Firefox

org.mozilla.firefox

Configures Firefox settings. Firefox 78 is the last major release with support for macOS versions 10.9, 10.10 and 10.11.

macOS

macOS 10.12+undefined

Configuration Keys (91)

Showing 91 of 91 keys

Key	Type	Description	Default	Range
`EnterprisePoliciesEnabled`boolean Enable Enterprise Policies required	boolean	Enable policy support on macOS.	Default: true	Range: —
`PFC_SegmentedControl_0`string required	string	—	Default: —	Range: —
`General_SegmentedControl`string required	string	—	Default: —	Range: —
`Privacy_SegmentedControl`string required	string	—	Default: —	Range: —
`Security_SegmentedControl`string required	string	—	Default: —	Range: —
`BackgroundAppUpdate`boolean Background App Update	boolean	Enable or disable automatic application update in the background, when the application is not running. If set to true, application updates may be installed (without user approval) in the background, even when the application is not running. The operating system might still require approval.	Default: —	Range: —
`AppAutoUpdate`boolean Firefox Auto Update	boolean	Enable or disable automatic application update.	Default: —	Range: —
`AppUpdateURL`string Application Update URL	string	Change the URL for application update.	Default: —	Range: —
`Authentication`dict	dict	Configure sites that support integrated authentication.	Default: —	Range: —
`SPNEGO`array SPNEGO	array	If this preference is enabled, the specified websites are permitted to engage in SPNEGO authentication with the browser. Entries in the list are formatted as mydomain.com or https://myotherdomain.com. If this preference is disabled or not configured, no websites are permitted to engage in SPNEGO authentication with the browser. For more information, see https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication.	Default: —	Range: —
`Domain`string	string	—	Default: —	Range: —
`Delegated`array Delegated	array	If this preference is enabled, the browser may delegate user authorization to the server for the specified websites. Entries in the list are formatted as mydomain.com or https://myotherdomain.com. If this preference is disabled or not configured, the browser will not delegate user authorization to the server for any websites. For more information, see https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication	Default: —	Range: —
`Domain`string	string	—	Default: —	Range: —
`NTLM`array Microsoft Challenge/Response (NTLM)	array	If this preference is enabled, the specified websites are trusted to use NTLM authentification. Entries in the list are formatted as mydomain.com or https://myotherdomain.com. If this policy is disabled or not configured, no websites are trusted to use NTLM authentification. For more information, see https://developer.mozilla.org/en-US/docs/Mozilla/Integrated_authentication.	Default: —	Range: —
`Domain`string	string	—	Default: —	Range: —
`AllowNonFQDN`dict Allow Non-FQDN	dict	If this preference is enabled, you can always allow SPNEGO or NTLM on non FQDNs (fully qualified domain names). If this preference is disabled or not configured, NTLM and SPNEGO are not enabled on non FQDNs.	Default: —	Range: —
`NTLM`boolean required	boolean	—	Default: true	Range: —
`SPNEGO`boolean required	boolean	—	Default: true	Range: —
`AllowProxies`dict Allow Proxies	dict	If this preference is enabled, you can always allow SPNEGO or NTLM on non FQDNs (fully qualified domain names). If this preference is disabled or not configured, NTLM and SPNEGO are not enabled on non FQDNs.	Default: —	Range: —
`NTLM`boolean required	boolean	—	Default: true	Range: —
`SPNEGO`boolean required	boolean	—	Default: true	Range: —
`Locked`boolean Locked (Authentication)	boolean	—	Default: —	Range: —
`PrivateBrowsing`boolean Private Browsing	boolean	Enables integrated authentication in prviate browsing	Default: —	Range: —
`BlockAboutAddons`boolean Block about:addons page	boolean	Block access to the Add-ons Manager (about:addons).	Default: —	Range: —
`BlockAboutConfig`boolean Block about:config page	boolean	Block access to about:config.	Default: —	Range: —
`BlockAboutProfiles`boolean Block about:profiles page	boolean	Block access to About Profiles (about:profiles).	Default: —	Range: —
`BlockAboutSupport`boolean Block about:support page	boolean	Block access to Troubleshooting Information (about:support).	Default: —	Range: —
`Bookmarks`array	array	Add bookmarks in either the bookmarks toolbar or menu.	Default: —	Range: —
`Bookmarks`dict	dict	—	Default: —	Range: —
`Title`string required	string	Bookmark Title	Default: —	Range: —
`URL`string required	string	Full URL to be bookmarked (e.g. https://www.example.org/)	Default: —	Range: —
`Placement`string	string	Place bookmark in either the Bookmark menu or Bookmark Toolbar.	Default: —	Range: toolbar (toolbar), menu (menu)
`Favicon`string	string	URL to icon file to display on bookmark (e.g. https://www.example.org/favicon.ico)	Default: —	Range: —
`Folder`string	string	Folder to place bookmark in. If a folder is specified, it is automatically created and bookmarks with the same folder name are grouped together. You cannot nest folders.	Default: —	Range: —
`DefaultDownloadDirectory`string Default Download Directory	string	Set the default download directory.	Default: —	Range: —
`DisableAppUpdate`boolean Disable Application Update	boolean	Turn off application updates.	Default: —	Range: —
`DisableBuiltinPDFViewer`boolean Disable Built-in PDF Viewer	boolean	Disable the built in PDF viewer. PDF files are downloaded and sent externally.	Default: —	Range: —
`PDFjs`dict PDF.js	dict	Disable or configure PDF.js, the built-in PDF viewer.	Default: —	Range: —
`Enabled`boolean	boolean	If Enabled is set to false, the built-in PDF viewer is disabled.	Default: —	Range: —
`EnablePermissions`boolean	boolean	If EnablePermissions is set to true, the built-in PDF viewer will honor document permissions like preventing the copying of text.	Default: —	Range: —
`DisableDeveloperTools`boolean Disable Developer Tools	boolean	Remove access to all developer tools.	Default: —	Range: —
`DisableFeedbackCommands`boolean Disable Feedback Commands	boolean	Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site).	Default: —	Range: —
`DisableFirefoxAccounts`boolean Disable Firefox Accounts / Sync	boolean	Disable Firefox Accounts integration (Sync).	Default: —	Range: —
`DisableFirefoxScreenshots`boolean Disable Firefox Screenshots	boolean	Remove access to Firefox Screenshots.	Default: —	Range: —
`DisableFirefoxStudies`boolean Disable Firefox Studies (Shield)	boolean	Disable Firefox studies (Shield).	Default: —	Range: —
`DisableForgetButton`boolean Disable Forget Button	boolean	Disable the "Forget" button.	Default: —	Range: —
`DisableMasterPasswordCreation`boolean Disable Master Password Creation	boolean	Remove the master password functionality. If this preference is set to true, the master password functionality is removed.	Default: —	Range: —
