{ "policies": { "3rdparty": { "Extensions": { "jid1-MnnxcxisBPnSXQ-eff@jetpack": { "checkForDNTPolicy": true, "disabledSites": [ "www.ecosia.org" ], "learnInIncognito": true, "learnLocally": true, "sendDNTSignal": true, "showCounter": true, "showIntroPage": false, "socialWidgetReplacementEnabled": true, "trackingDomains": [ { "domain": "tunnus.almamedia.fi", "action": "cookieblock" }, { "domain": "google.com", "action": "block" }, { "domain": "recaptcha.net", "action": "block" }, { "domain": "vimeo.com", "action": "block" }, { "domain": "vimeocdn.com", "action": "block" }, { "domain": "youtube.com", "action": "block" }, { "domain": "youtube-nocookie.com", "action": "block" } ] }, "jid1-ZAdIEUB7XOzOJw@jetpack": { "hasSeenPostInstall": true }, "uBlock0@raymondhill.net": { "toAdd": { "trustedSiteDirectives": [ "chrome-extension-scheme", "challenges.cloudflare.com", "www.ecosia.org", "mail.google.com", "moz-extension-scheme", "research.cloudflare.com" ] }, "toOverwrite": { "filterLists": [ "easylist", "easyprivacy", "FIN-0", "plowe-0", "ublock-abuse", "ublock-badware", "ublock-filters", "ublock-privacy", "ublock-quick-fixes", "ublock-unbreak", "urlhaus-1", "user-filters", "https://raw.githubusercontent.com/mikaela/gist/master/DNS/blocklist.txt", "https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener.txt", "adguard-spyware-url", "https://www.eff.org/files/effdntlist.txt", "https://big.oisd.nl", "https://ads-for-open-source.readthedocs.io/en/latest/_static/lists/opensource-ads.txt" ] }, "userSettings": [ [ "cloudStorageEnabled", "true" ], [ "collapseBlocked", "false" ], [ "ignoreGenericCosmeticFilters", "true" ], [ "parseAllABPHideFilters", "false" ], [ "suspendUntilListsAreLoaded", "false" ], [ "prefetchingDisabled", "true" ] ] }, "{446900e4-71c2-419f-a6a7-df9c091e268b}": { "environment": { "base": "https://vault.bitwarden.eu", "notifications": "https://notifications.bitwarden.eu" } } } }, "AutofillAddressEnabled": false, "AutofillCreditCardEnabled": false, "BlockAboutAddons": false, "BlockAboutConfig": false, "BlockAboutProfiles": false, "BlockAboutSupport": false, "Certificates": { "ImportEnterpriseRoots": false }, "Containers": { "Default": [ { "name": "ff", "color": "white", "icon": "chill" }, { "name": "Fedi", "color": "green", "icon": "tree" }, { "name": "Git", "color": "pink", "icon": "briefcase" }, { "name": "Google", "color": "orange", "icon": "chill" }, { "name": "HSL", "color": "blue", "icon": "vacation" }, { "name": "IM", "color": "purple", "icon": "chill" }, { "name": "LinkedIn", "color": "cyan", "icon": "briefcase" }, { "name": "WhatsApp", "color": "green", "icon": "pet" } ] }, "DNSOverHTTPS": { "Comment": "Seems to break badly on s-guest-free while Unbound/resoled work.", "Enabled": false, "ExcludedDomains": [ "http.badssl.com", "norwegianwifi.com" ], "Fallback": true, "Locked": true, "ProviderURL": "https://dns11.quad9.net/dns-query" }, "DisableEncryptedClientHello": false, "DisableFirefoxAccounts": false, "DisableFirefoxScreenshots": false, "DisableFirefoxStudies": true, "DisableForgetButton": false, "DisablePocket": true, "DisableSecurityBypass": { "InvalidCertificate": true, "SafeBrowsing": false }, "DisableTelemetry": false, "DisableTelemetry_comment": "I am upset about https://github.com/mozilla/policy-templates/issues/1130 but dom.private-attribution.submission.enabled;false is a workaround and it's too much akin to voting to disable especially among technical users who tend to disable it.", "DisplayBookmarksToolbar": "never", "DontCheckDefaultBrowser": true, "EnableTrackingProtection": { "Comment": "Managing tracking protection is left for the user unless there is a heavy reason to do otherwise.", "Cryptomining": true, "EmailTracking": true, "Exceptions": [ "https://www.ecosia.org" ], "Fingerprinting": true, "Locked": false, "Value": true }, "EncryptedMediaExtensions": { "Enabled": true, "Locked": false }, "ExtensionSettings": { "@contain-facebook": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/facebook-container/latest.xpi", "installation_mode": "force_installed" }, "@testpilot-containers": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/multi-account-container/latest.xpi", "installation_mode": "normal_installed" }, "addon@darkreader.org": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/darkreader/latest.xpi", "installation_mode": "normal_installed" }, "jid1-MnnxcxisBPnSXQ-eff@jetpack": { "comment": "While this won't