Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-57593 | DTBF-0010 | SV-72003r1_rule | Medium |
Description |
---|
In order to protect privacy and sensitive data, Firefox provides the ability to configure Firefox such that data entered into forms is not saved. This mitigates the risk of a website gleaning private information from prefilled information. |
STIG | Date |
---|---|
Mozilla Firefox | 2017-03-22 |
Check Text ( C-58425r4_chk ) |
---|
Procedure: In about:config, verify that the setting for the following Preference Name’s are set and locked. “browser.formfill.enable", set to “false”. Criteria: If the values of the listed Preferences are not set and locked to these settings, then this is a finding. |
Fix Text (F-62793r2_fix) |
---|
Set and lock the following preferences using the “Mozilla.cfg” file: “browser.formfill.enable", set to “false”. |