Mozilla Firefox Security Technical Implementation Guide

The Mozilla Firefox Security Technical Implementation Guide (V5 R2) has 27 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

27STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V5 · R2

CurrentPublished Fri Jul 23 2021

Firefox is configured to allow JavaScript to raise or lower windows.

Mozilla Firefox Security Technical Implementation Guide

Assessment Title

Rule Text

Firefox is configured to allow JavaScript to raise or lower windows.

Description

Discussion Text

JavaScript can make changes to the browser’s appearance. Allowing a website to use JavaScript to raise and lower browser windows may disguise an attack. Browser windows may not be set as active via JavaScript.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-223165

Rule

SV-223165r612236_rule

Severity

medium

Rule Version

DTBF182

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

In About:Config, verify that the preference name "dom.disable_window_flip" is set and locked to "true".

Criteria: If the parameter is set incorrectly, then this is a finding.  If the setting is not locked, then this is a finding.

Implementation Procedure

Fix Text

Ensure the preference  "dom.disable_window_flip"  is set and locked to the value of "true".

STIG check 15 of 27 in the Mozilla Firefox STIG checklist

← Previous · V-223164FireFox is configured to allow JavaScript to move or resize windows.Next · V-223166 →Firefox is configured to allow JavaScript to disable or replace context menus.