UCF STIG Viewer Logo

XAML files must be disallowed (Restricted Sites zone).


Overview

Finding ID Version Rule ID IA Controls Severity
V-15522 DTBI460 SV-45497r1_rule Medium
Description
These are eXtensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that leverage the Windows Presentation Foundation. If you enable this policy setting and the drop-down box is set to Enable, XAML files will be automatically loaded inside Internet Explorer. Users will not be able to change this behavior. If the drop-down box is set to Prompt, users will receive a prompt for loading XAML files. If you disable this policy setting, XAML files will not be loaded inside Internet Explorer. Users will not be able to change this behavior. If you do not configure this policy setting, users will have the freedom to decide whether to load XAML files inside Internet Explorer.
STIG Date
Microsoft Internet Explorer 10 Security Technical Implementation Guide 2017-04-28

Details

Check Text ( None )
None
Fix Text (F-38894r1_fix)
Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> "Allow loading of XAML files" to "Enabled", and select "Disable" from the drop-down box.