diff --git a/modules/libpref/src/init/all.js b/modules/libpref/src/init/all.js
index 090e0e0136fb..de5e504b76a1 100644
--- a/modules/libpref/src/init/all.js
+++ b/modules/libpref/src/init/all.js
@@ -497,7 +497,7 @@ pref("advanced.mailftp",                    false);
 pref("image.animation_mode",                "normal");
 
 // Same-origin policy for file: URIs: 0=self, 1=samedir, 2=subdir, 3=anyfile
-pref("security.fileuri.origin_policy", 0);
+pref("security.fileuri.origin_policy", 2);
 
 // If there is ever a security firedrill that requires
 // us to block certian ports global, this is the pref