Firefox must be configured to prevent JavaScript from raising or lowering windows.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-251555	FFOX-00-000011	SV-251555r807137_rule		Medium

Description
JavaScript can raise and lower browser windows to cause improper input. Configure the browser setting to prevent scripts on visited websites from raising and lowering browser windows.

STIG	Date
Mozilla Firefox Security Technical Implementation Guide	2022-09-09

Details

Check Text ( C-54990r807135_chk )
Type "about:policies" in the browser address bar. If "dom.disable_window_flip" is not displayed with a value of "true", this is a finding.

Fix Text (F-54944r807136_fix)
Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Preferences Policy State: Enabled Policy Value: { "dom.disable_window_flip": { "Value": true, "Status": "locked" } } macOS "plist" file: Add the following: Preferences dom.disable_window_flip Value Status locked Linux "policies.json" file: Add the following in the policies section: "Preferences": { "dom.disable_window_flip": { "Value": true, "Status": "locked" } }

Fix Text (F-54944r807136_fix)

Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\
Policy Name: Preferences
Policy State: Enabled
Policy Value:
{
"dom.disable_window_flip": {
"Value": true,
"Status": "locked"
}
}

macOS "plist" file:
Add the following:
Preferences

dom.disable_window_flip

Value

Status
locked

Linux "policies.json" file:
Add the following in the policies section:
"Preferences": {
"dom.disable_window_flip": {
"Value": true,
"Status": "locked"
}
}