From 572ee7bc105aa088ce67bd6d30b37b5984cc07eb Mon Sep 17 00:00:00 2001 From: Brian Smith Date: Thu, 22 Oct 2026 15:15:52 +0200 Subject: [PATCH 1/3] feat: Add details about *. prefix in SitePolicies implementation --- .../docs/reference/policies/SitePolicies.mdx | 58 +++++++------------ 1 file changed, 20 insertions(+), 38 deletions(-) diff --git a/src/content/docs/reference/policies/SitePolicies.mdx b/src/content/docs/reference/policies/SitePolicies.mdx index bb89e0e..7855a33 100644 --- a/src/content/docs/reference/policies/SitePolicies.mdx +++ b/src/content/docs/reference/policies/SitePolicies.mdx @@ -18,8 +18,12 @@ Each rule can contain: - `Exceptions`: a list of sites which when matched bypasses this set of rules. - `Policies`: an object defining the site policies. -> [!NOTE] -> A "site" refers to a registerable domain, so `*.example.com` is a valid site but `*.com` is not. +A "site" refers to a registrable domain, such as `example.com`, or `*` for all sites. +Each entry in `Match` and `Exceptions` covers the domain and all of its subdomains: + +- The `*.` prefix is optional, so `example.com` and `*.example.com` both match `example.com`, `www.example.com`, and every other subdomain. +- An entry that is more specific than a site widens to the whole site, so `mail.example.com` also matches `www.example.com` and `example.com`. + Firefox logs a warning in the Browser Console when it does this. Currently the supported site policies are: @@ -54,47 +58,25 @@ Currently the supported site policies are: -A wildcard `*` can be used to refer to all sites. -For example this setting would disable the JIT for only `*.example.com`: - -```json -[ - { - "Match": ["*.example.com"], - "Policies": { - "DisableJit": true - } - } -] -``` +### Disabling the JIT on a site and its subdomains -While this setting would disable the JIT on every site except `*.example.org`: +This configuration disables the JIT engine on `example.com`. +The entry has no `*.` prefix, but it still covers subdomains such as `www.example.com` and `mail.example.com`. +Writing `*.example.com` has the same effect: ```json -[ - { - "Exceptions": ["*.example.org"], - "Policies": { - "DisableJit": true - } - } -] -``` - -This setting loads `*.example.com` in a container whose data is cleared once its last tab closes: - -```json -[ - { - "Match": ["*.example.com"], - "Policies": { - "Container": { - "id": "company", - "ephemeral": true +{ + "policies": { + "SitePolicies": [ + { + "Match": ["example.com"], + "Policies": { + "DisableJit": true + } } - } + ] } -] +} ``` ## Windows (GPO) From 2f22376e3a6a7a5ae22cebbdb51810b403c76791 Mon Sep 17 00:00:00 2001 From: Brian Smith Date: Thu, 22 Oct 2026 15:16:36 +0200 Subject: [PATCH 2/3] feat: Add details about *. prefix in SitePolicies implementation --- .../docs/reference/policies/SitePolicies.mdx | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/src/content/docs/reference/policies/SitePolicies.mdx b/src/content/docs/reference/policies/SitePolicies.mdx index 7855a33..c7b02d4 100644 --- a/src/content/docs/reference/policies/SitePolicies.mdx +++ b/src/content/docs/reference/policies/SitePolicies.mdx @@ -79,6 +79,29 @@ Writing `*.example.com` has the same effect: } ``` +### Isolating a site in a temporary container + +This configuration loads `example.com` in a container named `company`, keeping its cookies and storage separate from other sites. +Setting `ephemeral` to `true` clears the container's data once its last tab closes, and at shutdown: + +```json +{ + "policies": { + "SitePolicies": [ + { + "Match": ["example.com"], + "Policies": { + "Container": { + "id": "company", + "ephemeral": true + } + } + } + ] + } +} +``` + ## Windows (GPO) ``` From 5e6b73534365b06f76b05bcfe789b0b81e679823 Mon Sep 17 00:00:00 2001 From: Brian Smith Date: Thu, 22 Oct 2026 17:07:13 +0200 Subject: [PATCH 3/3] feat: Add details about public suffix list --- src/content/docs/reference/policies/SitePolicies.mdx | 1 + 1 file changed, 1 insertion(+) diff --git a/src/content/docs/reference/policies/SitePolicies.mdx b/src/content/docs/reference/policies/SitePolicies.mdx index c7b02d4..8794df6 100644 --- a/src/content/docs/reference/policies/SitePolicies.mdx +++ b/src/content/docs/reference/policies/SitePolicies.mdx @@ -24,6 +24,7 @@ Each entry in `Match` and `Exceptions` covers the domain and all of its subdomai - The `*.` prefix is optional, so `example.com` and `*.example.com` both match `example.com`, `www.example.com`, and every other subdomain. - An entry that is more specific than a site widens to the whole site, so `mail.example.com` also matches `www.example.com` and `example.com`. Firefox logs a warning in the Browser Console when it does this. +- Firefox uses the [Public Suffix List](https://publicsuffix.org/) to work out the registrable domain, so multi-part suffixes such as `.co.uk` are handled correctly. Currently the supported site policies are: