Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-223172 | DTBF210 | SV-223172r612236_rule | Medium |
Description |
---|
The Content Blocking/Tracking Protection feature stops Firefox from loading content from malicious sites. The content might be a script or an image, for example. If a site is on one of the tracker lists you set Firefox to use, then the fingerprinting script (or other tracking script/image) will not be loaded from that site. Fingerprinting scripts collect information about your browser and device configuration, such as your operating system, screen resolution, and other settings. By compiling these pieces of data, fingerprinters create a unique profile of you that can be used to track you around the Web. |
STIG | Date |
---|---|
Mozilla Firefox Security Technical Implementation Guide | 2021-06-09 |
Check Text ( C-24845r531333_chk ) |
---|
Type "about:config" in the address bar, verify that the preference name “privacy.trackingprotection.fingerprinting.enabled" is set to “true” and locked. Criteria: If the parameter is set incorrectly, then this is a finding. If the setting is not locked, then this is a finding. |
Fix Text (F-24833r531334_fix) |
---|
Ensure the preference “privacy.trackingprotection.fingerprinting.enabled" is set and locked to the value of “true”. |