From 73ff0cbcf065b53648940fe7a9c21a73cd6dbf20 Mon Sep 17 00:00:00 2001
From: Aminda Suomalainen <suomalainen+git@mikaela.info>
Date: Mon, 20 May 2024 19:42:19 +0300
Subject: [PATCH] {firefox,chromium}: ask for download directory to make
 drive-by attempts more obvious

---
 etc/firefox/policies/policies.json                            | 4 +++-
 .../chromium/policies/managed/disable-driveby-downloads.json  | 4 ++++
 2 files changed, 7 insertions(+), 1 deletion(-)
 create mode 100644 etc/opt/chromium/policies/managed/disable-driveby-downloads.json

diff --git a/etc/firefox/policies/policies.json b/etc/firefox/policies/policies.json
index e953b68b..0ede2e83 100644
--- a/etc/firefox/policies/policies.json
+++ b/etc/firefox/policies/policies.json
@@ -697,6 +697,7 @@
         "Value": 1
       }
     },
+    "PromptForDownloadLocation": true,
     "SearchEngines": {
       "Add": [
         {
@@ -754,6 +755,7 @@
         "Fujitsu mPollux DigiSignApplication": "/usr/lib64/libcryptoki.so"
       }
     },
-    "ShowHomeButton": true
+    "ShowHomeButton": true,
+    "StartDownloadsInTempDirectory": true
   }
 }
diff --git a/etc/opt/chromium/policies/managed/disable-driveby-downloads.json b/etc/opt/chromium/policies/managed/disable-driveby-downloads.json
new file mode 100644
index 00000000..2912c3f6
--- /dev/null
+++ b/etc/opt/chromium/policies/managed/disable-driveby-downloads.json
@@ -0,0 +1,4 @@
+{
+  "DownloadRestrictions": 4,
+  "PromptForDownloadLocation": true
+}