Policy templates for Firefox 154 and Firefox ESR 153.1

Please see this discussion post for changes to the policy templates release process.

Release Notes

These templates are compatible with Firefox ESR 140, but they may include policies that are not available in that version. If you need to manage Firefox ESR 140, use v7.12.

The policy documentation has officially moved to a dedicated site for Firefox administrators: https://firefox-admin-docs.mozilla.org/

The policy templates will continue to be maintained in this repository.

We have also separated out OMA-URI documentation since it's based on the ADMX templates.

New policies

• SitePolicies - fine-grained control over policies for specific sites. Each rule takes a Match list of sites, an optional Exceptions list, and a Policies object supporting DisableJit and HttpsOnly. Rules are evaluated in order, and a missing or empty Match applies to all sites. A site is a registerable domain, so *.example.com is valid but *.com is not. Available as both a multi-line JSON policy and a SitePoliciesOneLine variant for Intune. (Firefox 150 or later)
• CNSA2KeyAgreementEnabled - enable the CNSA 2.0 ML-KEM-1024 key agreement for TLS. (Firefox 154 or later)
• DefaultBrowserSettingEnabled - control whether the user can set Firefox as the default browser. When disabled, the default browser controls are removed from preferences. (Firefox 154 or later, Firefox 153 ESR or later)

Updated policies

• SanitizeOnShutdown > Exceptions - origins exempt from sanitize-on-shutdown. Entries must be origins such as https://example.com, not site patterns. (Firefox 154 or later)