Форум сообщества Все продукты

Good afternoon,

We're currently trying to set up a Hardening Guide for Firefox ESR but are struggling with a few policies and setting wildcards.

For example, we're trying to set an origin in Cookies > Block Settings to something like "*", and we get the error "Ignoring parameter "*" - not a valid origin."

In Chrome / Edge you can set a wildcard like this: [*.]google.com for example - we receive the same error message for this.

Can you do such a thing for Firefox ESR without having to list every site you want to block?

ESR Version: 115.6.0esr (64-bit)

Kind Regards, Ethan Jerrum

Hello, I am trying to create a deny all & white list only gpo for Firefox extensions.

I am using the gpo; Computer Configuration/Policies/Administrative Templates/Mozilla/Firefox/Extensions/Extension Management

I started out simple using a template which worked.

{ "*": { "blocked_install_message": "Your Company Blocked Message", "installation_mode": "blocked" }, "uBlock0@raymondhill.net": { "installation_mode": "allowed" } }

However, when I tried to add in more allowed extensions it now longer worked and was able to install any extension.

{ "*": { "blocked_install_message": "Your Company Blocked Message", "installation_mode": "blocked" }, "uBlock0@raymondhill.net": { "installation_mode": "allowed" }, "querymoid@kaply.com": { "installation_mode": "allowed" } }

One of our vendors websites does not load under Firefox ESR, with errors in the console pointing to CSP. Error is: Content Security Policy: The page's settings blocked the loading of a resource at inline ("default-src")

However if I load the site under the normal Firefox release, it displays correctly. When looking at errors in console, it is showing 3 errors for CSP, however it does not stop the site from working correctly. Content-Security-Policy: The page's settings blocked the loading of a resources at https://..... ("connect-src") or ("img-src")

The site is https://app.approvalmax.com If you get the login screen then the site is working otherwise just getting a green background when it is not working.

I am unsure why ESR and RR versions are behaving differently in this case. Using the latest versions of each.

I need to be able to hide the Extensions button from the toolbar. Is there a way to do that outside of the user.js or prefs.js? Preferably I'd like to do this though the policies.json file though I could not find any options for this.

I am using the intune preview feature which allows you to import admx/adml instead of using the custom injection method. Everything works far better then with the injection method, except for one settings:

ExtensionSettings this setting is working when I have only one setting set (ex):

{"someplugin@test.com": { "installation_mode" : "allowed" }}

If I add a second line to the entry:

{"someotherplugin@test.com":{ "installation_mode" : "allowed"}}

I understand this is a new feature, but if I had the correct format that would work for HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\ExtensionSettings to allow two plugins to work I belive I shouldn't have any issue getting the admx feature to do this, I even tried manually editing the registry setting and it breaks whenever I add the second line to it.

Hello everyone,

being annoyed of a huge amount of Qualys tickets in my enterprise environment, i have decided to use the ability of firefox to update itself on its own instead of deploying a new version each time.

Requirement: Firefox has to stay up-to-date even on devices where it is not used. That´s what the scheduled background update task and Mozilla Maintenance Service are for, right?

Problem: The background update task will only be created if a logged on user will run firefox at least one time. Since Firefox is used as the secondary browser here, it is installed on all clients, but not even half of the clients/users are running it.

I didn´t find any option to create that task manually. So - at least in my environment - the autoupdate mechanism is useless.

Is there any hope for an autoupdate mechanism which can be run independent of logged on users? Or does anyone have an idea how i could achieve my goal?

Thank you in advance!

I just purchased a year subscription for the Mozilla VPN. I want to be able to verify that the FireFox browser I'm using is accessing the web via the VPN. How do I verify that? I don't see any icon indicated that it's a VPN connection.

Please add a Custom wallpaper options, Your browser has been the best so far i have used many browsers but i would love to have a custom wallpaper option and live wallpaper option too if possible just like operaGX has. Anyone can upload a wallpaper there.

How do I permanently change the "overflows" attribute of the new sidebar button to false so it doesn't disappear on me when I resize the window and I still need my tabs?

I have a number of servers which need firefox updating They do not have internet.

There is one machine that does have internet

How do i get them to point to that server for updates?

FF should have an easy deployment console for rolling out their product.

I saw something about an MAR server however its not clear.

We just have WSUS so cant use that to update like Edge.

Hi All

I am trying to set up a background image to my FFX home page. In other browsers that is simple; I see no simple way in FFX. Is this a failing? Can it be overcome, simply?

Hi,

We are using Firefox Enterprise on Windows Server 2016 Remote Desktop for approx 100 users.

The users need very often to create a new profile when launching FireFox, and then loose all their bookmarks.

Is there a way to manage the profiles correctly to bypass this problem ?

Thank you for your help ! Have a nice day.

Hi All,

I have recently been enhaciing our security posture and have started sorting out our browser extensions, however I seem to be having errors allowing 2 extensions

• 1Password; and
• Firefox Multi Containers.

This is my json:

{ "*": { "blocked_install_message": "version 0.4 - Addon or Extension is not approved. Please submit a ticket to Help Desk if you need access to this extension.", "install_sources": ["https://addons.mozilla.org/"], "installation_mode": "blocked" }, "{bc8367b6-d946-484e-8da6-37691f23ee64}": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/1password-x-password-manager/latest.xpi" }, "{2a28e7e4-64c9-4e7f-81fb-0475af840c0f}": { "installation_mode": "allowed", "install_url": "https://addons.mozilla.org/firefox/downloads/latest/multi-account-containers/latest.xpi" } }

I have tried the obvious and removed the {} from both extensions, however still having troubles.

Is someone able to point me in the right direction?

In the year 2024, firefox still does not allow a simple way to set any URL you would like as the new tab url (without an extension).

Users were previously able to use extensions like NewTab override to have a relatively seamless experience changing their new tab page. However after certain changes, these said extensions can no longer set your new tab page to a local file, and can also no longer clear and focus the address bar.

I am simply requesting a feature within firefox to set a custom new tab page, without having to create any external configs, or without using any extensions. This basic feature has been available in chromium browsers for years, and firefox already includes a feature just like this for the "Homepage and new windows" setting, where it allows you to input a custom URL to a local file or site to put it as your homepage. However, this same setting for some odd reason does not exist for the "new tabs" option. Why is this?

As of now, I've had to use a manual override along the lines of this:

``` // shenanigans for setting a different new tab page const { classes: Cc, interfaces: Ci, utils: Cu } = Components; const { AboutNewTab } = Cu.import("resource:///modules/AboutNewTab.jsm", {}); // path to new tab can be a url or file const newTabURL = "file:///home/faaris/.local/packages/startpage/fazzi/index.html"; // set the new tab URL AboutNewTab.newTabURL = newTabURL; ```

this should not be needed. Having to modify files in system protected folders should not be needed for such a simple option.

Hello,

I wanted to customize my Firefox new tab with a local HTML file, such as "/path/to/my/index.html". It was possible to use this workaround: https://github.com/Jangsoodlor/Firefox-New-Tab-Config/tree/main https://github.com/Jangsoodlor/Firefox-New-Tab-Config/tree/main

Which implied a configuration file (sometimes named "autoconfig.cfg", "firefox.cfg", "local-settings.cfg" depending on the guide since the name is arbitrary) with javascript code. In the new Firefox 136, this code fails to execute due to a new API being used.

If you want to customize your new tab, follow the previous guide, but on the configuration file write this code instead:

// My new tab
try {
  const ff = {};
  ChromeUtils.defineESModuleGetters(ff, {AboutNewTab: "resource:///modules/AboutNewTab.sys.mjs"});
  ff.AboutNewTab.newTabURL = 'file:///path/to/my/index.html';
} catch (e) {ChromeUtils.reportError(e);}

Note that the file must start with a comment

Adapting the "/path/to/my/index.html" to your needs.

Thanks to @mkaply (github) on this thread https://github.com/mozilla/policy-templates/discussions/1190 for the new API method.

I post this here in case someone has the same issue, because is quite recent and hard to find on the internet.

Dear Forum,

Maybe this has been already asked but i keep getting the quite opposite when searching.

is there a way that i can save passwords, for autofill purposes, for specific websites in Firefox using GPO?.

I have 4 computers, that are currently deployed with Firefox and all 4 should be able to login to a specific website with a given username and password. I would like to set the username and password for them stored in the Firefox password manager and let it autofill it for them when going to the given website.

Or should i do this using the created shortcut they received, deployed to their systems using GPO?

Thank you in advanced.

In my environment, we have Firefox version 117. Users get this pop up "You must log in to this network before you can access the Internet" (see snip 1) when they launch firefox. In order to get rid of we can toggle this preference setting to TRUE ""network.captive-portal-service.enabled" in the user's browser, which works fine. But i want to control this setting from GPO. I'm unable to find the GPO for the same in the GPO hive for FF. See snip 2 for 'Preferences' related GPOs.

Thanks to the help received here and in the Reddit group I've been able to transfer almost all of my old colour and layout tweaks to a new intallation of Firefox (v133) on a new PC (running Windows 10). There's one thing that I haven't succeeded with though: I'd like to change the colour of the text in a tab when that tab becomes the active one.

This is the coding I'm using to change the tab's background colour when it's selected:

1. TabsToolbar .tab-background[selected]{

background: white !important; }

This works perfectly. But when I tried adding the line

color: black !important;

It had no effect. I'd be grateful for any thoughts. Many thanks.