DTBC-0004 - Sites ability to show pop-ups must be disabled.

Information

Chrome allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked. If you enable this policy setting, most unwanted pop-up windows are prevented from appearing. If you disable this policy setting, pop-up windows are not prevented from appearing. If you disable this policy setting, scripts can continue to create pop-up windows, and pop-ups that hide other windows. Recommend configuring this setting to '2' to help prevent malicious websites from controlling the pop-up windows or fooling users into clicking on the wrong window. If you do not configure this policy setting, most unwanted pop-up windows are prevented from appearing. If this policy is left not set, 'BlockPopups' will be used and the user will be able to change it.
1 = Allow all sites to show pop-ups
2 = Do not allow any site to show pop-ups

Solution

Windows group policy:
1. Open the group policy editor tool with gpedit.msc
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Content Settings\
Policy Name: Default popups setting
Policy State: Enabled
Policy Value: Do not allow any site to show popups

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Chrome_V2R9_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-221561r879587_rule, STIG-ID|DTBC-0004, STIG-Legacy|SV-57553, STIG-Legacy|V-44719, Vuln-ID|V-221561

Plugin: Windows

Control ID: b0b78f3aaa22327d339503cb6805ebd15a27ad6bbcfc2d30a9a63eb971e07fa5