Mozilla Firefox Security Technical Implementation Guide

The Mozilla Firefox Security Technical Implementation Guide (V5 R2) has 27 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

27STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V5 · R2

CurrentPublished Fri Jul 23 2021

FireFox is configured to allow JavaScript to move or resize windows.

Mozilla Firefox Security Technical Implementation Guide

Assessment Title

Rule Text

FireFox is configured to allow JavaScript to move or resize windows.

Description

Discussion Text

JavaScript can make changes to the browser’s appearance. This activity can help disguise an attack taking place in a minimized background window. Set browser setting to prevent scripts on visited websites from moving and resizing browser windows.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-223164

Rule

SV-223164r612236_rule

Severity

medium

Rule Version

DTBF181

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

In About:Config, verify that the preference name "dom.disable_window_move_resize" is set and locked to "true".

Criteria: If the parameter is set incorrectly, then this is a finding.  If the setting is not locked, then this is a finding.

Implementation Procedure

Fix Text

Ensure the preference  "dom.disable_window_move_resize"  is set and locked to the value of "true".

STIG check 14 of 27 in the Mozilla Firefox STIG checklist

← Previous · V-223163FireFox is not configured to block pop-up windows.Next · V-223165 →Firefox is configured to allow JavaScript to raise or lower windows.