Detections
Analytics

1.1.23 Ensure 'Allow websites to query for available payment methods' is set to 'Disabled'

Information

This policy setting allows you to set whether a website can check to see if the user has payment methods saved.

The recommended state for this setting is: Disabled.

Rationale:

Saving payment information in Microsoft Edge could lead to the sensitive data being leaked and used for non-legitimate purposes.

Impact:

Websites will be unable to query whether payment information within Microsoft Edge is available.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Allow websites to query for available payment methods

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.




Default Value:

Enabled.

See Also

https://workbench.cisecurity.org/files/3005

Item Details

References: CSCv7|5.1

Plugin: Windows

Control ID: 505114ce303ab48a821a1ea80b28c96cf5b1589add4fafe6bb68a93f16ee7df8