FFOX-00-000010 - Firefox must be configured to prevent JavaScript from moving or resizing windows.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

JavaScript can make changes to the browser's appearance. This activity can help disguise an attack taking place in a minimized background window. Configure the browser setting to prevent scripts on visited websites from moving and resizing browser windows.

Solution

Windows group policy:
1. Open the group policy editor tool with 'gpedit.msc'.
2. Navigate to Policy Path: Computer ConfigurationAdministrative TemplatesMozillaFirefox
Policy Name: Preferences
Policy State: Enabled
Policy Value:
{
'dom.disable_window_move_resize': {
'Value': true,
'Status': 'locked'
}
}

macOS 'plist' file:
Add the following:
<key>Preferences</key>
<dict>
<key>dom.disable_window_move_resize</key>
<dict>
<key>Value</key>
<true/>
<key>Status</key>
<string>locked</string>
</dict>
</dict>

Linux 'policies.json' file:
Add the following in the policies section:
'Preferences': {
'dom.disable_window_move_resize': {
'Value': true,
'Status': 'locked'
}
}

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MOZ_Firefox_V6R2_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000381, Rule-ID|SV-251554r807134_rule, STIG-ID|FFOX-00-000010, Vuln-ID|V-251554

Plugin: Unix

Control ID: ed3afe61e61396190a58790f2aedf6f0a930dd45a4a325cda29ec587dbeee90a