`PrimaryPassword`boolean Enable Primary Password	boolean	Require or prevent using a primary (formerly master) password. If this value is true, a primary password is required.	Default: —	Range: —
`DisablePocket`boolean Disable Pocket	boolean	Remove Pocket in the Firefox UI.	Default: —	Range: —
`DisablePrivateBrowsing`boolean Disable Private Browsing	boolean	Remove access to private browsing.	Default: —	Range: —
`DisableProfileImport`boolean Disable Profile Import	boolean	Disables the "Import data from another browser" option in the bookmarks window.	Default: —	Range: —
`DisableProfileRefresh`boolean Disable Profile Refresh	boolean	Disable the Refresh Firefox button on about:support and support.mozilla.org, as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while.	Default: —	Range: —
`DisableSafeMode`boolean Disable Safe Mode	boolean	Disable safe mode within the browser.	Default: —	Range: —
`DisableSetDesktopBackground`boolean Disable Set Desktop Background	boolean	This preference removes the "Set As Desktop Background..." menu item when right clicking on an image.	Default: —	Range: —
`DisplayMenuBar`boolean Display Menu Bar	boolean	Set the initial state of the menubar. A user can still hide it and it will stay hidden.	Default: —	Range: —
`DisableSystemAddonUpdate`boolean Disable System Add-on Update	boolean	Prevent system add-ons from being installed or update.	Default: —	Range: —
`DisplayBookmarksToolbar`boolean Display Bookmarks Toolbar	boolean	Set the initial state of the bookmarks toolbar. A user can still hide it and it will stay hidden.	Default: —	Range: —
`DontCheckDefaultBrowser`boolean Do Not Check Default Browser	boolean	Don't check if Firefox is the default browser at startup.	Default: —	Range: —
`DownloadDirectory`string Download Directory	string	Set and lock the download directory.	Default: —	Range: —
`Extensions`dict	dict	Control the installation, uninstallation and locking of extensions. Locked extensions cannot be disabled or uninstalled. For Install, you specify a list of URLs or paths. For Uninstall and Locked, you specify extension IDs.	Default: —	Range: —
`Install`array Install	array	A list of URLs or native paths for extensions to be installed.	Default: —	Range: —
`Install`string Install	string	—	Default: —	Range: —
`Uninstall`array Uninstall	array	A list of extension IDs that should be uninstalled if found.	Default: —	Range: —
`Uninstall`string Extension ID To Uninstall	string	—	Default: —	Range: —
`Locked`array Locked	array	A list of extension IDs that the user cannot disable or uninstall.	Default: —	Range: —
`Locked`string Extension ID To Lock	string	—	Default: —	Range: —
`ExtensionSettings`dict	dict	Manage all aspects of extensions. A default configuration can be set for the special ID "*", which will apply to all extensions that don't have a custom configuration set in this policy.	Default: —	Range: —
`{{key}}`string Extension ID	string	—	Default: —	Range: —
`{{value}}`dict	dict	—	Default: —	Range: —
`installation_mode`string Installation Mode	string	Maps to a string indicating the installation mode for the extension.	Default: —	Range: Allowed (default behavior) (allowed), Blocked (blocked), Force Installed (force_installed), Normal Installed (normal_installed)
`install_url`string Install URL	string	Maps to a string indicating where Firefox can download a force_installed or normal_installed extension. If installing from the addons.mozilla.org, use the following URL (substituting SHORT_NAME from the URL on AMO), https://addons.mozilla.org/firefox/downloads/latest/SHORT_NAME/latest.xpi. If installing from the local file system, use a file:/// URL. Languages packs are available from https://releases.mozilla.org/pub/firefox/releases/VERSION/PLATFORM/xpi/LANGUAGE.xpi.	Default: —	Range: —
`install_sources`array Install Sources	array	Each item in this list is an extension-style match pattern.	Default: —	Range: —
string	string	—	Default: —	Range: —
`allowed_types`array Allowed Types	array	This setting allowlists the allowed types of extension/apps that can be installed in Firefox.	Default: —	Range: —
string	string	—	Default: —	Range: extension, theme, dictionary, langpack
`blocked_install_message`string	string	This maps to a string specifying the error message to display to users if they're blocked from installing an extension.	Default: —	Range: —
`restricted_domains`array Restricted Domains	array	An array of domains on which content scripts can't be run.	Default: —	Range: —
string Restricted Domain	string	—	Default: —	Range: —
`updates_disabled`boolean Disable Updates	boolean	Indicates whether or not to disable automatic updates for an individual extension.	Default: —	Range: —
`ExtensionUpdate`boolean Extension Update	boolean	—	Default: —	Range: —
`3rdparty`dict 3rd Party Configuration	dict	Configure third party components.	Default: —	Range: —
`Extensions`dict 3rd Party Extension Configuration	dict	Configure third party extensions. Keys in this dictionary specify IDs of extensions to configure, and values are dictionaries containing each third party extension configuration.	Default: —	Range: —
`{{key}}`string Extension ID	string	—	Default: —	Range: —
`{{value}}`dict Extension Configuration	dict	—	Default: —	Range: —
`EncryptedMediaExtensions`dict Encrypted Media Extensions	dict	Enable or disable Encrypted Media Extensions and optionally lock it.	Default: —	Range: —
`Enabled`boolean	boolean	If Enabled is set to false, encrypted media extensions (like Widevine) are not downloaded by Firefox unless the user consents to installing them.	Default: —	Range: —
`Locked`boolean	boolean	If Locked is set to true and Enabled is set to false, Firefox will not download encrypted media extensions (like Widevine) or ask the user to install them.	Default: —	Range: —
`HardwareAcceleration`boolean Hardware Acceleration	boolean	Control hardware acceleration.	Default: —	Range: —
`FirefoxHome`dict FirefoxHome	dict	Customize the Firefox Home page.	Default: —	Range: —
`Search`boolean Search	boolean	—	Default: false	Range: —
`TopSites`boolean TopSites	boolean	—	Default: false	Range: —
`SponsoredTopSites`boolean Sponsored Top Sites	boolean	—	Default: false	Range: —
`Highlights`boolean Highlights	boolean	—	Default: false	Range: —
`Pocket`boolean Pocket	boolean	—	Default: false	Range: —
`SponsoredPocket`boolean Sponsored Pocket	boolean	—	Default: false	Range: —
`Snippets`boolean Snippets	boolean	—	Default: false	Range: —
`Locked`boolean Locked	boolean	—	Default: false	Range: —
`GenerativeAI`dict Generative AI	dict	Configure generative AI features	Default: —	Range: —
`Enabled`boolean Enabled	boolean	Controls whether generative AI features are enabled by default	Default: false	Range: —
`Chatbot`boolean ChatBot	boolean	Controls access to AI chatbots in the sidebar	Default: false	Range: —
