[meta] make Safari more secure

8 years ago · cde72c2ec7
parent dc1c45c86a
commit cde72c2ec7
1 changed files with 11 additions and 0 deletions
--- a/ansible/roles/osx/vars/main.yml
+++ b/ansible/roles/osx/vars/main.yml
@ -49,11 +49,22 @@ osx_defaults:
    type: string
    value: WhenScrolling

+  # Safari
  - # enable Debug menu in Safari
    domain: com.apple.Safari
    key: IncludeInternalDebugMenu
    type: bool
    value: true
+  - # disable Java
+    domain: com.apple.Safari
+    key: com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaEnabled
+    type: bool
+    value: false
+  - # disable Java
+    domain: com.apple.Safari
+    key: com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaEnabledForLocalFiles
+    type: bool
+    value: false

  - # disable dashboard
    domain: com.apple.dashboard