From f0a54fa24567e0b658e5b74c4e87346ad75a8e30 Mon Sep 17 00:00:00 2001 From: Tommy Date: Thu, 8 Aug 2024 08:23:56 -0700 Subject: [PATCH] Do not hardcode DefaultClipboardSetting --- Linux/managed.json | 1 - README.md | 1 + macOS/Managed Preferences/com.microsoft.Edge.plist | 2 -- 3 files changed, 1 insertion(+), 3 deletions(-) diff --git a/Linux/managed.json b/Linux/managed.json index 53ec999..3797584 100644 --- a/Linux/managed.json +++ b/Linux/managed.json @@ -60,7 +60,6 @@ "ConfigureShare": 1, "CryptoWalletEnabled": false, "DefaultBrowserSettingsCampaignEnabled": false, - "DefaultClipboardSetting": 2, "DefaultSensorsSetting": 2, "DefaultSerialGuardSetting": 2, "ConfigureDoNotTrack": true, diff --git a/README.md b/README.md index ce49642..a0b4a8e 100644 --- a/README.md +++ b/README.md @@ -7,6 +7,7 @@ Smartscreen is left as recommended to be be off, as it sends the FULL URLs of wh For corporate environments, you will need make approprieate changes, including but not limited to: - Disable `DeveloperToolsAvailability`. Users can be tricked into running malicious code in the browser console otherwise. - Set `DefaultWebUsbGuardSetting` to "Block". In most cases, the websites will never need to use this API. I need it to flash GrapheneOS and StockOS on my phones. +- Set `DefaultClipboardSetting` to "Block". In most cases, users do not need to grant this permission for websites to work. I need it for GitHub Codespaces. - Set `DefaultJavaScriptJitSetting` to "Block". This will prevent users from adding exceptions to Enhanced Security Mode. - Remove the uBlock Origin Lite extension whitelist. I am not aware of any way to block users from granting uBlock Origin Lite access to all content on a website, which is a security risk. If you know of a way to enforce that the extension runs permission-less, please let me know. - Set `SSLErrorOverrideAllowed` to false. diff --git a/macOS/Managed Preferences/com.microsoft.Edge.plist b/macOS/Managed Preferences/com.microsoft.Edge.plist index a2dda7d..499165a 100644 --- a/macOS/Managed Preferences/com.microsoft.Edge.plist +++ b/macOS/Managed Preferences/com.microsoft.Edge.plist @@ -126,8 +126,6 @@ 1 DefaultBrowserSettingsCampaignEnabled - DefaultClipboardSetting - 2 DefaultSensorsSetting 2 DefaultSerialGuardSetting