Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Firefox must be configured to disable form fill assistance.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-251551 | FFOX-00-000007 | SV-251551r807125_rule | Medium |
| Description |
|---|
| To protect privacy and sensitive data, Firefox provides the ability to configure the program so that data entered into forms is not saved. This mitigates the risk of a website gleaning private information from prefilled information. |
| STIG | Date |
|---|---|
| Mozilla Firefox Security Technical Implementation Guide | 2022-09-09 |
Details
| Check Text ( C-54986r807123_chk ) |
|---|
| Type "about:policies" in the browser window. If "DisableFormHistory" is not displayed under Policy Name or the Policy Value is not "true", this is a finding. |
| Fix Text (F-54940r807124_fix) |
|---|
| Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox Policy Name: Disable Form History Policy State: Enabled macOS "plist" file: Add the following: Linux "policies.json" file: Add the following in the policies section: "DisableFormHistory": true |