Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-57601 | DTBF-0014 | SV-72011r1_rule | Medium |
Description |
---|
Popup windows may be used to launch an attack within a new browser window with altered settings. This setting blocks popup windows created while the page is loading. |
STIG | Date |
---|---|
Mozilla Firefox | 2017-03-22 |
Check Text ( C-58433r3_chk ) |
---|
Procedure: In about:config, verify that the setting for the following Preference Name’s are set and locked. “dom.disable_window_open_feature.status”, set to “true”. Criteria: If the values of the listed Preferences are not set and locked to these settings, then this is a finding. |
Fix Text (F-62801r2_fix) |
---|
Set and lock the following preferences using the “Mozilla.cfg” file: “dom.disable_window_open_feature.status”, set to “true”. |