FFOX-00-000009 - Firefox must be configured to block pop-up windows - Allowed Sites

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


Pop-up windows may be used to launch an attack within a new browser window with altered settings. This setting blocks pop-up windows created while the page is loading.


Windows group policy:
1. Open the group policy editor tool with 'gpedit.msc'.
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\Popups
Policy Name: Block pop-ups from websites
Policy State: Enabled

Policy Name: Do not allow preferences to be changed
Policy State: Enabled

Policy Name: Allowed Sites
Policy State: Enabled
Click 'Show...' and enter a list of websites to be allowlisted.

macOS 'plist' file:
Add the following:

Linux 'policies.json' file:
Add the following in the policies section:
'PopupBlocking': {
'Allow': ['http://example.mil/',
'Default': true,
'Locked': true

See Also


Item Details

References: CAT|II, CCI|CCI-000381, Rule-ID|SV-251553r820750_rule, STIG-ID|FFOX-00-000009, Vuln-ID|V-251553

Plugin: Windows

Control ID: b70ddcfff8753949c151b040f623510cd21bfa501f13d3c2b1d03ba46e3da02c