`LinkPreviews`boolean Link Previews	boolean	Controls whether AI is used to generate link previews	Default: false	Range: —
`TabGroups`boolean Tab Groups	boolean	Controls whether AI is used to suggest names and tabs for tab groups	Default: false	Range: —
`Locked`boolean Locked	boolean	Prevents the user from changing generative AI preferences	Default: false	Range: —
`Homepage`dict	dict	Configure the default homepage and how Firefox starts.	Default: —	Range: —
`URL`string	string	Optional. Set the default home page.	Default: —	Range: —
`Additional`array Additional Homepages	array	Optional. Set additional homepages.	Default: —	Range: —
`Additional`string	string	—	Default: —	Range: —
`StartPage`string Start Page	string	Optional. This preference sets what displays when Firefox starts. It can be the homepage, the previous session, or a blank page.	Default: —	Range: None (none), Homepage (homepage), Homepage (Locked) (homepage-locked), Previous Session (previous-session)
`Locked`boolean	boolean	If true, prevents the user from changing homepage preferences.	Default: false	Range: —
`ShowHomeButton`boolean Show Home Button	boolean	Show the home button on the toolbar.	Default: false	Range: —
`LocalFileLinks`array Local File Links	array	Enable linking to local files by origin	Default: —	Range: —
string	string	—	Default: —	Range: —
`NewTabPage`boolean New Tab Page	boolean	Enable or disable the New Tab page.	Default: —	Range: —
`NoDefaultBookmarks`boolean No Default Bookmarks	boolean	Disable the creation of default bookmarks.	Default: —	Range: —
`OverrideFirstRunPage`string Override First Run Page	string	Override the first run page. If the value is blank, no first run page is displayed. Starting with Firefox 83, Firefox ESR 78.5, you can also specify multiple URLS separated by a vertical bar (\|).	Default: —	Range: —
`OverridePostUpdatePage`string Override Post Update Page	string	Override the upgrade page. If the value is blank, no upgrade page is displayed.	Default: —	Range: —
`PictureInPicture`dict Picture-in-Picture	dict	Enable or disable Picture-in-Picture.	Default: —	Range: —
`Enabled`boolean	boolean	—	Default: —	Range: —
`Locked`boolean	boolean	—	Default: —	Range: —
`PromptForDownloadLocation`boolean Prompt for Download Location	boolean	Ask where to save each file before downloading.	Default: —	Range: —
`RequestedLocales`array Requested Locales	array	Set the the list of requested locales for the application in order of preference. It will cause the corresponding language pack to become active.	Default: —	Range: —
`action`string Action	string	Action	Default: ""	Range: Acholi (ach), Afrikaans (af), Albanian (sq), Arabic (ar), Aragonese (an), Armenian (hy-AM), Assamese (as), Asturian (ast), Azerbaijani (az), Basque (eu), Belarusian (be), Bengali (Bangladesh) (bn-BD), Bengali (India) (bn-IN), Bosnian (bs), Breton (br), Bulgarian (bg), Burmese (my), Catalan (ca), Chinese (Simplified) (zh-CN), Chinese (Traditional) (zh-TW), Croatian (hr), Czech (cs), Danish (da), Dutch (nl), English (British) (en-GB), English (Canadian) (en-CA), English (South African) (en-ZA), English (US) (en-US), Esperanto (eo), Estonian (et), Finnish (fi), French (fr), Frisian (fy-NL), Fulah (ff), Gaelic (Scotland) (gd), Galician (gl), Georgian (ka), German (de), Greek (el), Guarani (gn), Gujarati (India) (gu-IN), Hebrew (he), Hindi (India) (hi-IN), Hungarian (hu), Icelandic (is), Indonesian (id), Interlingua (ia), Irish (ga-IE), Italian (it), Japanese (ja), Kabyle (kab), Kannada (kn), Kaqchikel (cak), Kazakh (kk), Khmer (km), Korean (ko), Latvian (lv), Ligurian (lij), Lithuanian (lt), Lower Sorbian (dsb), Macedonian (mk), Maithili (mai), Malay (ms), Malayalam (ml), Marathi (mr), Nepali (ne-NP), Norwegian (Bokmål) (nb-NO), Norwegian (Nynorsk) (nn-NO), Occitan (Lengadocian) (oc), Odia (or), Persian (fa), Polish (pl), Portuguese (Brazilian) (pt-BR), Portuguese (Portugal) (pt-PT), Punjabi (India) (pa-IN), Romanian (ro), Romansh (rm), Russian (ru), Serbian (sr), Sinhala (si), Slovak (sk), Slovenian (sl), Songhai (son), Spanish (Argentina) (es-AR), Spanish (Chile) (es-CL), Spanish (Mexico) (es-MX), Spanish (Spain) (es-ES), Swedish (sv-SE), Tamil (ta), Telugu (te), Thai (th), Turkish (tr), Ukrainian (uk), Upper Sorbian (hsb), Urdu (ur), Uzbek (uz), Vietnamese (vi), Welsh (cy), Xhosa (xh)
`SanitizeOnShutdown`dict Sanitize On Shutdown (Selective)	dict	Clear data on shutdown. Choose from Cache, Cookies, Download History, Form & Search History, Browsing History, Active Logins, Site Preferences and Offline Website Data.	Default: —	Range: —
`Cache`boolean	boolean	—	Default: false	Range: —
`Cookies`boolean	boolean	—	Default: false	Range: —
`Downloads`boolean	boolean	—	Default: false	Range: —
`FormData`boolean Form Data	boolean	—	Default: false	Range: —
`History`boolean	boolean	—	Default: false	Range: —
`Sessions`boolean	boolean	—	Default: false	Range: —
`SiteSettings`boolean Site Settings	boolean	—	Default: false	Range: —
`OfflineApps`boolean Offline Apps	boolean	—	Default: false	Range: —
`Locked`boolean	boolean	—	Default: false	Range: —
`SearchBar`string Search Bar	string	Set whether or not search bar is displayed.	Default: "separate"	Range: Separate (separate), Unified (unified)
`SearchEngines`dict Search Engines	dict	Set whether or not search bar is displayed.	Default: —	Range: —
`Default`string	string	Set the default search engine. This policy is only available on the ESR.	Default: —	Range: —
`PreventInstalls`boolean	boolean	Prevent installing search engines from webpages. This policy is only available on the ESR.	Default: —	Range: —
`Remove`array	array	Hide built-in search engines. This policy is only available on the ESR.	Default: —	Range: —
string Hidden Search Engines	string	—	Default: —	Range: —
`Add`array Add Search Engines	array	Add new search engines. This policy is only available on the ESR.	Default: —	Range: —
dict Search Engines	dict	—	Default: —	Range: —
`Name`string	string	Name of the search engine	Default: —	Range: —
`URLTemplate`string	string	—	Default: —	Range: —
`Method`string	string	—	Default: —	Range: GET, POST
`IconURL`string	string	URL for the icon to use	Default: —	Range: —
`Alias`string	string	keyword to use for the engine	Default: —	Range: —
`Description`string	string	Description of the search engine.	Default: —	Range: —
`PostData`string	string	POST data as name value pairs separated by '&'	Default: —	Range: —
`SuggestURLTemplate`string	string	Search suggestions URL with {searchTerms} to substitute for the search term.	Default: —	Range: —
`Encoding`string	string	The query charset for the engine.	Default: "UTF-8"	Range: —
`SearchSuggestEnabled`boolean Enable Search Suggest	boolean	Enable search suggestions.	Default: —	Range: —
