3.6 Ensure that SharePoint is configured with 'Strict' browser file handling settings

Information

SharePoint must prevent the execution of prohibited mobile code.

Rationale:

Decisions regarding the utilization of mobile code within organizational information
systems need to include evaluations that help determine the potential for the code to cause
damage to the system if used maliciously.

Mobile code technologies include, for example, Java, JavaScript, ActiveX, PDF, Postscript,
Shockwave movies, Flash animations, and VBScript. Usage restrictions and implementation
guidance apply to both the selection and use of mobile code installed on organizational
servers and mobile code downloaded and executed on individual workstations.

Applications can prevent the execution of prohibited mobile code by leveraging
architectures that provide a virtual execution environment sometimes referred to as a
'sandbox'. The mobile code is executed within this isolated environment apart from the
host's indigenous operating environment that allows for mobile code capability restrictions
and helps to prevent malicious code from accessing system resources and data.

The application must prevent the execution of prohibited mobile code.

Solution

1. Navigate to Central Administration website.

2. Navigate to Application Management > Manage Web Applications.
3. For each Web Application in the Farm:
. Click on the Web Application to configure.
. Click on the drop-down box below General Settings.
. Click on General Settings in the drop down box.
. Under Browser File Handling, select Strict.

See Also

https://workbench.cisecurity.org/files/2395

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CSCv6|6

Plugin: Windows

Control ID: 49f7cd3a88a70de3445779736000da92fa9aad91355469b5def542286580f2c1