From b4ba8a06a92e48ea882fc1c72344b7fbfc49e32e Mon Sep 17 00:00:00 2001
From: Aminda Suomalainen <suomalainen@aminda.eu>
Date: Sun, 23 Feb 2025 20:28:25 +0200
Subject: [PATCH] {chromium,firefox}: explicitly allowlist
 pp-attester-turnstile.research.cloudflare.com

---
 etc/firefox/policies/policies.json                       | 9 ++++++---
 etc/opt/chromium/policies/managed/aminda-extensions.json | 9 ++++++---
 .../policies/managed/brave-shields-disabled.json         | 3 ++-
 3 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/etc/firefox/policies/policies.json b/etc/firefox/policies/policies.json
index 82fe7022..0c8c6b2e 100644
--- a/etc/firefox/policies/policies.json
+++ b/etc/firefox/policies/policies.json
@@ -5,7 +5,8 @@
 				"jid1-MnnxcxisBPnSXQ@jetpack": {
 					"checkForDNTPolicy": true,
 					"disabledSites": [
-						"www.ecosia.org"
+						"www.ecosia.org",
+						"pp-attester-turnstile.research.cloudflare.com"
 					],
 					"learnInIncognito": true,
 					"learnLocally": true,
@@ -55,7 +56,8 @@
 							"www.ecosia.org",
 							"mail.google.com",
 							"moz-extension-scheme",
-							"research.cloudflare.com"
+							"research.cloudflare.com",
+							"pp-attester-turnstile.research.cloudflare.com"
 						]
 					},
 					"toOverwrite": {
@@ -199,7 +201,8 @@
 			"Cryptomining": true,
 			"EmailTracking": true,
 			"Exceptions": [
-				"https://www.ecosia.org"
+				"https://www.ecosia.org",
+				"https://pp-attester-turnstile.research.cloudflare.com"
 			],
 			"Fingerprinting": true,
 			"Locked": false,
diff --git a/etc/opt/chromium/policies/managed/aminda-extensions.json b/etc/opt/chromium/policies/managed/aminda-extensions.json
index 212fa810..fdb47e23 100644
--- a/etc/opt/chromium/policies/managed/aminda-extensions.json
+++ b/etc/opt/chromium/policies/managed/aminda-extensions.json
@@ -15,7 +15,8 @@
 						"www.ecosia.org",
 						"mail.google.com",
 						"moz-extension-scheme",
-						"research.cloudflare.com"
+						"research.cloudflare.com",
+						"pp-attester-turnstile.research.cloudflare.com"
 					]
 				},
 				"toOverwrite": {
@@ -73,7 +74,8 @@
 				"noFiltering": [
 					"www.ecosia.org",
 					"cloudflare.com",
-					"mail.google.com"
+					"mail.google.com",
+					"pp-attester-turnstile.research.cloudflare.com"
 				],
 				"rulesets": [
 					"+default",
@@ -108,7 +110,8 @@
 			"pkehgijcmpdhfbdbbnkijodmdjhbjlgp": {
 				"checkForDNTPolicy": true,
 				"disabledSites": [
-					"www.ecosia.org"
+					"www.ecosia.org",
+					"pp-attester-turnstile.research.cloudflare.com"
 				],
 				"learnInIncognito": true,
 				"learnLocally": true,
diff --git a/etc/opt/chromium/policies/managed/brave-shields-disabled.json b/etc/opt/chromium/policies/managed/brave-shields-disabled.json
index d3bb08c0..e0a9e6d9 100644
--- a/etc/opt/chromium/policies/managed/brave-shields-disabled.json
+++ b/etc/opt/chromium/policies/managed/brave-shields-disabled.json
@@ -1,6 +1,7 @@
 {
 	"BraveShieldsDisabledForUrls": [
-		"https://www.ecosia.org"
+		"https://www.ecosia.org",
+		"https://pp-attester-turnstile.research.cloudflare.com"
 	],
 	"BraveShieldsDisabledForUrls_comment": "Managing tracking protection is left for the user unless there is a heavy reason to do otherwise."
 }