HttpAllowlist

Configure sites that will not be upgraded to HTTPS. The sites are specified as a list of origins.

Compatibility

Firefox	Firefox ESR	Firefox Enterprise
Available since 127	Available since 128	Available since 149

CCK2 Equivalent: N/A
OMA-URI: HttpAllowlist
Preferences Affected: N/A

Examples

policies.json

{
  "policies": {
    "HttpAllowlist": [
      "http://example.org",
      "http://example.edu"
    ]
  }
}

JSON schema

HttpAllowlist JSON schema

{
  "type": "array",
  "items": {
    "type": "string",
    "format": "uri",
    "pattern": "^([Ff][Ii][Ll][Ee]://.*|[Hh][Tt][Tt][Pp][Ss]?://[^/]+/?)$"
  }
}

Windows (GPO)

Software\Policies\Mozilla\Firefox\HttpAllowlist\1 = "http://example.org"
Software\Policies\Mozilla\Firefox\HttpAllowlist\2 = "http://example.edu"

macOS

<dict>
  <key>HttpAllowlist</key>
  <array>
    <string>http://example.org</string>
    <string>http://example.edu</string>
  </array>
</dict>