fix: minor cleanup after compat info landed

.gitignore

@@ -140,3 +140,5 @@ dist
 # Vite logs files
 vite.config.js.timestamp-*
 vite.config.ts.timestamp-*
+
+.artifacts/

src/content/docs/reference/policies/AutoLaunchProtocolsFromOrigins.mdx

@@ -4,9 +4,10 @@ description: "Define a list of external protocols that can be used from listed o
 category: "Network security"
 ---
 
-Define a list of external protocols that can be used from listed origins without prompting the user. The origin is the scheme plus the hostname.
+Define a list of external protocols that can be used from listed [origins](https://developer.mozilla.org/en-US/docs/Glossary/Origin) without prompting the user.
+The origin is the scheme (protocol), hostname (domain), and port of the URL used to access it.
 
-The syntax of this policy is exactly the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://chromeenterprise.google/policies/#AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames).
+The syntax of this policy is the same as the [Chrome AutoLaunchProtocolsFromOrigins policy](https://chromeenterprise.google/policies/#AutoLaunchProtocolsFromOrigins) except that you can only use valid origins (not just hostnames).
 This also means that you cannot specify a wildcard (`*`) for all origins.
 
 ## Compatibility

src/content/docs/reference/policies/BackgroundAppUpdate.mdx

@@ -4,11 +4,10 @@ description: "Enable or disable automatic application update in the background,
 category: "Device update settings"
 ---
 
-Enable or disable automatic application update **in the background**, when the application is not running.
+Enable or disable automatic application update in the background, when the application is not running.
 
 If set to `true`, application updates may be installed (without explicit user approval) in the background, even when the application is not running.
 The operating system may still require approval.
-
 If set to `false`, the application will not try to install updates when the application is not running.
 
 If you are having trouble getting the background task to run, verify your configuration with the ["Requirements to run" section in this support document](https://support.mozilla.org/en-US/kb/enable-background-updates-firefox-windows).

src/content/docs/reference/policies/BlockAboutConfig.mdx

@@ -4,7 +4,7 @@ description: "Block access to 'about:config'."
 category: "Security"
 ---
 
-Block access to `about:config`.
+Block access to Advance Preferences (`about:config`).
 
 ## Compatibility
 

src/content/docs/reference/policies/Bookmarks.mdx

@@ -8,7 +8,10 @@ category: "Bookmarks"
 > The [`ManagedBookmarks`](/reference/policies/managedbookmarks/) policy is the recommended way to add bookmarks.
 > The `Bookmarks` policy will continue to be supported for backwards-compatibility purposes.
 
-Add bookmarks in either the bookmarks toolbar or menu. Only `Title` and `URL` are required. If `Placement` is not specified, the bookmark will be placed on the toolbar. If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
+Add bookmarks in either the bookmarks toolbar or menu.
+Only `Title` and `URL` are required.
+If `Placement` is not specified, the bookmark will be placed on the toolbar.
+If `Folder` is specified, it is automatically created and bookmarks with the same folder name are grouped together.
 
 If you want to clear all bookmarks set with this policy, you can set the value to an empty array (`[]`). This can be on Windows via the new Bookmarks (JSON) policy available with GPO and Intune.
 

src/content/docs/reference/policies/DisableEncryptedClientHello.mdx

@@ -4,7 +4,7 @@ description: "Disable the TLS Feature for Encrypted Client Hello."
 category: "Network security"
 ---
 
-Disable the TLS Feature for Encrypted Client Hello.
+Disable the TLS Feature for [Encrypted Client Hello](https://support.mozilla.org/en-US/kb/understand-encrypted-client-hello).
 Note that TLS Client Hellos will still contain an ECH extension, but this extension will not be used by Firefox during the TLS handshake.
 
 ## Compatibility

src/content/docs/reference/policies/DisablePrivateBrowsing.mdx

@@ -4,9 +4,11 @@ description: "Remove access to private browsing."
 category: "Browsing restrictions"
 ---
 
-Remove access to private browsing.
+> [!WARNING]
+> This policy is superseded by the [`PrivateBrowsingModeAvailability`](/reference/policies/privatebrowsingmodeavailability/) policy.
+> If you want to configure private browsing, you should use the `PrivateBrowsingModeAvailability` policy instead.
 
-This policy is superseded by the [`PrivateBrowsingModeAvailability`](/reference/policies/privatebrowsingmodeavailability/) policy.
+Remove access to private browsing.
 
 ## Compatibility
 

src/content/docs/reference/policies/DisableSecurityBypass.mdx

@@ -6,7 +6,12 @@ category: "Certificate management"
 
 Prevent the user from bypassing security in certain cases.
 
+When Firefox blocks a page because of a bad certificate or Safe Browsing detection, the warning includes a bypass method.
+This is an **Accept the Risk and Continue** button on the certificate error page, and an **ignore the risk** link on the blocked site page.
+This policy removes the bypasses, so the user cannot reach the page from inside Firefox.
+
 These policies only affect what happens when an error is shown, they do not affect any settings in preferences.
+To change what gets blocked, use [Preferences](/reference/policies/preferences/) to set the relevant `browser.safebrowsing.*` preferences.
 
 ## Compatibility
 
@@ -23,6 +28,7 @@ These policies only affect what happens when an error is shown, they do not affe
 
 - `InvalidCertificate`: Prevents adding an exception when an invalid certificate is shown.
 - `SafeBrowsing`: Prevents selecting "ignore the risk" and visiting a harmful site anyway.
+  Also hide the **Unblock** button in the Downloads panel for downloads that Safe Browsing has flagged, so a blocked download can only be deleted, not kept.
 
 ## Windows (GPO)
 

src/content/docs/reference/policies/DisableTelemetry.mdx

@@ -6,15 +6,15 @@ category: "Miscellaneous"
 
 Prevent the upload of telemetry data.
 
-As of Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is disabled as well.
-
 Mozilla recommends that you do not disable telemetry.
 Information collected through telemetry helps us build a better product for businesses like yours.
 
 ## Compatibility
 
 <PolicyCompat policy="DisableTelemetry" />
 
+From Firefox 83 and Firefox ESR 78.5, local storage of telemetry data is also disabled.
+
 **CCK2 Equivalent:** `disableTelemetry`\
 **Preferences Affected:** `datareporting.healthreport.uploadEnabled`, `datareporting.policy.dataSubmissionEnabled`, `toolkit.telemetry.archive.enabled`, `datareporting.usage.uploadEnabled`
 

src/content/docs/reference/policies/ManagedBookmarks.mdx

@@ -6,18 +6,21 @@ category: "Bookmarks"
 
 Configures a list of bookmarks managed by an administrator that cannot be changed by the user.
 
-The bookmarks are only added as a button on the personal toolbar. They are not in the bookmarks folder.
+The bookmarks are only added as a button on the personal toolbar, they are not in the bookmarks folder.
 
 The syntax of this policy is based on the [Chrome ManagedBookmarks policy](https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ManagedBookmarks), with the addition of the Firefox-specific `favicon` property.
 
-A `favicon` can be specified for each bookmark. The value must be a `data:`, `http:`, or `https:` URL. (Added in Firefox 152)
+A `favicon` can be specified for each bookmark.
+The value must be a `data:`, `http:`, or `https:` URL.
 
-A bookmark's `url` can be a `javascript:` URL to create a bookmarklet. (Firefox 153)
+A bookmark's `url` can be a `javascript:` URL to create a bookmarklet.
 
 ## Compatibility
 
 <PolicyCompat policy="ManagedBookmarks" />
 
+`javascript:` URLs in Firefox 153, `favicon` in 152.
+
 **CCK2 Equivalent:** N/A\
 **Preferences Affected:** N/A
 

src/content/docs/reference/policies/ManualAppUpdateOnly.mdx

@@ -9,7 +9,8 @@ Switch to manual updates only.
 If this policy is enabled:
 
 1. The user will never be prompted to install updates
-2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog). This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
+2. Firefox will not check for updates in the background, though it will check automatically when an update UI is displayed (such as the one in the About dialog).
+   This check will be used to show "Update to version X" in the UI, but will not automatically download the update or prompt the user to update in any other way.
 3. The update UI will work as expected, unlike when using the [`DisableAppUpdate`](/reference/policies/disableappupdate/) policy.
 
