Skip to content

feat: add ContentAnalysis/MaxConnectionsCount #61

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
bsmth wants to merge 1 commit into
base: main
Choose a base branch
from
+33 −17
Open

feat: add ContentAnalysis/MaxConnectionsCount #61

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50 changes: 33 additions & 17 deletions src/content/docs/reference/policies/ContentAnalysis.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compati

**Compatibility:** Firefox 137\
**CCK2 Equivalent:** N/A\
**Preferences Affected:** `browser.contentanalysis.agent_name`, `browser.contentanalysis.agent_timeout`, `browser.contentanalysis.allow_url_regex_list`, `browser.contentanalysis.bypass_for_same_tab_operations`, `browser.contentanalysis.client_signature`, `browser.contentanalysis.default_result`, `browser.contentanalysis.deny_url_regex_list`, `browser.contentanalysis.enabled`, `browser.contentanalysis.interception_point.clipboard.enabled`, `browser.contentanalysis.interception_point.clipboard.plain_text_only`, `browser.contentanalysis.interception_point.download.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.plain_text_only`, `browser.contentanalysis.interception_point.file_upload.enabled`, `browser.contentanalysis.interception_point.print.enabled`, `browser.contentanalysis.is_per_user`, `browser.contentanalysis.pipe_path_name`, `browser.contentanalysis.show_blocked_result`, `browser.contentanalysis.timeout_result`
**Preferences Affected:** `browser.contentanalysis.agent_name`, `browser.contentanalysis.agent_timeout`, `browser.contentanalysis.allow_url_regex_list`, `browser.contentanalysis.bypass_for_same_tab_operations`, `browser.contentanalysis.client_signature`, `browser.contentanalysis.default_result`, `browser.contentanalysis.deny_url_regex_list`, `browser.contentanalysis.enabled`, `browser.contentanalysis.interception_point.clipboard.enabled`, `browser.contentanalysis.interception_point.clipboard.plain_text_only`, `browser.contentanalysis.interception_point.download.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.enabled`, `browser.contentanalysis.interception_point.drag_and_drop.plain_text_only`, `browser.contentanalysis.interception_point.file_upload.enabled`, `browser.contentanalysis.interception_point.print.enabled`, `browser.contentanalysis.is_per_user`, `browser.contentanalysis.max_connections`, `browser.contentanalysis.pipe_path_name`, `browser.contentanalysis.show_blocked_result`, `browser.contentanalysis.timeout_result`

## Values

Expand All @@ -26,23 +26,24 @@ Configure Firefox to use an agent for Data Loss Prevention (DLP) that is compati
- `DenyUrlRegexList` is a space-separated list of regular expressions that indicates URLs for which DLP operations will always be denied without consulting the agent. The default is the empty string.
- `Enabled` indicates whether Firefox should use DLP. Note that if this value is true and no DLP agent is running, all DLP requests will be denied unless `DefaultResult` is set to 1 or 2.
- `InterceptionPoints` controls settings for specific interception points.
- The `Clipboard` entry controls clipboard operations for files and text.
- `Enabled` indicates whether clipboard operations should use DLP. The default is true.
- `PlainTextOnly` indicates whether to only analyze the text/plain format on the clipboard. If this
value is false, all formats will be analyzed, which some DLP agents may not expect. Regardless of
this value, files will be analyzed as usual. The default is true.
- The `Download` entry controls download operations. (Added in Firefox 142, Firefox ESR 140.2)
- `Enabled` indicates whether download operations should use DLP. The default is false.
- The `DragAndDrop` entry controls drag and drop operations for files and text.
- `Enabled` indicates whether drag and drop operations should use DLP. The default is true.
- `PlainTextOnly` indicates whether to only analyze the text/plain format in what is being dropped.
If this value is false, all formats will be analyzed, which some DLP agents may not expect.
Regardless of this value, files will be analyzed as usual. The default is true.
- The `FileUpload` entry controls file upload operations for files chosen from the file picker.
- `Enabled` indicates whether file upload operations should use DLP. The default is true.
- The `Print` entry controls print operation.
- `Enabled` indicates whether print operations should use DLP. The default is true.
- The `Clipboard` entry controls clipboard operations for files and text.
- `Enabled` indicates whether clipboard operations should use DLP. The default is true.
- `PlainTextOnly` indicates whether to only analyze the text/plain format on the clipboard. If this
value is false, all formats will be analyzed, which some DLP agents may not expect. Regardless of
this value, files will be analyzed as usual. The default is true.
- The `Download` entry controls download operations. (Added in Firefox 142, Firefox ESR 140.2)
- `Enabled` indicates whether download operations should use DLP. The default is false.
- The `DragAndDrop` entry controls drag and drop operations for files and text.
- `Enabled` indicates whether drag and drop operations should use DLP. The default is true.
- `PlainTextOnly` indicates whether to only analyze the text/plain format in what is being dropped.
If this value is false, all formats will be analyzed, which some DLP agents may not expect.
Regardless of this value, files will be analyzed as usual. The default is true.
- The `FileUpload` entry controls file upload operations for files chosen from the file picker.
- `Enabled` indicates whether file upload operations should use DLP. The default is true.
- The `Print` entry controls print operation.
- `Enabled` indicates whether print operations should use DLP. The default is true.
- `IsPerUser` indicates whether the pipe the DLP agent has created is per-user or per-system. The default is true, meaning per-user.
- `MaxConnectionsCount`: The maximum number of concurrent connections to the DLP agent. For stability reasons, values exceeding 256 will be ignored. Defaults to `3`.
Copy link
Contributor

@mkaply mkaply Feb 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm checking with the DLP team on the language.

- `PipePathName` is the name of the pipe the DLP agent has created and Firefox will connect to. The default is `path_user`.
- `ShowBlockedResult` indicates whether Firefox should show a notification when a DLP request is denied. The default is true.
- `TimeoutResult` indicates the desired behavior for DLP requests if the DLP agent does not respond to a request in less than `AgentTimeout` seconds. The default is 0.
Expand Down Expand Up @@ -70,6 +71,7 @@ Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\DragAndDrop
Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\FileUpload\Enabled = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\ContentAnalysis\InterceptionPoints\Print\Enabled = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\ContentAnalysis\IsPerUser = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\ContentAnalysis\MaxConnectionsCount = 0x0 | 0x1 | 0x2
Copy link
Contributor

@mkaply mkaply Feb 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This isn't right because it can be an arbitrary number.

Software\Policies\Mozilla\Firefox\ContentAnalysis\PipePathName = "pipe_custom_name"
Software\Policies\Mozilla\Firefox\ContentAnalysis\ShowBlockedResult = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\ContentAnalysis\TimeoutResult = 0x0 | 0x1 | 0x2
Expand Down Expand Up @@ -277,6 +279,19 @@ Value (string):

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis/ContentAnalysis_MaxConnectionsCount
```

Value (string):

```xml
<enabled/>
<data id="ContentAnalysis_MaxConnectionsCount" value="3"/>
```

OMA-URI:

```url
./Device/Vendor/MSFT/Policy/Config/Firefox~Policy~firefox~ContentAnalysis/ContentAnalysis_PipePathName
```
Expand Down Expand Up @@ -347,6 +362,7 @@ Value (string):
}
},
"IsPerUser": true | false,
"MaxConnectionsCount": 0 | 1 | 2,
"PipePathName": "pipe_custom_name",
"ShowBlockedResult": true | false,
"TimeoutResult": 0 | 1 | 2,
Expand Down