[Mozilla Enterprise] Lock install xpi file Firefox 45.9.0 ESR

2017-08-25 Thread Tony Chambon
Hello, 

I want to block add-on (xpi) for all users , i use mozilla.cfg 

it's good for: 
xpinstall.enabled > false 

it does not work its rules: 
extensions.hideInstallButton > true 
extensions.autoDisableScopes > 0 
extensions.enabledScopes > 15 

I want to block any manual installation attempts after saving an extension 
(install an xpi file) 

regards 
-- 
Tony Chambon 

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Flash Allow List

2017-08-25 Thread John Mayers
Hi Chris,

Does that settings change correspond with any file or registry edit?

-John

John Mayers  |  Technical Solutions Engineer
Curriculum Associates  |  jmay...@cainc.com
T:  978-339-4340  |  C:  978-808-9451
Twitter  |  
Facebook  |  
LinkedIn

Our programs:  
Ready®
  |  
i-Ready®
  |  
BRIGANCE®

New i-Ready systems requirements are 
here!

From: Chris Peterson [mailto:cpeter...@mozilla.com]
Sent: Monday, August 21, 2017 3:39 PM
To: John Mayers ; plugin-blocking-by-dom...@mozilla.com
Cc: enterprise@mozilla.org
Subject: Re: Flash Allow List

I don't think Firefox supports Windows Group Policy, but you can change Flash 
from "Ask to Activate" to "Always Activate" by setting the about:config pref 
"plugin.state.flash" to "2". (Pref value 1, the default, is "Ask to Activate" 
and 0 is "Never Activate".)

chris

On 2017-08-21 12:24 PM, John Mayers wrote:
Hi Chris,

Just following up.  Is there any group policy that can be enabled to set the 
Flash plugin to Always Activate?

-John

John Mayers  |  Technical Solutions Engineer
Curriculum Associates  |  jmay...@cainc.com
T:  978-339-4340  |  C:  978-808-9451
Twitter
  |  
Facebook
  |  
LinkedIn

Our programs:  
Ready®
  |  
i-Ready®
  |  
BRIGANCE®

New i-Ready systems requirements are 
here!

From: John Mayers
Sent: Friday, August 18, 2017 1:31 PM
To: 'Chris Peterson' ; 
plugin-blocking-by-dom...@mozilla.com
Cc: 'Benjamin Smedberg' 
Subject: RE: Flash Allow List

Hi Chris,

Thank you for this feedback.  We are actually releasing an edition of i-Ready 
on Sunday that will have this detection in place for all browsers.  Users will 
be able to “self-help” themselves when they encounter Flash blocked by default.

In all of my research, I have yet to find a domain level policy that can be 
added to set Firefox to always “click to activate” either all together, or for 
specific sites.  If you know of a way, please let us know.

Thank you,

John Mayers  |  Technical Solutions Engineer
Curriculum Associates  |  jmay...@cainc.com
T:  978-339-4340  |  C:  978-808-9451
Twitter
  |  
Facebook
  |  

Re: [Mozilla Enterprise] Flash Allow List

2017-08-25 Thread John Mayers
Hi Chris,

Just following up.  Is there any group policy that can be enabled to set the 
Flash plugin to Always Activate?

-John

John Mayers  |  Technical Solutions Engineer
Curriculum Associates  |  jmay...@cainc.com
T:  978-339-4340  |  C:  978-808-9451
Twitter  |  
Facebook  |  
LinkedIn

Our programs:  
Ready®
  |  
i-Ready®
  |  
BRIGANCE®

New i-Ready systems requirements are 
here!

From: John Mayers
Sent: Friday, August 18, 2017 1:31 PM
To: 'Chris Peterson' ; 
plugin-blocking-by-dom...@mozilla.com
Cc: 'Benjamin Smedberg' 
Subject: RE: Flash Allow List

Hi Chris,

Thank you for this feedback.  We are actually releasing an edition of i-Ready 
on Sunday that will have this detection in place for all browsers.  Users will 
be able to “self-help” themselves when they encounter Flash blocked by default.

In all of my research, I have yet to find a domain level policy that can be 
added to set Firefox to always “click to activate” either all together, or for 
specific sites.  If you know of a way, please let us know.

