.mdx @@ -19,6 +19,11 @@ If this policy is set to `true`, Firefox will use credentials stored in Windows +## Values + +- Set to `true` to allow Windows single sign-on for Microsoft, work and school accounts, and lock the setting. +- Set to `false` to stop Windows single sign-on, and lock the setting. + ## Windows (GPO) ``` diff --git a/src/content/docs/reference/policies/XSLTEnabled.mdx b/src/content/docs/reference/policies/XSLTEnabled.mdx index 515be55..2deb4e2 100644 --- a/src/content/docs/reference/policies/XSLTEnabled.mdx +++ b/src/content/docs/reference/policies/XSLTEnabled.mdx @@ -17,6 +17,11 @@ Enable or disable support for the [XSLTProcessor](https://developer.mozilla.org/ +## Values + +- Set to `true` to allow XSLT processing, and lock the setting. +- Set to `false` to block XSLT processing, and lock the setting. + ## Windows (GPO) ```