sync and requires manually enabling the other one when the policy is missing, it's less confusing for the automatic configuration not existing. Additionally I have some suspicion towards Mozilla Anonym.", "install_url": "https://www.eff.org/files/privacy-badger-latest.xpi", "installation_mode": "force_installed" }, "jid1-MnnxcxisBPnSXQ@jetpack": { "blocked_install_message": "Already force_installed through EFF.", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/privacy-badger17/latest.xpi", "installation_mode": "blocked" }, "offline-qr-code@rugk.github.io": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/offline-qr-code-generator/latest.xpi", "installation_mode": "force_installed" }, "optout@google.com": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/interest-advertising-opt-out/latest.xpi", "installation_mode": "force_installed" }, "plasma-browser-integration@kde.org": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/plasma-integration/latest.xpi", "installation_mode": "force_installed" }, "regrets-reporter@mozillafoundation.org": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/regretsreporter/latest.xpi", "installation_mode": "force_installed" }, "uBOLite@raymondhill.net": { "blocked_install_message": "Unmaintained on addons.mozilla.org", "installation_mode": "blocked" }, "uBlock0@raymondhill.net": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi", "installation_mode": "normal_installed" }, "{2f182d41-fd03-4a6d-938d-081419586c37}": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/google-analytics-opt-out/latest.xpi", "installation_mode": "force_installed" }, "{3c078156-979c-498b-8990-85f7987dd929}": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/sidebery/latest.xpi", "installation_mode": "normal_installed" }, "{446900e4-71c2-419f-a6a7-df9c091e268b}": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi", "installation_mode": "force_installed" }, "{48748554-4c01-49e8-94af-79662bf34d50}": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/privacy-pass/latest.xpi", "installation_mode": "force_installed" }, "{6a65273e-2b26-40f5-b66e-8eed317307da}": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/new-tab-suspender/latest.xpi", "installation_mode": "force_installed" }, "{8e41107d-2be2-454d-b4b8-c3d7e54d77de}": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/igplus-extension/latest.xpi", "installation_mode": "normal_installed" }, "{b11bea1f-a888-4332-8d8a-cec2be7d24b9}": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/torproject-snowflake/latest.xpi", "installation_mode": "normal_installed" }, "{c607c8df-14a7-4f28-894f-29e8722976af}": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/temporary-containers/latest.xpi", "installation_mode": "normal_installed" }, "{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}": { "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ecosia-the-green-search/latest.xpi", "installation_mode": "normal_installed" } }, "FirefoxHome": { "Highlights": false, "Locked": false, "Pocket": false, "Search": true, "Snippets": false, "SponsoredPocket": false, "SponsoredTopSites": false, "TopSites": false }, "FirefoxSuggest": { "ImproveSuggest": false, "Locked": false, "SponsoredSuggestions": false, "WebSuggestions": false }, "Homepage": { "Locked": false, "StartPage": "previous-session", "URL": "about:mozilla" }, "LegacySameSiteCookieBehaviorEnabled": false, "NetworkPrediction": false, "NewTabPage": false, "OverrideFirstRunPage": "about:mozilla|about:telemetry", "PDFjs": { "EnablePermissions": false, "Enabled": true }, "PasswordManagerEnabled": false, "Preferences": { "app.update.download.attempts": { "Comment": "If this is what it looks like, it will stop the prompts to download Firefox manually.", "Status": "clear" }, "autoadmin.failover_to_cached": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "boolean", "Value": true }, "autoadmin.global_config_url": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "string", "Value": "https://codeberg.org/Aminda/shell-things/raw/branch/cxefa/conf/firefox-forbidden-policies.js" }, "autoadmin.offline_failover": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "boolean", "Value": true }, "autoadmin.refresh_interval": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "number", "Value": 120 }, "browser.aboutConfig.showWarning": { "Status": "default", "Type": "boolean", "Value": false }, "browser.cache.disk.enable": { "Status": "user", "Type": "boolean", "Value": false }, "browser.cache.memory.enable": { "Status": "user", "Type": "boolean", "Value": true }, "browser.contentblocking.category": { "Status": "locked", "Type": "string", "Value": "strict" }, "browser.contentblocking.report.hide_vpn_banner": { "Status": "default", "Type": "boolean", "Value": true }, "browser.contentblocking.report.lockwise.enabled": { "Status": "default", "Type": "boolean", "Value": false }, "browser.contentblocking.report.show_mobile_app": { "Status": "default", "Type": "boolean", "Value": false }, "browser.contentblocking.report.vpn.enabled": { "Status": "default", "Type": "boolean", "Value": false }, "browser.crashReports.unsubmittedCheck.autoSubmit2": { "Comment": "Automatically sending crash reports, but letting the user say no.", "Status": "default", "Type": "boolean", "Value": true }, "browser.discovery.enabled": { "Comment": "This means personalized extension recommendations in extension management.", "Status": "locked", "Type": "boolean", "Value": false }, "browser.ml.chat.provider": { "Comment": "While not officially supported, defaulting to Ecosia will at least remind me that AI is a severe concern regarding fighting against climate change.", "Status": "user", "Type": "string", "Value": "https://www.ecosia.org/chat" }, "browser.preferences.moreFromMozilla": { "Status": "default", "Type": "boolean", "Value": false }, "browser.quitShortcut.disabled ": { "Status": "locked", "Type": "boolean", "Value": false }, "browser.safebrowsing.blockedURIs.enabled": { "Status": "locked", "Type": "boolean", "Value": true }, "browser.safebrowsing.malware.enabled": { "Status": "locked", "Type": "boolean", "Value": true }, "browser.safebrowsing.phishing.enabled": { "Status": "locked", "Type": "boolean", "Value": true }, "browser.sessionstore.warnOnQuit": { "Status": "locked", "Type": "boolean", "Value": false }, "browser.tabs.closeTabByDblclick": { "Status": "default", "Type": "boolean", "Value": true }, "browser.tabs.closeWindowWithLastTab": { "Status": "default", "Type": "boolean", "Value": false }, "browser.tabs.inTitlebar": { "Status": "default", "Type": "number", "Value": 0 }, "browser.tabs.unloadOnLowMemory": { "Status": "locked", "Type": "boolean", "Value": true }, "browser.tabs.warnOnClose": { "Status": "locked", "Type": "boolean", "Value": false }, "browser.tabs.warnOnCloseOtherTabs": { "Status": "locked", "Type": "boolean", "Value": false }, "browser.translation.neverForLanguages": { "Status": "default", "Type": "string", "Value": "en, fi" }, "browser.translations.neverTranslateLanguages": { "Status": "default", "Type": "string", "Value": "en, fi" }, "browser.urlbar.trimHttps": { "Status": "locked", "Type": "boolean", "Value": false }, "browser.urlbar.trimURL": { "Status": "locked", "Type": "boolean", "Value": false }, "browser.warnOnQuit": { "Status": "locked", "Type": "boolean", "Value": false }, "cookiebanners.bannerClicking.enabled": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "boolean", "Value": true }, "cookiebanners.service.mode": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "number", "Value": 2 }, "cookiebanners.service.mode.privateBrowsing": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "number", "Value": 2 }, "dom.block_download_insecure": { "Status": "locked", "Type": "boolean", "Value": true }, "dom.private-attribution.submission.enabled": { "Comment": "Mozilla Anonym so-called Privacy Preserving Advertisement Attribution", "Status": "locked", "Type": "boolean", "Value": false }, "dom.security.https_only_mode": { "Status": "locked", "Type": "boolean", "Value": true }, "extensions.htmlaboutaddons.recommendations.enabled": { "Comment": "This means the same, but without personalization.", "Status": "locked", "Type": "boolean", "Value": false }, "extensions.webextensions.restrictedDomains": { "Comment": "Don't protect Mozilla domains from privacy extensions. Always reset it to modified/empty so I can access the original value if I ever need it.", "Status": "user", "Type": "string", "Value": "" }, "general.config.obscure_value": { "Comment": "Required for autoconfig.", "Status": "locked", "Type": "number", "Value": 0 }, "geo.provider.network.url": { "Status": "locked", "Type": "string", "Value": "https://api.beacondb.net/v1/geolocate?force_ok=true" }, "geo.provider.use_geoclue": { "Comment": "/etc/geolocation, gpsd and global WPS configuration.", "Status": "locked", "Type": "boolean", "Value": true }, "geo.provider.use_gpsd": { "Comment": "My geoclue should be using gpsd already.", "Status": "locked", "Type": "boolean", "Value": false }, "image.animation.mode": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "default", "Type": "string", "Value": "once" }, "intl.accept_languages": { "Comment": "Cleared for Firefox default depending on locale. I am revealing timezone and as most users don't visit fingerprinting sites, this may result in fitting the local mass better.", "Status": "clear", "Type": "string", "Value": "en-US, en" }, "javascript.use_us_english_locale": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "user", "Type": "boolean", "Value": true }, "layout.css.always_underline_links": { "Comment": "Underscore links by default, disabling allowed", "Status": "default", "Type": "boolean", "Value": true }, "layout.css.devPixelsPerPx": { "Comment": "ui.textScaleFactor 90 does practically the same with less side effects.", "Status": "clear", "Type": "string", "Value": "1.5" }, "layout.css.font-variant-emoji.enabled": { "Comment": "Experimental, disabled by default.", "Status": "default", "Value": true }, "layout.css.prefers-color-scheme.content-override": { "Comment": "Clear ensures system color scheme (darkman)", "Status": "clear" }, "media.autoplay.default": { "Comment": "Not even autoplaying silently?", "Status": "default", "Type": "number", "Value": 5 }, "network.IDN_show_punycode": { "Comment": "Protection against identically looking unicode domain names", "Status": "locked", "Type": "boolean", "Value": true }, "network.dns.echconfig.enabled": { "Status": "locked", "Type": "boolean", "Value": true }, "network.dns.http3_echconfig.enabled": { "Status": "locked", "Type": "boolean", "Value": true }, "network.dns.native_https_query": { "Status": "locked", "Type": "boolean", "Value": true }, "network.dns.native_https_query_in_automation": { "Status": "locked", "Type": "boolean", "Value": true }, "network.dns.preferIPv6": { "Status": "locked", "Type": "boolean", "Value": true }, "network.dns.use_https_rr_as_altsvc": { "Status": "locked", "Type": "boolean", "Value": true }, "network.trr.disable-ECS": { "Status": "locked", "Type": "boolean", "Value": false }, "network.trr.display_fallback_warning": { "Status": "locked", "Type": "boolean", "Value": true }, "network.trr.early-AAAA": { "Status": "locked", "Type": "boolean", "Value": true }, "network.trr.exclude-etc-hosts": { "Status": "locked", "Type": "boolean", "Value": false }, "network.trr.useGET": { "Status": "locked", "Type": "boolean", "Value": true }, "pdfjs.enableScripting": { "Comment": "I don't see a good reason for allowing scripts in pdf files in a web browser.", "Status": "locked", "Type": "boolean", "Value": false }, "pdfjs.forcePageColors": { "Status": "default", "Type": "boolean", "Value": true }, "pdfjs.isEvalSupported": { "Comment": "CVE-2024-4367 and hardening. I don't think pdf files should be that clever.", "Status": "locked", "Type": "boolean", "Value": false }, "pdfjs.pageColorsBackground": { "Status": "default", "Type": "string", "Value": "#000000" }, "pdfjs.pageColorsForeground": { "Status": "default", "Type": "string", "Value": "#ffb700" }, "privacy.donottrackheader.enabled": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "boolean", "Value": true }, "privacy.donottrackheader.value": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "number", "Value": 1 }, "privacy.fingerprintingProtection": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "boolean", "Value": true }, "privacy.fingerprintingProtection.overrides": { "Comment": "Preference not allowed for stability reasons. :( https://searchfox.org/mozilla-central/source/toolkit/components/resistfingerprinting/RFPTargets.inc", "Status": "locked", "Type": "string", "Value": "+AllTargets,-KeyboardEvents,-CSSPrefersColorScheme,-CSSPrefersReducedMotion,-JSDateTimeUTC" }, "privacy.fingerprintingProtection.pbmode": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "boolean", "Value": true }, "privacy.globalprivacycontrol.enabled": { "Status": "locked", "Type": "boolean", "Value": true }, "privacy.resistFingerprinting": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "boolean", "Value": false }, "privacy.resistFingerprinting.letterboxing": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "boolean", "Value": true }, "privacy.resistFingerprinting.pbmode": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "clear", "Type": "boolean", "Value": false }, "privacy.userContext.enabled": { "Comment": "Tab containers", "Status": "locked", "Type": "boolean", "Value": true }, "privacy.userContext.extension": { "Comment": "Displays in settings which extension requires container tabs. None. it's this policy. Preference not allowed for stability reasons.", "Status": "locked", "Type": "string", "Value": "" }, "privacy.userContext.ui.enabled": { "Comment": "Tab containers UI without extensions", "Status": "locked", "Type": "boolean", "Value": true }, "reader.parse-on-load.force-enabled": { "Comment": "Preference not allowed for stability reasons. :(", "Status": "locked", "Type": "boolean", "Value": true }, "security.OCSP.require": { "Status": "locked", "Type": "boolean", "Value": true }, "security.insecure_connection_text.enabled": { "Status": "locked", "Type": "boolean", "Value": true }, "security.insecure_connection_text.pbmode.enabled": { "Status": "locked", "Type": "boolean", "Value": true }, "security.ssl.enable_ocsp_must_staple": { "Comment": "Preference not allowed for security reasons. :(", "Status": "locked", "Type": "boolean", "Value": true }, "security.ssl.enable_ocsp_stapling": { "Status": "locked", "Type": "boolean", "Value": true }, "security.tls.ech.grease_http3": { "Comment": "Seems to be required for http3. This defaults to true on Nightly 128 and false on 115.11.0esr. However again not allowed to be deployed here for security :()", "Status": "locked", "Type": "boolean", "Value": true }, "sidebar.revamp": { "Comment": "Preference not allowed for stability reasons.", "Status": "default", "Type": "boolean", "Value": true }, "sidebar.verticalTabs": { "Comment": "Preference not allowed for stability reasons.", "Status": "default", "Type": "boolean", "Value": true }, "sidebar.visibility": { "Comment": "Preference not allowed for stability reasons.", "Status": "locked", "Type": "boolean", "Value": "always-show" }, "ui.systemUsesDarkTheme": { "Comment": "Another theme option that should be let to system, thus clear.", "Status": "clear" }, "ui.textScaleFactor": { "Comment": "Use this instead of layout.css.devPixelsPerPx", "Status": "default", "Type": "number", "Value": 90 } }, "PromptForDownloadLocation": true, "RequestedLocales": "en-US, en", "SearchEngines": { "Add": [ { "Name": "DuckDuckGo Lite", "Alias": "dl", "Description": "Minimal, ad-free version of DuckDuckGo", "IconURL": "https://start.duckduckgo.com/static-assets/favicons/DDG-icon_256x256.png", "Method": "POST", "PostData": "q={searchTerms}", "SuggestURLTemplate": "https://start.duckduckgo.com/ac/?q={searchTerms}&type=list", "URLTemplate": "https://duckduckgo.com/lite/?q={searchTerms}" }, { "Name": "DuckDuckGo Start", "Alias": "d", "Description": "DuckDuckGo Start page version", "IconURL": "https://start.duckduckgo.com/static-assets/favicons/DDG-icon_256x256.png", "Method": "GET", "SuggestURLTemplate": "https://start.duckduckgo.com/ac/?q={searchTerms}&type=list", "URLTemplate": "https://start.duckduckgo.com/?q={searchTerms}" }, { "Name": "Ecosia", "Alias": "e", "Description": "Ecosia Search Engine", "IconURL": "https://cdn-static.ecosia.org/static/icons/favicon.ico", "Method": "GET", "SuggestURLTemplate": "https://ac.ecosia.org/autocomplete?q={searchTerms}", "URLTemplate": "https://www.ecosia.org/search?q={searchTerms}&addon=firefoxgpo" }, { "Name": "Brave Search", "Alias": "b", "Description": "Brave Search", "IconURL": "https://cdn.search.brave.com/serp/v2/_app/immutable/assets/favicon.acxxetWH.ico", "Method": "GET", "SuggestURLTemplate": "https://search.brave.com/api/suggest?q={searchTerms}", "URLTemplate": "https://search.brave.com/search?q={searchTerms}" }, { "Name": "Brave Search Goggles", "Alias": "bg", "Description": "Brave Search Goggles", "IconURL": "https://cdn.search.brave.com/serp/v2/_app/immutable/assets/favicon.acxxetWH.ico", "Method": "GET", "SuggestURLTemplate": "https://search.brave.com/api/suggest?q={searchTerms}", "URLTemplate": "https://search.brave.com/goggles?q={searchTerms}" } ], "Default": "Ecosia" }, "SearchSuggestEnabled": false, "SecurityDevices": { "Add": { "Fujitsu mPollux DigiSignApplication": "/usr/lib64/libcryptoki.so" } }, "ShowHomeButton": true, "StartDownloadsInTempDirectory": true, "UserMessaging": { "ExtensionRecommendations": false, "FeatureRecommendations": false, "Locked": false, "MoreFromMozilla": false, "SkipOnboarding": false, "UrlbarInterventions": false }, "WindowsSSO": true } }