The ability of sites to show pop-ups must be disabled.

Quick Actions

We are continuing to improve Stigviewer and we are planning on rolling out new services in the near future. Would you like to be part of the conversation on what those features should be? If so, click here.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-235725	EDGE-00-000008	SV-235725r960963_rule		Medium

Description

Set whether websites can show pop-up windows. Pop-ups can be allowed on all websites ("AllowPopups") or blocked on all sites ("BlockPopups"). If this policy is configured, pop-up windows are blocked by default, and users can change this setting. Policy options mapping: - AllowPopups (1) = Allow all sites to show pop-ups. - BlockPopups (2) = Do not allow any site to show pop-ups.

STIG	Date
Microsoft Edge Security Technical Implementation Guide	2024-09-13

Details

Check Text (C-38944r626371_chk)

The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Content settings/Default pop-up window setting" must be set to "Enabled" with the option value set to "Do not allow any site to show pop-ups".

Use the Windows Registry Editor to navigate to the following key:
HKLM\SOFTWARE\Policies\Microsoft\Edge

If the value for DefaultPopupsSetting is not set to "REG_DWORD = 2", this is a finding.

Fix Text (F-38907r626372_fix)

Set the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Content settings/Default pop-up window setting" to "Enabled" with the option value set to "Do not allow any site to show pop-ups".

STIG VIEWER