Osprey: Browser Protection Administrative template for the Osprey: Browser Protection extension. Osprey 2.0.6 or later on Chrome, Edge, Chromium, Brave, or Vivaldi Osprey: Browser Protection Google Chrome / Chromium Microsoft Edge Hide Warning Proceed Button If true, the warning page proceed button is hidden. Hide Warning Report Button If true, the warning page report button is hidden. Lock User Allowlist If true, the user cannot edit or clear the allowed websites list, but existing entries still apply. Lock Provider Settings If true, provider toggles and provider settings are locked in the options page. Disable Settings Reset If true, reset actions in the settings page are disabled. Disable Third-Party Providers If true, third-party providers are disabled and cannot be enabled from settings. Cache Expiration Seconds Cache entry lifetime in seconds. (minimum 60, maximum 2592000, default 604800) MetaDefender API Key Managed API key for the MetaDefender integrations. Hide Provider Controls If true, provider controls are hidden from the popup and options page. Managed Allowlist Host or URL patterns that are always treated as safe. The end user cannot remove these. Examples: "intranet.example.com", "*.corp.example.com", "https://apps.example.com/portal". Managed Blocklist Host or URL patterns that are always blocked, evaluated before the threat providers run. Examples: "bad.example.com", "*.malware.example", "https://phish.example/login". Proxy Base URL Overrides the backend origin the extension sends lookups to. Must be an http(s) origin, for example "https://osprey.msp.example". When empty, the default public backend is used. Device Tag Opaque identifier for this endpoint, attached to reported events by later features. Has no visible effect on its own. Site ID Opaque identifier for the client organization this endpoint belongs to, attached to reported events by later features. Has no visible effect on its own. Proxy API Key Per-tenant API key presented to a self-hosted proxy as the X-Osprey-Tenant-Key header on every lookup. Only sent when ProxyBaseUrl is set, so the key is never sent to the public backend. When empty, no key is sent. Managed Config URL An http(s) URL to a JSON configuration document the extension fetches on startup and every 60 minutes. Fetched values are merged UNDER managed storage: anything set here locally always wins, and the document fills in the rest. On a fetch failure the last successfully fetched document is kept. This key can only be set through managed storage; a fetched document cannot change it. Reporting Endpoint An http(s) URL the extension POSTs detection and override events and periodic health heartbeats to. When empty, no events or heartbeats are sent. Reporting Auth Token Optional bearer token sent as the Authorization header on every reporting request. When set, each POST carries "Authorization: Bearer <token>". When empty, no Authorization header is sent. Disable User Allowlist If true, the end user cannot add any allowlist entries or exclusions, and existing user allowlist entries are ignored. Managed Provider Settings Per-provider overrides keyed by provider id. Each value may set "enabled" (boolean, the managed enabled state for the provider), "bypassBlockingThreshold" (boolean), "requestTimeoutMs" (integer between 1000 and 60000), and "blockCategories" (an object mapping a category key to a boolean). Brand Logo URL Image URL or data: image string used for the logo on the warning page and popup. When empty, the default Osprey logo is shown. Brand Name Name shown in the warning page banner and popup, replacing the default Osprey product name. When empty, the default name is shown. Support URL Support or help-desk URL shown as a contact link on the warning page and popup. Must be an http(s) URL, for example "https://help.msp.example". When empty, no support link is shown. Support Email Support email address shown as a contact link on the warning page. When empty, no email link is shown. Custom Warning Message Optional override for the lead sentence on the warning page. When empty, the default warning message is shown. Cache Expiration Seconds Managed Allowlist Managed Blocklist Cache Expiration Seconds Managed Allowlist Managed Blocklist