HttpAllowlist

Configure sites that will not be upgraded to HTTPS. The sites are specified as a list of origins.

Values

HttpAllowlist expects a list of origins that are not upgraded to HTTPS, such as http://example.org. Each entry is a scheme, hostname and optional port. Paths and wildcards are not supported.

Examples

{
  "policies": {
    "HttpAllowlist": [
      "http://example.org",
      "http://example.edu"
    ]
  }
}

JSON schema

{
  "type": "array",
  "items": {
    "type": "string",
    "format": "moz-url",
    "pattern": "^([Ff][Ii][Ll][Ee]://.*|[Hh][Tt][Tt][Pp][Ss]?://[^/]+/?)$"
  }
}

Windows (GPO)

Software\Policies\Mozilla\Firefox\HttpAllowlist\1 = "http://example.org"
Software\Policies\Mozilla\Firefox\HttpAllowlist\2 = "http://example.edu"

macOS

<dict>
  <key>HttpAllowlist</key>
  <array>
    <string>http://example.org</string>
    <string>http://example.edu</string>
  </array>
</dict>

Compatibility

Firefox	Firefox ESR	Firefox Enterprise
Available since 127	Available since 128	Available since 149

CCK2 Equivalent: N/A
OMA-URI: HttpAllowlist
Preferences Affected: N/A