Thank you,

John Mayers  |  Technical Solutions Engineer
Curriculum Associates  |  jmay...@cainc.com
T:  978-339-4340  |  C:  978-808-9451
Twitter  |  
Facebook  |  
LinkedIn

Our programs:  
Ready®
  |  
i-Ready®
  |  
BRIGANCE®

New i-Ready systems requirements are 
here!

From: Chris Peterson [mailto:cpeter...@mozilla.com]
Sent: Friday, August 18, 2017 1:25 PM
To: John Mayers >; 
plugin-blocking-by-dom...@mozilla.com
Subject: Re: Flash Allow List

Hi John, Firefox does not have a whitelist of sites that can load Flash without 
user action ("click to activate"). When users load your site, they will either 
see the "Activate Adobe Flash" UI in the web page (if the Flash content's 
dimensions are large enough) or a tiny plugin icon in the address bar (for 
Flash "pixels" that are too small for the UI).

I recommend that you add a check for Flash being installed and activated. If 
Flash is installed but not activated automatically, your page can show 
instructions guiding users to click the "Activate Adobe Flash" and "Allow and 
Remember" buttons. A dedicated workflow like this to test for click-to-activate 
is probably more user friendly and reliable than just loading your regular 
Flash content and hoping users see and click the "Activate Adobe Flash" when 
your Flash content doesn't show up.

In Firefox, Flash in click-to-activate mode will still be detectable by 
JavaScript in the navigator.plugins[] array (i.e. navigator.plugins["Shockwave 
Flash"]). Your JavaScript can detect that Flash is installed but not activated 
by embedding a Flash  that reports whether it is running or not by 
setting some JavaScript variable using Flash's ExternalInterface. I don't know 
if someone has already written a JavaScript+Flash library that already handles 
this click-to-activate, but I would love to know. In Chrome, however, Flash in 
click-to-activate mode will NOT be detectable in the navigator.plugins[] array, 
so JavaScript can't differentiate between Flash not be installed from 
installed-but-not-activated for this site.

thanks,
From: Benjamin Smedberg [mailto:bsmedb...@mozilla.com]
Sent: Friday, August 18, 2017 1:24 PM
To: John Mayers >
Cc: 
plugin-blocking-by-dom...@mozilla.com
Subject: Re: Flash Allow List

John, thank you for reaching out. Firefox does not intend to implement any 
whitelist of sites. I believe it is possible for enterprise sites to configure 
a whitelist for their individual deployment; for more information about that I 
would suggest posting on the 

Re: [Mozilla Enterprise] Flash Allow List

2017-08-25 Thread Chris Peterson
Sorry. I think Firefox stores its about:config prefs in a SQLite 
database file, so you would not be able to safely modify the prefs by 
editing the file or the registry.


On 2017-08-21 12:43 PM, John Mayers wrote:


Hi Chris,

Does that settings change correspond with any file or registry edit?

-John

*John Mayers*  | * Technical Solutions Engineer*

Curriculum Associates  | jmay...@cainc.com 

T: 978-339-4340  |  C:  978-808-9451

Twitter   | Facebook 
  | LinkedIn 





Our programs: Ready 
® 
  | 
i-Ready® 
  | 
BRIGANCE® 





/New i-Ready systems requirements are *_here 
_*!/__


*From:*Chris Peterson [mailto:cpeter...@mozilla.com]
*Sent:* Monday, August 21, 2017 3:39 PM
*To:* John Mayers ; 
plugin-blocking-by-dom...@mozilla.com

*Cc:* enterprise@mozilla.org
*Subject:* Re: Flash Allow List

I don't think Firefox supports Windows Group Policy, but you can 
change Flash from "Ask to Activate" to "Always Activate" by setting 
the about:config pref "plugin.state.flash" to "2". (Pref value 1, the 
default, is "Ask to Activate" and 0 is "Never Activate".)


chris

On 2017-08-21 12:24 PM, John Mayers wrote:

Hi Chris,

Just following up.  Is there any group policy that can be enabled
to set the Flash plugin to Always Activate?

-John

*John Mayers*  | * Technical Solutions Engineer*

Curriculum Associates  | jmay...@cainc.com 

T: 978-339-4340  |  C:  978-808-9451

Twitter


  |
Facebook


  |
LinkedIn





Our programs: Ready
®
  |
i-Ready®


  |
BRIGANCE®




/New i-Ready systems requirements are *_here
_*!/

*From:*John Mayers
*Sent:* Friday, August 18, 2017 1:31 PM
*To:* 'Chris Peterson' 
;
plugin-blocking-by-dom...@mozilla.com

*Cc:* 'Benjamin Smedberg' 

*Subject:* RE: Flash Allow List

Hi Chris,

Thank you for this feedback.  We are actually releasing an edition
of i-Ready on Sunday that will have this detection in place for
all browsers.  Users will be able to “self-help” themselves when
they encounter Flash blocked by default.

In all of my research, I have yet to find a domain level policy
that can be added to set Firefox to always “click to activate”
either all together, or for specific sites.  If you know of a way,
please let us know.

Thank you,

*John Mayers*  | * Technical Solutions Engineer*

Curriculum Associates  | jmay...@cainc.com 

T: 978-339-4340  |  C:  978-808-9451

Twitter


  |
Facebook


Re: [Mozilla Enterprise] Flash Allow List

2017-08-25 Thread Chris Peterson
I don't think Firefox supports Windows Group Policy, but you can change 
Flash from "Ask to Activate" to "Always Activate" by setting the 
about:config pref "plugin.state.flash" to "2". (Pref value 1, the 
default, is "Ask to Activate" and 0 is "Never Activate".)


chris


On 2017-08-21 12:24 PM, John Mayers wrote:


Hi Chris,

Just following up.  Is there any group policy that can be enabled to 
set the Flash plugin to Always Activate?


-John

*John Mayers*  | * Technical Solutions Engineer*

Curriculum Associates  | jmay...@cainc.com 

T: 978-339-4340  |  C:  978-808-9451

Twitter   | Facebook 
  | LinkedIn 





Our programs: Ready 
® 
  | 
i-Ready® 
  | 
BRIGANCE® 





/New i-Ready systems requirements are *_here 
_*!/__


*From:*John Mayers
*Sent:* Friday, August 18, 2017 1:31 PM
*To:* 'Chris Peterson' ; 
plugin-blocking-by-dom...@mozilla.com

*Cc:* 'Benjamin Smedberg' 
*Subject:* RE: Flash Allow List

Hi Chris,

Thank you for this feedback.  We are actually releasing an edition of 
i-Ready on Sunday that will have this detection in place for all 
browsers.  Users will be able to “self-help” themselves when they 
encounter Flash blocked by default.


In all of my research, I have yet to find a domain level policy that 
can be added to set Firefox to always “click to activate” either all 
together, or for specific sites.  If you know of a way, please let us 
know.


Thank you,

*John Mayers*  | * Technical Solutions Engineer*

Curriculum Associates  | jmay...@cainc.com 

T: 978-339-4340  |  C:  978-808-9451

Twitter   | Facebook 
  | LinkedIn 





Our programs: Ready 
® 
  | 
i-Ready® 
  | 
BRIGANCE® 





/New i-Ready systems requirements are *_here 
_*!/__


*From:*Chris Peterson [mailto:cpeter...@mozilla.com]
*Sent:* Friday, August 18, 2017 1:25 PM
*To:* John Mayers >; 
plugin-blocking-by-dom...@mozilla.com 


*Subject:* Re: Flash Allow List

Hi John, Firefox does not have a whitelist of sites that can load 
Flash without user action ("click to activate"). When users load your 
site, they will either see the "Activate Adobe Flash" UI in the web 
page (if the Flash content's dimensions are large enough) or a tiny 
plugin icon in the address bar (for Flash "pixels" that are too small 
for the UI).


I recommend that you add a check for Flash being installed and 
activated. If Flash is installed but not activated automatically, your 
page can show instructions guiding users to click the "Activate Adobe 
Flash" and "Allow and Remember" buttons. A dedicated workflow like 
this to test for click-to-activate is probably more user friendly and 
reliable than just loading your regular Flash content and hoping users 
see and click the "Activate Adobe Flash" when your Flash content 
doesn't show up.


In Firefox, Flash in click-to-activate mode will still be detectable 
by JavaScript in the navigator.plugins[] array (i.e. 
navigator.plugins["Shockwave Flash"]). Your JavaScript can detect that 
Flash is installed but not activated by embedding a Flash  
that reports whether it is running or not by setting some JavaScript 
variable using Flash's ExternalInterface. I don't know if someone has 
already written a JavaScript+Flash library that already handles this 
click-to-activate, but I would love to know. In Chrome, however, Flash 
in click-to-activate mode will NOT be detectable in the 
navigator.plugins[] array, so JavaScript can't differentiate between 
Flash not be installed from installed-but-not-activated for this site.


thanks,

*From:* Benjamin Smedberg [mailto:bsmedb...@mozilla.com]
*Sent:* Friday, August 18, 2017 1:24 PM
*To:* John Mayers 

Re: [Mozilla Enterprise] Firefox ESR 52.3.0 doesn't work correctly with Xvnc

2017-08-25 Thread Andrew C Aitchison


On Fri, 25 Aug 2017, Ignaz Forster wrote:


Am 25.08.2017 00:19, schrieb Paul Kosinski:

Running the latest Firefox ESR (52.3.0) on Linux is fine when used in a
standard Xorg window (on the machine running Firefox). BUT, if the same
configuration is started using Xvnc (for secure remote access to a single
Firefox window -- and nothing else), NONE of the control "drop-downs"
work, while everything else works as expected.



Any help in tracking this down would be appreciated.


The most obvious thing that came to my mind: With Firefox 52esr (Firefox 46 
to be exact) Mozilla switched from GTK2 to GTK3 by default.


Have you tried executing any other GTK3 application in your setup? Let's see 
if the problems are the same there. You could also try to rebuild Firefox 
52esr with GTK2 instead of GTK3.


The Red Hat 6 / CentOS 6 / Scientific Linux 6 rpm packages of firefox 52.3.0esr
are build against GTK2 (gtk2 >= 2.24). You may be able to use one of these 
packages, or the binaries inside, rather than compiling your own version 
to test.


I'm running firefox-52.3.0-3.el6_9.x86_64 on a Scientific Linux 6.9 
machine, displaying on an android tablet running either bNVC Free or

RemoteRipple.
I use twm window manager but not Classic Theme Restorer
or Classic Toolbar Buttons.

Alt-F brings up the File menu when I am in normal, multi-tab 
mode, but not when I switch to "full-screen, no menu-bar" mode with F11.

In the normal mode I can also use the mouse to navigate the
file/edit/view menus that Paul highlighted in
   http://iment.com/paste-bin/Firefox-CTR-CTB-VNC.jpg

However the same is true for me on the console - I see
no difference with and without Xvnc.

--
Andrew C. Aitchison Cambridge, UK
and...@aitchison.me.uk
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise 
or send an email to enterprise-requ...@mozilla.org with a subject of 
"unsubscribe"


Re: [Mozilla Enterprise] Firefox ESR 52.3.0 doesn't work correctly with Xvnc

2017-08-25 Thread Ignaz Forster

Am 25.08.2017 00:19, schrieb Paul Kosinski:

Running the latest Firefox ESR (52.3.0) on Linux is fine when used in a
standard Xorg window (on the machine running Firefox). BUT, if the same
configuration is started using Xvnc (for secure remote access to a single
Firefox window -- and nothing else), NONE of the control "drop-downs"
work, while everything else works as expected.



Any help in tracking this down would be appreciated.


The most obvious thing that came to my mind: With Firefox 52esr (Firefox 
46 to be exact) Mozilla switched from GTK2 to GTK3 by default.


Have you tried executing any other GTK3 application in your setup? Let's 
see if the problems are the same there. You could also try to rebuild 
Firefox 52esr with GTK2 instead of GTK3.


Regards,
Ignaz
--

Ignaz Forster

Landeshauptstadt München
it@M - Dienstleister für Informations- und Telekommunikationstechnik

Geschäftsbereich Werkzeuge und Infrastruktur
Servicebereich Städtische Arbeitsplätze
Serviceteam Limux-Arbeitsplatz
Entwicklung

Büro: Agnes-Pockels-Bogen 21, Raum A2.054, 80992 München
Postanschrift: Agnes-Pockels-Bogen 21, 80992 München

Telefon:   +49 89 233 782218
Fax: +49 89 233 989 782218
E-Mail: ignaz.fors...@muenchen.de

Bitte denken Sie an die Umwelt, bevor Sie diese E-Mail ausdrucken. Pro 
Blatt sparen Sie durchschnittlich 15g Holz, 260ml Wasser, 0,05kWh Strom 
und 5g CO2.

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise 
or send an email to enterprise-requ...@mozilla.org with a subject of 
"unsubscribe"