Bug 1442719 - Policy: Disable the ability to bypass Safe Browsing warnings. r=francois
MozReview-Commit-ID: 4xEES8PGfW4
--- a/browser/components/enterprisepolicies/Policies.jsm
+++ b/browser/components/enterprisepolicies/Policies.jsm
@@ -222,16 +222,24 @@ var Policies = {
"DisableSafeMode": {
onBeforeUIStartup(manager, param) {
if (param) {
manager.disallowFeature("safeMode");
}
}
},
+ "DisableSecurityBypass": {
+ onBeforeUIStartup(manager, param) {
+ if ("SafeBrowsing" in param) {
+ setAndLockPref("browser.safebrowsing.allowOverride", !param.SafeBrowsing);
+ }
+ }
+ },
+
"DisableSysAddonUpdate": {
onBeforeAddons(manager, param) {
if (param) {
manager.disallowFeature("SysAddonUpdate");
}
}
},
--- a/browser/components/enterprisepolicies/schemas/policies-schema.json
+++ b/browser/components/enterprisepolicies/schemas/policies-schema.json
@@ -172,16 +172,28 @@
"DisableSafeMode": {
"description": "Prevents ability to restart in safe mode.",
"first_available": "60.0",
"type": "boolean"
},
+ "DisableSecurityBypass": {
+ "description": "Prevents the user from bypassing certain security warnings.",
+ "first_available": "60.0",
+
+ "type": "object",
+ "properties": {
+ "SafeBrowsing": {
+ "type": "boolean"
+ }
+ }
+ },
+
"DisableSysAddonUpdate": {
"description": "Prevent the browser from installing and updating system addons.",
"first_available": "60.0",
"enterprise_only": true,
"type": "boolean"
},
--- a/browser/components/enterprisepolicies/tests/browser/browser_policies_simple_pref_policies.js
+++ b/browser/components/enterprisepolicies/tests/browser/browser_policies_simple_pref_policies.js
@@ -34,16 +34,27 @@ const POLICIES_TESTS = [
policies: { "RememberPasswords": false },
lockedPrefs: { "signon.rememberSignons": false },
},
{
policies: { "RememberPasswords": true },
lockedPrefs: { "signon.rememberSignons": true },
},
+ // POLICY: DisableSecurityBypass
+ {
+ policies: {
+ "DisableSecurityBypass": {
+ "SafeBrowsing": true
+ }
+ },
+ lockedPrefs: { "browser.safebrowsing.allowOverride": false },
+ },
+
+
// POLICY: DisableFormHistory
{
policies: { "DisableFormHistory": true },
lockedPrefs: { "browser.formfill.enable": false },
},
// POLICY: EnableTrackingProtection
{