`Handlers`dict	dict	Configure default application handlers. This policy is based on the internal format of handlers.json. You can configure handlers based on a mime type (mimeTypes), a file's extension (extensions), or a protocol (schemes).	Default: —	Range: —
`mimeTypes`dict MIME Types	dict	Specify MIME types. More info here: https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types	Default: —	Range: —
`{{key}}`string MIME Type	string	https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types	Default: —	Range: —
`{{value}}`dict	dict	—	Default: —	Range: —
`action`string Action	string	Can be either saveToDisk, useHelperApp, useSystemDefault.	Default: —	Range: Save to Disk (saveToDisk), Use Helper App (useHelperApp), Use System Default (useSystemDefault)
`ask`boolean Ask	boolean	If true, the user is asked if what they want to do with the file. If false, the action is taken without user intervention.	Default: —	Range: —
`schemes`dict Schemes	dict	—	Default: —	Range: —
`action`string Action	string	Can be either saveToDisk, useHelperApp, useSystemDefault.	Default: —	Range: Save to Disk (saveToDisk), Use Helper App (useHelperApp), Use System Default (useSystemDefault)
`ask`boolean Ask	boolean	If true, the user is asked if what they want to do with the file. If false, the action is taken without user intervention.	Default: —	Range: —
`handlers`array Handlers	array	An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.	Default: —	Range: —
dict MIME Type	dict	—	Default: —	Range: —
`name`string Name	string	The display name of the handler (might not be used).	Default: —	Range: —
`path`string Path	string	The native path to the executable to be used.	Default: —	Range: —
`uriTemplate`string URI Template	string	A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.	Default: —	Range: —
`extensions`dict Extensions	dict	—	Default: —	Range: —
`action`string Action	string	Can be either saveToDisk, useHelperApp, useSystemDefault.	Default: —	Range: Save to Disk (saveToDisk), Use Helper App (useHelperApp), Use System Default (useSystemDefault)
`ask`boolean Ask	boolean	If true, the user is asked if what they want to do with the file. If false, the action is taken without user intervention.	Default: —	Range: —
`handlers`array Handlers	array	An array of handlers with the first one being the default. If you don't want to have a default handler, use an empty object for the first handler. Choose between path or uriTemplate.	Default: —	Range: —
dict	dict	—	Default: —	Range: —
`name`string Name	string	The display name of the handler (might not be used).	Default: —	Range: —
`path`string Path	string	The native path to the executable to be used.	Default: —	Range: —
`uriTemplate`string URI Template	string	A url to a web based application handler. The URL must be https and contain a %s to be used for substitution.	Default: —	Range: —
`DisabledCiphers`dict Disabled Ciphers	dict	Disable specific cryptographic ciphers. This policy was updated in Firefox 78 to allow enabling ciphers as well. Setting the value to true disables the cipher, setting the value to false enables the cipher. Previously setting the value to true or false disabled the cipher.	Default: —	Range: —
`TLS_DHE_RSA_WITH_AES_128_CBC_SHA`boolean	boolean	—	Default: —	Range: —
`TLS_DHE_RSA_WITH_AES_256_CBC_SHA`boolean	boolean	—	Default: —	Range: —
`TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA`boolean	boolean	—	Default: —	Range: —
`TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA`boolean	boolean	—	Default: —	Range: —
`TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`boolean	boolean	—	Default: —	Range: —
`TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256`boolean	boolean	—	Default: —	Range: —
`TLS_RSA_WITH_AES_128_CBC_SHA`boolean	boolean	—	Default: —	Range: —
`TLS_RSA_WITH_AES_256_CBC_SHA`boolean	boolean	—	Default: —	Range: —
`TLS_RSA_WITH_AES_128_GCM_SHA256`boolean	boolean	—	Default: —	Range: —
`TLS_RSA_WITH_AES_256_GCM_SHA384`boolean	boolean	—	Default: —	Range: —
`TLS_RSA_WITH_3DES_EDE_CBC_SHA`boolean	boolean	—	Default: —	Range: —
`DNSOverHTTPS`dict DNS over HTTPS	dict	Configure DNS over HTTPS.	Default: —	Range: —
`Enabled`boolean required	boolean	Enable DNS over HTTPS.	Default: false	Range: —
`ProviderURL`string Provider URL	string	URL to an alternative DNS over HTTPS provider.	Default: —	Range: —
`Locked`boolean	boolean	If this is true, DNS over HTTPS preferences cannot be changed.	Default: false	Range: —
`ExcludedDomains`array Excluded Domains	array	List of excluded domains from DNS over HTTPS.	Default: —	Range: —
string Excluded Domains	string	—	Default: —	Range: —
`Proxy`dict	dict	Configure proxy settings. These settings correspond to the connection settings in Firefox preferences. To specify ports, append them to the hostnames with a colon (:).	Default: —	Range: —
`Mode`string required	string	If this preference is enabled, you will be setting the proxy mode.	Default: —	Range: No Proxy (none), Use system proxy settings (system), Manual proxy configuration (manual), Auto-detect proxy settings (autoDetect), Automatic proxy configuration (autoConfig)
`Locked`boolean	boolean	If this preference is enabled, Proxy preferences cannot be changed.	Default: false	Range: —
`AutoLogin`boolean	boolean	If this preference is enabled, do not prompt for authentication if password is saved.	Default: false	Range: —
`UseProxyForDNS`boolean	boolean	If this preference is enabled, you will use Proxy DNS when using SOCKS v5.	Default: false	Range: —
`HTTPProxy`string HTTP Proxy	string	HTTP Proxy URL.	Default: —	Range: —
`UseHTTPProxyForAllProtocols`boolean	boolean	If this preference is enabled, use the HTTP proxy server for all protocols.	Default: false	Range: —
`SSLProxy`string SSL Proxy	string	SSL Proxy URL.	Default: —	Range: —
`FTPProxy`string FTP Proxy	string	FTP Proxy URL.	Default: —	Range: —
`SOCKSProxy`string SOCKS Proxy	string	SOCKS Proxy URL.	Default: —	Range: —
`SOCKSVersion`string SOCKS Version	string	Select SOCKS Version.	Default: —	Range: 4 (4), 5 (5)
`Passthrough`string No Proxy For	string	Proxy bypass URLs.	Default: "localhost, 127.0.0.1"	Range: —
`AutoConfigURL`string Automatic Proxy Configuration URL	string	Proxy bypass URLs.	Default: —	Range: —
`SSLVersionMin`string SSLVersionMin	string	—	Default: —	Range: TLS 1.0 (tls1), TLS 1.1 (tls1.1), TLS 1.2 (tls1.2), TLS 1.3 (tls1.3)
`SSLVersionMax`string SSLVersionMax	string	—	Default: —	Range: TLS 1.0 (tls1), TLS 1.1 (tls1.1), TLS 1.2 (tls1.2), TLS 1.3 (tls1.3)
`NetworkPrediction`boolean Network Prediction	boolean	Enable or disable network prediction (DNS prefetching).	Default: —	Range: —
`Cookies`dict	dict	Configure cookie preferences.	Default: —	Range: —
`Allow`array Allow	array	A list of origins (not domains) where cookies are always allowed.	Default: —	Range: —
`URL`string URL	string	—	Default: —	Range: —
`AllowSession`array Allow Session	array	A list of origins (not domains) where cookies are only allowed for the current session.	Default: —	Range: —
