The IE form redirect parameter is not set correctly.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-6241 | DTBI017 | SV-6291r1_rule | ECSC-1 | Medium |
| Description |
|---|
| This parameter warns the user that input from the form is being redirected to another web site. Since the form may contain sensitive data the user must be warned that the data is not being directed to the site the user was using. This enables the user to make a decision if the data on the form is appropriate for inclusion into the new web site. |
| STIG | Date |
|---|---|
| Microsoft IE Version 6 | 2014-12-17 |
Details
| Check Text ( C-210r1_chk ) |
|---|
| Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value WarnOnPostRedirect value is 1, this is not a finding. |
| Fix Text (F-5689r1_fix) |
|---|
| Change the registry key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings to the value WarnOnPostRedirect is 1. |