UCF STIG Viewer Logo

Firefox must be configured to disable form fill assistance.


Overview

Finding ID Version Rule ID IA Controls Severity
V-251551 FFOX-00-000007 SV-251551r807125_rule Medium
Description
To protect privacy and sensitive data, Firefox provides the ability to configure the program so that data entered into forms is not saved. This mitigates the risk of a website gleaning private information from prefilled information.
STIG Date
Mozilla Firefox Security Technical Implementation Guide 2022-09-09

Details

Check Text ( C-54986r807123_chk )
Type "about:policies" in the browser window.

If "DisableFormHistory" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.
Fix Text (F-54940r807124_fix)
Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox
Policy Name: Disable Form History
Policy State: Enabled

macOS "plist" file:
Add the following:
DisableFormHistory


Linux "policies.json" file:
Add the following in the policies section:
"DisableFormHistory": true