`URL`string URL	string	—	Default: —	Range: —
`Block`array Block	array	A list of origins (not domains) where cookies are always blocked.	Default: —	Range: —
`URL`string URL	string	—	Default: —	Range: —
`Behavior`string	string	This has been added replacing the existing options Default, AcceptThirdParty, and RejectTracker.	Default: —	Range: accept, reject-foreign, reject, limit-foreign, reject-tracker, reject-tracker-and-partition-foreign
`BehaviorPrivateBrowsing`string Behavior: Private Browsing	string	—	Default: —	Range: accept, reject-foreign, reject, limit-foreign, reject-tracker, reject-tracker-and-partition-foreign
`Default`boolean	boolean	This sets the default value for "Accept cookies from websites".	Default: true	Range: —
`AcceptThirdParty`string	string	This sets the default value for "Accept third-party cookies".	Default: —	Range: always (always), never (never), from-visited (from-visited)
`ExpireAtSessionEnd`boolean	boolean	This determines when cookies expire.	Default: false	Range: —
`RejectTracker`boolean	boolean	Only reject trackers.	Default: false	Range: —
`Locked`boolean	boolean	If this is true, cookies preferences cannot be changed.	Default: false	Range: —
`DisableFormHistory`boolean Disable Form History	boolean	Turn off saving information on web forms and the search bar.	Default: true	Range: —
`DisablePasswordReveal`boolean Disable Password Reveal	boolean	Do not allow passwords to be shown in saved logins	Default: true	Range: —
`DisableTelemetry`boolean Disable Telemetry	boolean	Prevent the upload of telemetry data.	Default: true	Range: —
`EnableTrackingProtection`dict Enable Tracking Protection	dict	Configure tracking protection. If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.	Default: {"Locked":true,"Value":true}	Range: —
`Value`boolean	boolean	If Value is set to false, tracking protection is disabled and locked in both the regular browser and private browsing. If Value is set to true, tracking protection is enabled by default in both the regular browser and private browsing.	Default: false	Range: —
`Locked`boolean	boolean	If this is true, Tracking Protection preferences cannot be changed.	Default: false	Range: —
`Cryptomining`boolean	boolean	If Cryptomining is set to true, cryptomining scripts on websites are blocked.	Default: false	Range: —
`Fingerprinting`boolean	boolean	If Fingerprinting is set to true, fingerprinting scripts on websites are blocked.	Default: false	Range: —
`FlashPlugin`dict Flash Plugin Permissions	dict	Configure the default Flash plugin policy as well as origins for which Flash is allowed.	Default: —	Range: —
`Allow`array Allowed Domains	array	If this preference is enabled, sites on the allow list do not override Flash being completely disabled. Flash is activated by default for the domains indicated unless Flash is completely disabled. If a top level domain is specified (http://example.org), Flash is allowed for all subdomains as well.	Default: —	Range: —
`Allowed Domains`string	string	—	Default: —	Range: —
`Block`array Blocked Domains	array	If this preference is enabled, Flash is blocked for the domains indicated. If a top level domain is specified (http://example.org), Flash is blocked from all subdomains as well.	Default: —	Range: —
`Blocked Domains`string	string	—	Default: —	Range: —
`Default`boolean	boolean	If this is true, Flash preferences cannot be changed. If this is false, Flash is never activated on websites even if they are in the specified in the Allow list.	Default: false	Range: —
`Locked`boolean	boolean	If this is true, Flash preferences cannot be changed.	Default: false	Range: —
`InstallAddonsPermission`dict Install Add-ons Permissions	dict	Configure the default extension install policy as well as origins for extension installs are allowed.	Default: —	Range: —
`Allow`array Allowed Domains	array	If this preference is enabled, add-ons are always allowed for the domains indicated unless add-on install is disabled. If a top level domain is specified (http://example.org), add-ons are allowed for all subdomains as well.	Default: —	Range: —
`Allowed Domains`string	string	—	Default: —	Range: —
`Default`boolean	boolean	If this is set to false, add-ons cannot be installed by the user.	Default: false	Range: —
`OfferToSaveLogins`boolean Offer To Save Logins	boolean	Control whether or not Firefox offers to save passwords.	Default: false	Range: —
`OfferToSaveLoginsDefault`boolean Offer To Save Logins Default	boolean	Sets the default value of signon.rememberSignons without locking it.	Default: false	Range: —
`PasswordManagerEnabled`boolean Enable Password Manager	boolean	Remove access to the password manager via preferences and blocks about:logins on Firefox 70.	Default: false	Range: —
`Permissions`dict	dict	Set permissions associated with camera, microphone, location, notifications, and autoplay.	Default: —	Range: —
`Camera`dict Camera Permissions	dict	This preference allows you to change the camera permissions.	Default: —	Range: —
`Allow`array	array	If this preference is enabled, access to the camera is always allowed for the domains indicated. If this preference is disabled or not configured, the default camera preference is followed.	Default: —	Range: —
`Allowed Domains`string	string	—	Default: —	Range: —
`Block`array	array	If this preference is enabled, access to the camera is blocked for the domains indicated. If this preference is disabled or not configured, access to the camera is not blocked by default.	Default: —	Range: —
`Blocked Domains`string	string	—	Default: —	Range: —
`BlockNewRequests`boolean Block New Requests	boolean	If this preference is enabled, sites that are not in the Allow preference will not be allowed to ask permission to access the camera. If this preference is disabled or not configured, any site that is not in the Block preference can ask permission to access the camera.	Default: true	Range: —
`Locked`boolean	boolean	If this preference is enabled, camera preferences cannot be changed by the user. If this preference is disabled or not configured, the user can change their camera preferences.	Default: false	Range: —
`Microphone`dict Microphone Permissions	dict	This preference allows you to change the microphone permissions.	Default: —	Range: —
`Allow`array	array	If this preference is enabled, access to the microphone is always allowed for the domains indicated. If this preference is disabled or not configured, the default microphone preference is followed.	Default: —	Range: —
`Allowed Domains`string	string	—	Default: —	Range: —
`Block`array	array	If this preference is enabled, access to the microphone is blocked for the domains indicated. If this preference is disabled or not configured, access to the microphone is not blocked by default.	Default: —	Range: —
`Blocked Domains`string	string	—	Default: —	Range: —
`BlockNewRequests`boolean Block New Requests	boolean	If this preference is enabled, sites that are not in the Allow preference will not be allowed to ask permission to access the microphone. If this preference is disabled or not configured, any site that is not in the Block preference can ask permission to access the microphone.	Default: true	Range: —
`Locked`boolean	boolean	If this preference is enabled, microphone preferences cannot be changed by the user. If this preference is disabled or not configured, the user can change their microphone preferences.	Default: false	Range: —
`Location`dict Location Permissions	dict	This preference allows you to change the location permissions.	Default: —	Range: —
`Allow`array	array	If this preference is enabled, access to location is always allowed for the domains indicated. If this preference is disabled or not configured, the default location preference is followed.	Default: —	Range: —
`Allowed Domains`string	string	—	Default: —	Range: —
`Block`array	array	If this preference is enabled, access to location is blocked for the domains indicated. If this preference is disabled or not configured, access to location is not blocked by default.	Default: —	Range: —
`Blocked Domains`string	string	—	Default: —	Range: —
`BlockNewRequests`boolean Block New Requests	boolean	If this preference is enabled, sites that are not in the Allow preference will not be allowed to ask permission to access location. If this preference is disabled or not configured, any site that is not in the Block preference can ask permission to access the location.	Default: true	Range: —
`Locked`boolean	boolean	If this preference is enabled, location preferences cannot be changed by the user. If this preference is disabled or not configured, the user can change their location preferences.	Default: false	Range: —
`Notifications`dict Notifications Permissions	dict	This preference allows you to change the notifications permissions.	Default: —	Range: —
`Allow`array	array	If this preference is enabled, notifications can always be sent for the domains indicated. If this preference is disabled or not configured, the default nofication preference is followed.	Default: —	Range: —
`Allowed Domains`string	string	—	Default: —	Range: —
`Block`array	array	If this preference is enabled, notifications are always blocked for the domains indicated. If this preference is disabled or not configured, notifications are not blocked by default.	Default: —	Range: —
`Blocked Domains`string	string	—	Default: —	Range: —
`BlockNewRequests`boolean Block New Requests	boolean	If this preference is enabled, sites that are not in the Allow preference will not be allowed to ask permission to send notifications. If this preference is disabled or not configured, any site that is not in the Block preference can ask permission to send notifications.	Default: true	Range: —
`Locked`boolean	boolean	If this preference is enabled, notification preferences cannot be changed by the user. If this preference is disabled or not configured, the user can change their notification preferences.	Default: false	Range: —
`Autoplay`dict Autoplay Permissions	dict	This preference allows you to change the autoplay permissions.	Default: —	Range: —
`Allow`array	array	If this preference is enabled, autoplay can always be enabled for the domains indicated. If this preference is disabled or not configured, the default autoplay preference is followed.	Default: —	Range: —
`Allowed Domains`string	string	—	Default: —	Range: —
`Block`array	array	If this preference is enabled, autoplay are always blocked for the domains indicated. If this preference is disabled or not configured, autoplay is not blocked by default.	Default: —	Range: —
`Blocked Domains`string	string	—	Default: —	Range: —
`Default`string Default Autoplay Behavior	string	Configures the default Autoplay behavior.	Default: —	Range: Allow Audio & Video (allow-audio-video), Block Audio (block-audio), Block Audio & Video (block-audio-video)
`Locked`boolean Locked	boolean	If this preference is enabled, autoplay preferences cannot be changed by the user. If this preference is disabled or not configured, the user can change their autoplay preferences.	Default: false	Range: —
`VirtualReality`dict Virutal Reality Permissions	dict	This preference allows you to change the virtual reality permissions.	Default: —	Range: —
`Allow`array	array	If this preference is enabled, access to virtual reality is always allowed for the domains indicated. If this preference is disabled or not configured, the default virtual reality preference is followed.	Default: —	Range: —
`Allowed Domains`string	string	—	Default: —	Range: —
`Block`array	array	If this preference is enabled, access to virtual reality is blocked for the domains indicated. If this preference is disabled or not configured, access to the virtual reality is not blocked by default.	Default: —	Range: —
`Blocked Domains`string	string	—	Default: —	Range: —
`BlockNewRequests`boolean Block New Requests	boolean	If this preference is enabled, sites that are not in the Allow preference will not be allowed to ask permission to access virtual reality. If this preference is disabled or not configured, any site that is not in the Block preference can ask permission to access virtual reality.	Default: true	Range: —
`Locked`boolean	boolean	If this preference is enabled, virtual reality preferences cannot be changed by the user. If this preference is disabled or not configured, the user can change their virtual reality preferences.	Default: false	Range: —
`PopupBlocking`dict Popup Blocking	dict	Configure the default pop-up window policy as well as origins for which pop-up windows are allowed.	Default: —	Range: —
`Allow`array Allowed Domains	array	Specify the domains for which pop-up windows are always allowed. If a top level domain is specified (http://example.org), pop-up windows are allowed for all subdomains as well.	Default: —	Range: —
`Allowed Domains`string	string	—	Default: —	Range: —
`Default`boolean	boolean	If this is false, pop-up windows are allowed by default.	Default: true	Range: —
`Locked`boolean	boolean	If this is true, pop-up blocking preferences cannot be changed.	Default: false	Range: —
`Certificates`dict	dict	Trust certificates that have been added to the operating system certificate store by a user or administrator in the macOS Keychain.	Default: —	Range: —
`ImportEnterpriseRoots`boolean	boolean	If this preference is enabled, Firefox will read certificates from the macOS keychain. If this preference is disabled or not configured, Firefox will not read certificates from the macOS keychain.	Default: true	Range: —
`Install`array Install	array	If this preference is enabled, Firefox will install the listed certificates. It will look in /Library/Application Support/Mozilla/Certificates and ~/Library/Application Support/Mozilla/Certificates. If this preference is disabled or not configured, Firefox will not install additional certificates. Starting in Firefox 65, you can specify a fully qualified path (e.g. /Library/Company/cer1.der). If Firefox does not find something at your fully qualified path, it will search the default directories.	Default: —	Range: —
`Certificate`string	string	—	Default: —	Range: —
`DisableSecurityBypass`dict Disable Security Bypass	dict	Prevent the user from bypassing security in certain cases.	Default: —	Range: —
`InvalidCertificate`boolean	boolean	Prevents adding an exception when an invalid certificate is shown. If this preference is enabled, the "Add Exception" button is not available when a certificate is invalid. This prevents the user from overriding the certificate error. If this preference is disabled or not configured, certificate errors can be overridden.	Default: true	Range: —
`SafeBrowsing`boolean	boolean	Prevents selecting "ignore the risk" and visiting a harmful site anyway. If this preference is enabled, a user cannot bypass the warning and visit a harmful site. If this preference is disabled or not configured, a user can choose to visit a harmful site.	Default: true	Range: —
`SecurityDevices`dict	dict	Install PKCS #11 modules.	Default: {"NAME_OF_DEVICE":"PATH_TO_LIBRARY_FOR_DEVICE"}	Range: —
`{{key}}`string Device Name	string	—	Default: —	Range: —
`{{value}}`string Library Path	string	—	Default: —	Range: —
`UserMessaging`dict Search Engine Installs from Websites	dict	Prevent installing search engines from webpages.	Default: —	Range: —
`WhatsNew`boolean What's New	boolean	If enabled, remove the "What's New" icon and menuitem.	Default: —	Range: —
`ExtensionRecommendations`boolean Extension Recomendations	boolean	If enabled, don't recommend extensions.	Default: —	Range: —
`FeatureRecommendations`boolean Feature Recommendations	boolean	If enabled, don't recommend browser features.	Default: —	Range: —
`SkipOnboarding`boolean Skip Onboarding	boolean	If enabled, don't show onboarding messages on the new tab page.	Default: —	Range: —
`UrlbarInterventions`boolean URL Bar Interventions	boolean	If enabled, don't offer Firefox specific suggestions in the URL bar.	Default: —	Range: —
`LegacySameSiteCookieBehaviorEnabled`boolean Legacy SameSite Cookie Behavior Enabled	boolean	Enable default legacy SameSite cookie behavior setting.	Default: —	Range: —
`LegacySameSiteCookieBehaviorEnabledForDomainList`array Legacy SameSite Cookie Behavior Enabled for Domain List	array	Revert to legacy SameSite behavior for cookies on specified sites.	Default: —	Range: —
string Domain	string	—	Default: —	Range: —
`WebsiteFilter`dict	dict	Block websites from being visited. The parameters take an array of Match Patterns, as documented in https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. http/https addresses are supported as well as local file:// URLs. The arrays are limited to 1000 entries each.	Default: —	Range: —
`Block`array Block required	array	If this preference is enabled, you can specify match patterns that indicate sites to be blocked. The match patterns are documented at https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. There is a 1000 entry limit. If this preference is disabled or not configured, no websites are blocked.	Default: —	Range: —
`Block`string Blocked Sites	string	—	Default: —	Range: —
`Exceptions`array Exceptions	array	If this preference is enabled, and the website filter is enabled, you can specify match patterns for sites you do not want to block. The match patterns are documented at https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. Only http/https addresses are supported at the moment. There is a 1000 entry limit. If this preference is disabled or not configured, there are no exceptions to the website filter.	Default: —	Range: —
`Exceptions`string Exceptions To Website Filter	string	—	Default: —	Range: —
`AllowedDomainsForApps`string Allowed Domains for Apps	string	Comma-separated list of domains allowed to access Google Workspace. This policy is based on the Chrome policy of the same name. If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add 'consumer_accounts' to the list.	Default: —	Range: —
`AutoLaunchProtocolsFromOrigins`array Auto Launch Protocols from Origins	array	Comma-separated list of domains allowed to access Google Workspace. This policy is based on the Chrome policy of the same name. If this policy is enabled, users can only access Google Workspace using accounts from the specified domains. If you want to allow Gmail, you can add 'consumer_accounts' to the list.	Default: —	Range: —
dict	dict	—	Default: —	Range: —
`protocol`string Protocol	string	The protocol to allow for specified URLs.	Default: —	Range: —
`allowed_origins`array Allowed Origins	array	The protocol to allow for specified URLs.	Default: —	Range: —
string URL	string	—	Default: —	Range: —
`CaptivePortal`boolean Captive Portal	boolean	Enable or disable the detection of captive portals.	Default: —	Range: —
`Preferences`dict Preferences	dict	Set and lock certain preferences.	Default: —	Range: —
`accessibility.force_disabled`integer accessibility.force_disabled	integer	If set to 1, platform accessibility is disabled.	Default: 0	Range: Not Disabled (0), Disabled (1)
`app.update.auto`boolean app.update.auto	boolean	If false, Firefox doesn't automatically install update.	Default: true	Range: —
`browser.bookmarks.autoExportHTML`boolean browser.bookmarks.autoExportHTML	boolean	If true, bookmarks are exported on shutdown.	Default: false	Range: —
`browser.bookmarks.file`string browser.bookmarks.file	string	If set, the name of the file where bookmarks are exported and imported.	Default: —	Range: —
`browser.bookmarks.restore_default_bookmarks`boolean browser.bookmarks.restore_default_bookmarks	boolean	If true, bookmarks are restored to their defaults.	Default: false	Range: —
`browser.cache.disk.enable`boolean browser.cache.disk.enable	boolean	If false, don't store cache on the hard drive.	Default: true	Range: —
`browser.cache.disk.parent_directory`string browser.cache.disk.parent_directory	string	If set, changes the location of the disk cache.	Default: "Profile temporary directory"	Range: —
`browser.fixup.dns_first_for_single_words`boolean browser.fixup.dns_first_for_single_words	boolean	If true, single words are sent to DNS, not directly to search.	Default: false	Range: —
`browser.newtabpage.activity-stream.default.sites`array browser.newtabpage.activity-stream.default.sites	array	If set, a list of URLs to use as the default top sites on the new tab page.	Default: —	Range: —
string Sites	string	—	Default: —	Range: —
`browser.places.importBookmarksHTML`boolean browser.places.importBookmarksHTML	boolean	If true, bookmarks are always imported on startup.	Default: —	Range: —
`browser.safebrowsing.malware.enabled`boolean browser.safebrowsing.malware.enabled	boolean	If false, malware protection is not enabled (Not recommended)	Default: true	Range: —
`browser.safebrowsing.phishing.enabled`boolean browser.safebrowsing.phishing.enabled	boolean	If false, phishing protection is not enabled (Not recommended)	Default: true	Range: —
`browser.search.update`boolean browser.search.update	boolean	If false, updates for search engines are not checked.	Default: true	Range: —
`browser.slowStartup.notificationDisabled`boolean browser.slowStartup.notificationDisabled	boolean	If true, a notification isn't shown if startup is slow.	Default: false	Range: —
`browser.tabs.warnOnClose`boolean browser.tabs.warnOnClose	boolean	If false, there is no warning when the browser is closed.	Default: true	Range: —
`browser.taskbar.previews.enable`boolean browser.taskbar.previews.enable	boolean	If true, tab previews are shown in the Windows taskbar.	Default: false	Range: —
`browser.urlbar.suggest.bookmark`boolean browser.urlbar.suggest.bookmark	boolean	If false, bookmarks aren't suggested when typing in the URL bar.	Default: true	Range: —
`browser.urlbar.suggest.history`boolean browser.urlbar.suggest.history	boolean	If false, history isn't suggested when typing in the URL bar.	Default: true	Range: —
`browser.urlbar.suggest.openpage`boolean browser.urlbar.suggest.openpage	boolean	If false, open tabs aren't suggested when typing in the URL bar.	Default: true	Range: —
`datareporting.policy.dataSubmissionPolicyBypassNotification`boolean datareporting.policy.dataSubmissionPolicyBypassNotification	boolean	If true, don't show the privacy policy tab on first run.	Default: false	Range: —
`dom.allow_scripts_to_close_windows`boolean dom.allow_scripts_to_close_windows	boolean	If false, web page can close windows.	Default: true	Range: —
`dom.disable_window_flip`boolean dom.disable_window_flip	boolean	If false, web pages can focus and activate windows.	Default: true	Range: —
`dom.disable_window_move_resize`boolean dom.disable_window_move_resize	boolean	If true, web pages can't move or resize windows.	Default: false	Range: —
`dom.event.contextmenu.enabled`boolean dom.event.contextmenu.enabled	boolean	If false, web pages can't override context menus.	Default: true	Range: —
`dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl`string dom.keyboardevent.keypress.hack.dispatch_non_printable_keys.addl	string	See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66	Default: ""	Range: —
`dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl`string dom.keyboardevent.keypress.hack.use_legacy_keycode_and_charcode.addl	string	See https://support.mozilla.org/en-US/kb/dom-events-changes-introduced-firefox-66	Default: ""	Range: —
`extensions.blocklist.enabled`boolean extensions.blocklist.enabled	boolean	If false, the extensions blocklist is not used (Not recommended)	Default: true	Range: —
`extensions.getAddons.showPane`boolean extensions.getAddons.showPane	boolean	If false, the Recommendations tab is not displayed in the Add-ons Manager.	Default: false	Range: —
`extensions.htmlaboutaddons.recommendations.enabled`boolean extensions.htmlaboutaddons.recommendations.enabled	boolean	If false, recommendations are not shown on the Extensions tab in the Add-ons Manager.	Default: true	Range: —
`geo.enabled`boolean geo.enabled	boolean	If false, the geolocation API is disabled.	Default: true	Range: —
`intl.accept_languages`string intl.accept_languages	string	If set, preferred language for web pages.	Default: —	Range: —
`media.eme.enabled`boolean media.eme.enabled	boolean	If false, Encrypted Media Extensions are not enabled.	Default: true	Range: —
`media.gmp-gmpopenh264.enabled`boolean media.gmp-gmpopenh264.enabled	boolean	If false, the OpenH264 plugin is not downloaded.	Default: true	Range: —
`media.gmp-widevinecdm.enabled`boolean media.gmp-widevinecdm.enabled	boolean	If false, the Widevine plugin is not downloaded.	Default: true	Range: —
`media.peerconnection.enabled`boolean media.peerconnection.enabled	boolean	If false, WebRTC is disabled	Default: true	Range: —
`media.peerconnection.ice.obfuscate_host_addresses.blocklist`array media.peerconnection.ice.obfuscate_host_addresses.blocklist	array	If set, a list of domains for which mDNS hostname obfuscation is disabled.	Default: —	Range: —
string Domains	string	—	Default: —	Range: —
`network.dns.disableIPv6`boolean network.dns.disableIPv6	boolean	If true, IPv6 DNS lokoups are disabled.	Default: false	Range: —
`network.IDN_show_punycode`boolean network.IDN_show_punycode	boolean	If true, display the punycode version of internationalized domain names.	Default: false	Range: —
`places.history.enabled`boolean places.history.enabled	boolean	If false, history is not enabled.	Default: true	Range: —
`print.save_print_settings`boolean print.save_print_settings	boolean	If false, print settings are not saved between jobs.	Default: true	Range: —
`security.default_personal_cert`string security.default_personal_cert	string	If set to "Select Automatically", Firefox automatically chooses the default personal certificate. Other possible option is "Ask Every Time".	Default: "Ask Every Time"	Range: Ask Every Time, Select Automatically
`security.mixed_content.block_active_content`boolean security.mixed_content.block_active_content	boolean	If false, mixed active content (HTTP and HTTPS) is not blocked.	Default: true	Range: —
`security.osclientcerts.autoload`boolean security.osclientcerts.autoload	boolean	If true, client certificates are loaded from the operating system certificate store.	Default: false	Range: —
`security.ssl.errorReporting.enabled`boolean security.ssl.errorReporting.enabled	boolean	If false, SSL errors cannot be sent to Mozilla.	Default: true	Range: —
`security.tls.hello_downgrade_check`boolean security.tls.hello_downgrade_check	boolean	If false, the TLS 1.3 downgrade check is disabled.	Default: true	Range: —
`security.tls.enable_0rtt_data`boolean	boolean	If false, TLS early data is turned off.	Default: true	Range: —
`security.tls.version.enable-deprecated`boolean	boolean	If true, browser will accept TLS 1.0. and TLS 1.1.	Default: false	Range: —
`widget.content.gtk-theme-override`string widget.content.gtk-theme-override	string	If set, overrides the GTK theme for widgets.	Default: —	Range: —
`SupportMenu`dict Support Menu	dict	Adds a menuitem to the help menu for specifying support information.	Default: —	Range: —
`Title`string Title	string	—	Default: —	Range: —
`URL`string URL	string	—	Default: —	Range: —
`AccessKey`string AccessKey	string	—	Default: —	Range: —
`MicrosoftEntraSSO`boolean Allow single sign-on for Microsoft Entra accounts on macOS	boolean	If this policy is set to true, Firefox will use credentials stored in the Company Portal to sign in to Microsoft Entra accounts. Affects `network.http.microsoft-entra-sso.enabled`.	Default: false	Range: —