2056608 - Add live support for policy HttpsOnlyMode

Status: VERIFIED FIXED

(Enterprise Products :: Firefox, enhancement, P1)

Comment 1

[Janika Neuberger [:janika]]

Attachment: [mozilla/enterprise-firefox] Bug 2056608 - Add live support for policy HTTPSOnlyMode

Comment 2

[BMO Github Automation]

Authored by https://github.com/1rneh
https://github.com/mozilla/enterprise-firefox/commit/99fbc22527f194c7031c19578aae88f19822de58
[enterprise-main] Bug 2056608 - Add live support for policy HTTPSOnlyMode (#1196)

Comment 3

[Janika Neuberger [:janika]]

Test Plan

Use http://http.badssl.com/ as HTTP-only test site.

How to verify the result of each test case

1. about:policies#active - lists HttpsOnlyMode and its current value.
2. about:preferences#connectionSecurity - the HTTPS-Only Mode setting shows the expected option selected and is disabled ("managed by your organization") when the policy locks it, editable otherwise.
3. Navigation - with HTTPS-Only on, the Http site shows the "HTTPS-Only Mode Alert" error page (about:httpsonlyerror); with it off, the page loads.

At every step, confirm the change happens without restarting the browser.

Test cases

1. Apply

1. Confirm HttpsOnlyMode is not active and the http site loads normally.
2. In the console, set HttpsOnlyMode = force_enabled; wait for the next poll.

Expected:

1. In about:policies#active: HttpsOnlyMode listed as force_enabled.
2. In about:preferences#connectionSecurity: HTTPS-Only Mode on, control disabled.
3. Loading the HTTP site shows the "HTTPS-Only Mode Alert" error page.

2. Update I

1. Change the value to disallowed; wait for the next poll.

Expected:

1. In about:policies#active: HttpsOnlyMode updated to disallowed.
2. In about:preferences#connectionSecurity: HTTPS-Only Mode off, control disabled.
3. HTTP site loads.

2. Update II

1. Change the value to enabled; wait for the next poll.

Expected:

1. In about:policies#active: HttpsOnlyMode updated to enabled.
2. In about:preferences#connectionSecurity: HTTPS-Only Mode on, control editable.
3. Loading the HTTP site shows the "HTTPS-Only Mode Alert" error page.

3. Remove

1. Remove HttpsOnlyMode from the policy set; wait for the next poll.

Expected:

1. In about:policies#active: HttpsOnlyMode no longer listed.
2. In about:preferences#connectionSecurity: HTTPS-Only Mode back to its default (off), control editable (managed indicator gone).
3. HTTP site loads.

Comment 4

[BMO Github Automation]

Attachment: [mozilla/enterprise-firefox] Bug 2056608 - Start test with clean policy engine (#1219)

Comment 5

[BMO Github Automation]

Authored by https://github.com/1rneh
https://github.com/mozilla/enterprise-firefox/commit/c2b0862fa4b61d9928b3a012ced54645e8ddc878
[enterprise-main] Bug 2056608 - Start test with clean policy engine

Authored by https://github.com/1rneh
https://github.com/mozilla/enterprise-firefox/commit/dc2940722ea0fa3347bbe3a970370f9e650e9b59
[enterprise-main] Merge pull request #1219 from 1rneh/bug-2056608-test-clean-start

Comment 6

[lburuian]

Hello,
Verified this on Windows 11x64, with Firefox Enterprise 155.0a1 (20260803170225), and the policy works as expected and is live.
See TC here.
Please let us know if there is anything else we need to check.
Thank you.