 This policy is primarily intended for advanced end users, not for enterprises, but it is available via GPO.

src/content/docs/reference/policies/PrivateBrowsingModeAvailability.mdx

@@ -8,8 +8,6 @@ Set availability of private browsing mode.
 
 This policy supersedes [`DisablePrivateBrowsing`](/reference/policies/disableprivatebrowsing/)
 
-> [!NOTE] This policy missed Firefox ESR 128.2, but it will be in Firefox ESR 128.3.
-
 ## Compatibility
 
 <PolicyCompat policy="PrivateBrowsingModeAvailability" />

src/content/docs/reference/policies/Proxy.mdx

@@ -4,8 +4,9 @@ description: "Configure proxy settings."
 category: "Network security"
 ---
 
-Configure proxy settings. These settings correspond to the connection settings in Firefox preferences.
-To specify ports, append them to the hostnames with a colon (:).
+Configure proxy settings.
+These settings correspond to the connection settings in Firefox preferences.
+To specify ports, append them to the hostnames with a colon (`:`).
 
 Unless you lock this policy, changes the user already has in place will take effect.
 
@@ -23,15 +24,15 @@ Unless you lock this policy, changes the user already has in place will take eff
 ## Values
 
 - `Mode` is the proxy method being used.
-- `Locked` is whether or not proxy settings can be changed.
+- `Locked` is whether or not proxy settings can be changed by users.
 - `HTTPProxy` is the HTTP proxy server.
 - `UseHTTPProxyForAllProtocols` is whether or not the HTTP proxy should be used for all other proxies.
 - `SSLProxy` is the SSL proxy server.
 - `FTPProxy` is the FTP proxy server.
 - `SOCKSProxy` is the SOCKS proxy server
 - `SOCKSVersion` is the SOCKS version (4 or 5)
 - `Passthrough` is list of hostnames or IP addresses that will not be proxied. Use `<local>` to bypass proxying for all hostnames which do not contain periods.
-- `AutoConfigURL` is a URL for proxy configuration (only used if Mode is autoConfig).
+- `AutoConfigURL` is a URL for proxy configuration (only used if `Mode` is `autoConfig`).
 - `AutoLogin` means do not prompt for authentication if password is saved.
 - `UseProxyForDNS` to use proxy DNS when using SOCKS v5.
 

src/content/docs/reference/policies/WebsiteFilter.mdx

@@ -5,12 +5,13 @@ category: "Browsing restrictions"
 ---
 
 Block websites from being visited.
-As of Firefox 83 and Firefox ESR 78.5, `file:` URLs are supported.
 
 ## Compatibility
 
 <PolicyCompat policy="WebsiteFilter" />
 
+As of Firefox 83 and Firefox ESR 78.5, [`file:` URLs](https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes#file) are supported.
+
 **CCK2 Equivalent:** N/A\
 **Preferences Affected:** N/A
 
@@ -25,7 +26,7 @@ The arrays are limited to 1000 entries each.
 
 - If you want to block all URLs, you can use the value `<all_urls>` or the pattern `*://*/*` (matching `<scheme>://<host><path>`).
   A single wildcard (`*`) as a value is not sufficient.
-- For specific protocols, use `https://*/*` or `http://*/*`.
+- For specific [protocols](https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes#protocol), use `https://*/*` or `http://*/*`.
 
 ## Windows (GPO)
 
@@ -61,8 +62,8 @@ Value (string):
 <data id="WebsiteFilter" value="1&#xF000;http://example.org/*"/>
 ```
 
-If you are using custom ADMX and ADML administrative templates in Intune, you can use this OMA-URI instead
-to workaround the limit on the length of strings. Put all of your JSON on one line.
+If you are using custom ADMX and ADML administrative templates in Intune, you can use the OMA-URI to work around the limit on the length of strings.
+All JSON must be on one line.
 
 OMA-URI: